crack.sh

#!/bin/bash

version="r30"
update="r30 完善手动修改更新包步骤\nr29 重新启用手动更新功能，更新后保留破解（测试）\nr28 停止更新，移除更新包安装功能\nr27 修复，加入更多方案\nr26 修复新方案(可能仍有问题)，增加彩蛋(6)\nr25 测试新方案，降低失败率\nr24 增加自动破解方案，以修复部分Linux Distro adb的兼容性问题\nr23 修复apk识别和程序输出问题"

home=$(cd `dirname $0`; pwd)
chmod -R 777 $home
mv $home/log $home/log.last

if [[ $1 == "-debug" ]]; then
  logging=1
fi

function pause()
{
  if [ $1 ]; then
    read -n 1 -p "$1"
  else
    read -n 1 -p "按任意键继续"
  fi
}

function warning()
{
  echo -e "\033[41;37m$*\033[0m"
}

function log()
{
  if [ $logging ]; then
    time=`date "+%Y-%m-%d %H:%M:%S"`
    #8进制识别fix: 10#string
    time_ns=$((10#`date "+%N"`))
    time_us=$((10#$time_ns / 1000))
    time_us_formatted=" "`printf "%06d\n" $time_us`
    time_formatted=${time}${time_us_formatted}
    echo "$time_formatted  $*"
  fi
  echo "$time_formatted    $*" >> $home/log
}

function stage()
{
  echo ""
  echo "第 $1 阶段: $2"
  echo ""
  log "========== 阶段 $1 : $2 =========="
}

function init()
{
  echo "正在检测环境……"
  issue=`cat /etc/issue`
  adb_exec=`which adb`
  if [[ ${issue:0:6} != "Ubuntu" ]]; then
    warning "当前使用的系统不是Ubuntu，可能不受支持"
    log "当前使用的系统不是Ubuntu"
    pause
  fi
  echo ""
  echo "本程序需要 adb bspatch zip unzip 二进制文件"
  echo ""
  if [[ ${adb_exec:0:1} != "/" ]]; then
    warning "未检测到adb程序"
    log "未检测到adb程序"
    if [[ ${issue:0:6} == "Ubuntu" ]]; then
      pause "按任意键执行安装，可能需要输入密码"
      log "正在安装adb程序"
      sudo apt-get update
      sudo apt-get install adb bspatch zip unzip
      init
      return
    else
      warning "请安装adb后再执行本程序"
      pause "按任意键退出"
      log "未安装adb，退出"
      exit
    fi
  fi
  
  echo ""
  
  WSL=$(echo `uname -a` | grep -o "Microsoft" | wc -l)
  if [ $WSL -ge "1" ]; then
    log "使用WSL子系统"
    echo "检测到使用 Windows 10 Linux 子系统"
    warning "请安装 Windows 的 adb 驱动，打开对应版本的 adb 程序"
    echo "所需adb版本: " `adb version | head -1`
    echo "Windows中命令行操作如下:"
    echo "adb kill-server"
    echo "adb start-server"
    echo "完成后不要关闭Windows的adb"
    pause
    adb start-server
    
    data_dir="/mnt/c/iReader-Crack"
    echo_dir="Windows 系统 C:\\iReader-Crack\\"
    
    echo ""
    adb_error=`adb get-state 2>&1 > /dev/null` # 2>&1 stderr过滤器
    if [[ $adb_error ]]; then
      warning "请检查 WSL 子系统 与 Windows 的 adb 连接"
      echo "可能需要将 adb 程序放入 C:\\Windows\\SysWOW64 或 C:\\Windows\\System32"
      log `adb get-state`
      echo "程序检测到错误，即将退出……"
      sleep 5
      exit
    fi
  else
    echo "初始化adb……"
    log "初始化adb"
    adb kill-server
    adb start-server
    
