Newbie with a problem

[aliolik]

Hi every one!

It is my first post in here. I have spent last week trying to recover data from my eReader (Onyx Boox Note Air). I took it from my nightstand one night and I was surprised with this message:

"Android Recovery
ONYX/NoteAir/NoteAir
10/2023-12-12_21-240_3.5_4687b1901/12699
user/dev-keys
Use volume up/down and power
Can't load Android system. Your data may be corrupt. If you continue to get this message, you may need to perform a factory reset and erase all user data stored on this device"

An i started my investigation process to recover my data (there are some important notes in my device)

First, I found that there is an edl mode. I have been able to connect via edl 9008 mode somehow, indeed, there it is the prompt of the command printgpt:

python3 edl printgpt --loader=prog_emmc_ufs_firehose_Sdm636_ddr/prog_emmc_ufs_firehose_Sdm636_ddr.elf --memory=emmc
Qualcomm Sahara / Firehose Client V3.62 (c) B.Kerler 2018-2024.
main - Using loader prog_emmc_ufs_firehose_Sdm636_ddr/prog_emmc_ufs_firehose_Sdm636_ddr.elf ...
main - Waiting for the device
main - Device detected :)
sahara - Protocol version: 2, Version supported: 1
main - Mode detected: sahara
sahara - 
Version 0x2
------------------------
HWID:              0x000cc0e100000000 (MSM_ID:0x000cc0e1,OEM_ID:0x0000,MODEL_ID:0x0000)
CPU detected:      "SDM636"
PK_HASH:           0x7be49b72f9e4337223ccb84d6eccca4e61ce16e3602ac2008cb18b75babe6d09
Serial:            0x9f3fbbd8

sahara - Protocol version: 2, Version supported: 1
sahara - Uploading loader prog_emmc_ufs_firehose_Sdm636_ddr/prog_emmc_ufs_firehose_Sdm636_ddr.elf ...
sahara - 64-Bit mode detected.
sahara - Firehose mode detected, uploading...
sahara - Loader successfully uploaded.
main - Trying to connect to firehose loader ...
firehose
firehose - [LIB]: !DEBUG! rsp.data: 'bytearray(b'<?xml version="1.0" encoding="UTF-8" ?>\n<data>\n<log value="Binary build date: Oct 31 2017 @ 11:17:46"/>\n</data><?xml version="1.0" encoding="UTF-8" ?>\n<data>\n<log value="Chip serial num: 4294967295 (0xffffffff)"/>\n</data><?xml version="1.0" encoding="UTF-8" ?>\n<data>\n<log value="Supported Functions: program configure nop firmwarewrite patch setbootablestoragedrive ufs emmc power benchmark read getstorageinfo getsha256digest erase peek poke "/>\n</data>')'
firehose - TargetName=MSM8996
firehose - MemoryName=eMMC
firehose - Version=1
firehose - Trying to read first storage sector...
firehose - Running configure...
firehose - Storage report:
firehose - total_blocks:61071360
firehose - block_size:512
firehose - page_size:512
firehose - num_physical:4
firehose - manufacturer_id:21
firehose - serial_num:1804524707
firehose - fw_version:9
firehose - mem_type:eMMC
firehose - prod_name:DX68MB
firehose_client - Supported functions:

So I can confirm that i can activate that edl mode just by pressing the power button. I cannot use adb, my device does not have developer settings on, and i havent been able to use an edl cable to force edl mode.

Other option would be to try to reconstruct the os partitions via flashboot, but i dont have the firmware and I cant find it.

I know two power button patterns:

EDL 900e mode: press for 20", then wait 2", then press 5 times
Recovery mode: press until the led goes on, then release, then press for 7", then release and press 5 times

Maybe some of you knows the pattern for EDL 9008

Ah, and i have tried to contact support and looked for the firmware online already

Thank you for your help!!

[Renate]

This is the latest update for this:

Model:  NoteAir (English)
Finger: ONYX/NoteAir/NoteAir:10/2023-12-12_21-24_3.5_4687b1901/12699:user/dev-keys
Link:   http://firmware-us.boox.com/6859d1b33b0669ee377ebdcc1c20c7c5/update.upx
Size:   1,707,033,746
MD5:    6859d1b33b0669ee377ebdcc1c20c7c5

You can try decrypting this update with DeBooxUpx (google it) and then in recovery:

adb sideload update.zip

All your button presses are basically "power switch five times after reset" to get to recovery.
If you do a normal reset it will try to hit the normal system (and presumably fail).