MTK的写号工具“SN_WITER tool”,在写IMEI和SN的时候,会往“proinfo”分区里面也写一份IMEI和SN,可以通过读取这个分区,获取SN和IMEI。
写入“proinfo”的数据结构如下: 前面64个字节为SN号,紧接着4*10个字节为IMEI。
在lk中,有一个函数“mboot_recovery_load_raw_part”可以用来读取“proinfo”分区,代码如下:
/********************************************************** * Routine: mboot_recovery_load_raw_part * * Description: load raw data for recovery mode support * **********************************************************/int mboot_recovery_load_raw_part(char *part_name, unsigned long *addr, unsigned int size){ long len;unsigned long begin;#ifdef MTK_EMMC_SUPPORTunsigned long long start_addr;#elseunsigned long start_addr;#endif part_t *part; part_dev_t *dev; dev = mt_part_get_device(); if (!dev) { return -ENODEV; } part = mt_part_get_partition(part_name); if (!part) { return -ENOENT; }#ifdef MTK_EMMC_SUPPORT start_addr = (u64)part->start_sect * BLK_SIZE;#else start_addr = part->startblk * BLK_SIZE;#endifbegin = get_timer(0);#ifdef MTK_EMMC_SUPPORT#ifdef MTK_NEW_COMBO_EMMC_SUPPORT len = dev->read(dev, start_addr,(uchar*)addr, size, part->part_id);#else len = dev->read(dev, start_addr,(uchar*)addr, size);#endif#else len = dev->read(dev, start_addr,(uchar*)addr, size);#endif if (len name, (unsigned long)addr, size, get_timer(begin));exit: return len;}使用如下方式读取:
char data[104] = {0};mboot_recovery_load_raw_part("proinfo", data, 104);这样data[64]~data[71]就是第一个IMEI号,如果没有写号,读出来会是全0!