hs8546V的恢复出厂命令（restorehwmode.sh）分析

happyhack

hs8546V的恢复出厂命令（restorehwmode.sh）分析

如下restorehwmode.sh这个命令的全部内容

1. #! /bin/sh
   
2. 
   
3. #set hw parameters
   
4. #copy etc/wap/hw_default_ctree.xml to /mnt/jffs2/hw_ctree.xml
   
5. #set the spec para
   
6. 
   
7. var_default_ctree=/mnt/jffs2/hw_default_ctree.xml;
   
8. var_ctree=/mnt/jffs2/hw_ctree.xml
   
9. var_customize=/mnt/jffs2/customizepara.txt
   
10. var_bms_prevxml_temp="/mnt/jffs2/hw_bms_prev.xml"
    
11. var_bms_oldcrc_temp="/mnt/jffs2/oldcrc"
    
12. var_bms_oltoldcrc_temp="/mnt/jffs2/oltoldcrc"
    
13. var_bms_prevcrc_temp="/mnt/jffs2/prevcrc"
    
14. var_bms_oltprevcrc_temp="/mnt/jffs2/oltprevcrc"
    
15. var_bms_oskvoice_temp="/mnt/jffs2/hw_osk_voip_prev.xml"
    
16. var_rebootsave="/mnt/jffs2/cwmp_rebootsave"
    
17. var_recovername_temp="/mnt/jffs2/recovername"
    
18. var_usr_device_temp="/mnt/jffs2/usr_device.bin"
    
19. var_ftcrc_temp="/mnt/jffs2/FTCRC"
    
20. var_ftvoip_temp="/mnt/jffs2/ftvoipcfgstate"
    
21. var_dhcp_temp="/mnt/jffs2/dhcpc"
    
22. var_dhcp6_temp="/mnt/jffs2/dhcp6c"
    
23. var_DHCPlasterrwan1_temp="/mnt/jffs2/DHCPlasterrwan1"
    
24. var_DHCPlasterrwan2_temp="/mnt/jffs2/DHCPlasterrwan2"
    
25. var_DHCPlasterrwan3_temp="/mnt/jffs2/DHCPlasterrwan3"
    
26. var_DHCPlasterrwan4_temp="/mnt/jffs2/DHCPlasterrwan4"
    
27. var_DHCPstatewan1_temp="/mnt/jffs2/DHCPstatewan1"
    
28. var_DHCPstatewan2_temp="/mnt/jffs2/DHCPstatewan2"
    
29. var_DHCPstatewan3_temp="/mnt/jffs2/DHCPstatewan3"
    
30. var_DHCPstatewan4_temp="/mnt/jffs2/DHCPstatewan4"
    
31. var_DHCPoutputwan1_temp="/mnt/jffs2/DHCPoutputwan1"
    
32. var_boardinfo_file="/mnt/jffs2/hw_boardinfo"
    
33. var_boardinfo_bakfile="/mnt/jffs2/hw_boardinfo.bak"
    
34. var_boardinfo_temp="/mnt/jffs2/hw_boardinfo.temp"
    
35. var_jffs2_customize_txt_file="/mnt/jffs2/customize.txt"
    
36. var_jffs2_choose_xml_dir="/mnt/jffs2/choose_xml"
    
37. var_jffs2_choose_xml_tar="/mnt/jffs2/choose_xml.tar.gz"
    
38. var_jffs2_spec_file="/mnt/jffs2/hw_hardinfo_spec"
    
39. var_jffs2_spec_bak_file="/mnt/jffs2/hw_hardinfo_spec.bak"
    
40. var_jffs2_feature_file="/mnt/jffs2/hw_hardinfo_feature"
    
41. var_jffs2_feature_bak_file="/mnt/jffs2/hw_hardinfo_feature.bak"
    
42. var_jffs2_hardinfo_para_file="/mnt/jffs2/hw_equip_hardinfo"
    
43. var_ontfirstonline_temp="/mnt/jffs2/ontfirstonlinefile"
    
44. var_dublecore="/mnt/jffs2/doublecore"
    
45. var_customize_telmex=/mnt/jffs2/TelmexCusomizePara
    
46. var_customize_dir="/mnt/jffs2/customize"
    
47. var_smartshowbssguide="/mnt/jffs2/smartshowbssguide"
    
48. var_smartshowuserguide="/mnt/jffs2/smartshowuserguide"
    
