[DEPRECATED][GUIDE][ROOT] Smartwatch 3 KNX01V

Search This thread
By:
Advanced…
XorZone

XorZone

Senior Member
Jan 19, 2009
462
306
Walnut Creek, CA
I removed download link due to this method not working on lollipop.
This guide is deprecated, please use TWRP Recovery from this thread to install root


DISCLAMER and WARNING: I'm not responsible for bricked devices, dead SD cards, thermonuclear war, or the current economic crisis. Please do some research if you have any concerns about this app.
Click to expand...
Click to collapse

You have been warned!

Links:
Sony PC Companion
Download link removed while I will test for compatibility with 5.x, md5 summ: e2c34b07faa415a6cbb95943649c7eba

Step 1:
Code: 
[URL="source.android.com/source/building-devices.html#unlocking-the-bootloader"]Unlocked bootloader[/URL]
1. Enable adb debug
2. adb reboot bootloader
3. fastboot oem unlock (twice if requested)
4. fastboot format cache
5. fastboot format userdata
6. fastboot getvar all (and verify that it is)
7. fastboot reboot
Step 2:
Code: 
Updated to the latest KNX01V
[URL="http://www.sonymobile.com/us/tools/pc-companion/"]Install Sony PC Companion[/URL] and use Supports Zone -> Accessories software update -> Smartwatch 3

Step 3:
Code: 
Have Flashboot (Sony s1 flash) drivers installed just in case (Install Sony PC Companion and do update as indicated in previous step)

Step 4:
Code: 
[COLOR="red"]BOOT [/COLOR][COLOR="Red"](DO NOT EVER FLASH IT!!!)[/COLOR] rooting boot.img
1. Download rooting kernel image (SWR50-rootboot.img)
2. Reboot into bootloader (adb reboot bootloader)
3. fastboot boot SWR50-rootboot.img
4. Wait till device reboots or sits in black screen for a while (1 min+ then reboot it by holding power 10+sec)


Step 5:
Code: 
Verify by:
1. adb shell
2. su
3. you should see [email protected]:/ #

Step 6:
Code: 
1. Let me know!
2. Use it, dive into GPS investigation or customizations, etc.....


Special thanks:
1. Justin Case for LG G Watch rooting method using LGGW-rootboot.img
2. osm0sis for Android Image Kitchen

BHAQ5Fr.png
 
Last edited:
  • Like
Reactions: veepee78, michaelmab88, nobunnysapro and 2 others
XorZone

XorZone

Senior Member
Jan 19, 2009
462
306
Walnut Creek, CA
How it works:
1. Each boot.img packs zImage (real kernel) and ramdisk (special files for kernel use)
2. This one has all modifications from LGGW rootboot by Justin Case:
a. Adds su binary, superuser.sh install script, modified install-recovery.sh and additional step into init.rc file to invoke superuser.sh install script. Also modifications to mount system as rw and some disabled security.
3. So basically it mount system as rw and does following (cut from superuser.sh install script):
Code: 
#!/system/bin/sh
/system/bin/mount -o remount,rw /system
/system/bin/sleep 2
/system/bin/cat /sbin/su > /system/xbin/su
/system/bin/cat /sbin/su > /system/xbin/daemonsu
/system/bin/cat /sbin/install-recovery.sh > /system/etc/install-recovery.sh
/system/bin/chown 0.0 /system/xbin/su
/system/bin/chown 0.0 /system/xbin/daemonsu
/system/bin/chown 0.0 /system/etc/install-recovery.sh
/system/bin/chmod 06755 /system/xbin/su
/system/bin/chmod 06755 /system/xbin/daemonsu
/system/bin/chmod 755 /system/etc/install-recovery.sh
/system/bin/sync
/system/bin/sleep 3
/system/bin/reboot
 
  • Like
Reactions: iBuzman, nobunnysapro and arturo182
J

julz

Senior Member
Mar 17, 2007
519
151
www.julianjwong.com
I have dumped the rom from my debug/test version and was wondering if you were able to give me a guide on how i could try and flash it with a retail version? I presume this root guide probably won't work for me
 
XorZone

XorZone

Senior Member
Jan 19, 2009
462
306
Walnut Creek, CA
iBuzman said:
thanks @XorZone confirmed as working and a nice easy process too (I was already unlocked).

Out of curiosity, modded LGGW rootboot or just renamed?
Click to expand...
Click to collapse

Thanks for letting me know!
I reverse engineered changes in LGGW by unpacking and comparing ramdisks from both rootboot and original lg kernel and then applied the same changes to our kernel extracted from PC Companion files.
 