    data_dir="$home/data"
    echo_dir=$data_dir
  fi
  
  bspatch_exec=`which bspatch`
  if [[ ${bspatch_exec:0:1} != "/" ]]; then
    warning "未检测到 bspatch 程序"
    log "未检测到 bspatch 程序"
    if [[ ${issue:0:6} == "Ubuntu" ]]; then
      pause "按任意键执行安装，可能需要输入密码"
      log "正在安装 bspatch 程序"
      sudo apt-get update
      sudo apt-get install bspatch zip unzip
      init
      return
    else
      warning "请安装 bspatch 后再执行本程序"
      pause "按任意键退出"
      log "未安装bspatch，退出"
      exit
    fi
  fi
  
  zip_exec=`which zip`
  if [[ ${zip_exec:0:1} != "/" ]]; then
    warning "未检测到 zip 程序"
    log "未检测到 zip 程序"
    if [[ ${issue:0:6} == "Ubuntu" ]]; then
      pause "按任意键执行安装，可能需要输入密码"
      log "正在安装 zip 程序"
      sudo apt-get update
      sudo apt-get install zip unzip
      init
      return
    else
      warning "请安装 zip 后再执行本程序"
      pause "按任意键退出"
      log "未安装zip，退出"
      exit
    fi
  fi

  unzip_exec=`which unzip`
  if [[ ${unzip_exec:0:1} != "/" ]]; then
    warning "未检测到 unzip 程序"
    log "未检测到 unzip 程序"
    if [[ ${issue:0:6} == "Ubuntu" ]]; then
      pause "按任意键执行安装，可能需要输入密码"
      log "正在安装 unzip 程序"
      sudo apt-get update
      sudo apt-get install unzip
      init
      return
    else
      warning "请安装 unzip 后再执行本程序"
      pause "按任意键退出"
      log "未安装unzip，退出"
      exit
    fi
  fi
}

function adb_state()
{
  # unknown:0 device:1 recovery:2
  state=`adb devices 2> /dev/null`
  [[ $logging == 1 ]] && adb devices
  if [ $(echo "$state" | grep -o "device" | wc -l) -ge "2" ]; then
    return 1
  elif [[ $(echo "$state" | grep "recovery") != "" ]]; then
    return 2
  else
    return 0
  fi
}

function adb_state_2()
{
  # adb 状态检测 旧版
  # unknown:0 device:1 recovery:2
  state=`adb get-state 2> /dev/null`
  if [[ $state == "device" ]]; then
    return 1
  elif [[ $state == "recovery" ]]; then
    return 2
  else
    return 0
  fi
}

function recovery()
{
  log "复制Recovery所需文件"
  adb push $home/crack/bin /system/bin/
  adb push $home/crack/lib /system/lib/
  adb shell "/system/bin/mount -t ext4 /dev/block/mmcblk0p5 /system"
  log "挂载 /system 成功"
  adb shell "echo 'persist.service.adb.enable=1' >> /system/build.prop"
  adb shell "echo 'persist.service.debuggable=1' >> /system/build.prop"
  adb shell "echo 'persist.sys.usb.config=mtp,adb' >> /system/build.prop"
  adb shell "echo 'ro.secure=0' >> /system/build.prop"
  adb shell "echo 'ro.adb.secure=0' >> /system/build.prop"
  adb shell "echo 'ro.debuggable=1' >> /system/build.prop"
  log "修改Build.prop成功"
}

function enable_adb()
{
  log "启动期间强制开启adb"
  start=`date +%s`
  while true
  do
    adb shell "echo 'mtp,adb' > /data/property/persist.sys.usb.config" 2> /dev/null
    adb shell "echo '1' > /data/property/persist.service.adb.enable" 2> /dev/null
    dif=`expr $(date +%s) - "$start"`
    if [ "$dif" -gt "60" ]; then
      break
    fi
  done
  #主程序会关闭adb，不得不循环破解
}

function enable_adb_2()
{
  log "启动期间强制开启adb--自动判断"
  times=1
  while true
  do
    adb_state
    if [[ $? == 0 ]]; then
      log "Connection Closed"
      break
    else
      log "Device State: $?"
    fi
    log "循环计数: $times"
    adb shell "echo 'mtp,adb' > /data/property/persist.sys.usb.config"
    adb shell "echo '1' > /data/property/persist.service.adb.enable"
    times=`expr $times + 1`
  done
  #主程序会关闭adb，不得不循环破解
}

