Before i begin, sorry for my bad english, i wont use a dictionary for this article, i will only use the words i already know, otherwise, this will be a never-ending story, becouse there are so many things to write..

It all began last summer, no no, this is not about a summer love, its a story about us and them. Us : Computer geeks from all around the world, Them : Samsung, Lg, Htc, Sony, etc. The firms who charge hundred of dollars to us, for our bricked phones, but in reality, there are not bricked, they just need the right factory rom and servise program to come back to life, for Snapdragons this is under 5 minutes.. It must have been the cheapest service charge, if time is a matter,  for our rooted ! and therefore are out of guarantie !  android phones .  But they mostly say :” motherboard has to be changed”, and this is the most high-priced servise all around the world, better buy a new phone !

Its year 2015, rooting is still forbidden from Them. Big applause to Oppo and to other firms who sell “developer” smartphones, who dont say out of guarantie if its rooted.  We will come to this later..

I bought a Nubia Z5s last year, from a chineese online seller and for my luck it came to my door with the postman. In my country there is a government rule, we citizens of Turkey can not buy any smartphone online from other countries. Its forbidden to protect local firms, the firms that charge 350 $ for a 100 $ worth chineese made smartphone, or 500$ for a 200$ worth chinnese made smartphone. And they sell it like they made it localy. In order to be able to use a foreign smartphone you should be returning from an foreign country and have a passport , the mark on it cant be older then 30 days, or you miss that chance too. Can you understand how hungry we are for these little toys ? 🙂 I bought my z5s for a 380 $ with free shipping, it was a real bargain for me, a Lg G2 those days, same snapdragon 800 platform with 2gb of ram and nubia had 4k video and 120fps shooting in plus, costed 750$ in my local shops. I was only be able to use it for 10 days, after that my government shut the signal of my non on a passport registered imei. I started to search for a passport from a friend, that must not be older then 30 days and should have not any other phone registered on it ! Some even sell their passport rights for 100 $ here. You can register on that passport, you pay 100$ to its owner, then you pay about 60$ to government as tax and your signal is back. If you are lucky to find a passport like this of course. Anyway this is enough of our problems ..

Im going it very quicly, dont want to talk about illegal stuff right now, .. I was the first user, geek, who could repair the imei of the new snapdragon 800 and 801 platforms on a windows PC . is born from those days and from these experiences.

Started with nubia series, i was lucky to find a way in only 2 hours reading the web and could repair the imei. Then i found a ZTE Grand S 2, snapdragon 801 this time, same folder structure like LG G2, was able to repair it too, after reading how to back up G2’s imei topic’s. That lead the way to Xiaomi Mi3’s, Mi4’s, Lenovo k910, and now 920, almost all brands from china that has qualcomm snapdragon platforms, i was able to repair their imei’s with registered ones, except till day, an Oneplus One came to my hands, to work on its imei.  A week later i introduces my self with one of the Qualcomm Service Ports, Qualcomm HS-USB QDLoader 9006, and the story began.



My Oneplus One gone HS-USB QDLoader 9006 mode after i willingly deleted aboot.mbn, was trying to find the partition in which Opo / Oppo was hiding his encyrpted imei, so i was in a hunt 🙂 After that bricked Opo has waited about a month on my desk, in a coma, i knew he wasnt dead, after a little research i came up with the unbrick tutorial of Oppo Find 5, in which the author was talking about about special drivers for QHSUSB_BULK device in device manager, later it turnes out to be that those ports are, after right drivers installed of course, quote from Qualcomm himself :

Usually the target is in emergency download when no image is present on the target or when the  image is corrupted. In such situation, the target will be enumerated as “Qualcomm HS-USB  QDLoader …” , ( mostly Qdloader 9008 in our examples ), when connected to a PC via USB.

It continues :

” When a phone is boot up normally and HLOS is running, the target will be enumerated as  “Qualcomm HS-USB Diagnostics …” or alike when connected to a PC via USB. In this situation, QFIL will automatically switch target to EDL mode and then load the build into the phone” .

