(Dev) Motorola unbrick tool

Search This thread
Nov 24, 2022
6
0
I'm looking at the bat file that you run to unbrick a device. It's included in the zip? Unless I'm mistaken I've downloaded a couple of tools.

Idk what to do I've soft bricked my phone thinking I would be find to experiment because the bootloader is unlocked and there family rescue and all that. Now I'm getting "preboot validation failed" even though my bootloader is unlocked. I can't flash anything.
 

WoKoschekk

Senior Member
Feb 25, 2019
1,031
1
326
Cologne
Moto G6
Moto G6 Plus
I'm looking at the bat file that you run to unbrick a device.
Have a look at the readme.txt:

"it will restore only bootloader on a hard bricked motorla device, you have to Reflash fastboot firmware for compelete unbrick"

There's no .bat file inside. This tool here will only restore your bootloader to be able to start fastboot mode on your device. That's it.
 
Nov 24, 2022
6
0
Have a look at the readme.txt:

"it will restore only bootloader on a hard bricked motorla device, you have to Reflash fastboot firmware for compelete unbrick"

There's no .bat file inside. This tool here will only restore your bootloader to be able to start fastboot mode on your device. That's it.
Okay thank you for the reply, I believe I was confusing this post with another on the forum.

If you have time could you give me some advice? I have a phone where I have tried to flash it and it is stuck in bootloop. The phone is the Moto G Pure Ellis. I flashed a magisk patched img using the command flash boot boot.img when I should have flash boot_a boot.img I believe. And to make matters worse I tried to patch dtbo.img afterwards thinking I flashed the wrong img. This put it in a faster bootloop.

Now whenever I try to flash the original factory rom or a patched magisk image I get a validation failed error like my bootloader is locked. But my bootloader is unlocked. Via the motorola unlock key given to me by the website.

Do you know what could be causing it to give me this error like my phone is still boot locked?
What can I do to flash the original boot.img?

Thank you.
 

luizdev

New member
Sep 9, 2020
2
0
Hello guys presenting all New Motorola unbrick tool which can restore bootloader on any hard bricked Motorola Phone through EDL Mod..

How to use:
  1. Install qcom or mtk driver according your device
  2. run tool, select model, click unbrick button
  3. Now connect phone in EDL or BROM mod according your device
  4. wait until success, once done your phone rebooted in fastboot mod, just download and flash fastboot firmware by running flash_all.bat
Download:
  1. get it on Mega https://mega.nz/file/lTFASApS#VY0qDy6EBtdyDvdfWXEzQ3PgP36QeQHLVeVqX0L37e0
Current version: V1.0 beta
Credit:
Me for compiling it, Motorola Inc for Providing firmware & loader

Source Code: Github

Disclaimer:
  1. use at own risk
  2. adviced for Retail devices, however you can try on branded too bcz your phone already in dead condition
Donate: use button inside support section in tool

Supported model:
*Edge 2021 SD778
*Edge 20 Lite
*Edge 20 Pro XT2153-1
*Edge 20
*Edge 30
*Edge 30 Pro
*Edge 30 Plus
*Edge Plus
*Edge X30
*Edge
*G50 XT2137-2
*G9 Power 2021
*Defy 2021
*G Pure
*E 2020
*Moto E5 Plus
*E5 SD425
*Moto E6
*Moto E7 Plus
*Moto G 5G
*Moto G Play 2021
*Moto G Power 2022)
*G Power 2021
*G Stylus VZW
*G Stylus 5G
*Moto G6 Play
*Moto G6 Plus
*Moto G6
*G7 Play
*G7 Plus
*G7 Power
*Moto G7
*G8 Play
*G8 Plus
*G8 Power XT2041-7
*Moto G8
*G9 Play
*G9 Plus
*G9 Power
*Moto G10
*Moto G30
*Moto G31
*Moto G41
*Moto G50 5G
*Moto G50
*G52 XT2221-1
*G52 XT2221-2
*Moto G60
*Moto G71 5G
*Moto G82
*Moto G100
*Moto G200 5G
*One Power
*One Zoom
*Z3 Play
*Moto Z4
*One 5G ACE
*One Action
*One Fusion Plus
*One Fusion
*One Hyper
*One Macro
*One Vision
*Motorola One
*P30 Note
*P30 Play
*Razr 5G XT2071-5
*Motorola Razr 2019
View attachment 5709087
how to enter Moto g52 XT2221 to Edl ?
 

