• Introducing XDA Computing: Discussion zones for Hardware, Software, and more!    Check it out!

Can you enter eMMC download mode (9006/DLOAD) from EDL mode on Moto G5s Plus?

Search This thread

TwoPointZero

Senior Member
Apr 15, 2012
64
38
Hello,

After installing
  • various versions of QPST (2.7.437, 2.7.460)
  • HDDRawCopy 1.10
  • Qualcomm_Diag_QD_Loader_2016_driver
I can successfully boot the phone in emergency download mode (COM port in device manager) aka mode 9008

What I would like is access to the raw eMMC (mode 9006) to further nand backup it. So, I tried to switch to DLOAD in eMMC Software Download.
It either doesn't work (unending progress bar), or gives an error 0x80004005.

What I also tried is entering EDL again and sending firehose commands using CLI:
Code:
qboot -p COM5 blank-flash programmer.mbn prog_emmc_firehose_8953_ddr_lenovo.mbn --debug=1
I think I downloaded qboot.exe and the .mbn's on some github repos, MSM8953 is the codename for SD 625

It's not really better, but gives more verbose messages:
Code:
**** Log buffer [000001] 2018-09-22_17:04:40 ****

[  0.001] Opening device: \\.\COM5
[  0.001] Opening serial device: \\.\COM5
[  0.003] Detecting device
[  0.003] Switching to command mode
[  0.003] Receiving HELLO packet
[  0.003] ...protocol version: 2
[  0.004] ...compatible with: 1
[  0.004] ...max. packet size: 1024
[  0.004] ...current mode: Image transfer pending
[  0.004] Sending HELLO_RESP packet
[  0.005] Receiving COMMAND_READY packet
[  0.005] Identifying device
[  0.005] Reading CPU serial number
[  0.005] Sending CMD_EXEC packet, cmd=CMD_READ_SN
[  0.006] Receiving CMD_EXEC_RESP packet
[  0.006] ...payload: 4 byte(s)
[  0.006] Receiving payload
[  0.007] Reading CPU id
[  0.007] Sending CMD_EXEC packet, cmd=CMD_READ_HWID
[  0.007] Receiving CMD_EXEC_RESP packet
[  0.011] ...payload: 24 byte(s)
[  0.011] Receiving payload
[  0.012] Reading SBL SV
[  0.012] Sending CMD_EXEC packet, cmd=CMD_READ_SV_SBL
[  0.012] Receiving CMD_EXEC_RESP packet
[  0.012] ...payload: 4 byte(s)
[  0.013] Receiving payload
[  0.013] Reading debug data
[  0.013] Sending CMD_EXEC packet, cmd=CMD_READ_DEBUG_DATA
[  0.013] Receiving CMD_EXEC_RESP packet
[  0.014] ...payload: 256 byte(s)
[  0.014] Receiving payload
[  0.015] Debug data dump follows
[  0.015] 00000000  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
[  0.015] *
[  0.015] ...cpu.id  = 70 (0x46)
[  0.016] ...cpu.sn  = 1066281865 (0x3f8e2b89)
[  0.016] Opening singleimage
[  0.018] ERROR: error opening singleimage
[  0.018] Check qboot_log.txt for more details
[  0.018] Total time: 0.018s
[  0.018] 
[  0.018] qboot version 3.40
[  0.018] 
[  0.018] DEVICE {
[  0.018]   name  = "\\.\COM5",
[  0.018]   flags = "0x65",
[  0.018]   addr  = "0x61FE5C",
[  0.018]   sahara.current_mode = "3",
[  0.018]   api.buffer = "0x31F6020",
[  0.018]   cpu.serial = "1066281865",
[  0.018]   cpu.id = "70",
[  0.018]   cpu.sv_sbl = "0",
[  0.018]   api.bnr = "0x2872FE8",
[  0.018] }
[  0.018] 
[  0.018] 
[  0.018] Backup & Restore {
[  0.018]   num_entries = 0,
[  0.018]   restoring = "false",
[  0.018]   backup_error = "not started",
[  0.018]   restore_error = "not started",
[  0.018] }
[  0.018]


So it complains about singleimage, but all I want is just the emmc block mode. Has anyone managed to make it work?

My OS is Windows 10 Pro x64 1709, if that matters.
 

20II

New member
Jun 2, 2019
3
0
Hello,

After installing
various versions of QPST (2.7.437, 2.7.460)
HDDRawCopy 1.10
Qualcomm_Diag_QD_Loader_2016_driver

I can successfully boot the phone in emergency download mode (COM port in device manager) aka mode 9008

What I would like is access to the raw eMMC (mode 9006) to further nand backup it. So, I tried to switch to DLOAD in eMMC Software Download.
It either doesn't work (unending progress bar), or gives an error 0x80004005.

What I also tried is entering EDL again and sending firehose commands using CLI:

I think I downloaded qboot.exe and the .mbn's on some github repos, MSM8953 is the codename for SD 625

It's not really better, but gives more verbose messages:



So it complains about singleimage, but all I want is just the emmc block mode. Has anyone managed to make it work?

My OS is Windows 10 Pro x64 1709, if that matters.
i have the same problem as you