General Firmware and Combination Firmware and FOTA Delta and CSC change and...

Search This thread
Hello, I am willing to change my watch's CSC from INS to MEA to enable gpay/spay, would it be fine? If anyone has tried it and its working please let me know.

I've read the whole thread and have seen a video around 3 months ago on youtube regarding this and it was working fine for them.
I am experienced with such things from a long time.
As far as I've seen the thread the *xxx*IMEI method works fine just once and we are not able to do that again via anything, combination files or anything.. or is there a way?

I just want to know if there are any major issues?

1. Would LTE work?
2. Would OTA updates work?
3. Are there better csc than MEA/SER/XSG or which one is the best among these?

Thanks
 
Last edited:

Sorinbalcon

New member
Jan 3, 2022
2
0

SM-R870 EVA8 reupload as old Links expired...


Here is SM-R860 EVB4... as maybe soon "obsolete"...

New FVC8 is incoming... so remember Rollback Prevention crap...

Best Regards
I have a little question .... I unzipped the file but there are many ISOs. usually there were 3 files that I put in ODIN and it was very simple. Is it another procedure? thank you very much
 

adfree

Senior Member
Jun 14, 2008
9,588
5,680
Samsung Galaxy Watch 4
@Sorinbalcon

Be sure you only unpack TAR file... NOT all files from TAR...

I am sure I can do this successfully with 7Zip Tool on Windows...

Result for SM-R870 is:
smR870_EVA8_OXM_v1.tar


For SM-R860 I made:
smR860_EVB4_OXM_v1.tar

1 TAR File for netOdin

Simple select 1 TAR file in AP...


Summary:
unpack 1 TAR file from 7zip package...

NO rename No add no nothing to change... simple 1 TAR file to select in netOdin


Best Regards
 

adfree

Senior Member
Jun 14, 2008
9,588
5,680
Samsung Galaxy Watch 4
Found way to see Upload Mode on my SM-R860...

Shows this:
Code:
UPLOAD MODE

User Press Pwrkey 7s

-----------------------
[Save to PC   ] connect a usb cable
[Reboot Device] Primery + Secondary for 3s
[Reconnect USB] Secondary Key for 3s

-----------------------

Forced Upload - Powerkey Long press

A
I have still no USB connection...

To use RDX Tool...

B
Still no idea how to see Upload wireless
?

I have enabled in *#9900#

C
My SM-A202F offer way to dump to SD... seems only external SD card...

GW4 not offer SD feature as it seems...

Only as info...

Best Regards
 

adfree

Senior Member
Jun 14, 2008
9,588
5,680
Samsung Galaxy Watch 4
Upload Mode on my SM-R860 GW4...

Code:
*#9900#

A
I set Debug Mode High

B
I enable Upload Mode

C
WLAN Upload ON but no visible effect...

No idea when where I can see changes...


Then I can hold both Keys for few Secondes to force "Hard Reset"...

Then I can see Upload Mode for RDX Tool... USB...


Best Regards
 

Attachments

  • uploadGW4_v2.png
    uploadGW4_v2.png
    21.5 KB · Views: 29
  • uploadGW4_v3.png
    uploadGW4_v3.png
    26.9 KB · Views: 28
  • uploadGW4_v1.png
    uploadGW4_v1.png
    22.9 KB · Views: 28
  • Like
Reactions: tn12315

tn12315

Member
Apr 26, 2022
5
8
Thanks that worked.. If only the guy can give us some information about the service dock/pogo.
Download modus over wifi seems to work because its creaping an ap.. but upload modus doesnt seems to do the same. If i can find a cheap broken watch 4 i could try out your pin idea
 
Last edited:
  • Like
Reactions: adfree

adfree

Senior Member
Jun 14, 2008
9,588
5,680
Samsung Galaxy Watch 4
@Omegared37

A

IMHO better to write Model Name...

Example:
SM-R860

To prevent mistakes...

B

Also helpfull to give more or better all details about your plan...

If I see "European GW4" and "OWO" then my tiny brain translate into:

SM-R875F is OXA Region...

So OWO is impossible...

DBT is German CSC and inside OXA.... but not in OWO...


C

My tiny tests with Phone SM-A202F...

It is rooted and I can do few things CSC change...
But it is complex and not easy and require other APKs...

My ideas from this thread not work... so I was WRONG.

