[General Questions and Answers] abiolakunle:
please help Sad Sad Sad , i need assisatance with my tecno phonepad.

I wanted to flash a custom recovery and then root the phone, but in order not to get any issues i first off all search for the STOCK ROM online but i could not find any. So i decided to look for a way to extract it from my phone using miracle box and following the procedures here.

It dump the rom without any error.

So, later on i found this thread for readback of rom from phone with spflash tool so decieded to also do he sptool backup which requires the Phone rom scatter file, but i tried using Mtk droid tool to get it but without any success. So i tried using the scatter file from the Miracle box backup but it failed to readback, so i use d name "MT6735_Android_scatter.txt" of the scatter file to search online which i now think is wrong.

open the the scatter file i got online and compared it to that created by Miracle box and i checked all the details for the first few partitions and the matched i failled to look at the details for system.img, userdata, cache.img and some other partitions.

I used the scatter i got on line to readback the the rom from the phone without any error.

So in the process of flashing custom recovery and rooting the phone, it enter into a bootloop.

i did a factory reset but the phone still does not boot, so decided to use the backup/readback i made with spflash tool to flash the phone using "download only" option, but got a "PMT error" so i tried the the "format all+download" option and the process completed.

but the phone just switch on remains in the tecno boot screen for server minuets. i the tried the Miracle box dump to format he phone but i it starts the process and completes it within 5 seconds which indicated the noting was transferred to the phone event after i ticked all the partitions because the size of the dump folder was about 14GB so the time it took was too short. After several attempts with the same result miracle box no longer detects the phone, but the phone switch on and remains in boot screen.

so went back to compare the Miracle box dump scatter file and the scatter file i got from online and discovered that some other partitions i did not check earlier did not match in terms of "physical_start_add" and "partition_size".

i think the some of the partitions that match in both scatter files are intact which includes recovery because it could boot into stock recovery. But some other partitions might be messed up.

i decided not to try any other flashing procedure because the situation is now beyond me.

i used spflash tool to do a readback from the phone entire phone in one file and the size of the dump(ROM_1) was 9.67GB i.e with length extending to the userdata partition.

i also did a memory test

Please i need help on what to do next. Sad

if you are using the same phone please and you have the rom backup, please assist me.

This is the phone Info:

id : PP7FPro-PA03A1-M-170509V53

version:6.0

model:TECNO PhonePad 3

i have attached both scatter files and the result of the memory test.

the memory test result

============ Memory Detection Report ===========

Internal RAM

External RAM

Type = DRAM

Size = 0x80000000 (2048MB16384Mb)

NAND Flash

ERROR NAND Flash was not detected!

EMMC

EMMC_PART_BOOT1	Size = 0x0000000000400000(4MB)
EMMC_PART_BOOT2	Size = 0x0000000000400000(4MB)
EMMC_PART_RPMB	Size = 0x0000000000400000(4MB)
EMMC_PART_GP1	Size = 0x0000000000000000(0MB)
EMMC_PART_GP2	Size = 0x0000000000000000(0MB)
EMMC_PART_GP3	Size = 0x0000000000000000(0MB)
EMMC_PART_GP4	Size = 0x0000000000000000(0MB)
EMMC_PART_USER	Size = 0x0000000390000000(14592MB)

UFS

ERROR UFS was not detected!

============	RAM Test	============

Data Bus Test

[D0]
[D1]
[D2]
[D3]
[D4]
[D5]
[D6]
[D7]
[D8]
[D9]
[D10]
[D11]
[D12]
[D13]
[D14]
[D15]
[D16]
[D17]
[D18]
[D19]
[D20]
[D21]
[D22]
[D23]
[D24]
[D25]
[D26]
[D27]
[D28]
[D29]
[D30]
[D31]
OK!!

Address Bus Test

[A1]
[A2]
[A3]
[A4]
[A5]
[A6]
[A7]
[A8]
[A9]
[A10]
[A11]
[A12]
[A13]
[A14]
[A15]
[A16]
[A17]
[A18]
[A19]
[A20]
[A21]
[A22]
[A23]
[A24]
[A25]
[A26]
[A27]
[A28]
[A29]
[A30]
OK!!