49. var_old_ctree="/mnt/jffs2/hw_old_ctree.xml"
    
50. var_ctree_bak="/mnt/jffs2/hw_ctree_bak.xml"
    
51. var_cfgbackup="/mnt/jffs2/CfgFile_Backup"
    
52. var_PrimaryDir="/mnt/jffs2/PrimaryDir"
    
53. var_p2p_dhcp_file="/mnt/jffs2/p2pdhcpboot_prev.ini"
    
54. var_jffs2_hardversion_bak_file="/mnt/jffs2/hw_boardinfo.bak"
    
55. var_jffs2_specsn_file="/mnt/jffs2/customize_specsn"
    
56. 
    
57. var_plat_root="/mnt/jffs2/platroot.crt"
    
58. var_plat_pub="/mnt/jffs2/platpub.crt"
    
59. var_plat_prvt="/mnt/jffs2/platprvt.key"
    
60. 
    
61. # remove plugin files
    
62. HW_Script_RemovePluginFile()
    
63. {
    
64.         #通过特性开关来决定删除哪些插件
    
65.         var_feature_enble=`GetFeature HW_FT_OSGI_JVM_FROM_VAR`
    
66.         if [ $var_feature_enble = 1 ];then
    
67.                 rm  -rf /mnt/jffs2/app/osgi/felix-cache;
    
68.         rm  -f /mnt/jffs2/app/osgi/prebundlestatus.info;
    
69.         rm  -f /mnt/jffs2/app/osgi/dlna.jar;
    
70.         rm  -f /mnt/jffs2/app/osgi/samba.jar;
    
71.         else
    
72.                 rm  -rf /mnt/jffs2/app/osgi/* ;
    
73.         fi
    
74.         rm -rf  /mnt/jffs2/app/cplugin/* /var/cplugin/*;
    
75. }
    
76. 
    