F. Security is stronger...

D

I saw yesterday that Z3X supports CSC change... Video showed something about ADB...

Not sure if on normal Stock Firmware possible...

Not tested...

But IMHO few Commands left or exists...

Only as info...


I will write summary what I have tested on my SM-A202F Android 11... CSC related...

If I have time...

Best Regards

Edit 1.
Video to see what I mean with Z3X...
 
Last edited:

adfree

Senior Member
Jun 14, 2008
9,588
5,680
Samsung Galaxy Watch 4
CSC change related...

This looks interesting...

Not tested...

Best Regards

Edit 1.

Google search... leads to this:

Edit 2.

Code:
com.rrivenllc.shieldx

Could be really interesting App...
Short tested on my rooted SM-G920F... Android 7...

Will try to find Version possible to install on GW4...
 
Last edited:

adfree

Senior Member
Jun 14, 2008
9,588
5,680
Samsung Galaxy Watch 4
Tiny summary of my CSC change adventure in SM-A202F rooted Phone with Android 11...

A

My old idea with Activity Launch via ADB Command:

Code:
a20e:/ $ am start -n com.samsung.android.cidmanager/com.samsung.android.cidmanager.preconfig.PreconfigActivity
Starting: Intent { cmp=com.samsung.android.cidmanager/.preconfig.PreconfigActivity }

I see only short Preconfig Window white/empty... but close automatic... so blocked IMHO by some more Security crap...

B

Normal Code input not work for me... so used cool APK since Years very usefull.

But only 27262826 opens correct Preconfig Screen...

Other Codes leads to Errors like on Screeenshots visible...

Remember my SM-A202F is rooted with Magisk...

C

Short checked with Keystring_factory_FB.apk... taken from any Combination Firmware blabla...

No luck with *#27262826#

But for instance with *#197328640# not working in normal "Keypad"...

Only as info...

It is ADVANCED secured against easy Hack...

Only advanced way(s) could work on GW4...

Depend on Firmware Version because we are EVER behind Samsung...

1 old method on LTE devices with IMEI seems obsolete...

Only as summary/info...

Best Regards

 

Attachments

  • CID_2.jpg
    CID_2.jpg
    208.7 KB · Views: 37
  • CID_3.jpg
    CID_3.jpg
    213.6 KB · Views: 33
  • CID_1.jpg
    CID_1.jpg
    213 KB · Views: 34
  • Screenshot_20220427-045359_Factory IME.jpg
    Screenshot_20220427-045359_Factory IME.jpg
    116.5 KB · Views: 38

adfree

Senior Member
Jun 14, 2008
9,588
5,680
Samsung Galaxy Watch 4
Really funny...

Here some progress on my SM-R860 FVC8...

No idea why... Knox is absent... such Option I can see on Phone...

No idea if "Owner" can help...

I am here:
Code:
freshbs:/ $ dpm set-device-owner com.rrivenllc.shieldx/.receivers.DeviceAdmin
java.lang.IllegalStateException: Not allowed to set the device owner because there are already some accounts on the device
        at android.os.Parcel.createExceptionOrNull(Parcel.java:2408)
        at android.os.Parcel.createException(Parcel.java:2384)
        at android.os.Parcel.readException(Parcel.java:2367)
        at android.os.Parcel.readException(Parcel.java:2309)
        at android.app.admin.IDevicePolicyManager$Stub$Proxy.setDeviceOwner(IDevicePolicyManager.java:8665)
        at com.android.commands.dpm.Dpm.runSetDeviceOwner(Dpm.java:203)
        at com.android.commands.dpm.Dpm.onRun(Dpm.java:115)
        at com.android.internal.os.BaseCommand.run(BaseCommand.java:60)
        at com.android.commands.dpm.Dpm.main(Dpm.java:41)
        at com.android.internal.os.RuntimeInit.nativeFinishInit(Native Method)
        at com.android.internal.os.RuntimeInit.main(RuntimeInit.java:400)
Caused by: android.os.RemoteException: Remote stack trace:
        at com.android.server.devicepolicy.DevicePolicyManagerService.enforceCanSetDeviceOwnerLocked(DevicePolicyManagerService.java:9717)
        at com.android.server.devicepolicy.DevicePolicyManagerService.setDeviceOwner(DevicePolicyManagerService.java:8725)
        at android.app.admin.IDevicePolicyManager$Stub.onTransact(IDevicePolicyManager.java:3582)
        at android.os.Binder.execTransactInternal(Binder.java:1154)
        at android.os.Binder.execTransact(Binder.java:1123)


Maybe if I have time i will reset SM-R860 and start in Standalone Mode...
Without Accounts like Google and Samsung etc...