function enable_adb_3()
{
  log "启动期间强制开启adb--chmod"
  adb shell "echo 'mtp,adb' > /data/property/persist.sys.usb.config"
  adb shell "echo '1' > /data/property/persist.service.adb.enable"
  adb shell "chmod -R 444 /data/property/persist.sys.usb.config"
  adb shell "chmod -R 444 /data/property/persist.service.adb.enable"
  adb reboot
}

function update()
{
  echo ""
  echo "正在检测更新……"
  cd $home
  git fetch --all
  git reset --hard origin/master
  git pull
  echo ""
  echo "更新完成"
  rm -rf "$home/updated"
  sleep 3
  $home/crack.sh;exit
}

function main()
{
  clear
  key=
  echo "           iReader Crack 工具箱"
  echo "                    $version"
  [[ $logging == 1 ]] && echo "               debug 已开启"
  adb_state
  if [[ $? == 1 ]]; then
    echo "              USB 调试已连接"
    echo "          当前系统版本: " `adb shell getprop ro.fota.version`
  elif [[ $? == 2 ]]; then
    echo "          已进入 Recovery 模式"
  fi
  echo ""
  echo "            1. 运行破解主程序（自动版）"
  echo ""
  echo "            2. 运行破解主程序（手动版）"
  echo ""
  echo "            3. 批量安装程序"
  echo ""
  echo "            4. 安装 root 与 Superuser"
  echo ""
  echo "            5. 手动安装更新包（保留破解）"
  echo ""
  echo "            6. 返厂彩蛋"
  echo ""
  echo "   A. 打开设置  B. 模拟返回键  C. 模拟主页键"
  echo ""
  [[ $logging != 1 ]] && echo "            D. 开启 debug 模式"
  echo ""
  echo "            E. 更新工具箱"
  echo ""
  echo "            F. 新破解方案测试（谨慎使用，可能变砖）"
  echo ""
  echo "            X. 退出"
  echo ""

  read -n 1 -p "请键入选项: " key
}

function crack()
{
  clear
  
  log "Version: "$version
  echo "     iReader 系列 阅读器 破解 手动版"
  stage "1" "使用前须知"
  
  warning "注意事项:"
  echo "1. 请确保安装好相关组件，包括adb及adb驱动"
  echo "2. 请严格按照程序提示操作，否则有可能变砖"
  echo "3. 操作前备份好用户数据(电纸书)"
  echo ""
  sleep 1
  pause
  log "已同意"
  
  stage "2" "环境检测与准备"
  adb_state
  if [[ $? != 0 ]]; then
    echo ""
    warning "已连接开启USB调试的Android设备，请移除后重试"
    log "已连接USB调试"
    log `adb devices`
    pause
    crack
  fi
  sleep 1
  
  stage "3" "进入Recovery"
  echo "请按如下步骤操作："
  echo "1. 将iReader用数据线连接至电脑"
  echo "2. 阅读器上 选择 设置-->关于本机-->恢复出厂设置"
  echo "3. 等待出现机器人标识"
  echo ""
  pause "出现机器人标识时按任意键继续"
  
  echo ""
  echo "正在复制破解文件……"
  recovery
  
  echo "等待重启……"
  log "等待重启"
  
  stage "4" "执行破解"
  echo ""
  echo "如果此步骤失败，请重新破解，在该步骤阅读器闪屏且出现 iReader 标识时立即重新插入数据线并回车"
  echo ""
  pause "显示进度条时按任意键继续"
  echo ""
  echo "预计需要1分钟，请耐心等待……"
  
  enable_adb
  
  echo ""
  echo "请手动重启阅读器"
  log "等待手动重启"
  pause "重启进阅读器界面后按任意键继续"
  
  echo ""
  adb_state
  if [[ $? == 1 ]]; then
    echo "破解成功，现可以通过adb安装程序"
    log "破解成功!"
  else
    warning "破解失败，请尝试重新破解或进行反馈"
    log "破解失败!"
    log `adb devices`
  fi
  pause "按任意键返回"
  return
}

function crack_auto()
{
  clear
  
  log "Version: "$version" Auto Approach"
  echo "     iReader 系列 阅读器 破解 自动版"
  stage "1" "使用前须知"
  
