Anyone willing to "repair" an Onyx Note 2? - Page 3

tatteredscroll · 09-13-2025, 01:10 PM

Quote:

Originally Posted by Renate

It's the dynamic back and forth that makes this so much fun.

I never said "eye". I said "ell".

Square is your input. Circle is the voltage source.
You can probably safely short the two points together when you need to get back to EDL.

C:\Users\anon\Downloads>edl /l
Found EDL 9008, handshaking... nope, resetting...
Received unexpected 0x04 command

tatteredscroll · 09-13-2025, 01:18 PM

Ok, tried a few times with a paper clip shorting and an ~18 second power button hold and now have this--

C:\Users\anon\Downloads>edl /l
Found EDL 9008, handshaking... version 2
HWID: 000460e100000000 (x3), JTAG: 000460e1, OEM: 0000, Model: 0000
Hash: cc3153a80293939b-90d02d3bf8b23e02-92e452fef662c749-98421adad42a380f (x3)

And this from Zadig if that helps/matters--

libwdi:debug [wdi_create_list] Hardware ID: USB\VID_05C6&PID_9008&REV_0000
libwdi:debug [wdi_create_list] Compatible ID: USB\COMPAT_VID_05C6&Class_FF&SubClass_FF&Prot_FF
libwdi:debug [wdi_create_list] Driver version: 6.1.7600.16385
libwdi:debug [wdi_create_list] WinUSB USB device (0): USB\VID_05C6&PID_9008\5&317DA462&1&11
libwdi:debug [wdi_create_list] Device description: 'QUSB__BULK'

Renate · 09-13-2025, 01:23 PM

Did you ever sort out the difference between vowels and consonants?

tatteredscroll · 09-13-2025, 01:27 PM

Quote:

Originally Posted by Renate

Did you ever sort out the difference between vowels and consonants?

This?

C:\Users\anon\Downloads>edl /i
Found EDL 9008, configuring... bad XML

"eye" gives error
"ell" gives HWID above in other post.

Renate · 09-13-2025, 01:28 PM

Sorry, our posts overlapped.

Renate · 09-13-2025, 01:34 PM

Download this Firehose loader:
https://github.com/bkerler/Loaders/b...fhprg_peek.bin
You can rename it what you like to make life easier, I suggest note2.bin
Fresh start to EDL, then:

Code:

edl /lnote2.bin
edl /g

tatteredscroll · 09-13-2025, 01:52 PM

C:\Users\anon\Downloads>edl /lnote2.bin
Found EDL 9008, handshaking... version 2
HWID: 000460e100000000 (x3), JTAG: 000460e1, OEM: 0000, Model: 0000
Hash: cc3153a80293939b-90d02d3bf8b23e02-92e452fef662c749-98421adad42a380f (x3)
Sending note2.bin 100% ok, starting... ok, waiting for Firehose... no response, poking... ok

C:\Users\anon\Downloads>edl /g
Found EDL 9008, configuring... ok
Requesting info on LUN 0... ok
Requesting GPT 0 header... ok, receiving... ok, requesting entries... ok, receiving... ok

# Name Start Count Type
── ──────────────── ────────── ────────── ────────────────────
1 modem 131072 180224 FAT32
2 fsc 393216 2 FSC
3 ssd 393224 16 Secure SW download
4 sbl1 393240 1024 Bootloader
5 sbl1bak 394264 1024 FAT32
6 rpm 395288 1024 Resource/power mgmt
7 rpmbak 396312 1024 FAT32
8 tz 397336 4096 TrustZone
9 tzbak 401432 4096 FAT32
10 devcfg 405528 512 Device config
11 devcfgbak 406040 512 Device config
12 dsp 406552 32768 FAT32
13 modemst1 439320 3072 Modem ST1
14 modemst2 442392 3072 Modem ST2
15 DDR 524288 64 DDR
16 fsg 524352 3072 Modem storage
17 sec 527424 32 Sec
18 splash 655360 22528 Boot
19 aboot 786432 2048 Android bootloader
20 abootbak 788480 2048 FAT32
21 boot 790528 131072 Boot
22 recovery 921600 131072 Recovery
23 devinfo 1052672 2048 User data
24 system 1054720 6291456 System
25 vendor 7346176 2097152 System
26 cache 9568256 524288 Cache
27 persist 10092544 65536 System
28 misc 10158080 2048 Misc
29 keystore 10160128 1024 Key store
30 config 10161152 64 FRP
31 oem 10161216 458752 7db6ac55
32 onyxconfig 10619968 65536 System
33 limits 10747904 64 Limits
34 mota 10878976 1024 FAT32
35 dip 10880000 2048 DIP
36 mdtp 10882048 65536 MDTP
37 syscfg 10947584 1024 Resource/power mgmt
38 mcfg 10948608 8192 FAT32
39 lksecapp 11010048 256 Key master
40 lksecappbak 11010304 256 Key master
41 cmnlib 11010560 2048 Common lib
42 cmnlibbak 11012608 2048 Common lib
43 cmnlib64 11014656 2048 Common lib64
44 cmnlib64bak 11016704 2048 Common lib64
45 keymaster 11018752 2048 e8b7cf6e
46 keymasterbak 11020800 2048 e8b7cf6e
47 apdp 11141120 512 APDP
48 msadp 11141632 512 MSADP
49 dpo 11142144 16 DPO
50 logdump 11142160 131072 Log dump
51 userdata 11273232 110869455 User data