beensen

Member
Feb 15, 2013
8
0
Heres my problem
I had a pin on my device when i did a factory reset
when in recovery mode it ask for a password and i didn't input anything i just pressed reboot and it gave an error of some sort and i pressed reboot again and the screen turned black...now when i plug it into the computer it gives a small ambient sound. Holding power for 2 minutes does nothing and holding the vol down and power does nothing either. i need help...
the error i got when using the unbrick tool is

[ -0.000] Opening device: \\.\COM5
Detecting device
[ 30.492] ERROR: sahara_greet_device()->change_mode()->do_hello()->IO error
FAILED: qb_flash_singleimage()->sahara_greet_device()->change_mode()->do_hello()->IO error
 

WoKoschekk

Senior Member
Feb 25, 2019
1,031
1
326
Cologne
Moto G6
Moto G6 Plus
Heres my problem
I had a pin on my device when i did a factory reset
when in recovery mode it ask for a password and i didn't input anything i just pressed reboot and it gave an error of some sort and i pressed reboot again and the screen turned black...now when i plug it into the computer it gives a small ambient sound. Holding power for 2 minutes does nothing and holding the vol down and power does nothing either. i need help...
the error i got when using the unbrick tool is

[ -0.000] Opening device: \\.\COM5
Detecting device
[ 30.492] ERROR: sahara_greet_device()->change_mode()->do_hello()->IO error
FAILED: qb_flash_singleimage()->sahara_greet_device()->change_mode()->do_hello()->IO error
How's your device shown up in the Windows' device manager when plugged in?
 

WoKoschekk

Senior Member
Feb 25, 2019
1,031
1
326
Cologne
Moto G6
Moto G6 Plus
Is it shown up like this? If not your device is not in EDL mode!
 

Attachments

  • Install-Qualcomm-HS-USB-QDLoader-9008-Drivers-Manual-Method-06.jpg
    Install-Qualcomm-HS-USB-QDLoader-9008-Drivers-Manual-Method-06.jpg
    34.4 KB · Views: 25

beensen

Member
Feb 15, 2013
8
0
How's your device shown up in the Windows' device manager when plugged in?
ok i installed the drivers from this site https://gsmusbdrivers.com/download/qualcomm-hs-usb-qdloader-9008-driver-64-bit-windows/
and it is showing in device manager now... i was in EDL mode
whats the next steps

i tried motorola unbrick tool but i still got an error
=================Waiting for Device======================
[ -0.000] Opening device: \\.\COM3
[ -0.000] ERROR: device_open()->error opening device
FAILED: qb_flash_singleimage()->device_open()->error opening device
 

WoKoschekk

Senior Member
Feb 25, 2019
1,031
1
326
Cologne
Moto G6
Moto G6 Plus
ok i installed the drivers from this site
Windows 11 update should load a newer version. Have a look there.

Try this tool:

The tool here in this thread uses Moto's blankflash files and they have often problems.
 

beensen

Member
Feb 15, 2013
8
0
Windows 11 update should load a newer version. Have a look there.

Try this tool:

The tool here in this thread uses Moto's blankflash files and they have often problems.
im on windows 11 but i also followed the github site that you posted nothing happened when i tried the unbrick too again
 

WoKoschekk

Senior Member
Feb 25, 2019
1,031
1
326
Cologne
Moto G6
Moto G6 Plus
im on windows 11 but i also followed the github site that you posted nothing happened when i tried the unbrick too again
You should have a look on Windows update for a new version of your QC HS-USB driver.

How did u try to unbrick? We need every step of it to be able to help you. All I know is that you did something. So my help for you is: You did something wrong.
 

beensen

Member
Feb 15, 2013
8
0
You should have a look on Windows update for a new version of your QC HS-USB driver.

How did u try to unbrick? We need every step of it to be able to help you. All I know is that you did something. So my help for you is: You did something wrong.
I followed all the steps you provided
You should have a look on Windows update for a new version of your QC HS-USB driver.