Yes this quotes are taken from the operation guide of QFIL, we will talk about that program later, it will be probably our future unbrick tool for newer ( including msm8974) smartphones, coming with the latest build of QPST, 2.7 /422.


Now about the terms HLOS and EDL, : “This tool (QFIL) can be used to flash a build image into a target in the Emergency Download  (EDL) mode or from High Level OS (HLOS) mode (normal boot up). 

Interesting right ? Those ports, that we fear so much, are just qualcomm service ports. What more interesting is, with the right drivers and flashtools, and with the right device spesific servise rom, your hard bricked, in dead condition poor snapdragon, will come back to life in under 5 minutes !

The first service rom, that im talking about, has came from Oppo, as far as i know, for unbricking Find 5, with their special “DownloadTool” and with their spesific “Qualcomm QHSUSB BULK” or qhsusb_dload drivers, after installed our Qualcomm HS-USB  QDLoader or Qualcomm HS-USB Diagnostics ports are ready to serve.

I knew, if i could find the right service rom and flash tool for OnePlus One, i could rescue it and i was right. With the help of a friend from XDA.Developers, i managed to download a rom, which has our magic files in it, (names are spesific for msm8974 platform), “8974_msimage.mbn -bootloader, MPRG8974.mbn -flasher, ram (the format was hex before 8974), rawprogram0.xml -partitiontable definition, it differs if we have a 64GB phone or 32GB or a 16GB, name differs as rawprogram0_32G.xml or rawprogram0_64G.xml, patch0.xml -patch definition of the partitions”. We will come back to these files later, its a huge story itself. This wasnt a service rom for Opo normaly , it was just ColorOs 2.0 full install package, which has all the needed files for unbricking any Oneplus One from any 9006 or 9008 bulk situation !


In about 15 minutes, after my rom download has finished, i was able to rescue Oneplus One from “coma”  brick. But not with the “MSM8974 spesific DownloadTool” this time, becouse its all in chineese, hard to understand if something goes wrong, you can use Qfil instead, if its  “Qualcomm HS-USB  QDLoader 9008″, Qualcomm’s home made flash tool, if your service rom supports the new protocol “firehose”, the flasher is not MPRG8974.mbn anymore in this, unlike “Sahara” protocol, its called “prog_emmc_firehose_8974.mbn”, the coloros 2.0 rom package supports this protocol too, i was able to rescue my Opo from any situation later with Qfil (my test Oppo 7 too), made many tests rescuing from 9008 and 9006, after hard bricking them manualy of course. There is a tool called QCN Backup and Restore in Qfil, we all know what this is, the new kind of “EFS” backup used these days (all modem related nv_items backup).







,with the help of Miflash Utility from Xiaomi, its the magic flashtool for all snapdragon based phones from Xiaomi, their users are using it for their so called “Fastboot roms” for Mi3 or Mi4 etc. I was experienced to use it for a Lenovo K910 Vibe Z, an other msm8974 platform, again from a so called “deadly” brick situation, it was in hs-usb qdloader 9008 first, we just need “8974_msimage.mbn” and “MPRG8974.mbn” to bring the phone to hs-usb diagnostics 9006 mode. 9006 is “Emergency Download Mode” as i mentioned earlier, for “raw” level flashing. Then Miflash comes to help with its own “qualcomm bulk” drivers and sees our port to flash our non Xiaomi rom manualy.



Those who are familiar with Miflash will notice in the “Fastboot Script” row you dont see any “flash_local.xml”, becouse Oppo named it as Setting.xml, they are the same, no need to change any line in setting.xml, just choose right xml and mbn’s and hit “Flash”, after aboout 1.5-2 minutes your Opo or Oppo will come back alive. Greetings 🙂 Remember this method fixes all 9006’s from all makers of Snapdragon based smartphones like Lenovo K910, K920,

ZTE Nubia z7/z7max/z7mini ( those fastboot/service roms we have in our hands too), which has right “mbn” and “xml” files in their rom folders.

Now a big applouse to Xiaomi too, first was Oppo, now we know their “fastboot roms” are  “service roms” too ! You can unbrick any snapdragon based Xiaomi, if that model has a fastboot rom of course, from many bricked situation ( i dont wanna use hardbrick or softbrick terms anymore, they are not :)).

