|
本帖最后由 qqings 于 2023-3-11 20:19 编辑
拆机图坛子里不少,就不再发了
进入web界面,切换sim卡,输入密码admin8888,显示成功,然后就进入无线循环重启,经坛子上友人指点,是build.prop文件里屏蔽了插卡功能,然后进行如下操作:
去掉sim卡,插上电脑usb口,提示发现新网络,通过usb口链接上了设备
adb到设备7628端口
D:\Documents\Desktop\platform-tools>adb connect 192.168.100.1:7628
* daemon not running; starting now at tcp:5037
* daemon started successfully
connected to 192.168.100.1:7628
查看连接的设备,发现有2个,后者是我们要操作的
D:\Documents\Desktop\platform-tools>adb devices
List of devices attached
0123456789ABCDEF device
192.168.100.1:7628 device
切换为root登录
D:\Documents\Desktop\platform-tools>adb -s 192.168.100.1:7628 root
adbd is already running as root
查看应用列表,好多应用
D:\Documents\Desktop\platform-tools>adb -s 192.168.100.1:7628 shell pm list packages
package:com.qualcomm.fastdormancy
package:com.android.soundrecorder
package:com.qualcomm.timeservice
package:com.qualcomm.atfwd
package:com.android.launcher
package:com.android.defcontainer
package:com.qti.cbwidget
package:com.android.profile
package:com.android.phone
package:com.qualcomm.atuner
package:com.qualcomm.qces
package:com.android.proxyhandler
package:com.android.cellbroadcastreceiver
package:com.android.providers.calendar
package:com.qualcomm.logkit
package:com.qualcomm.gsmtuneaway
package:com.android.inputdevices
package:com.dsi.ant.server
package:org.codeaurora.ims
package:com.qualcomm.simcontacts
package:com.qualcomm.qti.networksetting
package:com.android.onetimeinitializer
package:com.qualcomm.shutdownlistner
package:com.android.providers.userdictionary
package:com.gd.mobicore.pa
package:com.android.documentsui
package:com.android.mms
package:com.android.provision
package:com.qualcomm.qualcommsettings
package:com.qualcomm.qti.phonefeature
package:com.android.pacprocessor
package:com.android.providers.media
package:com.android.lunar
package:com.android.certinstaller
package:android
package:com.android.settings
package:com.android.providers.contacts
package:com.android.protips
package:com.android.multisimsettings
package:com.mifiservice.hello
package:com.qualcomm.datamonitor
package:com.android.qrd.engineeringmode
package:com.android.systemui
package:com.qualcomm.interfacepermissions
package:com.android.keychain
package:com.android.smspush
package:com.android.packageinstaller
package:com.qualcomm.agpstestmode
package:com.android.providers.telephony
package:com.svox.pico
package:com.android.dialer
package:com.qualcomm.agent
package:com.android.location.fused
package:com.android.providers.settings
package:com.iwprivservice.hello
package:com.qualcomm.display
package:com.qualcomm.qti.loadcarrier
package:com.qualcomm.qcrilmsgtunnel
package:com.android.shell
package:com.android.providers.downloads
进入shell,查看system目录下文件,发现build.prop文件和build.prop.bakforspec文件,看起来后者是备份的文件
D:\Documents\Desktop\platform-tools>adb -s 192.168.100.1:7628 shell
root@msm8916_32_512:/ #
root@msm8916_32_512:/ # cd /system
root@msm8916_32_512:/system # ls
app
bin
build.prop
build.prop.bakforspec
etc
fonts
framework
lib
lost+found
media
priv-app
tts
usr
vendor
xbin
root@msm8916_32_512:/system # exit
下载两个文件到D盘
D:\Documents\Desktop\platform-tools>adb -s 192.168.100.1:7628 pull /system/build.prop d:\zzz
/system/build.prop: 1 file pu...0 MB/s (5684 bytes in 0.118s)
D:\Documents\Desktop\platform-tools>adb -s 192.168.100.1:7628 pull /system/build.prop.bakforspec d:\zzz
/system/build.prop.bakforspec...2 MB/s (5433 bytes in 0.023s)
比较两个文件内容,发现build.prop比build.prop.bakforspec多了以下几行内容,其他内容完全相同
========================
#
# Properties to overwrite (Default)
#
# disable "keep SIM alive" in LPM feature
persist.radio.apm_sim_not_pwdn=0
# enable restoring mode_pref when manual select network with rat
persist.radio.restore_mode_pref=1
persist.env.c.phone.matchnum=11
=======================
在电脑上将两文件备份,删除build.prop,将build.prop.bakforspec重命名为build.prop
进入shell,将system目录设置成可写
D:\Documents\Desktop\platform-tools>adb -s 192.168.100.1:7628 shell
root@msm8916_32_512:/ # mount -o remount,rw /system
root@msm8916_32_512:/ # exit
将build.prop文件上传至system目录(其实就是build.prop.bakforspec文件)
D:\Documents\Desktop\platform-tools>adb -s 192.168.100.1:7628 push d:\zzz\build.prop system/
d:\zzz\build.prop: 1 file pus...6 MB/s (5433 bytes in 0.001s)
然后重启,就变砖了,红灯一直亮,不能启动,也不能连接,那么还有什么办法值得抢救一下呢。
===========================================================
问题找到了
注意在以上操作后,不能直接重启,还需要修改build.prop的权限,否则重启后就会变砖
继续执行以下操作
adb shell chmod 644 system/build.prop
然后重启,即可正常启动。
然而重启后仍然是换自己卡就会无限重启,没有办法了。。。
|
本帖子中包含更多资源
您需要 登录 才可以下载或查看,没有账号?立即注册
x
|