Btw. Account...

No need to register... Activity Launcher start ... :alien:

Best Regards

Edit 1.
Hmmm... missing Knox Setting maybe because...
Played short with my SM-G920F ... enabled Knox but skipped KLMN EULA... then Knox setting gone...
Will charge my SM-R860... Factory Reset... and start from scratch in Standalone Mode...
Without Pairing s h .t
 

Attachments

  • Screenshot_20220430_021541_shieldx.png
    Screenshot_20220430_021541_shieldx.png
    27.7 KB · Views: 33
  • Screenshot_20220430_021708_shieldx.png
    Screenshot_20220430_021708_shieldx.png
    32.1 KB · Views: 32
  • Screenshot_20220430_021608_shieldx.png
    Screenshot_20220430_021608_shieldx.png
    31.8 KB · Views: 29
  • Screenshot_20220430_021503_shieldx.png
    Screenshot_20220430_021503_shieldx.png
    23.3 KB · Views: 30
  • Screenshot_20220430_021418_shieldx.png
    Screenshot_20220430_021418_shieldx.png
    19.6 KB · Views: 32
Last edited:

Omegared37

Member
Mar 29, 2016
30
4
@Omegared37

A

IMHO better to write Model Name...

Example:
SM-R860

To prevent mistakes...

B

Also helpfull to give more or better all details about your plan...

If I see "European GW4" and "OWO" then my tiny brain translate into:

SM-R875F is OXA Region...

So OWO is impossible...

DBT is German CSC and inside OXA.... but not in OWO...


C

My tiny tests with Phone SM-A202F...

It is rooted and I can do few things CSC change...
But it is complex and not easy and require other APKs...

My ideas from this thread not work... so I was WRONG.

F. Security is stronger...

D

I saw yesterday that Z3X supports CSC change... Video showed something about ADB...

Not sure if on normal Stock Firmware possible...

Not tested...

But IMHO few Commands left or exists...

Only as info...


I will write summary what I have tested on my SM-A202F Android 11... CSC related...

If I have time...

Best Regards

Edit 1.
Video to see what I mean with Z3X...
You are absolutely right.I should have explained better.
My GW4 is the SM-R875F model. I bought it from Amazon Spain, but the CSC is OXA or something like that. So I ondered...is there any chance to integrate CSC codes from other firmware in order to enable LTE plans to be discovered(in COlombia)?
 

adfree

Senior Member
Jun 14, 2008
9,588
5,680
Samsung Galaxy Watch 4
Hmmm...

I can not activate Knox feature on my SM-R860...

Tested in Standalone Mode...
I can set Admin and Owner...

Hmmmmmmmmmmmmm...
Seems something is missing on GW4...

Hmmmmmm...
Some Google search attempts... leads to this:

Leads to this:

Hmmm... on Tizen Devices I remember some stupid clicking in About...

No idea if here included GW4...

As it seems tiny bit harder...

Hmmm...

Best Regards

Edit 1.

New Google Search leads to this...
 

Attachments

  • Screenshot_20220430_033747_activitylauncher.png
    Screenshot_20220430_033747_activitylauncher.png
    28.4 KB · Views: 25
  • Screenshot_20220430_033826_shieldx.png
    Screenshot_20220430_033826_shieldx.png
    28.7 KB · Views: 26
  • Screenshot_20220430_033900_shieldx.png
    Screenshot_20220430_033900_shieldx.png
    19.2 KB · Views: 26
  • Screenshot_20220430_033932_shieldx.png
    Screenshot_20220430_033932_shieldx.png
    21.4 KB · Views: 26
  • Screenshot_20220430_034049_shieldx.png
    Screenshot_20220430_034049_shieldx.png
    118.3 KB · Views: 25
  • Screenshot_20220430_034457_shieldx.png
    Screenshot_20220430_034457_shieldx.png
    25.1 KB · Views: 25
  • Screenshot_20220430_034604_shieldx.png
    Screenshot_20220430_034604_shieldx.png
    25.6 KB · Views: 24
Last edited:

adfree

Senior Member
Jun 14, 2008
9,588
5,680
Samsung Galaxy Watch 4
@Omegared37

A

If you enter this Code... you see "full" infos about Firmware Version...
Code:
*#1234#

Maybe you can tell us these infos...