RAM Pattern Test
Writing ...
0x44332211,
0xA5A5A5A5,
0xA5A5A500,
0xA500A500,
0xA5000000,
0x00000000,
0xFFFF0000,
0xFFFFFFFF,
OK!!

IncrementDecrement Test
Writing...
OK!![/CODE

this is the Scatter file i got online

############################################################################################################
#
# General Setting
#
############################################################################################################
- general: MTK_PLATFORM_CFG
info:
- config_version: V1.1.2
platform: MT6735
project: bird6735m_35gu_a_l
storage: EMMC
boot_channel: MSDC_0
block_size: 0x20000
############################################################################################################
#
# Layout Setting
#
############################################################################################################
- partition_index: SYS0
partition_name: preloader
file_name: preloader.bin
is_download: true
type: SV5_BL_BIN
linear_start_addr: 0x0
physical_start_addr: 0x0
partition_size: 0x40000
region: EMMC_BOOT_1
storage: HW_STORAGE_EMMC
boundary_check: true
is_reserved: false
operation_type: BOOTLOADERS
reserve: 0x00

- partition_index: SYS1
partition_name: pgpt
file_name: NONE
is_download: false
type: NORMAL_ROM
linear_start_addr: 0x0
physical_start_addr: 0x0
partition_size: 0x80000
region: EMMC_USER
storage: HW_STORAGE_EMMC
boundary_check: true
is_reserved: false
operation_type: INVISIBLE
reserve: 0x00

- partition_index: SYS2
partition_name: proinfo
file_name: NONE
is_download: false
type: NORMAL_ROM
linear_start_addr: 0x80000
physical_start_addr: 0x80000
partition_size: 0x300000
region: EMMC_USER
storage: HW_STORAGE_EMMC
boundary_check: true
is_reserved: false
operation_type: PROTECTED
reserve: 0x00

- partition_index: SYS3
partition_name: nvram
file_name: NONE
is_download: false
type: NORMAL_ROM
linear_start_addr: 0x380000
physical_start_addr: 0x380000
partition_size: 0x500000
region: EMMC_USER
storage: HW_STORAGE_EMMC
boundary_check: true
is_reserved: false
operation_type: BINREGION
reserve: 0x00

- partition_index: SYS4
partition_name: protect1
file_name: NONE
is_download: false
type: EXT4_IMG
linear_start_addr: 0x880000
physical_start_addr: 0x880000
partition_size: 0xa00000
region: EMMC_USER
storage: HW_STORAGE_EMMC
boundary_check: true
is_reserved: false
operation_type: PROTECTED
reserve: 0x00

- partition_index: SYS5
partition_name: protect2
file_name: NONE
is_download: false
type: EXT4_IMG
linear_start_addr: 0x1280000
physical_start_addr: 0x1280000
partition_size: 0xa00000
region: EMMC_USER
storage: HW_STORAGE_EMMC
boundary_check: true
is_reserved: false
operation_type: PROTECTED
reserve: 0x00

- partition_index: SYS6
partition_name: lk
file_name: lk.bin
is_download: true
type: NORMAL_ROM
linear_start_addr: 0x1c80000
physical_start_addr: 0x1c80000
partition_size: 0x80000
region: EMMC_USER
storage: HW_STORAGE_EMMC
boundary_check: true
is_reserved: false
operation_type: UPDATE
reserve: 0x00

- partition_index: SYS7
partition_name: para
file_name: NONE
is_download: false
type: NORMAL_ROM
linear_start_addr: 0x1d00000
physical_start_addr: 0x1d00000
partition_size: 0x80000
region: EMMC_USER
storage: HW_STORAGE_EMMC
boundary_check: true
is_reserved: false
operation_type: INVISIBLE
reserve: 0x00

- partition_index: SYS8
partition_name: boot
file_name: boot.img
is_download: true
type: NORMAL_ROM
linear_start_addr: 0x1d80000
physical_start_addr: 0x1d80000
partition_size: 0x1000000
region: EMMC_USER
storage: HW_STORAGE_EMMC
boundary_check: true
is_reserved: false
operation_type: UPDATE
reserve: 0x00