  warning "注意事项:"
  echo "1. 请确保安装好相关组件，包括adb及adb驱动"
  echo "2. 请严格按照程序提示操作，否则有可能变砖"
  echo "3. 操作前备份好用户数据(电纸书)"
  echo ""
  sleep 3
  
  stage "2" "环境检测与准备"
  adb_state
  if [[ $? != 0 ]]; then
    echo ""
    warning "已连接开启USB调试的Android设备，请移除后重试"
    log "已连接USB调试"
    log `adb devices`
    pause
    return
  fi
  sleep 1
  
  method=
  echo ""
  echo "1. 方案一（默认）"
  echo "2. 方案二"
  echo "3. 方案三（测试）"
  read -n 1 -p "请键入方案序号: " method
  log "方案: $method"
  if [[ $method != "1" && $method != "2" && $method != "3" ]]; then
    echo "输入错误，即将执行默认方案一"
    method="1"
  fi
  
  stage "3" "进入Recovery"
  echo "请按如下步骤操作："
  echo "1. 将iReader用数据线连接至电脑"
  echo "2. 阅读器上 选择 设置-->关于本机-->恢复出厂设置"
  echo "3. 等待出现机器人标识"
  echo ""
  echo "正在检测是否进入Recovery……"
  log "检测进入Recovery"
  while true
  do
    if [[ $method == "2" ]]; then
      adb_state_2
    else
      adb_state
    fi
    if [[ $? == 2 ]]; then
      log "已进入Recovery"
      break
    fi
  done
  
  echo ""
  echo "正在复制破解文件……"
  recovery
  
  echo "等待重启……"
  log "等待重启"
  
  stage "4" "执行破解"
  echo "等待系统重载……"
  echo "如果长时间停在此步骤，请重新破解，并在该步骤阅读器闪屏且出现 iReader 标识时立即重新插入数据线"
  sleep 1
  while true
  do
    if [[ $method == "2" ]]; then
      adb_state_2
    else
      adb_state
    fi
    if [[ $? == 1 ]]; then
      log "已连接上adb"
      break
    fi
  done
  
  if [[ $method == "3" ]]; then
    enable_adb_3
    echo ""
    echo "正在重启……"
    log "自动重启"
  else
    enable_adb_2
    echo ""
    warning "请手动重启阅读器，可能需要重新插入数据线"
    log "等待手动重启"
  fi
  
  pause "重启进阅读器界面后按任意键继续"
  echo ""
  if [[ $method == "2" ]]; then
      adb_state_2
  else
      adb_state
  fi
  if [[ $? == 1 ]]; then
    echo "破解成功，现可以通过adb安装程序"
    log "破解成功"
  else
    warning "破解失败，请尝试重新破解或进行反馈"
    log "破解失败"
    log `adb devices`
  fi
  pause "按任意键返回"
  return
}

function crack_test()
{
  clear
  
  log "Version: "$version" Test"
  echo "    iReader 系列 阅读器 破解 测试方案"
  stage "1" "使用前须知"
  
  warning "注意事项:"
  echo "1. 请确保安装好相关组件，包括adb及adb驱动"
  echo "2. 请严格按照程序提示操作，否则有可能变砖"
  echo "3. 操作前备份好用户数据(电纸书)"
  warning "谨慎使用，仅供测试"
  echo ""
  sleep 3
  
  pause
  
  stage "2" "环境检测与准备"
  adb_state
  if [[ $? != 0 ]]; then
    echo ""
    warning "已连接开启USB调试的Android设备，请移除后重试"
    log "已连接USB调试"
    log `adb devices`
    pause
    return
  fi
  sleep 1
  
  stage "3" "进入Recovery"
  echo "请按如下步骤操作："
  echo "1. 将iReader用数据线连接至电脑"
  echo "2. 阅读器上 选择 设置-->关于本机-->恢复出厂设置"
  echo "3. 等待出现机器人标识"
  echo ""
  echo "正在检测是否进入Recovery……"
  log "检测进入Recovery"
  while true
  do
    adb_state
    if [[ $? == 2 ]]; then
      log "已进入Recovery"
      break
    fi
  done
  
