.....Port - Device detected :) Preloader - CPU: MT6768/MT6769(Helio P65/G85 k68v1) Preloader - HW version: 0x0 Preloader - WDT: 0x10007000 Preloader - Uart: 0x11002000 Preloader - Brom payload addr: 0x100a00 Preloader - DA payload addr: 0x201000 Preloader - CQ_DMA addr: 0x10212000 Preloader - Var1: 0x25 Preloader - Disabling Watchdog... Preloader - HW code: 0x707 Preloader - Target config: 0xe5 Preloader - SBC enabled: True Preloader - SLA enabled: False Preloader - DAA enabled: True Preloader - SWJTAG enabled: True Preloader - EPP_PARAM at 0x600 after EMMC_BOOT/SDMMC_BOOT: False Preloader - Root cert required: False Preloader - Mem read auth: True Preloader - Mem write auth: True Preloader - Cmd 0xC8 blocked: True Preloader - Get Target info Preloader - BROM mode detected. Preloader - HW subcode: 0x8a00 Preloader - HW Ver: 0xca00 Preloader - SW Ver: 0x0 Preloader - ME_ID: C81888DB8C480157A621412F02728913 Preloader - SOC_ID: 395BC2E494A340C35905943B0802000302173B0D97214BA5D77A95D2B220B541 PLTools - Loading payload from mt6768_payload.bin, 0x264 bytes PLTools - Kamakiri / DA Run Kamakiri - Trying kamakiri2.. Kamakiri - Done sending payload... PLTools - Successfully sent payload: C:\Users\Satellite\Downloads\Root\MTK Method\mtkclient-main\mtkclient\payloads\mt6768_payload.bin Port - Device detected :) DA_handler - Device is protected. DA_handler - Device is in BROM mode. Trying to dump preloader. Successfully extracted preloader for this device to: preloader_ch6i_h6921.bin DAXFlash - Uploading xflash stage 1 from MTK_AllInOne_DA_5.2136.bin xflashext - Patching da1 ... Mtk - Patched "Patched loader msg" in preloader xflashext xflashext - [LIB]: ←[33mError on patching da1 version check...←[0m Mtk - Patched "Patched loader msg" in preloader Mtk - Patched "get_vfy_policy" in preloader xflashext - Patching da2 ... DAXFlash - Successfully uploaded stage 1, jumping .. Preloader - Jumping to 0x200000 Preloader - Jumping to 0x200000: ok. DAXFlash - Successfully received DA sync DAXFlash - DRAM config needed for : 1501003356364342 DAXFlash - Sending emi data ... DAXFlash - DRAM setup passed. DAXFlash - Sending emi data succeeded. DAXFlash - Uploading stage 2... DAXFlash - Upload data was accepted. Jumping to stage 2... DAXFlash - Successfully uploaded stage 2 DAXFlash - EMMC FWVer: 0x0 DAXFlash - EMMC ID: 3V6CBB DAXFlash - EMMC CID: 1501003356364342420268f5dc032909 DAXFlash - EMMC Boot1 Size: 0x400000 DAXFlash - EMMC Boot2 Size: 0x400000 DAXFlash - EMMC GP2 Size: 0x0 DAXFlash - EMMC GP3 Size: 0x0 DAXFlash - EMMC GP4 Size: 0x0 DAXFlash - EMMC RPMB Size: 0x1000000 DAXFlash - EMMC USER Size: 0x1d1ec00000 DAXFlash - HW-CODE : 0x707 DAXFlash - HWSUB-CODE : 0x8A00 DAXFlash - HW-VERSION : 0xCA00 DAXFlash - SW-VERSION : 0x0 DAXFlash - CHIP-EVOLUTION : 0x1 DAXFlash - DA-VERSION : 1.0 DAXFlash - Upload data was accepted. Jumping to stage 2... DAXFlash - DA Extensions successfully added Traceback (most recent call last): File "C:\Users\Satellite\Downloads\Root\MTK Method\mtkclient-main\mtk", line 814, in mtk = Main(args).run(parser) ^^^^^^^^^^^^^^^^^^^^^^ File "C:\Users\Satellite\Downloads\Root\MTK Method\mtkclient-main\mtkclient\Library\mtk_main.py", line 617, in run da_handler.handle_da_cmds(mtk, cmd, self.args) File "C:\Users\Satellite\Downloads\Root\MTK Method\mtkclient-main\mtkclient\Library\mtk_da_cmd.py", line 647, in handle_da_cmds self.da_write(parttype=parttype, filenames=filenames, partitions=partitions) File "C:\Users\Satellite\Downloads\Root\MTK Method\mtkclient-main\mtkclient\Library\mtk_da_cmd.py", line 310, in da_write res = self.mtk.daloader.detect_partition(partition, parttype) ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^ File "C:\Users\Satellite\Downloads\Root\MTK Method\mtkclient-main\mtkclient\Library\mtk_daloader.py", line 169, in detect_partition data, guid_gpt = self.da.partition.get_gpt(self.mtk.config.gpt_settings, parttype) ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^ File "C:\Users\Satellite\Downloads\Root\MTK Method\mtkclient-main\mtkclient\Library\partition.py", line 60, in get_gpt data = self.readflash(addr=0, length=sectors * self.config.pagesize, filename="", ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^ File "C:\Users\Satellite\Downloads\Root\MTK Method\mtkclient-main\mtkclient\Library\mtk_daxflash.py", line 874, in readflash if self.cmd_read_data(addr=addr, size=length, storage=storage, parttype=parttype): ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^ File "C:\Users\Satellite\Downloads\Root\MTK Method\mtkclient-main\mtkclient\Library\mtk_daxflash.py", line 854, in cmd_read_data param = pack(" python mtk w boot boot.img MTK Flash/Exploit Client V1.6.1 (c) B.Kerler 2018-2023 Traceback (most recent call last): File "C:\Users\Satellite\Downloads\Root\MTK Method\mtkclient-main\mtk", line 814, in mtk = Main(args).run(parser) ^^^^^^^^^^^^^^^^^^^^^^ File "C:\Users\Satellite\Downloads\Root\MTK Method\mtkclient-main\mtkclient\Library\mtk_main.py", line 615, in run mtk = da_handler.configure_da(mtk, preloader) ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^ File "C:\Users\Satellite\Downloads\Root\MTK Method\mtkclient-main\mtkclient\Library\mtk_da_cmd.py", line 81, in configure_da info = mtk.daloader.reinit() ^^^^^^^^^^^^^^^^^^^^^ File "C:\Users\Satellite\Downloads\Root\MTK Method\mtkclient-main\mtkclient\Library\mtk_daloader.py", line 112, in reinit self.da.reinit() File "C:\Users\Satellite\Downloads\Root\MTK Method\mtkclient-main\mtkclient\Library\mtk_daxflash.py", line 1122, in reinit self.config.sram, self.config.dram = self.get_ram_info() ^^^^^^^^^^^^^^^^^^^ File "C:\Users\Satellite\Downloads\Root\MTK Method\mtkclient-main\mtkclient\Library\mtk_daxflash.py", line 550, in get_ram_info resp = self.send_devctrl(self.Cmd.GET_RAM_INFO) ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^ File "C:\Users\Satellite\Downloads\Root\MTK Method\mtkclient-main\mtkclient\Library\mtk_daxflash.py", line 279, in send_devctrl status[0] = self.status() ^^^^^^^^^^^^^ File "C:\Users\Satellite\Downloads\Root\MTK Method\mtkclient-main\mtkclient\Library\mtk_daxflash.py", line 230, in status magic, datatype, length = unpack("