- partition_index: SYS9
partition_name: recovery
file_name: recovery.img
is_download: true
type: NORMAL_ROM
linear_start_addr: 0x2d80000
physical_start_addr: 0x2d80000
partition_size: 0x1000000
region: EMMC_USER
storage: HW_STORAGE_EMMC
boundary_check: true
is_reserved: false
operation_type: UPDATE
reserve: 0x00

- partition_index: SYS10
partition_name: logo
file_name: logo.bin
is_download: true
type: NORMAL_ROM
linear_start_addr: 0x3d80000
physical_start_addr: 0x3d80000
partition_size: 0x800000
region: EMMC_USER
storage: HW_STORAGE_EMMC
boundary_check: true
is_reserved: false
operation_type: UPDATE
reserve: 0x00

- partition_index: SYS11
partition_name: expdb
file_name: NONE
is_download: false
type: NORMAL_ROM
linear_start_addr: 0x4580000
physical_start_addr: 0x4580000
partition_size: 0xa00000
region: EMMC_USER
storage: HW_STORAGE_EMMC
boundary_check: true
is_reserved: false
operation_type: INVISIBLE
reserve: 0x00

- partition_index: SYS12
partition_name: seccfg
file_name: NONE
is_download: false
type: NORMAL_ROM
linear_start_addr: 0x4f80000
physical_start_addr: 0x4f80000
partition_size: 0x80000
region: EMMC_USER
storage: HW_STORAGE_EMMC
boundary_check: true
is_reserved: false
operation_type: INVISIBLE
reserve: 0x00

- partition_index: SYS13
partition_name: oemkeystore
file_name: NONE
is_download: false
type: NORMAL_ROM
linear_start_addr: 0x5000000
physical_start_addr: 0x5000000
partition_size: 0x200000
region: EMMC_USER
storage: HW_STORAGE_EMMC
boundary_check: true
is_reserved: false
operation_type: INVISIBLE
reserve: 0x00

- partition_index: SYS14
partition_name: secro
file_name: secro.img
is_download: true
type: EXT4_IMG
linear_start_addr: 0x5200000
physical_start_addr: 0x5200000
partition_size: 0x600000
region: EMMC_USER
storage: HW_STORAGE_EMMC
boundary_check: true
is_reserved: false
operation_type: UPDATE
reserve: 0x00

- partition_index: SYS15
partition_name: keystore
file_name: NONE
is_download: false
type: NORMAL_ROM
linear_start_addr: 0x5800000
physical_start_addr: 0x5800000
partition_size: 0x800000
region: EMMC_USER
storage: HW_STORAGE_EMMC
boundary_check: true
is_reserved: false
operation_type: INVISIBLE
reserve: 0x00

- partition_index: SYS16
partition_name: tee1
file_name: trustzone.bin
is_download: true
type: NORMAL_ROM
linear_start_addr: 0x6000000
physical_start_addr: 0x6000000
partition_size: 0x500000
region: EMMC_USER
storage: HW_STORAGE_EMMC
boundary_check: true
is_reserved: false
operation_type: UPDATE
reserve: 0x00

- partition_index: SYS17
partition_name: tee2
file_name: trustzone.bin
is_download: true
type: NORMAL_ROM
linear_start_addr: 0x6500000
physical_start_addr: 0x6500000
partition_size: 0x500000
region: EMMC_USER
storage: HW_STORAGE_EMMC
boundary_check: true
is_reserved: false
operation_type: UPDATE
reserve: 0x00

- partition_index: SYS18
partition_name: frp
file_name: NONE
is_download: false
type: NORMAL_ROM
linear_start_addr: 0x6a00000
physical_start_addr: 0x6a00000
partition_size: 0x100000
region: EMMC_USER
storage: HW_STORAGE_EMMC
boundary_check: true
is_reserved: false
operation_type: INVISIBLE
reserve: 0x00

- partition_index: SYS19
partition_name: nvdata
file_name: NONE
is_download: false
type: EXT4_IMG
linear_start_addr: 0x6b00000
physical_start_addr: 0x6b00000
partition_size: 0x2000000
region: EMMC_USER
storage: HW_STORAGE_EMMC
boundary_check: true
is_reserved: false
operation_type: INVISIBLE
reserve: 0x00

