I first overwrote **boot_b** with a Magisk‑patched image. That didn’t have any effect, so I also patched **boot_a**. Now the device only boots into fastboot (locked).
► `./edl.py --loader=0000000000000000_bdaf51b59ba21d8a_fhprg.bin r boot_a boot.img`
► `./edl.py --loader=0000000000000000_bdaf51b59ba21d8a_fhprg.bin w boot_b magisk_patched-30700_8NVgz.img`
► `./edl.py --loader=0000000000000000_bdaf51b59ba21d8a_fhprg.bin w boot_a magisk_patched-30700_8NVgz.img` (stupid)
Rebooting to recovery doesn’t work. I tried flashing **misc‑recovery.prc** to **misc** in order to get into recovery, but that also failed.
► `./edl.py --loader=0000000000000000_bdaf51b59ba21d8a_fhprg.bin w misc misc-recovery.img`
Ideally I’d like to build an OrangeFox‑style recovery for this device. I extracted the device tree from the stock recovery using **twrpdtgen**. My knowledge of custom ROMs and recoveries is a bit rusty, unfortunately, but I bought this device to tinker with. For reading I still have my PocketBook*630.
https://github.com/idovitz/android_device_Onyx_Go7