Chineese Smartphone makers seems more user-friendly then rest of the world makers, only their “service/fastboot” roms are easy to find ( motorolla too i think ) to fix many Qualcomm HS-USB  QDLoader 9008 bricks. How about the owners of a LG G3, or a HTC M8, or Sony Xperia Z series owners with same boogeyman 9008 port ? Or any other phone maker with the same  “out of guaranty-friendly” or  “motherboard has to be changed-friendly” philosophy..

To be continued ( with more tools and info )..


MiFlash version/2012:


QPST 2.7 Build 422 :


Lenovo K920 Vibe Z2 Pro Unbrick Rom :


Oppo 7/7a Unbrick Rom ( international 1.2.5):


Oneplus One Unbrick Rom ( ColorOs 2.0 ):




PS: I don’t advice to use the so called OnePlusRecoveryTool with CM11 in it. Going back from ColorOs to CM11 if needed takes only 5 minutes ! Why to take not your own build Msm8974DownloadTool and call it a your made tool ? Without understanding whats realy in it ? Just describe how to do it with the original files, anyway, i always think new users should stay away from those “tools”, they first need to read and understand what they are doing that moment, try to learn and understand basic fastboot and adb commands, much safer, much fun !


PART 2 :  ! !






Copyright © 2015 by All rights reserved.

Leave a Reply

Please Login to comment
118 Comment threads
202 Thread replies
Most reacted comment
Hottest comment thread
107 Comment authors
Recent comment authors
En Yeniler Eskiler Beğenilenler

Hello, AndroidBrick!
I have Cherry Mobile Flare X2 same as Archos 55 Diamond Selfie and Swipe Elite Max, i have a problem i accidentally bricked my phone by flashing a rom now my phone is in coma no fastboot,recovery,no screen,and i dont know if theres edl my phone start blinking red led when you plug the usb cable but it will gone after you unplug it also i cannot power off it because when you long press the power button it will restart, hopre you respons


Hello, AndroidBrick!
Great post!
I have a Lenovo Z5 and it’s bricked.
It won’t turn on, the buttons won’t show any sign of life when pressed.
The Qfil tool recognizes it an it shows like your post indicates.
I tried to flash it with Qfil but the Sahara error keeps coming up.
I tried following the steps mentioned here but the same error keeps showing.
Do you know if I could have the wrong Rom or firmware?
Am I supposed to use a different firmware when my phone is bricked?
Could you please get in touch or show me a path to follow?


bro,i have lyf wind-1 device powered by qualcomm snapdragon 410 quadcore processor msm8916 with 1.2ghz clock speed,when I tried flashing the deice it is showing up in dvice manager as qhsusb diagnostics 9008 mode and it’s showing boot partitions as drives in windows,not going into EDL me to recover my mobile into 9008 mode sothat I probably able to flash it,thanks in advance


hiii frnd iam fed up of my dead yuphoria its completely dead its connect to pc as QHSB bulk mode and nothing works when i install qualcomm driver and then connect to my laptop thinkpad t410 ram 4 gb my laptop stops working completely i have tried sd card thing but i am not able recover can u help me please help me please

Tkt Pas

Hello, is there any unbrick rom for the Huawei Honor 5x (KIW-L21)?
Thank you in advence for the answer.


Hi sir, I to need this firmware. Mine is in 9008 state. Need help if any body can.
Br, Raja

Bilal Aamer

hperia z3v is bricked only fastboot is accessibleHELP

Bilal Aamer

I bricked my sony xperia z3v. I can only access FASTBOOT now! need help


hi Help Unbrick Rom : htc desire d 820 n Single sim qualcomm thank you

Kobe Kobe

Hello. Will this work on Oppo Mirror 3?

Radovan Hlaváček

Hello. I have bricked ASUS A500KL T00P. My phone can not display anything. Fastboot mode I can not start. ADB connection can not by established. On PC phones shows COM5 qloader 9008. Qfil I have, but I have not firehose files. Please help me.