B

OXA is Region Code...

In case of SM-R875F OXA contains multiple CSC setting fileS... aka CSC aka Customer Sales Code

Example... DBT for Germany... we can "compute complicated high ciphered" Link:

:)



C

Sorry I am from Germany...
No idea yet CSC for GW4 in COlombia...

I can try Google... if I have more time...

Best Regards

Edit 1.

Can not find LTE?

Edit 2.

According to Tizen device... COM could CSC.. and OWO Region Code seems...

But no LTE GW4 for COM found...
 
Last edited:

Omegared37

Member
Mar 29, 2016
30
4
That is the point. There is no CSC code for GW4 yet...and probably will never be. My theory is that using the CSC borrowed from either the SM-R825F or R845, COM versions, it would be possible to acivate LTE services in Colombia. Or perhaps the Chilean version of the GW4(which contains the Multi-CSC OWO firmware) could have it hidden into its files. Have had zero luck trying to download with Bifrost(error 400)
 

Top Liked Posts

  • There are no posts matching your filters.
  • 2
    Code:
    [email protected]:~/imj$ ./imjtool super.img extract
    Sparse image v1.0 detected, 1310720 blocks of 4096 bytes
    1310720 blocks of 4096 bytes compressed into 74 chunks (27% compressed)
    0 - Extracted image is in extracted/image.img
    [email protected]:~/imj$ ./imjtool image.img extract
    liblp dynamic partition (super.img) - Blocksize 0x1000, 2 slots
    LP MD Header @0x3000, version 10.0, with 4 logical partitions on block device of 2560 GB, at partition super, first sector: 0x800
        Partitions @0x3080 in 2 groups:
            Group 0: default
            Group 1: group_basic
                Name: system (read-only, Linux Ext2/3/4/? Filesystem Image, @0x100000 spanning 1 extents and 3 GB) - extracted
                Name: vendor (read-only, Linux Ext2/3/4/? Filesystem Image, @0xdda00000 spanning 1 extents and 83 MB) - extracted
                Name: product (read-only, Linux Ext2/3/4/? Filesystem Image, @0xe2e00000 spanning 1 extents and 141 MB) - extracted
                Name: odm (read-only, Linux Ext2/3/4/? Filesystem Image, @0xebc00000 spanning 1 extents and 4 MB) - extracted

    Memo to me...

    SM-R860 EVB4 Full Firmware...

    Will check actual FOTA Delta from EVB4 to...

    Goal is to update system.img from update.zip aka FOTA aka Delta...

    Code:
    # Patch partition system
    
    ui_print("Patching system image after verification.");
    show_progress(0.513100, 1800);
    block_image_update(map_partition("system"), package_extract_file("system.transfer.list"), "system.new.dat", "system.patch.dat") ||
      abort("E1001: Failed to update system image.");


    Delta from EVB4 to FVD4 is 350 MB...

    Code:
    model_name=SM-R860
    source_ap_file=AP_R860XXU1EVB4_CL23527796_QB49298862_REV00_user_low_ship_MULTI_CERT_meta_WATCH_OS11.tar.md5
    source_bl_file=BL_R860XXU1EVB4_CL23527796_QB49298862_REV00_user_low_ship_MULTI_CERT.tar.md5
    source_cp_file=
    source_csc_file=CSC_OMC_OXM_R860OXM1EVB4_CL23527796_QB49298862_REV00_user_low_ship_MULTI_CERT.tar.md5
    
    target_ap_file=AP_R860XXU1FVD4_CL23869841_QB51394552_REV00_user_low_ship_MULTI_CERT_meta_WATCH_OS11.tar.md5
    target_bl_file=BL_R860XXU1FVD4_CL23869841_QB51394552_REV00_user_low_ship_MULTI_CERT.tar.md5
    target_cp_file=
    target_csc_file=CSC_OMC_OXM_R860OXM1FVD4_CL23869841_QB51394552_REV00_user_low_ship_MULTI_CERT.tar.md5
    