Renate · 09-13-2025, 01:55 PM

So, that works.

What did you want to do?
Do you know the problem or only want to install fresh?

tatteredscroll · 09-13-2025, 01:56 PM

Quote:

Originally Posted by Renate

So, that works.

What did you want to do?
Do you know the problem or only want to install fresh?

Don't know the problem, install fresh. I think 3.3.1 or 3.3.2 was available back in 2023? Whatever you think best.

tatteredscroll · 09-13-2025, 01:59 PM

My goal is to get back to rooted device with magisk and afwall+ and china blocks like I had before I tried to factory reset.

Renate · 09-13-2025, 02:00 PM

I have to make a custom recovery for this.
It's 32 bit older so I have to set my mind back to that.
It's getting late here, I'm going to take a bath.
I should be able to get you that tomorrow.
You can download this:

Code:

Model:  Note2 (English)
Finger: Onyx/Note2/Note2:9/2024-01-03_07-30_3.5_1b692dcde/11030:user/dev-keys
Link:   http://firmware-us.boox.com/e7486a0288552ca8bda64bbc3a47cf06/update.upx
Size:   1,562,854,075
MD5:    e7486a0288552ca8bda64bbc3a47cf06

tatteredscroll · 09-13-2025, 02:02 PM

Quote:

Originally Posted by Renate

I have to make a custom recovery for this.
It's 32 bit so I have to set my mind back to that.
It's getting late here, I'm going to take a bath.
I should be able to get you that tomorrow.
You can download this:

Code:

Model:  Note2 (English)
Finger: Onyx/Note2/Note2:9/2024-01-03_07-30_3.5_1b692dcde/11030:user/dev-keys
Link:   http://firmware-us.boox.com/e7486a0288552ca8bda64bbc3a47cf06/update.upx
Size:   1,562,854,075
MD5:    e7486a0288552ca8bda64bbc3a47cf06

Many thanks. Until tomorrow.

tatteredscroll · 09-13-2025, 02:22 PM

Why is a custom recovery needed?

I've got the following completed in anticipation of future work--
** update.upx downloaded (MD5 checked)
** python installed with pycryptodome and pycrypto
** decryptBooxUpdateUpx python script downloaded (from https://github.com/Hagb/decryptBooxUpdateUpx)
** firehose edl-master (from https://github.com/bkerler/edl) git repo installed with loaders (not sure if needed since we're using your edl but just in case)

misc items downloaded from chitter's guide for his NA2+

python DeBooxUpx.py Note2 update.upx [completed]
unzip update.zip from the above [completed]

I think I would like to get to a full stock state and then do this as you recommended in another thread

Quote:

If you have space on your desktop (32 GB), definitely make a full, raw backup.
That means that there will be nothing that you can do to your Poke5 that can't be fixed by a restore and a cup of coffee.

Then I'll fiddle with magisk, root, afwall+ .

Renate · 09-13-2025, 11:28 PM

Well, if you can get to recovery and ADB sideload works you can try that.

Renate · Yesterday, 03:33 AM

Don't you just hate patching statically linked binaries?
Especially with weird load addresses.

Ho hum. Time to make soup.

Edit: That turned out pretty well. Turkey, leeks, onions, celery root, carrots, barley...