Kurotsuchi

Kurotsuchi

Senior Member
Aug 29, 2013
127
16
really great tutorial. I am planning to buy this watch, but I think currently there is NO app that requires Root. so I wonder how can we get benefit of this ?
 
XorZone

XorZone

Senior Member
Jan 19, 2009
462
306
Walnut Creek, CA
  • Like
Reactions: iBuzman
C

cb22

Senior Member
Dec 4, 2006
74
165
Thanks for the root, XorZone. For anyone wondering, here's the dmesg of the watch

A few small observations from digging:
  • The main chipset seems to be the BCM23550
  • The CPU has 4 cores, 2 are disabled in software. Should be easy enough to reenable if you please
  • It definitely has WiFi hardware, but the firmware is currently missing from the image. If you mange to get a hold of compatible firmware and nvram, it should be simple enough to get WiFi up and running
  • The WiFi firmware message mentions a "43341". Which is odd because apparently the main chipset does have WiFi support built in. Searching for a Broadcom 43341 gives you this, but this might just be a red herring.
 
  • Like
Reactions: djgodlike, XorZone and iBuzman
XorZone

XorZone

Senior Member
Jan 19, 2009
462
306
Walnut Creek, CA
cb22 said:
Thanks for the root, XorZone. For anyone wondering, here's the dmesg of the watch

A few small observations from digging:
  • The main chipset seems to be the BCM23550
  • The CPU has 4 cores, 2 are disabled in software. Should be easy enough to reenable if you please
  • It definitely has WiFi hardware, but the firmware is currently missing from the image. If you mange to get a hold of compatible firmware and nvram, it should be simple enough to get WiFi up and running
  • The WiFi firmware message mentions a "43341". Which is odd because apparently the main chipset does have WiFi support built in. Searching for a Broadcom 43341 gives you this, but this might just be a red herring.
Click to expand...
Click to collapse
Yeah, I noticed the same about WiFi chip, it might be that they packed bcm43341 as part of the BCM23550 soc, like Invensense MPU9250 chip packs mpu6500 inside.
For the 43341 I'm finding it in the configs here: https://android.googlesource.com/kernel/tegra/+/bdde9f16131a5ac2039062d5ce22e3e153acbe68^!/
Looks like BCM43341 is BCM4334 + NFC chip, so we could try S3 I9300 files as per http://redmine.replicant.us/projects/replicant/wiki/GalaxyS3I9300Firmwares
 
  • Like
Reactions: iBuzman
F

fer2503

Senior Member
Nov 7, 2012
1,545
141
how can i grant superuser permission to an app? i install es file explorer with sideload but i can't get superuser permission. the procedure is ok
 
C

cdrshm

Senior Member
Apr 3, 2010
164
6
Sorry admins for not putting in correct location....

Moved to Correct Area!
 
Last edited:
XorZone

XorZone

Senior Member
Jan 19, 2009
462
306
Walnut Creek, CA
cdrshm said:
Sorry admins for not putting in correct location....


I can not get my device to show up in adb devices and its driving me crazy. Tried windows 7/8/server 2012R2 ..lol
Now I have done my fair share of custom roms and bootloaders.
OG Droid
Nexus
Nexus 10
Asus Memo Pad (came from alarm company, and could only load one app...now its a full running tablet)
I am sure its a silly thing I have done or am missing...
Thoughts....ideas?..need more info?

Capture.PNG


Capture1.PNG
Click to expand...
Click to collapse
As usual, check if adb enabled in settings-about-developer options, if there are no developer options - it is as usual 7 times click on build number in about screen.
 
You must log in or register to reply here.

Similar threads

S
Companion Thread Android Wear 2.0 for SmartWatch 3 port
Replies
371
Views
223K
E
elmaxsabe
PDesire
  • Locked
Android Wear 2.0 for SmartWatch 3 port progress Thread & Creation of OSS project
Replies
99
Views
191K
LenAsh
LenAsh
C
Ghostracer - GPS tracker for the Sony smartwatch 3
Replies
354
Views
125K
M
mikaelbeng
alex6600
[ROM] Sony Smartwatch 3 Marshmallow [Android 6.0.1]
Replies
428
Views
113K
S
steve8x8
P
[RECOVERY][Unofficial][tetra] TWRP 2.8.3.0 for Sony Smartwatch 3
Replies
126
Views
79K
S
steve8x8

Top Liked Posts

24 Hours All time
  • There are no posts matching your filters.
  • 5
    XorZone
    XorZone
    I removed download link due to this method not working on lollipop.
    This guide is deprecated, please use TWRP Recovery from this thread to install root


    DISCLAMER and WARNING: I'm not responsible for bricked devices, dead SD cards, thermonuclear war, or the current economic crisis. Please do some research if you have any concerns about this app.
    Click to expand...
    Click to collapse

    You have been warned!