- partition_index: SYS20
partition_name: metadata
file_name: NONE
is_download: false
type: NORMAL_ROM
linear_start_addr: 0x8b00000
physical_start_addr: 0x8b00000
partition_size: 0x2500000
region: EMMC_USER
storage: HW_STORAGE_EMMC
boundary_check: true
is_reserved: false
operation_type: INVISIBLE
reserve: 0x00

- partition_index: SYS21
partition_name: system
file_name: system.img
is_download: true
type: EXT4_IMG
linear_start_addr: 0xb000000
physical_start_addr: 0xb000000
partition_size: 0x60000000
region: EMMC_USER
storage: HW_STORAGE_EMMC
boundary_check: true
is_reserved: false
operation_type: UPDATE
reserve: 0x00

- partition_index: SYS22
partition_name: cache
file_name: cache.img
is_download: true
type: EXT4_IMG
linear_start_addr: 0x6b000000
physical_start_addr: 0x6b000000
partition_size: 0x19000000
region: EMMC_USER
storage: HW_STORAGE_EMMC
boundary_check: true
is_reserved: false
operation_type: UPDATE
reserve: 0x00

- partition_index: SYS23
partition_name: userdata
file_name: userdata.img
is_download: true
type: EXT4_IMG
linear_start_addr: 0x84000000
physical_start_addr: 0x84000000
partition_size: 0x60000000
region: EMMC_USER
storage: HW_STORAGE_EMMC
boundary_check: true
is_reserved: false
operation_type: UPDATE
reserve: 0x00

- partition_index: SYS24
partition_name: intsd
file_name: NONE
is_download: false
type: EXT4_IMG
linear_start_addr: 0xe4000000
physical_start_addr: 0xe4000000
partition_size: 0x0
region: EMMC_USER
storage: HW_STORAGE_EMMC
boundary_check: true
is_reserved: false
operation_type: INVISIBLE
reserve: 0x00

- partition_index: SYS25
partition_name: flashinfo
file_name: NONE
is_download: false
type: NORMAL_ROM
linear_start_addr: 0xFFFF0084
physical_start_addr: 0xFFFF0084
partition_size: 0x1000000
region: EMMC_USER
storage: HW_STORAGE_EMMC
boundary_check: false
is_reserved: true
operation_type: RESERVED
reserve: 0x00

- partition_index: SYS26
partition_name: sgpt
file_name: NONE
is_download: false
type: NORMAL_ROM
linear_start_addr: 0xFFFF0004
physical_start_addr: 0xFFFF0004
partition_size: 0x80000
region: EMMC_USER
storage: HW_STORAGE_EMMC
boundary_check: false
is_reserved: true
operation_type: RESERVED
reserve: 0x00

below is the scatter file from Miracle box

############################################################################################################
#
# General Setting
#
############################################################################################################
- general: MTK_PLATFORM_CFG
info:
- config_version: V1.1.1
platform: MT6735
project: mtk_android
storage: EMMC
boot_channel: MSDC_0
block_size: 0x20000
############################################################################################################
#
# Layout Setting
#
############################################################################################################
- partition_index: SYS0
partition_name: PRELOADER
file_name: preloader.bin
is_download: true
type: SV5_BL_BIN
linear_start_addr: 0x0
physical_start_addr: 0x0
partition_size: 0x400000
region: EMMC_BOOT_1
storage: HW_STORAGE_EMMC
boundary_check: true
is_reserved: false
operation_type: BOOTLOADER
reserve: 0x00

- partition_index: SYS1
partition_name: PGPT
file_name: pgpt.bin
is_download: true
type: NORMAL_ROM
linear_start_addr: 0x0
physical_start_addr: 0x0
partition_size: 0x80000
region: EMMC_USER
storage: HW_STORAGE_EMMC
boundary_check: true
is_reserved: false
operation_type: UPDATE
reserve: 0x00

- partition_index: SYS2
partition_name: PROINFO
file_name: proinfo.bin
is_download: true
type: NORMAL_ROM
linear_start_addr: 0x80000
physical_start_addr: 0x80000
partition_size: 0x300000
region: EMMC_USER
storage: HW_STORAGE_EMMC
boundary_check: true
is_reserved: false
operation_type: UPDATE
reserve: 0x00

