Hi every one!
It is my first post in here. I have spent last week trying to recover data from my eReader (Onyx Boox Note Air). I took it from my nightstand one night and I was surprised with this message:
"
Android Recovery
ONYX/NoteAir/NoteAir
10/2023-12-12_21-240_3.5_4687b1901/12699
user/dev-keys
Use volume up/down and power
Can't load Android system. Your data may be corrupt. If you continue to get this message, you may need to perform a factory reset and erase all user data stored on this device"
An i started my investigation process to recover my data (there are some important notes in my device)
First, I found that there is an edl mode. I have been able to connect via edl 9008 mode somehow, indeed, there it is the prompt of the command printgpt:
Code:
python3 edl printgpt --loader=prog_emmc_ufs_firehose_Sdm636_ddr/prog_emmc_ufs_firehose_Sdm636_ddr.elf --memory=emmc
Qualcomm Sahara / Firehose Client V3.62 (c) B.Kerler 2018-2024.
main - Using loader prog_emmc_ufs_firehose_Sdm636_ddr/prog_emmc_ufs_firehose_Sdm636_ddr.elf ...
main - Waiting for the device
main - Device detected :)
sahara - Protocol version: 2, Version supported: 1
main - Mode detected: sahara
sahara -
Version 0x2
------------------------
HWID: 0x000cc0e100000000 (MSM_ID:0x000cc0e1,OEM_ID:0x0000,MODEL_ID:0x0000)
CPU detected: "SDM636"
PK_HASH: 0x7be49b72f9e4337223ccb84d6eccca4e61ce16e3602ac2008cb18b75babe6d09
Serial: 0x9f3fbbd8
sahara - Protocol version: 2, Version supported: 1
sahara - Uploading loader prog_emmc_ufs_firehose_Sdm636_ddr/prog_emmc_ufs_firehose_Sdm636_ddr.elf ...
sahara - 64-Bit mode detected.
sahara - Firehose mode detected, uploading...
sahara - Loader successfully uploaded.
main - Trying to connect to firehose loader ...
firehose
firehose - [LIB]: !DEBUG! rsp.data: 'bytearray(b'<?xml version="1.0" encoding="UTF-8" ?>\n<data>\n<log value="Binary build date: Oct 31 2017 @ 11:17:46"/>\n</data><?xml version="1.0" encoding="UTF-8" ?>\n<data>\n<log value="Chip serial num: 4294967295 (0xffffffff)"/>\n</data><?xml version="1.0" encoding="UTF-8" ?>\n<data>\n<log value="Supported Functions: program configure nop firmwarewrite patch setbootablestoragedrive ufs emmc power benchmark read getstorageinfo getsha256digest erase peek poke "/>\n</data>')'
firehose - TargetName=MSM8996
firehose - MemoryName=eMMC
firehose - Version=1
firehose - Trying to read first storage sector...
firehose - Running configure...
firehose - Storage report:
firehose - total_blocks:61071360
firehose - block_size:512
firehose - page_size:512
firehose - num_physical:4
firehose - manufacturer_id:21
firehose - serial_num:1804524707
firehose - fw_version:9
firehose - mem_type:eMMC
firehose - prod_name:DX68MB
firehose_client - Supported functions:
So I can confirm that i can activate that edl mode just by pressing the power button. I cannot use adb, my device does not have developer settings on, and i havent been able to use an edl cable to force edl mode.
Other option would be to try to reconstruct the os partitions via flashboot, but i dont have the firmware and I cant find it.
I know two power button patterns:
EDL 900e mode: press for 20", then wait 2", then press 5 times
Recovery mode: press until the led goes on, then release, then press for 7", then release and press 5 times
Maybe some of you knows the pattern for EDL 9008
Ah, and i have tried to contact support and looked for the firmware online already
Thank you for your help!!