How did u try to unbrick? We need every step of it to be able to help you. All I know is that you did something. So my help for you is: You did something wrong.
it says the best drivers for the device is already installed
 

Renate

Recognized Contributor / Inactive Recognized Dev
Thank you, @mark332 for this treasure trove.
I'm not particularly interested in "do-it-all GUI tools", but I do like the actual Firehose loaders.

I've managed to extract 57 Firehose loaders from all the moto/<number>.bin files.
I was trying to find the correlation between SoC or model and the <number> files.
There are SoC numbers like SM8250 in there but I've yet to find a real index.
the flashtool.qch is an SQLite database, but I haven't dived too deep yet.

There is some duplication of the Firehose loaders.
I've been using a loader for my Moto G Power (2021) from a random source.
I find that that exact (MD5) loader is found in 17.bin and 34.bin

In any case, it looks like the "range restricted" problem is still there.

Code:
1.bin   SM_KAMORTA_H  eMMC
2.bin   SM_KODIAK     UFS
3.bin   SM8250        UFS
4.bin   SM_KODIAK     UFS
5.bin   SM_KODIAK     UFS
6.bin   SM_WAIPIO     UFS
7.bin   SM8250        UFS
8.bin   SM_WAIPIO     UFS
9.bin   SM_KODIAK     UFS
10.bin  MSM8953       eMMC
11.bin  MSM8937       eMMC
        MSM8940       eMMC
12.bin  MSM8917       eMMC
13.bin  MSM8937       eMMC
        MSM8940       eMMC
14.bin  SM_KAMORTA    eMMC
15.bin  SM_BITRA      UFS
        SM_BITRA_H    UFS
16.bin  SM_KAMORTA    eMMC
17.bin  SM_KAMORTA_H  eMMC
18.bin  SM_NICOBAR    eMMC
19.bin  SM_MANNAR     UFS
20.bin  MSM8937       eMMC
        MSM8940       eMMC
21.bin  SDM630        eMMC
22.bin  MSM8953       eMMC
23.bin  MSM8953       eMMC
24.bin  SDM636        eMMC
        SDM660        eMMC
25.bin  MSM8953       eMMC
26.bin  MSM8953       eMMC
27.bin  SM_NICOBAR    eMMC
28.bin  SM_NICOBAR    eMMC
29.bin  SM_NICOBAR    eMMC
30.bin  SM_KAMORTA_H  eMMC
31.bin  SM7150        UFS
32.bin  SM_KAMORTA_H  eMMC
33.bin  SM_KAMORTA    eMMC
34.bin  SM_KAMORTA_H  eMMC
35.bin  SM_MANNAR     UFS
36.bin  SM_DIVAR      UFS
39.bin  SM_DIVAR      UFS
40.bin  SM7150        UFS
41.bin  SM_STRAIT     UFS
42.bin  SM_STRAIT     UFS
43.bin  SM8250        UFS
44.bin  SM_LAHAINA    UFS
45.bin  SDM636        eMMC
46.bin  SM6150        UFS
47.bin  SDM636        eMMC
        SDM660        eMMC
48.bin  SM6150        UFS
49.bin  SM_BITRA      UFS
        SM_BITRA_H    UFS
50.bin  SM7150        UFS
51.bin  SDM710        eMMC
52.bin  SM6150        UFS
53.bin  SDM636        eMMC
54.bin  MSM8953       eMMC
55.bin  SM_SAIPAN     UFS
56.bin  SDM710        UFS
        SDM670        UFS
a.bin   SM_MANNAR     UFS
b.bin   SM_KAMORTA_H  eMMC
redmi5asingle.bin
        MSM8917       eMMC
 

Attachments

  • firehose.zip
    13.8 MB · Views: 49
Last edited:

mark332

Senior Member
Jul 2, 2017
226
165
Thank you, @mark332 for this treasure trove.
I'm not particularly interested in "do-it-all GUI tools", but I do like the actual Firehose loaders.