  echo ""
  echo "正在复制破解文件……"
  recovery
  
  echo ""
  echo "等待系统重载……"
  echo "如果长时间停在此步骤，请重新破解，并在该步骤阅读器闪屏且出现 iReader 标识时立即重新插入数据线"
  sleep 1
  while true
  do
    adb_state
    if [[ $? == 1 ]]; then
      log "已连接adb"
      break
    fi
  done
  
  stage "4" "进行破解"
  
  echo "正在重新进入 Recovery"
  adb reboot recovery
  sleep 3
  while true
  do
    adb_state
    if [[ $? == 2 ]]; then
      log "已进入Recovery"
      break
    fi
  done
  
  echo ""
  echo "正在执行破解……"
  
  log "复制Recovery所需文件"
  adb push $home/crack/bin /system/bin/
  adb push $home/crack/bin2/chmod /system/bin/
  adb push $home/crack/lib /system/lib/
  log "复制成功，执行破解"
  adb shell "/system/bin/mount -t ext4 /dev/block/mmcblk0p4 /data"
  adb shell "/system/bin/echo 'mtp,adb' > /data/property/persist.sys.usb.config"
  adb shell "/system/bin/echo '1' > /data/property/persist.service.adb.enable"
  adb shell "/system/bin/chmod -R 444 /data/property/persist.sys.usb.config"
  adb shell "/system/bin/chmod -R 444 /data/property/persist.service.adb.enable"
  adb reboot
  
  echo "等待重启……"
  log "等待重启"
  
  sleep 20
  
  echo ""
  pause "等待进入阅读器界面后按任意键继续"
  
  echo ""
  adb_state
  if [[ $? == 1 ]]; then
    echo "破解成功，现可以通过adb安装程序"
    log "破解成功"
  else
    warning "破解失败，请尝试重新破解或进行反馈"
    log "破解失败"
    log `adb devices`
  fi
  pause "按任意键返回"
  return
}

function install_ota()
{
  echo ""
  stage "1" "准备阶段"
  adb_state
  if [[ $? == 0 ]]; then
    warning "未破解或未连接"
    pause "按任意键返回"
    return
  fi
  echo ""
  if [ ! -d "$data_dir" ]; then
    mkdir "$data_dir"
  fi
  if [ ! -d "$data_dir/tmp" ]; then
    mkdir "$data_dir/tmp"
  fi
  echo "请根据程序提示及教程对更新包进行修改并安装"
  echo "该功能处于测试阶段，可能会产生意想不到的结果"
  sleep 3
  pause
  
  method=
  echo ""
  echo "1. 从官方获取更新包"
  echo "2. 从第三方获取或自行修改的已破解更新包"
  read -n 1 -p "请键入方案序号: " method
  log "方案: $method"
  if [[ $method != "1" && $method != "2" ]]; then
    echo "输入错误，即将执行默认方案一"
    method="1"
  fi
  
  if [[ $method == 1 ]]; then
  
  stage "2" "获取更新包"
  echo ""
  echo "打开阅读器设置->系统更新，下载更新包，但不要点击安装"
  sleep 3
  pause
  adb pull /sdcard/adupsfota/update.zip "$data_dir/update.zip"
  if [ ! -f "$data_dir/update.zip" ]; then
    echo ""
    echo "未检测到更新包，请重试"
    pause "按任意键返回"
    return
  fi
  ota_size=`du -m "$data_dir/update.zip" | awk '{print $1}'`
  if [ $ota_size -lt 150 ]; then
    echo "检测到为增量更新包"
    is_patch=true
  else
    echo "检测到为完整更新包"
    is_patch=false
    echo "暂不支持"
    pause "按任意键返回"
    return
  fi
  