- partition_index: SYS3
partition_name: NVRAM
file_name: nvram.bin
is_download: true
type: NORMAL_ROM
linear_start_addr: 0x380000
physical_start_addr: 0x380000
partition_size: 0x500000
region: EMMC_USER
storage: HW_STORAGE_EMMC
boundary_check: true
is_reserved: false
operation_type: UPDATE
reserve: 0x00

- partition_index: SYS4
partition_name: PROTECT1
file_name: protect1.bin
is_download: true
type: NORMAL_ROM
linear_start_addr: 0x880000
physical_start_addr: 0x880000
partition_size: 0xA00000
region: EMMC_USER
storage: HW_STORAGE_EMMC
boundary_check: true
is_reserved: false
operation_type: UPDATE
reserve: 0x00

- partition_index: SYS5
partition_name: PROTECT2
file_name: protect2.bin
is_download: true
type: NORMAL_ROM
linear_start_addr: 0x1280000
physical_start_addr: 0x1280000
partition_size: 0xA00000
region: EMMC_USER
storage: HW_STORAGE_EMMC
boundary_check: true
is_reserved: false
operation_type: UPDATE
reserve: 0x00

- partition_index: SYS6
partition_name: LK
file_name: lk.bin
is_download: true
type: NORMAL_ROM
linear_start_addr: 0x1C80000
physical_start_addr: 0x1C80000
partition_size: 0x80000
region: EMMC_USER
storage: HW_STORAGE_EMMC
boundary_check: true
is_reserved: false
operation_type: UPDATE
reserve: 0x00

- partition_index: SYS7
partition_name: PARA
file_name: para.bin
is_download: true
type: NORMAL_ROM
linear_start_addr: 0x1D00000
physical_start_addr: 0x1D00000
partition_size: 0x80000
region: EMMC_USER
storage: HW_STORAGE_EMMC
boundary_check: true
is_reserved: false
operation_type: UPDATE
reserve: 0x00

- partition_index: SYS8
partition_name: BOOT
file_name: boot.bin
is_download: true
type: NORMAL_ROM
linear_start_addr: 0x1D80000
physical_start_addr: 0x1D80000
partition_size: 0x1000000
region: EMMC_USER
storage: HW_STORAGE_EMMC
boundary_check: true
is_reserved: false
operation_type: UPDATE
reserve: 0x00

- partition_index: SYS9
partition_name: RECOVERY
file_name: recovery.bin
is_download: true
type: NORMAL_ROM
linear_start_addr: 0x2D80000
physical_start_addr: 0x2D80000
partition_size: 0x1000000
region: EMMC_USER
storage: HW_STORAGE_EMMC
boundary_check: true
is_reserved: false
operation_type: UPDATE
reserve: 0x00

- partition_index: SYS10
partition_name: LOGO
file_name: logo.bin
is_download: true
type: NORMAL_ROM
linear_start_addr: 0x3D80000
physical_start_addr: 0x3D80000
partition_size: 0x800000
region: EMMC_USER
storage: HW_STORAGE_EMMC
boundary_check: true
is_reserved: false
operation_type: UPDATE
reserve: 0x00

- partition_index: SYS11
partition_name: EXPDB
file_name: expdb.bin
is_download: true
type: NORMAL_ROM
linear_start_addr: 0x4580000
physical_start_addr: 0x4580000
partition_size: 0xA00000
region: EMMC_USER
storage: HW_STORAGE_EMMC
boundary_check: true
is_reserved: false
operation_type: UPDATE
reserve: 0x00

- partition_index: SYS12
partition_name: SECCFG
file_name: seccfg.bin
is_download: true
type: NORMAL_ROM
linear_start_addr: 0x4F80000
physical_start_addr: 0x4F80000
partition_size: 0x80000
region: EMMC_USER
storage: HW_STORAGE_EMMC
boundary_check: true
is_reserved: false
operation_type: UPDATE
reserve: 0x00

- partition_index: SYS13
partition_name: OEMKEYSTORE
file_name: oemkeystore.bin
is_download: true
type: NORMAL_ROM
linear_start_addr: 0x5000000
physical_start_addr: 0x5000000
partition_size: 0x200000
region: EMMC_USER
storage: HW_STORAGE_EMMC
boundary_check: true
is_reserved: false
operation_type: UPDATE
reserve: 0x00