I've managed to extract 57 Firehose loaders from all the moto/<number>.bin files.
I was trying to find the correlation between SoC or model and the <number> files.
There are SoC numbers like SM8250 in there but I've yet to find a real index.
the flashtool.qch is an SQLite database, but I haven't dived too deep yet.

There is some duplication of the Firehose loaders.
I've been using a loader for my Moto G Power (2021) from a random source.
I find that that exact (MD5) loader is found in 17.bin and 34.bin

In any case, it looks like the "range restricted" problem is still there.

Code:
1.bin   SM_KAMORTA_H  eMMC
2.bin   SM_KODIAK     UFS
3.bin   SM8250        UFS
4.bin   SM_KODIAK     UFS
5.bin   SM_KODIAK     UFS
6.bin   SM_WAIPIO     UFS
7.bin   SM8250        UFS
8.bin   SM_WAIPIO     UFS
9.bin   SM_KODIAK     UFS
10.bin  MSM8953       eMMC
11.bin  MSM8937       eMMC
        MSM8940       eMMC
12.bin  MSM8917       eMMC
13.bin  MSM8937       eMMC
        MSM8940       eMMC
14.bin  SM_KAMORTA    eMMC
15.bin  SM_BITRA      UFS
        SM_BITRA_H    UFS
16.bin  SM_KAMORTA    eMMC
17.bin  SM_KAMORTA_H  eMMC
18.bin  SM_NICOBAR    eMMC
19.bin  SM_MANNAR     UFS
20.bin  MSM8937       eMMC
        MSM8940       eMMC
21.bin  SDM630        eMMC
22.bin  MSM8953       eMMC
23.bin  MSM8953       eMMC
24.bin  SDM636        eMMC
        SDM660        eMMC
25.bin  MSM8953       eMMC
26.bin  MSM8953       eMMC
27.bin  SM_NICOBAR    eMMC
28.bin  SM_NICOBAR    eMMC
29.bin  SM_NICOBAR    eMMC
30.bin  SM_KAMORTA_H  eMMC
31.bin  SM7150        UFS
32.bin  SM_KAMORTA_H  eMMC
33.bin  SM_KAMORTA    eMMC
34.bin  SM_KAMORTA_H  eMMC
35.bin  SM_MANNAR     UFS
36.bin  SM_DIVAR      UFS
39.bin  SM_DIVAR      UFS
40.bin  SM7150        UFS
41.bin  SM_STRAIT     UFS
42.bin  SM_STRAIT     UFS
43.bin  SM8250        UFS
44.bin  SM_LAHAINA    UFS
45.bin  SDM636        eMMC
46.bin  SM6150        UFS
47.bin  SDM636        eMMC
        SDM660        eMMC
48.bin  SM6150        UFS
49.bin  SM_BITRA      UFS
        SM_BITRA_H    UFS
50.bin  SM7150        UFS
51.bin  SDM710        eMMC
52.bin  SM6150        UFS
53.bin  SDM636        eMMC
54.bin  MSM8953       eMMC
55.bin  SM_SAIPAN     UFS
56.bin  SDM710        UFS
        SDM670        UFS
a.bin   SM_MANNAR     UFS
b.bin   SM_KAMORTA_H  eMMC
redmi5asingle.bin
        MSM8917       eMMC
i have all Motorola firehose but i really don't want to leak them in bulk, if you need it for testing purpose, feel free to contact me, i attach some for older model

range restriction applied!
 

Attachments

  • Motorola programmer.rar
    3.1 MB · Views: 37

Renate

Recognized Contributor / Inactive Recognized Dev
Every .bin file contains a "index.xml" where the board is listed. You can also use a hex viewer or termux with hexedit
Yes, I summarized that all in the "spoiler" list.

