|
|
爱科技、爱创意、爱折腾、爱极致，我们都是技术控
您需要 登录 才可以下载或查看，没有账号？立即注册
x
本帖最后由 qqings 于 2023-3-11 20:19 编辑
拆机图坛子里不少，就不再发了
进入web界面，切换sim卡，输入密码admin8888，显示成功，然后就进入无线循环重启，经坛子上友人指点，是build.prop文件里屏蔽了插卡功能，然后进行如下操作：
去掉sim卡，插上电脑usb口，提示发现新网络，通过usb口链接上了设备
adb到设备7628端口
D:\Documents\Desktop\platform-tools>adb connect 192.168.100.1:7628
* daemon not running; starting now at tcp:5037
* daemon started successfully
connected to 192.168.100.1:7628
查看连接的设备，发现有2个，后者是我们要操作的
D:\Documents\Desktop\platform-tools>adb devices
List of devices attached
0123456789ABCDEF device
192.168.100.1:7628 device
切换为root登录
D:\Documents\Desktop\platform-tools>adb -s 192.168.100.1:7628 root
adbd is already running as root
查看应用列表，好多应用
D:\Documents\Desktop\platform-tools>adb -s 192.168.100.1:7628 shell pm list packages
package:com.qualcomm.fastdormancy
package:com.android.soundrecorder
package:com.qualcomm.timeservice
package:com.qualcomm.atfwd
package:com.android.launcher
package:com.android.defcontainer
package:com.qti.cbwidget
package:com.android.profile
package:com.android.phone
package:com.qualcomm.atuner
package:com.qualcomm.qces
package:com.android.proxyhandler
package:com.android.cellbroadcastreceiver
package:com.android.providers.calendar
package:com.qualcomm.logkit
package:com.qualcomm.gsmtuneaway
package:com.android.inputdevices
package:com.dsi.ant.server
package:org.codeaurora.ims
package:com.qualcomm.simcontacts
package:com.qualcomm.qti.networksetting
package:com.android.onetimeinitializer
package:com.qualcomm.shutdownlistner
package:com.android.providers.userdictionary
package:com.gd.mobicore.pa
package:com.android.documentsui
package:com.android.mms
package:com.android.provision
package:com.qualcomm.qualcommsettings
package:com.qualcomm.qti.phonefeature
package:com.android.pacprocessor
package:com.android.providers.media
package:com.android.lunar
package:com.android.certinstaller
package:android
package:com.android.settings
package:com.android.providers.contacts
package:com.android.protips
package:com.android.multisimsettings
package:com.mifiservice.hello
package:com.qualcomm.datamonitor
package:com.android.qrd.engineeringmode
package:com.android.systemui
package:com.qualcomm.interfacepermissions
package:com.android.keychain
package:com.android.smspush
package:com.android.packageinstaller
package:com.qualcomm.agpstestmode
package:com.android.providers.telephony
package:com.svox.pico
package:com.android.dialer
package:com.qualcomm.agent
package:com.android.location.fused
package:com.android.providers.settings
package:com.iwprivservice.hello
package:com.qualcomm.display
package:com.qualcomm.qti.loadcarrier
package:com.qualcomm.qcrilmsgtunnel
package:com.android.shell
package:com.android.providers.downloads
进入shell，查看system目录下文件，发现build.prop文件和build.prop.bakforspec文件，看起来后者是备份的文件
D:\Documents\Desktop\platform-tools>adb -s 192.168.100.1:7628 shell
root@msm8916_32_512:/ #
root@msm8916_32_512:/ # cd /system
root@msm8916_32_512:/system # ls
app
bin
build.prop
build.prop.bakforspec
etc
fonts
framework
lib
lost+found
media
priv-app
tts
usr
vendor
xbin
root@msm8916_32_512:/system # exit
下载两个文件到D盘
D:\Documents\Desktop\platform-tools>adb -s 192.168.100.1:7628 pull /system/build.prop d:\zzz
/system/build.prop: 1 file pu...0 MB/s (5684 bytes in 0.118s)
D:\Documents\Desktop\platform-tools>adb -s 192.168.100.1:7628 pull /system/build.prop.bakforspec d:\zzz
/system/build.prop.bakforspec...2 MB/s (5433 bytes in 0.023s)
比较两个文件内容，发现build.prop比build.prop.bakforspec多了以下几行内容，其他内容完全相同
========================
#
# Properties to overwrite (Default)
#
# disable "keep SIM alive" in LPM feature
persist.radio.apm_sim_not_pwdn=0
# enable restoring mode_pref when manual select network with rat
persist.radio.restore_mode_pref=1
persist.env.c.phone.matchnum=11
=======================
在电脑上将两文件备份，删除build.prop，将build.prop.bakforspec重命名为build.prop
进入shell，将system目录设置成可写
D:\Documents\Desktop\platform-tools>adb -s 192.168.100.1:7628 shell
root@msm8916_32_512:/ # mount -o remount,rw /system
root@msm8916_32_512:/ # exit
将build.prop文件上传至system目录（其实就是build.prop.bakforspec文件）
D:\Documents\Desktop\platform-tools>adb -s 192.168.100.1:7628 push d:\zzz\build.prop system/
d:\zzz\build.prop: 1 file pus...6 MB/s (5433 bytes in 0.001s)
然后重启，就变砖了，红灯一直亮，不能启动，也不能连接，那么还有什么办法值得抢救一下呢。
===========================================================
问题找到了
注意在以上操作后，不能直接重启，还需要修改build.prop的权限，否则重启后就会变砖
继续执行以下操作
adb shell chmod 644 system/build.prop
然后重启，即可正常启动。
然而重启后仍然是换自己卡就会无限重启，没有办法了。。。
|
|
IP归属地
雷达卡
发表于 2023-3-11 17:34:33
提帖卡
置顶卡
锁帖卡
解锁卡
显目卡
千斤顶
楼主
这么说来，还是不能用自己的卡？？？