  stage "3" "修改更新包"
  echo ""
  echo "正在获取原始 build.prop 文件……"
  adb pull /system/build.prop "$data_dir/tmp/build.prop"
  if [ ! -f "$data_dir/tmp/build.prop" ]; then
    echo ""
    echo "未获取到 build.prop 文件，请重试"
    pause "按任意键返回"
    return
  fi
  echo ""
  echo "正在提取更新包"
  check_md5sum=$(echo `unzip -l "$data_dir/update.zip"` | grep -o "md5sum" | wc -l)
  if [ $check_md5sum -ge "1" ]; then
    unzip "$data_dir/update.zip" "update.zip" -d "$data_dir/tmp/"
    mv "$data_dir/tmp/update.zip" "$data_dir/update.zip"
  fi
  echo ""
  echo "正在处理更新包……"
  sleep 3
  #提取updater-script
  unzip "$data_dir/update.zip" "META-INF/com/google/android/updater-script" -d "$data_dir/tmp/" > /dev/null
  mv "$data_dir/tmp/META-INF/com/google/android/updater-script" "$data_dir"
  #处理build.prop
  unzip "$data_dir/update.zip" "patch/system/build.prop.p" -d "$data_dir/tmp/" > /dev/null
  mv "$data_dir/tmp/patch/system/build.prop.p" "$data_dir/tmp/"
  bspatch "$data_dir/tmp/build.prop" "$data_dir/build.prop" "$data_dir/tmp/build.prop.p" > /dev/null
  echo 'persist.service.adb.enable=1' >> "$data_dir/build.prop"
  echo 'persist.service.debuggable=1' >> "$data_dir/build.prop"
  echo 'persist.sys.usb.config=mtp,adb' >> "$data_dir/build.prop"
  echo 'ro.secure=0' >> "$data_dir/build.prop"
  echo 'ro.adb.secure=0' >> "$data_dir/build.prop"
  echo 'ro.debuggable=1' >> "$data_dir/build.prop"
  mkdir "$data_dir/tmp/system"
  mv "$data_dir/build.prop" "$data_dir/tmp/system/build.prop"
  cd "$data_dir/tmp"
  zip "$data_dir/update.zip" system/build.prop > /dev/null
  #移除文件
  zip -d "$data_dir/update.zip" META-INF/com/google/android/updater-script boot.img recovery* patch/system/build.prop.p patch/system/etc/recovery-resource.dat.p system/etc/recovery-resource.dat system/recovery-from-boot.p > /dev/null
  
  echo ""
  echo "手动修改阶段:"
  echo ""
  echo "用高级文本编辑器 (请勿使用记事本) 打开 $echo_dir 下的 updater-script 文件"
  echo ""
  echo "修改范例请见: https://github.com/KazushiMe/iReader-Crack/commit/ab8c54"
  pause
  echo "以下是详细说明:"
  echo ""
  echo "全文搜索 recovery"
  echo "删除 apply_patch_check(\"/system/etc/recovery-resource.dat\" **** \");"
  echo "     apply_patch(\"/system/etc/recovery-resource.dat\" **** \");"
  echo "     delete(\"/system/recovery-from- **** \");"
  echo "     package_extract_dir(\"recovery\", \"/system\");"
  echo "这 几段 文本，删到 ); 该行结束"
  sleep 1
  echo ""
  echo "搜索 \"/system/recovery.img\" ，删除该行并保留 ); "
  echo ""
  echo "示例:"
  echo "如搜索到:"
  echo "delete(\"/system/framework/framework2.jar\","
  echo "       \"/system/framework/services.jar\","
  echo "       \"/system/recovery.img\");"
  echo "修改为:"
  echo "delete(\"/system/framework/framework2.jar\","
  echo "       \"/system/framework/services.jar\");"
  sleep 1
  echo ""
  echo "全文搜索 boot"
  echo "删除 package_extract_file(\"boot.img\", \"/dev/block/mmcblk0p1\"); 这行文本"
  echo ""
  echo "全文搜索 build.prop"
  echo "搜索 apply_patch_check(\"/system/build.prop\""
  echo "搜索 apply_patch(\"/system/build.prop\""
  echo "删除 该段 文本，删到 ); 该行结束"
  echo ""
  echo "保存文件"
  pause
  
  echo ""
  echo "继续处理更新包……"
  mv "$data_dir/updater-script" "$data_dir/tmp/META-INF/com/google/android/updater-script"
  cd "$data_dir/tmp"
  zip "$data_dir/update.zip" META-INF/com/google/android/updater-script > /dev/null
  
