[T-Mobile REVVL V+ 5G] djismgaming:
Hi all,

Hope you're having a wonderful week.

I've tried to use this guide to get my phone to a usable state.

Always while using mtkclient I get this message indefinitely and can't progress anymore.

DAXFlash - [LIB]: Error on sending parameter: DA exceed max num (0xc0070005)

I really want to bring this phone back to stock to carrier-unlock it. At this point I consider it a brick as it stays with the screen completely off. No boot logo or anything.

Any help will be greatly appreciated. :love:

MTK Flash/Exploit Client V1.6.3 (c) B.Kerler 2018-2023

Preloader - Status: Waiting for PreLoader VCOM, please connect mobile

Port - Hint:

Power off the phone before connecting.
For brom mode, press and hold vol up, vol dwn, or all hw buttons and connect usb.
For preloader mode, don't press any hw button and connect usb.
If it is already connected and on, hold power for 10 seconds to reset.

.........Port - Device detected :)
Preloader - CPU: MT6833(Dimensity 700 5G k6833)
Preloader - HW version: 0x0
Preloader - WDT: 0x10007000
Preloader - Uart: 0x11002000
Preloader - Brom payload addr: 0x100a00
Preloader - DA payload addr: 0x201000
Preloader - CQ_DMA addr: 0x10212000
Preloader - Var1: 0x73
Preloader - Disabling Watchdog...
Preloader - HW code: 0x989
Preloader - Target config: 0xe7
Preloader - SBC enabled: True
Preloader - SLA enabled: True
Preloader - DAA enabled: True
Preloader - SWJTAG enabled: True
Preloader - EPP_PARAM at 0x600 after EMMC_BOOT/SDMMC_BOOT: False
Preloader - Root cert required: False
Preloader - Mem read auth: True
Preloader - Mem write auth: True
Preloader - Cmd 0xC8 blocked: True
Preloader - Get Target info
Preloader - BROM mode detected.
Preloader - HW subcode: 0x8a00
Preloader - HW Ver: 0xca00
Preloader - SW Ver: 0x0
Preloader - ME_ID: 96C8388057AFD372754DCBB4B155D5B1
Preloader - SOC_ID: 116C6A57A536601BE60E0E7BA9C4E0B86D979A21F11E8ABA0FB2E6A7DAA9E062
PLTools - Loading payload from mt6833_payload.bin, 0x264 bytes
Exploitation - Kamakiri Run
Exploitation - Done sending payload...
PLTools - Successfully sent payload: C:\Users\Ismael\Downloads\revvl\mtkclient\mtkclient\payloads\mt6833_payload.bin
Port - Device detected :)
DA_handler - Device is protected.
DA_handler - Device is in BROM mode. Trying to dump preloader.
DAXFlash - Uploading xflash stage 1 from MTK_AllInOne_DA_5.2228.bin
xflashext - Patching da1 ...
Mtk - Patched "Patched loader msg" in preloader
Mtk - Patched "hash_check" in preloader
xflashext
xflashext - [LIB]: Error on patching da1 version check...
Mtk - Patched "Patched loader msg" in preloader
Mtk - Patched "get_vfy_policy" in preloader
xflashext - Patching da2 ...
DAXFlash - Successfully uploaded stage 1, jumping ..
Preloader - Jumping to 0x200000
Preloader - Jumping to 0x200000: ok.
DAXFlash - Successfully received DA sync
DAXFlash - UFS Blocksize:0x1000
DAXFlash - UFS ID: H9HQ54ACPMMDAR
DAXFlash - UFS MID: 0xad
DAXFlash - UFS CID: ad014839485135344143504d4d444152
DAXFlash - UFS FWVer: 41303032
DAXFlash - UFS Serial: 323031304238453143413030
DAXFlash - UFS LU0 Size: 0xee5800000
DAXFlash - UFS LU1 Size: 0x400000
DAXFlash - UFS LU2 Size: 0x400000
DAXFlash - DRAM config needed for : ad014839485135344143504d4d444152
DAXFlash - No preloader given. Searching for preloader
DAXFlash - Sending emi data ...
DAXFlash
DAXFlash - [LIB]: Error on sending parameter: DA exceed max num (0xc0070005)
DAXFlash
DAXFlash - [LIB]: Error on sending parameter: DA exceed max num (0xc0070005)
DAXFlash
DAXFlash - [LIB]: Error on sending parameter: DA exceed max num (0xc0070005)
DAXFlash
DAXFlash - [LIB]: Error on sending parameter: DA exceed max num (0xc0070005)
DAXFlash
DAXFlash - [LIB]: Error on sending parameter: DA exceed max num (0xc0070005)
DAXFlash
DAXFlash - [LIB]: Error on sending parameter: DA exceed max num (0xc0070005)
DAXFlash
DAXFlash - [LIB]: Error on sending parameter: DA exceed max num (0xc0070005)
DAXFlash
DAXFlash - [LIB]: Error on sending parameter: DA exceed max num (0xc0070005)
DAXFlash
DAXFlash - [LIB]: Error on sending parameter: DA exceed

max num (0xc0070005)