77. # remove files
    
78. HW_Script_RemoveFile()
    
79. {
    
80.         rm -f $var_default_ctree
    
81.         rm -f $var_ctree
    
82.         rm -f $var_customize
    
83.         rm -f $var_bms_prevxml_temp
    
84.         rm -f $var_bms_oldcrc_temp
    
85.         rm -f $var_bms_oltoldcrc_temp
    
86.         rm -f $var_bms_prevcrc_temp
    
87.         rm -f $var_bms_oltprevcrc_temp
    
88.         rm -f $var_bms_oskvoice_temp
    
89.         rm -f $var_rebootsave
    
90.         rm -f $var_recovername_temp
    
91.         rm -f $var_usr_device_temp
    
92.         rm -rf $var_ftcrc_temp
    
93.         rm -rf $var_ftvoip_temp
    
94.         rm -rf $var_dhcp_temp
    
95.         rm -rf $var_dhcp6_temp
    
96.         rm -rf $var_DHCPlasterrwan1_temp
    
97.         rm -rf $var_DHCPlasterrwan2_temp
    
98.         rm -rf $var_DHCPlasterrwan3_temp
    
99.         rm -rf $var_DHCPlasterrwan4_temp
    
100.         rm -rf $var_DHCPstatewan1_temp
     
101.         rm -rf $var_DHCPstatewan2_temp
     
102.         rm -rf $var_DHCPstatewan3_temp
     
103.         rm -rf $var_DHCPstatewan4_temp
     
104.         rm -rf $var_DHCPoutputwan1_temp
     
105.         rm -rf $var_jffs2_customize_txt_file
     
106.         rm -rf $var_jffs2_choose_xml_dir
     
107.         rm -f $var_jffs2_choose_xml_tar
     
108.         rm -fr $var_jffs2_spec_file
     
109.         rm -fr $var_jffs2_spec_bak_file
     
110.         rm -fr $var_jffs2_feature_file
     
111.         rm -fr $var_jffs2_feature_bak_file
     
112.         rm -fr $var_jffs2_hardinfo_para_file
     
113.         rm -fr $var_ontfirstonline_temp
     
114.         rm -f $var_dublecore
     
115.         rm -f /mnt/jffs2/simcard_flowflag
     
116.         rm -f /mnt/jffs2/simcardreadflag
     
117.         rm -f /mnt/jffs2/typeword
     
118.         rm -f $var_customize_telmex
     
119.         rm -rf $var_customize_dir
     
120.         rm -f $var_smartshowbssguide
     
121.         rm -rf $var_smartshowuserguide
     
122.         rm -fr $var_old_ctree
     
123.         rm -fr $var_ctree_bak
     
124.         rm -fr $var_cfgbackup
     
125.         rm -f $var_jffs2_hardversion_bak_file
     
126.         rm -rf $var_PrimaryDir
     
127.         rm -rf /mnt/jffs2/p2ploadcfgdone
     
128.         rm -rf /mnt/jffs2/dhcp6c
     
129.     rm -rf /mnt/jffs2/dhcpc
     
130.         rm -rf /mnt/jffs2/onlinecounter
     
131.         rm -rf $var_jffs2_specsn_file
     
132.         rm -rf /mnt/jffs2/reboot_bind_tag
     
133.         rm -rf $var_p2p_dhcp_file
     
134.                
     
135.         rm  -rf /mnt/jffs2/app/osgi/*
     
136.         rm  -rf /mnt/jffs2/app/cplugin/*
     
137.        
     
138.         rm -f /mnt/jffs2/smooth_finsh
     
139.         rm -f /mnt/jffs2/gdstbmac.bin
     
140.        
     
141.         rm -f $var_plat_root
     
142.         rm -f $var_plat_pub
     
143.         rm -f $var_plat_prvt
     
144. 
     
145.         HW_Script_RemovePluginFile
     
146.         return
     
147. }
     
148. 
     
149. #creat files
     
150. HW_Script_CreateFile()
     
151. {
     
152.         var_telnet_flag=/mnt/jffs2/ProductLineMode
     
153. 
     
154.         echo "" > $var_telnet_flag
     
155.         if [ 0 -ne $? ]
     
156.         then
     
157.         {
     
158.                 echo "ERROR::Failed to create telnet flag!"
     
159.         return 1
     
160.         }
     
161.         fi
     
162. 
     
163.         return 0
     
164. }
     
165. 
     
166. # copy files
     
167. HW_Script_CopyFile()
     
168. {
     
169.         var_etc_def=/etc/wap/hw_default_ctree.xml
     
170.        
     
171.         #增加延时，确保DB不保存
     
172.         echo > /var/notsavedata
     
173.         sleep 1
     
174. 
     
175.         cp -f $var_etc_def $var_ctree
     
176.         if [ 0 -ne $? ]
     
177.         then
     
178.                 rm -rf /var/notsavedata
     
179.                 echo "ERROR::Failed to cp hw_default_ctree.xml to hw_ctree.xml!"
     
180.                 return 1
     
181.         fi
     
182. 
     
183.         return
     
184. }
     
185. 
     
186. # set spec data
     
187. HW_Script_SetData()
     
188. {
     
189.         cat $var_boardinfo_file | while read -r line;
     
190.         do
     
191.                 obj_id_temp=`echo $line | sed 's/\(.*\)obj.value\(.*\)/\1/g'`
     
192.                 obj_id=`echo $obj_id_temp | sed 's/\(.*\)"\(.*\)"\(.*\)/\2/g'`
     
193. 
     
194.                 if [ "0x00000003" == $obj_id ];then
     
195.                         echo "obj.id = "0x00000003" ; obj.value = "";"
     
196.                 elif [ "0x00000004" == $obj_id ];then
     
197.                         echo "obj.id = "0x00000004" ; obj.value = "";"
     
198.                 elif [ "0x00000005" == $obj_id ];then
     
199.                         echo "obj.id = "0x00000005" ; obj.value = "";"
     
200.                 elif [ "0x00000006" == $obj_id ];then
     
201.                         echo "obj.id = "0x00000006" ; obj.value = "";"
     
202.                 elif [ "0x00000016" == $obj_id ];then
     
203.                         echo "obj.id = "0x00000016" ; obj.value = "";"
     
204.                 elif [ "0x0000001a" == $obj_id ];then
     
205.                         echo "obj.id = "0x0000001a" ; obj.value = "COMMON";"
     
206.                 elif [ "0x0000001b" == $obj_id ];then
     
207.                         echo "obj.id = "0x0000001b" ; obj.value = "COMMON";"
     
208.                 elif [ "0x00000019" == $obj_id ];then
     
209.                         echo "obj.id = "0x00000019" ; obj.value = "";"
     
210.                 elif [ "0x00000020" == $obj_id ];then
     
211.                         echo "obj.id = "0x00000020" ; obj.value = "";"
     
212.                 elif [ "0x00000031" == $obj_id ];then
     
213.                         echo "obj.id = "0x00000031" ; obj.value = "NOCHOOSE";"
     
214.                 elif [ "0x00000035" == $obj_id ];then
     
215.                         echo "obj.id = "0x00000035" ; obj.value = "";"
     
216.                 elif [ "0x0000003a" == $obj_id ];then
     
217.                         echo "obj.id = "0x0000003a" ; obj.value = "";"
     
218.                 else
     
219.                         echo -E $line
     
220.                 fi
     
221.         done  > $var_boardinfo_temp
     
222. 
     