This is not a problem limited to Motorola.
Finding a working Firehose loader is always a challenge.
This is just an example of all the uncorrelated info for a device:
  • Device
    • Name: Moto G Power (2021)
    • Model: XT2117-4
    • Board: 333
  • SoC
    • Name: SM_KAMORTA_H
    • Snapdragon: SDM662
    • Codename: BENGAL
    • MSM number: ?
    • HWID: 0014d0e102e80000
    • Hash: abbcc86fe393b13d...
  • Firehose loader
    • MD5: 153a904c54963cb21b901b0dd10f0641
    • Size: 609,484
The Firehose loader that I use is also used on QCA6390 QCM_AGATTI QCM_KAMORTA QCS605 QCS_AGATTI QCS_KAMORTA QRB_AGATTI QRB_KAMORTA SA8150 SDA670 SDA845 SDA855 SDA855A SDA865 SDC830 SDM450 SDM670 SDM830 SDM845 SDM855 SDM855A SDM1000 SDX24 SDX24M SDX55 SM6150 SM6150P SM7150 SM7150P SM_AGATTI SM_DIVAR SM_KAMORTA SM_KAMORTA_H SM_MANNAR SM_NICOBAR SMP_AGATTI SMP_KAMORTA SMP_KAMORTA_H!

range restriction applied!
The main thing I need from EDL functionality is not to write 70-odd partitions (as it seems the goal for most people who use GUI tools), but to pull copies of boot and recovery. I use them to root either directly or with Magisk.

Considering that I bought an "unlocked", non-provider phone I wasn't expecting this restriction.
I (think) I see from the code that a CID of 255 will remove this restriction.
There seems to be another flag that does that too but it's written in the same area as the CID with the same mechanism and checksums.

Are there any solutions around "range restricted"?
 

Top Liked Posts

  • There are no posts matching your filters.
  • 6
    Hello guys presenting all New Motorola unbrick tool which can restore bootloader on any hard bricked Motorola Phone through EDL Mod..

    How to use:
    1. Install qcom or mtk driver according your device
    2. run tool, select model, click unbrick button
    3. Now connect phone in EDL or BROM mod according your device
    4. wait until success, once done your phone rebooted in fastboot mod, just download and flash fastboot firmware by running flash_all.bat
    Download:
    1. get it on Mega https://mega.nz/file/lTFASApS#VY0qDy6EBtdyDvdfWXEzQ3PgP36QeQHLVeVqX0L37e0
    Current version: V1.0 beta
    Credit:
    Me for compiling it, Motorola Inc for Providing firmware & loader

    Source Code: Github

    Disclaimer:
    1. use at own risk
    2. adviced for Retail devices, however you can try on branded too bcz your phone already in dead condition
    Donate: use button inside support section in tool

    Supported model:
    *Edge 2021 SD778
    *Edge 20 Lite
    *Edge 20 Pro XT2153-1
    *Edge 20
    *Edge 30
    *Edge 30 Pro
    *Edge 30 Plus
    *Edge Plus
    *Edge X30
    *Edge
    *G50 XT2137-2
    *G9 Power 2021
    *Defy 2021
    *G Pure
    *E 2020
    *Moto E5 Plus
    *E5 SD425
    *Moto E6
    *Moto E7 Plus
    *Moto G 5G
    *Moto G Play 2021
    *Moto G Power 2022)
    *G Power 2021
    *G Stylus VZW
    *G Stylus 5G
    *Moto G6 Play
    *Moto G6 Plus
    *Moto G6
    *G7 Play
    *G7 Plus
    *G7 Power
    *Moto G7
    *G8 Play
    *G8 Plus
    *G8 Power XT2041-7
    *Moto G8
    *G9 Play
    *G9 Plus
    *G9 Power
    *Moto G10
    *Moto G30
    *Moto G31
    *Moto G41
    *Moto G50 5G
    *Moto G50
    *G52 XT2221-1
    *G52 XT2221-2
    *Moto G60
    *Moto G71 5G
    *Moto G82
    *Moto G100
    *Moto G200 5G
    *One Power
    *One Zoom
    *Z3 Play
    *Moto Z4
    *One 5G ACE
    *One Action
    *One Fusion Plus
    *One Fusion
    *One Hyper
    *One Macro
    *One Vision
    *Motorola One
    *P30 Note
    *P30 Play
    *Razr 5G XT2071-5
    *Motorola Razr 2019
    Screenshot (320).png
    1
    exciting!
    would there be razr 2022 unbrick in the future?
    1
    If you like to I could build a *.bin file for your device. Later you just need to move it into the moto folder where it'll replace one of the other device files. Of course I'll tell you which one.
    That would be much appreciated.