Here's a simplified example of what you'll see:

PRELOADER 0x0
PMT 0x80000
TEE1 0x180000
UBOOT 0x380000
BOOT_IMG 0x580000
RECOVERY 0x780000
SEC_STATIC 0x980000
MISC 0xa80000
LOGO 0xb80000
EXPDB 0xc80000
ANDROID 0xd80000
CACHE 0x4d80000
USRDATA 0xcd80000

Note: Actual addresses vary by OEM and eMMC size. Always use the scatter provided with your specific firmware.

| Partition | Purpose | | :--- | :--- | | preloader | Initial boot code. Bricking this = dead device. | | pgpt | Primary GPT (GUID Partition Table) – defines all other partitions. | | proinfo | Stores production info (LCD ID, sensor calibration). | | nvram | Contains Wi-Fi MAC, Bluetooth address, and IMEI (for tablets with cellular). | | lk | Little Kernel – secondary bootloader and fastboot interface. | | boot | Kernel + ramdisk. | | recovery | Recovery environment. | | system | Android OS (read-only). | | userdata | User apps and settings. |

Use SP Flash Tool’s “Read Back” with the scatter’s nvram partition address range (e.g., start 0x2a800000, size 0x500000). Save the raw file as nvram.bin.