1、转换odex
java -jar baksmali-1.4.2.jar -x systemUI.odex
java -Xmx512M -jar smali-1.4.2.jar out -o classes.dex
2、把classes.dex直接放到SystemUI.apk
01-02 23:00:04.521: E/AndroidRuntime(28156): java.lang.RuntimeException: Unable to create service com.android.systemui.SystemUIService: java.lang.SecurityException: Call from user 0 as user -2 without permission INTERACT_ACROSS_USERS or INTERACT_ACROSS_USERS_FULL not allowed.
01-02 23:00:04.521: E/AndroidRuntime(28156): at android.app.ActivityThread.handleCreateService(ActivityThread.java:2718)
01-02 23:00:04.521: E/AndroidRuntime(28156): at android.app.ActivityThread.access$1600(ActivityThread.java:162)
01-02 23:00:04.521: E/AndroidRuntime(28156): at android.app.ActivityThread$H.handleMessage(ActivityThread.java:1446)
01-02 23:00:04.521: E/AndroidRuntime(28156): at android.os.Handler.dispatchMessage(Handler.java:107)
01-02 23:00:04.521: E/AndroidRuntime(28156): at android.os.Looper.loop(Looper.java:194)
01-02 23:00:04.521: E/AndroidRuntime(28156): at android.app.ActivityThread.main(ActivityThread.java:5371)
01-02 23:00:04.521: E/AndroidRuntime(28156): at java.lang.reflect.Method.invokeNative(Native Method)
01-02 23:00:04.521: E/AndroidRuntime(28156): at java.lang.reflect.Method.invoke(Method.java:525)
01-02 23:00:04.521: E/AndroidRuntime(28156): at com.android.internal.os.ZygoteInit$MethodAndArgsCaller.run(ZygoteInit.java:833)
01-02 23:00:04.521: E/AndroidRuntime(28156): at com.android.internal.os.ZygoteInit.main(ZygoteInit.java:600)
01-02 23:00:04.521: E/AndroidRuntime(28156): at dalvik.system.NativeStart.main(Native Method)
01-02 23:00:04.521: E/AndroidRuntime(28156): Caused by: java.lang.SecurityException: Call from user 0 as user -2 without permission INTERACT_ACROSS_USERS or INTERACT_ACROSS_USERS_FULL not allowed.
01-02 23:00:04.521: E/AndroidRuntime(28156): at android.os.Parcel.readException(Parcel.java:1425)
01-02 23:00:04.521: E/AndroidRuntime(28156): at android.os.Parcel.readException(Parcel.java:1379)
01-02 23:00:04.521: E/AndroidRuntime(28156): at android.view.accessibility.IAccessibilityManager$Stub$Proxy.addClient(IAccessibilityManager.java:203)
01-02 23:00:04.521: E/AndroidRuntime(28156): at android.view.accessibility.AccessibilityManager.<init>(AccessibilityManager.java:200)
01-02 23:00:04.521: E/AndroidRuntime(28156): at android.view.accessibility.AccessibilityManager.createSingletonInstance(AccessibilityManager.java:182)
01-02 23:00:04.521: E/AndroidRuntime(28156): at android.view.accessibility.AccessibilityManager.createAsSharedAcrossUsers(AccessibilityManager.java:153)
01-02 23:00:04.521: E/AndroidRuntime(28156): at com.android.systemui.SystemUIService.onCreate(SystemUIService.java:73)
01-02 23:00:04.521: E/AndroidRuntime(28156): at android.app.ActivityThread.handleCreateService(ActivityThread.java:2708)
3、系统签名
另外由于systemUI模块里values-sw720dp,而反编译时,会找不到该目录对应的变量,导致无法回编译,解决办法,把该目录下的styles的复制到values目录下,即可回编译
------------------------------------------------------
或者把framework文件copy到当前目录下的system/framework
java -jar baksmali.jar -d ./system/framework -x systemUI.odex