    Links:
    Sony PC Companion
    Download link removed while I will test for compatibility with 5.x, md5 summ: e2c34b07faa415a6cbb95943649c7eba

    Step 1:
    Code: 
    [URL="source.android.com/source/building-devices.html#unlocking-the-bootloader"]Unlocked bootloader[/URL]
1. Enable adb debug
2. adb reboot bootloader
3. fastboot oem unlock (twice if requested)
4. fastboot format cache
5. fastboot format userdata
6. fastboot getvar all (and verify that it is)
7. fastboot reboot
    Step 2:
    Code: 
    Updated to the latest KNX01V
[URL="http://www.sonymobile.com/us/tools/pc-companion/"]Install Sony PC Companion[/URL] and use Supports Zone -> Accessories software update -> Smartwatch 3

    Step 3:
    Code: 
    Have Flashboot (Sony s1 flash) drivers installed just in case (Install Sony PC Companion and do update as indicated in previous step)

    Step 4:
    Code: 
    [COLOR="red"]BOOT [/COLOR][COLOR="Red"](DO NOT EVER FLASH IT!!!)[/COLOR] rooting boot.img
1. Download rooting kernel image (SWR50-rootboot.img)
2. Reboot into bootloader (adb reboot bootloader)
3. fastboot boot SWR50-rootboot.img
4. Wait till device reboots or sits in black screen for a while (1 min+ then reboot it by holding power 10+sec)


    Step 5:
    Code: 
    Verify by:
1. adb shell
2. su
3. you should see [email protected]:/ #

    Step 6:
    Code: 
    1. Let me know!
2. Use it, dive into GPS investigation or customizations, etc.....


    Special thanks:
    1. Justin Case for LG G Watch rooting method using LGGW-rootboot.img
    2. osm0sis for Android Image Kitchen

    BHAQ5Fr.png
    View
    3
    XorZone
    XorZone
    How it works:
    1. Each boot.img packs zImage (real kernel) and ramdisk (special files for kernel use)
    2. This one has all modifications from LGGW rootboot by Justin Case:
    a. Adds su binary, superuser.sh install script, modified install-recovery.sh and additional step into init.rc file to invoke superuser.sh install script. Also modifications to mount system as rw and some disabled security.
    3. So basically it mount system as rw and does following (cut from superuser.sh install script):
    Code: 
    #!/system/bin/sh
/system/bin/mount -o remount,rw /system
/system/bin/sleep 2
/system/bin/cat /sbin/su > /system/xbin/su
/system/bin/cat /sbin/su > /system/xbin/daemonsu
/system/bin/cat /sbin/install-recovery.sh > /system/etc/install-recovery.sh
/system/bin/chown 0.0 /system/xbin/su
/system/bin/chown 0.0 /system/xbin/daemonsu
/system/bin/chown 0.0 /system/etc/install-recovery.sh
/system/bin/chmod 06755 /system/xbin/su
/system/bin/chmod 06755 /system/xbin/daemonsu
/system/bin/chmod 755 /system/etc/install-recovery.sh
/system/bin/sync
/system/bin/sleep 3
/system/bin/reboot
    View
    3
    P
    perpe
    @XorZone
    Your root method didn't work for me, too. There are some missing files in your image.
    I built a TWRP recovery and flashed the Wear Supersu.zip from http://www.xda-developers.com/android/root-android-wear-5-0-1-xdatv/. Now, I have root.
    I have to test the TWRP recovery a little bit before the release.
    View
    3
    C
    cb22
    Thanks for the root, XorZone. For anyone wondering, here's the dmesg of the watch

    A few small observations from digging:
    • The main chipset seems to be the BCM23550
    • The CPU has 4 cores, 2 are disabled in software. Should be easy enough to reenable if you please
    • It definitely has WiFi hardware, but the firmware is currently missing from the image. If you mange to get a hold of compatible firmware and nvram, it should be simple enough to get WiFi up and running
    • The WiFi firmware message mentions a "43341". Which is odd because apparently the main chipset does have WiFi support built in. Searching for a Broadcom 43341 gives you this, but this might just be a red herring.
    View
    2
    XorZone
    XorZone
    Well, if hardware and partitions are the same - I do not see why it will not work. However, it will not help to flash.
    I might try to compile twrp, but will have to carefully read its docs first.
    View

New posts