223.         mv -f $var_boardinfo_temp $var_boardinfo_file
     
224. 
     
225.         return
     
226. }
     
227. 
     
228. # 刷新boardinfo文件的crc行
     
229. HW_Customize_ValidateBoardinfoCRC()
     
230. {
     
231.         if [ -z $1 ]; then
     
232.                 return 0
     
233.         fi
     
234.         if [ -x /bin/factparam ]; then
     
235.                 /bin/factparam -v $1
     
236.                 if [ 0 -ne $? ]; then
     
237.                         echo "ERROR::Failed to validate boardinfo crc on $1!"
     
238.                         return 1
     
239.                 fi
     
240.         fi
     
241. }
     
242. 
     
243. # 清除出厂参数备份
     
244. HW_Customize_ClearFactoryParamsBackup()
     
245. {
     
246.         if [ -x /bin/factparam ]; then
     
247.                 /bin/factparam -e reserved
     
248.                 if [ 0 -ne $? ]; then
     
249.                         echo "ERROR::Failed to clear factory parameter backup area!"
     
250.                         return 1
     
251.                 fi
     
252.         fi
     
253. }
     
254. 
     
255. if [ 0 -ne $# ]; then
     
256.         echo "ERROR::input para is not right!";
     
257.         exit 1;
     
258. else
     
259. HW_Script_CreateFile
     
260. [ ! $? == 0 ] && exit 1
     
261. 
     
262. HW_Script_RemoveFile
     
263. [ ! $? == 0 ] && exit 1
     
264. 
     
265. HW_Script_CopyFile
     
266. [ ! $? == 0 ] && exit 1
     
267. 
     
268. HW_Script_SetData
     
269. [ ! $? == 0 ] && exit 1
     
270. 
     
271. rm -rf $var_boardinfo_bakfile
     
272. 
     
273. ctrg_support=`GetFeature HW_SSMP_FEATURE_CTRG`
     
274. if [ $ctrg_support = 1 ] ;then
     
275.         dbus-send --system --print-reply --dest=com.ctc.saf1 /com/ctc/saf1 com.ctc.saf1.framework.Restore > /dev/null
     
276. fi
     
277. 
     
278. # 必须刷新boardinfo文件的crc行，并且清除reserved分区的出厂参数备份
     
279. HW_Customize_ValidateBoardinfoCRC $var_boardinfo_file
     
280. [ ! $? == 0 ] && exit 1
     
281. HW_Customize_ClearFactoryParamsBackup
     
282. [ ! $? == 0 ] && exit 1
     
283. 
     
284. echo "success!"
     
285. 
     
286. exit 0
     
287. fi
     

复制代码

第一部分的etc/wap/hw_default_ctree.xml ，文件附后，

hw_default_ctree.xml这个文件也就是恢复命令后jffs2下的hw_ctree.xml文件，内容大家可以参考下


中间部分的含义见https://www.chinadsl.net/thread-131336-1-2.html，也就是hw_boardinfo文件内容

至于jffs2/app的内容，恢复命令后删除，直接删除app数据

这也就是为什么使用命令后，大家手机上使用天翼网关app不能连接光猫的原因


至于其他内容，欢迎各位继续探讨   

happyhack

restorehwmode.sh打包附后，


大家看下，个人猜测这个应该是跟手机app控制光猫的一些文件

ligang667

这个是不是要破解才能用的？

wzyf

技术贴，谢谢，学习了

pillhe

值得拥有。。。。

pillhe

技术学习了

mimmm

专门学习的，楼主辛苦！

hallos

谢谢，楼主无私的分享你宝贵的经验，顺便来赚个猫粮

zhanzuoson

专门学习的，楼主辛苦！

ahy1

感谢lz的分享