How to Root the Onyx Boox Note Air 2 Plus (Windows)

[Renate]

Originally Posted by sleepyy

adb reboot bootloader
fastboot reboot fastboot

You're going around in circles a bit.
"adb reboot bootloader" brings you to the abl with fastboot and a blank screen
"adb reboot fastboot" brings you to recovery with fastbootd and a menu
"adb reboot edl" is what I mostly use these days.

The NoteAir2[Plus] uses the SDM662 chip. The Firehose loader is:
https://github.com/bkerler/Loaders/b...4665_FHPRG.bin

Edit: Oops, I meant 2.

[sleepyy]

Originally Posted by Renate

You're going around in circles a bit.
"adb reboot bootloader" brings you to the abl with fastboot and a blank screen
"adb reboot fastboot" brings you to recovery with fastbootd and a menu
"adb reboot edl" is what I mostly use these days.

The NoteAir3[Plus] uses the SDM662 chip. The Firehose loader is:
https://github.com/bkerler/Loaders/b...4665_FHPRG.bin

Thanks for your reply, I spent some more time lurking around (and finally read the documentation your EDL tool ) and got a (better) handle of things. I managed to flash my device without anything blowing up with the following commands (and for reference to anyone else stumbling upon this thread, the steps below replace Chitter's guide at section 'Flash the Patched Boot Image', Step 5):

adb reboot edl
edl.exe /l0014d0e100000000_d40eee56f3194665_FHPRG.bin

(Optional): For every LUN (which you can check with edl.exe /u /g), do a backup (possibly superfluous, but just to be safe). In my case, that was:
edl.exe /u0 /r u0.img
edl.exe /u1 /r u1.img
edl.exe /u2 /r u2.img
edl.exe /u3 /r u3.img
edl.exe /u4 /r u4.img
edl.exe /u4 /r u5.img

Then, the moment of truth:

edl.exe /u /w /pboot_a <you modified boot image>.img
edl.exe /z

[Renate]

Once you know what you're doing you can combine a few operations in a single line.
This can be helpful when reading or writing big chunks or the entire flash.
Putting the /z on the same line will cause it to reboot when done.
Then you can hear the disconnect and know that it's done when doing something else.

edl /lpoke5.bin /r backup.img /z