Jordan lau

Hi.My phone nodel is Oppo Find 7..messing with system build got me into boot loop,and im running OmniRom 6.0 on my devices. Got exausted and flashed the wrong Twrp(,which resulted in oppo logo with black screen and thus no recovery ever booted ever since. Fastboot wont even get reconized in device manager..tried everything and no device or port shows up in device manager.
Please help me sir..

Jordan lau


Riky Arya Pratama Nugraha

Riky Riky
if anyone could help me? I was wrong to install a splash, then I die android only lights are on, and appear partitions, the partition contained within files such as images I uploaded. after I check the file is similar to a file for flashing. please help me…

sorry for bad english and russian, i used google translate
please respond 🙁
i used zte blade v5 pro/x9/a711

Riky Arya Pratama Nugraha

if anyone could help me? I was wrong to install a splash, then I die android only lights are on, and appear partitions, the partition contained within files such as images I uploaded. after I check the file is similar to a file for flashing. please help me…

sorry for bad english, i used google translate
please respond 🙁

Ambady Ps
Ambady Ps

Can you please help me…I am having OnePlus one and it is having efs partition failed error…How can I fix this….I have tried everything…When I done your way…The screen is just showing black and white line passing through the centre….Please help


Hi thanks alot but my problem is that when i connected my zte nubia z7 max to pc(i just updated & it got suddenly after the restart,completely off), only human interfface device is being shown & i can’t choose another driver from qualcomm or andoid usb or anything..I have installed all drivers…I have revived z7mini with your work but it was recognized by device manager.not like this phone…plz help me(the red circle get on,so phone is ot completely dead) Plz advise me as how to change the recognition from “human interface device” to sth else…i saw 3-5 people in interet… Read more »

Maziar Farahvashi

HI, I have the opneplus one 64GB. Rootet with cm14.1and TWRP. But the phone is now hard brick. I can´t go to fast boot . Device manager gergenize my phone as QDLoader 9008. With the MSMdownload tool have a problem it goes to loop with download the file 8974_msimage.mbn ( it is a never ending loop). I try to flash the phone with Miflash. But I have an error DownloadFlashProgrammer(369): An attempt was made to load a file with an incorrect format.(0x8007000b) DownloadFlashProgrammerAndMiniKernel(753): An attempt was made to load a file with an incorrect format.(0x8007000b) CSoftwareDownload::DownloadBySettings(1879): An attempt was made… Read more »

Maziar Farahvashi

Hi, thanks for the great job that you make. I have a opneplus one which is now in the 9008 mode. I try to flash it with MiFlash. But the I became an error. DownloadFlashProgrammer(369): An attempt was made to load a file with an incorrect format.(0x8007000b) DownloadFlashProgrammerAndMiniKernel(753): An attempt was made to load a file with an incorrect format.(0x8007000b) CSoftwareDownload::DownloadBySettings(1879): An attempt was made to load a file with an incorrect format.(0x8007000b) CEmergencyFlasher::DoWork(525): An attempt was made to load a file with an incorrect format.(0x8007000b) CDeviceReport::HasError(67): An attempt was made to load a file with an incorrect format.(0x8007000b) CDeviceReport::GetStatus(124):… Read more »

Miguel Monedero

Hi! Thanks for all your work. I have a Sony Xperia L in hard brick (after modifying the sdcard partition from TWRP) (no power, no bootload, …) I’ve been trying to recover it with QPST/QFli and MiFlash, but with no result (I can see it correctly in both tools – dload – , but I need the extra files since I just have a stock rom. I understand from your comments that MiFlash won´t work with Sony. Should I continue trying with Qfil? If so, can you direct me to where I could find the needed files? If both methods… Read more »

Geetin Murmu

I accidentally have flashed wrong rom in my Asus zenfone 2 ZE550kl.The is hard bricked.No light no fastboot,no recovery.Its Qualcomm® Snapdragon™ 410
Qualcomm Snapdragon 615 MSM8939. Can you help to unbrick

Geetin Murmu

Firmware for Asus are available in product support page as flashable zip files.mbn files are present in that but no XML files .BTW I am using win 10 with qfil in Windows 7 compatibility mode