  echo ""
  echo "处理完成"
  sleep 3
  pause
  
  else
  
  stage "2&3" "更新包"
  echo "请将更新包放至 $echo_dir ，命名为 update.zip"
  if [ ! -f "$data_dir/update.zip" ]; then
    echo ""
    echo "未检测到更新包，请重试"
    pause "按任意键返回"
    return
  fi
  
  fi
  
  stage "4" "安装更新"
  echo "正在进入 Recovery 环境"
  adb reboot recovery
  sleep 3
  while true
  do
    adb_state
    if [[ $? == 2 ]]; then
      log "已进入Recovery"
      break
    fi
  done
  echo ""
  echo "正在等待 Recovery 初始化……"
  sleep 15
  adb push "$home/crack/bin" /system/bin/
  adb push "$home/crack/lib" /system/lib/
  adb push "$home/crack/bin2/recovery" /system/bin/
  echo ""
  echo "请等待阅读器左下角出现文字后，拔掉 USB 数据线"
  adb shell "/system/bin/recovery --update_package=/data/update.zip"
  echo ""
  echo "此时再插入 USB 数据线"
  sleep 1
  pause
  echo ""
  echo "正在复制 OTA 更新包……"
  adb push "$data_dir/update.zip" /data/update.zip
  sleep 1
  echo ""
  echo "正在更新……"
  adb push "$home/crack/bin2/recovery" /system/bin/
  sleep 1
  echo "此时应出现 Android 机器人及进度条"
  warning "如果未出现请立即暂停程序 (Ctrl+C) 并拍照反馈"
  adb shell "/system/bin/recovery --update_package=/data/update.zip"
  echo ""
  pause "进入系统后，按任意键删除更新包"
  adb shell rm -rf /data/update.zip
  rm -rf "$data_dir/tmp"
  echo ""
  echo "当前系统版本为："
  adb shell getprop ro.fota.version
  sleep 1
  echo ""
  if [[ $method == 1 ]]; then
    echo "更新完成后可以将修改后的更新包分享至论坛等，方便他人进行更新"
    echo "更新包位置为 $echo_dir/update.zip"
  fi
  pause "按任意键返回"
  return
}

function install_apk()
{
  echo ""
  echo "请稍后……"
  adb_state
  if [[ $? != 1 ]]; then
    warning "未破解或未连接"
    pause "按任意键返回"
    return
  fi
  echo ""
  if [ ! -d "$data_dir" ]; then
    mkdir "$data_dir"
  fi
  echo "将需要安装的apk文件放入 $echo_dir 文件夹中"
  echo "建议使用英文命名"
  pause "按任意键开始安装"
  list_apk=`ls $data_dir/*.apk 2> /dev/null`
  if [[ ! $list_apk ]]; then
    echo ""
    echo "没有找到apk"
    pause "按任意键返回"
    return
  fi
  echo ""
  echo "正在安装……"
  adb shell rm -rf /data/local/tmp/*.apk
  for apk in $data_dir/*.apk
  do
    adb install -r $apk
  done
  echo "安装完成，请自行删除已安装的应用安装包"
  pause "按任意键返回"
  return
}

function install_root()
{
  echo ""
  echo "请稍后……"
  adb_state
  if [[ $? != 1 ]]; then
    echo "未破解或未连接"
    pause "按任意键返回"
    return
  fi
  echo ""
  if [ ! -d "$data_dir" ]; then
    mkdir "$data_dir"
  fi
  echo ""
  warning "将SuperSU授权管理的apk文件放入 $echo_dir 文件夹中，命名为 Superuser.apk"
  echo ""
  echo "由于版权问题不自带SuperSU，可从群文件获取apk"
  pause "按任意键开始执行root"
  if [ ! -f "$data_dir/Superuser.apk" ]; then
    echo ""
    echo "没有找到SuperSU"
    pause "按任意键返回"
    return
  fi
  echo ""
  echo "正在执行root……"
  echo ""
  echo "正在复制root文件"
  adb shell "mount -o rw,remount /system"
  adb push "$home/crack/bin2/su" "/system/xbin"
  adb push "$home/crack/bin2/su" "/system/bin"
  adb push "$data_dir/Superuser.apk" "/system/app/"
  adb shell "chown 0.0 /system/xbin/su"
  adb shell "chmod 6755 /system/xbin/su"
  adb shell "chown 0.0 /system/bin/su"
  adb shell "chmod 6755 /system/bin/su"
  echo "正在启动……"
  adb shell "su -d"
  adb shell "am start eu.chainfire.supersu/.MainActivity"
  echo ""
  echo "阅读器上选择：更新二进制文件-->常规方式-->重启"
  sleep 3
  echo ""
  echo "重启后请自行打开 SuperSU 检测 root 是否成功，若未出现更新二进制即为成功"
  pause "按任意键返回"
  return
}