09-13-2025, 01:18 PM	#32
tatteredscroll Connoisseur Posts: 92 Karma: 510 Join Date: Sep 2012 Device: Kindle Paperwhite Kids 2022 11th Gen (PW5)	Ok, tried a few times with a paper clip shorting and an ~18 second power button hold and now have this-- C:\Users\anon\Downloads>edl /l Found EDL 9008, handshaking... version 2 HWID: 000460e100000000 (x3), JTAG: 000460e1, OEM: 0000, Model: 0000 Hash: cc3153a80293939b-90d02d3bf8b23e02-92e452fef662c749-98421adad42a380f (x3) And this from Zadig if that helps/matters-- libwdi:debug [wdi_create_list] Hardware ID: USB\VID_05C6&PID_9008&REV_0000 libwdi:debug [wdi_create_list] Compatible ID: USB\COMPAT_VID_05C6&Class_FF&SubClass_FF&Prot_FF libwdi:debug [wdi_create_list] Driver version: 6.1.7600.16385 libwdi:debug [wdi_create_list] WinUSB USB device (0): USB\VID_05C6&PID_9008\5&317DA462&1&11 libwdi:debug [wdi_create_list] Device description: 'QUSB__BULK' Last edited by tatteredscroll; 09-13-2025 at 01:24 PM.

09-13-2025, 01:34 PM	#36
Renate Onyx-maniac Posts: 4,062 Karma: 18027877 Join Date: Feb 2012 Device: Nook NST, Glow2, 3, 4, '21, Kobo Aura2, Poke3, Poke5, Go6	Download this Firehose loader: https://github.com/bkerler/Loaders/b...fhprg_peek.bin You can rename it what you like to make life easier, I suggest note2.bin Fresh start to EDL, then: Code: edl /lnote2.bin edl /g

09-13-2025, 02:00 PM	#41
Renate Onyx-maniac Posts: 4,062 Karma: 18027877 Join Date: Feb 2012 Device: Nook NST, Glow2, 3, 4, '21, Kobo Aura2, Poke3, Poke5, Go6	I have to make a custom recovery for this. It's 32 bit older so I have to set my mind back to that. It's getting late here, I'm going to take a bath. I should be able to get you that tomorrow. You can download this: Code: Model: Note2 (English) Finger: Onyx/Note2/Note2:9/2024-01-03_07-30_3.5_1b692dcde/11030:user/dev-keys Link: http://firmware-us.boox.com/e7486a0288552ca8bda64bbc3a47cf06/update.upx Size: 1,562,854,075 MD5: e7486a0288552ca8bda64bbc3a47cf06 Last edited by Renate; Yesterday at 06:32 AM.

Yesterday, 03:33 AM	#45
Renate Onyx-maniac Posts: 4,062 Karma: 18027877 Join Date: Feb 2012 Device: Nook NST, Glow2, 3, 4, '21, Kobo Aura2, Poke3, Poke5, Go6	Don't you just hate patching statically linked binaries? Especially with weird load addresses. Ho hum. Time to make soup. Edit: That turned out pretty well. Turkey, leeks, onions, celery root, carrots, barley... Last edited by Renate; Yesterday at 06:32 AM.

Similar Threads
Thread	Thread Starter	Forum	Replies	Last Post
Ended Onyx Boox Note Air 2 Plus 10.3" E-Ink Tablet + Case	Chitter	Flea Market	0	08-07-2023 04:22 PM
Sell Onyx Boox Note 10.3" (Europe)	bongio	Flea Market	1	11-27-2019 02:39 PM
Onyx Note: How to disable "Fetch Remote Optimize Config"	cicabum	Onyx Boox	0	08-22-2019 05:36 PM
PW3 Force downgrade caused "Your Kindle needs repair" HELP PLZ!	CaesarW	Kindle Developer's Corner	28	01-25-2019 01:36 AM
What are some alternatives to the upcoming 9.7" Onyx Boox Note S?	JawadLeLogeur	Which one should I buy?	4	07-02-2018 11:49 AM

09-13-2025, 01:23 PM	#33
Renate Onyx-maniac Posts: 4,062 Karma: 18027877 Join Date: Feb 2012 Device: Nook NST, Glow2, 3, 4, '21, Kobo Aura2, Poke3, Poke5, Go6	Did you ever sort out the difference between vowels and consonants?