- partition_index: SYS14
partition_name: SECRO
file_name: secro.bin
is_download: true
type: NORMAL_ROM
linear_start_addr: 0x5200000
physical_start_addr: 0x5200000
partition_size: 0x600000
region: EMMC_USER
storage: HW_STORAGE_EMMC
boundary_check: true
is_reserved: false
operation_type: UPDATE
reserve: 0x00

- partition_index: SYS15
partition_name: KEYSTORE
file_name: keystore.bin
is_download: true
type: NORMAL_ROM
linear_start_addr: 0x5800000
physical_start_addr: 0x5800000
partition_size: 0x800000
region: EMMC_USER
storage: HW_STORAGE_EMMC
boundary_check: true
is_reserved: false
operation_type: UPDATE
reserve: 0x00

- partition_index: SYS16
partition_name: TEE1
file_name: tee1.bin
is_download: true
type: NORMAL_ROM
linear_start_addr: 0x6000000
physical_start_addr: 0x6000000
partition_size: 0x500000
region: EMMC_USER
storage: HW_STORAGE_EMMC
boundary_check: true
is_reserved: false
operation_type: UPDATE
reserve: 0x00

- partition_index: SYS17
partition_name: TEE2
file_name: tee2.bin
is_download: true
type: NORMAL_ROM
linear_start_addr: 0x6500000
physical_start_addr: 0x6500000
partition_size: 0x500000
region: EMMC_USER
storage: HW_STORAGE_EMMC
boundary_check: true
is_reserved: false
operation_type: UPDATE
reserve: 0x00

- partition_index: SYS18
partition_name: FRP
file_name: frp.bin
is_download: true
type: NORMAL_ROM
linear_start_addr: 0x6A00000
physical_start_addr: 0x6A00000
partition_size: 0x100000
region: EMMC_USER
storage: HW_STORAGE_EMMC
boundary_check: true
is_reserved: false
operation_type: UPDATE
reserve: 0x00

- partition_index: SYS19
partition_name: NVDATA
file_name: nvdata.bin
is_download: true
type: NORMAL_ROM
linear_start_addr: 0x6B00000
physical_start_addr: 0x6B00000
partition_size: 0x2000000
region: EMMC_USER
storage: HW_STORAGE_EMMC
boundary_check: true
is_reserved: false
operation_type: UPDATE
reserve: 0x00

- partition_index: SYS20
partition_name: METADATA
file_name: metadata.bin
is_download: true
type: NORMAL_ROM
linear_start_addr: 0x8B00000
physical_start_addr: 0x8B00000
partition_size: 0x2500000
region: EMMC_USER
storage: HW_STORAGE_EMMC
boundary_check: true
is_reserved: false
operation_type: UPDATE
reserve: 0x00

- partition_index: SYS21
partition_name: SYSTEM
file_name: system.bin
is_download: true
type: NORMAL_ROM
linear_start_addr: 0xB000000
physical_start_addr: 0xB000000
partition_size: 0x100000000
region: EMMC_USER
storage: HW_STORAGE_EMMC
boundary_check: true
is_reserved: false
operation_type: UPDATE
reserve: 0x00

- partition_index: SYS22
partition_name: CACHE
file_name: cache.bin
is_download: true
type: YAFFS_IMG
linear_start_addr: 0x10B000000
physical_start_addr: 0x10B000000
partition_size: 0x19000000
region: EMMC_USER
storage: HW_STORAGE_EMMC
boundary_check: true
is_reserved: false
operation_type: UPDATE
reserve: 0x00

- partition_index: SYS23
partition_name: USERDATA
file_name: userdata.bin
is_download: true
type: NORMAL_ROM
linear_start_addr: 0x124000000
physical_start_addr: 0x124000000
partition_size: 0x26AF80000
region: EMMC_USER
storage: HW_STORAGE_EMMC
boundary_check: true
is_reserved: false
operation_type: UPDATE
reserve: 0x00

- partition_index: SYS24
partition_name: FLASHINFO
file_name: flashinfo.bin
is_download: true
type: NORMAL_ROM
linear_start_addr: 0x38EF80000
physical_start_addr: 0x38EF80000
partition_size: 0x1000000
region: EMMC_USER
storage: HW_STORAGE_EMMC
boundary_check: false
is_reserved: true
operation_type: UPDATE
reserve: 0x00