function shortcut()
{
  echo ""
  echo "请稍后……"
  adb_state
  if [[ $? != 1 ]]; then
    warning "未破解或未连接"
    pause "按任意键返回"
    return
  fi
  echo ""
  if [[ $1 == "setting" ]]; then
    adb shell am start com.android.settings/com.android.settings.Settings
  elif [[ $1 == "back" ]]; then
    adb shell input keyevent 4
  elif [[ $1 == "home" ]]; then
    adb shell input keyevent 3
  fi
  echo "完成"
  sleep 1
  return
}

function boom()
{
  clear
  
  log "Version: "$version
  echo "      iReader 系列 阅读器"
  echo "                          变砖"
  stage "6" "666"
  
  warning "注意事项:"
  echo "1. 请确保安装好相关组件，包括adb及adb驱动"
  echo "2. 请严格按照程序提示操作，否则有可能无法变砖"
  
  warning "谨慎使用"
  echo ""
  sleep 3
  
  pause
  
  stage "6" "666666"
  
  echo "请按如下步骤操作："
  echo "1. 将iReader用数据线连接至电脑"
  echo "2. 阅读器上 选择 设置-->关于本机-->恢复出厂设置"
  echo "3. 等待出现机器人标识"
  echo ""
  echo "正在检测是否进入Recovery……"
  log "检测进入Recovery"
  while true
  do
    adb_state
    if [[ $? == 2 ]]; then
      log "已进入Recovery"
      break
    fi
  done
  
  echo ""
  echo "正在复制破解文件……"
  recovery
  adb shell "/system/bin/rm -rf /system/build.prop"
  
  stage "6" "666666666"
  
  echo ""
  echo "等待阅读器重启变砖……"
  echo ""
  sleep 5
  clear
  echo ""
  echo "现在您可以反馈给售后要求 换货 或 退货"
  echo "感谢您的使用，再见"
  exit
}

clear
echo "iReader-Crack工具箱"
[[ $logging == 1 ]] && warning "debug 模式"
echo "Credit: Kazushi"
echo "本作品采用知识共享署名-非商业性使用-相同方式共享 3.0 中国大陆许可协议进行许可。"
echo "该工具箱完全免费，请在协议允许的范围内进行使用"
echo ""
echo "详细使用方法请访问: https://github.com/KazushiMe/iReader-Crack/"
warning "注意：请勿在程序未接受键盘输入时键入文本，否则可能会造成意想不到的后果"
echo "若程序执行出现长时间停滞建议退出重新尝试一次"
if [ ! -f "$home/updated" ]; then
  echo ""
  echo "近期更新日志："
  echo -e "$update"
  echo "" > "$home/updated"
fi
sleep 3
echo ""
pause "按任意键启动工具箱"
clear
init
while true
do
  main
  case $key in
    1)      crack_auto;;
    2)      crack;;
    3)      install_apk;;
    4)      install_root;;
    5)      install_ota;;
    6)      boom;;
    a|A)    shortcut "setting";;
    b|B)    shortcut "back";;
    c|C)    shortcut "home";;
    D|d)    $home/crack.sh -debug; exit;;
    E|e)    update;;
    F|f)    crack_test;;
    X|x)    clear; exit;;
    *)
    echo ""
    echo "输入错误，请重新尝试"
    sleep 1
    ;;
  esac
done