09-13-2025, 01:28 PM	#35
Renate Onyx-maniac Posts: 4,062 Karma: 18027877 Join Date: Feb 2012 Device: Nook NST, Glow2, 3, 4, '21, Kobo Aura2, Poke3, Poke5, Go6	Sorry, our posts overlapped.

09-13-2025, 01:52 PM	#37
tatteredscroll Connoisseur Posts: 92 Karma: 510 Join Date: Sep 2012 Device: Kindle Paperwhite Kids 2022 11th Gen (PW5)	C:\Users\anon\Downloads>edl /lnote2.bin Found EDL 9008, handshaking... version 2 HWID: 000460e100000000 (x3), JTAG: 000460e1, OEM: 0000, Model: 0000 Hash: cc3153a80293939b-90d02d3bf8b23e02-92e452fef662c749-98421adad42a380f (x3) Sending note2.bin 100% ok, starting... ok, waiting for Firehose... no response, poking... ok C:\Users\anon\Downloads>edl /g Found EDL 9008, configuring... ok Requesting info on LUN 0... ok Requesting GPT 0 header... ok, receiving... ok, requesting entries... ok, receiving... ok # Name Start Count Type ── ──────────────── ────────── ────────── ──────────────────── 1 modem 131072 180224 FAT32 2 fsc 393216 2 FSC 3 ssd 393224 16 Secure SW download 4 sbl1 393240 1024 Bootloader 5 sbl1bak 394264 1024 FAT32 6 rpm 395288 1024 Resource/power mgmt 7 rpmbak 396312 1024 FAT32 8 tz 397336 4096 TrustZone 9 tzbak 401432 4096 FAT32 10 devcfg 405528 512 Device config 11 devcfgbak 406040 512 Device config 12 dsp 406552 32768 FAT32 13 modemst1 439320 3072 Modem ST1 14 modemst2 442392 3072 Modem ST2 15 DDR 524288 64 DDR 16 fsg 524352 3072 Modem storage 17 sec 527424 32 Sec 18 splash 655360 22528 Boot 19 aboot 786432 2048 Android bootloader 20 abootbak 788480 2048 FAT32 21 boot 790528 131072 Boot 22 recovery 921600 131072 Recovery 23 devinfo 1052672 2048 User data 24 system 1054720 6291456 System 25 vendor 7346176 2097152 System 26 cache 9568256 524288 Cache 27 persist 10092544 65536 System 28 misc 10158080 2048 Misc 29 keystore 10160128 1024 Key store 30 config 10161152 64 FRP 31 oem 10161216 458752 7db6ac55 32 onyxconfig 10619968 65536 System 33 limits 10747904 64 Limits 34 mota 10878976 1024 FAT32 35 dip 10880000 2048 DIP 36 mdtp 10882048 65536 MDTP 37 syscfg 10947584 1024 Resource/power mgmt 38 mcfg 10948608 8192 FAT32 39 lksecapp 11010048 256 Key master 40 lksecappbak 11010304 256 Key master 41 cmnlib 11010560 2048 Common lib 42 cmnlibbak 11012608 2048 Common lib 43 cmnlib64 11014656 2048 Common lib64 44 cmnlib64bak 11016704 2048 Common lib64 45 keymaster 11018752 2048 e8b7cf6e 46 keymasterbak 11020800 2048 e8b7cf6e 47 apdp 11141120 512 APDP 48 msadp 11141632 512 MSADP 49 dpo 11142144 16 DPO 50 logdump 11142160 131072 Log dump 51 userdata 11273232 110869455 User data

09-13-2025, 01:55 PM	#38
Renate Onyx-maniac Posts: 4,062 Karma: 18027877 Join Date: Feb 2012 Device: Nook NST, Glow2, 3, 4, '21, Kobo Aura2, Poke3, Poke5, Go6	So, that works. What did you want to do? Do you know the problem or only want to install fresh?

09-13-2025, 01:59 PM	#40
tatteredscroll Connoisseur Posts: 92 Karma: 510 Join Date: Sep 2012 Device: Kindle Paperwhite Kids 2022 11th Gen (PW5)	My goal is to get back to rooted device with magisk and afwall+ and china blocks like I had before I tried to factory reset.

09-13-2025, 11:28 PM	#44
Renate Onyx-maniac Posts: 4,062 Karma: 18027877 Join Date: Feb 2012 Device: Nook NST, Glow2, 3, 4, '21, Kobo Aura2, Poke3, Poke5, Go6	Well, if you can get to recovery and ADB sideload works you can try that.