    current_version=R860XXU1EVB4/R860OXM1EVB4/
    updated_version=R860XXU1FVD4/R860OXM1FVD4/
    dummy_version=R860XXU1FVD4.DM/R860OXM1FVD4/
    source_os_version=11
    target_os_version=11
    source_ap_build_date=Wed Feb 16 18:43:43 KST 2022
    target_ap_build_date=Wed Apr 27 11:41:50 KST 2022
    is_manual_build=N
    security_patch_version=2022-05-01
    csc_information=OXM(ACR AFR ARO ASA ATO AUT BGL BNG BRI BTU BVO CAC CAM CHO CIS COO DBT DKR ECT EGY EUR EUX ILO INU ITV KOO KSA LTA LUX MEA MID MRU MWD MXO MYM NEE NPL PAK PEO PHE PHN ROM SEB SEE SEK SER SIO SKZ SLK SWA TGY THO TPA TPH TTT TUN TUR UPO UYO XAA XAC XEF XEH XEO XEZ XFA XJP XME XNZ XSA XSE XSG XSK XSP XTC XXV ZTO)

    Edit 1.

    extracted files from EVB4 super.img


    Edit 2.
    The FOTA Delta update.zip from EVB4 to FVD4...
    2
    Full Firmware for netOdin

    SM-R860 EVB4





    SM-R870 EVA8





    SM-R880 EVA8



    SM-R890 EVA8




    Additional FOTA files...


    Sorry, still no working way found to apply update.zip manually.


    Best Regards
    1
    Code:
    <upgrade>
    <value rcount="8" fwsize="548846938">R900XXU0AVD3/R900OXM0AVD3/</value>
    <value rcount="2" fwsize="261009041">R900XXU0AVE7/R900OXM0AVE7/</value>
    <value rcount="4" fwsize="253162615">R900XXU0AVE4/R900OXM0AVE4/</value>
    <value rcount="9" fwsize="283515087">R900XXU0AVD4/R900OXM0AVD4/</value>
    <value rcount="7" fwsize="276472644">R900XXU0AVE1/R900OXM0AVE1/</value>
    <value rcount="1" fwsize="629597612">R900XXU1AVE8/R900OXM1AVE8/</value>
    <value rcount="3" fwsize="225700114">R900XXU0AVE5/R900OXM0AVE5/</value>
    <value rcount="8" fwsize="410480500">R900XXU0AVD5/R900OXM0AVD5/</value>
    <value rcount="6" fwsize="279034504">R900XXU0AVE2/R900OXM0AVE2/</value>
    <value rcount="3" fwsize="180305171">R900XXU0AVE6/R900OXM0AVE6/</value>
    <value rcount="5" fwsize="288238702">R900XXU0AVE3/R900OXM0AVE3/</value>
    </upgrade>

    Seems they reached new stage...

    Leaved Bootloader 0 and now since R900XXU1AVE8...

    Bootloader 1...

    Best Regards
    1
    Goal is to update system.img from update.zip aka FOTA aka Delta...
    Maybe it will help.

    1
    For patching Kernel from update.zip

    User sermister1 teached me how to do.
    1000000 thanx

    Code:
    a20e:/sdcard # losetup -f
    /dev/block/loop1
    a20e:/sdcard # losetup /dev/block/loop1 /sdcard/boot.img
    a20e:/sdcard # applypatch --patch /sdcard/boot.img.p --target EMMC:/dev/block/loop1:37748736:c777f915a5254e5c6e49913f808a7b12676b551d --source EMMC:/dev/block/loop1:37748736:18f49cd9b76b3d503ee607c344d67ca670ee6701
    a20e:/sdcard # dd if=/dev/block/loop1 of=/sdcard/dump1.bin
    73728+0 records in
    73728+0 records out
    37748736 bytes (36 M) copied, 0.381010 s, 94 M/s

    Older example...

    I will do this for SM-R860 EVB4 to FVD4... and post result...

    Later...

    I was able to use my rooted SM-A202F Android 11... without installing additional stuff

    Best Regards
  • 5
    Looks like it could be harder since Tizen...

    A
    Stock Firmware for netOdin/Odin not available yet...

    B
    Combination Firmware not available yet

    C
    FOTA Delta File for study I have:
    Code:
    current_version=R860XXU1AUGE/R860OXM1AUGE/
    updated_version=R860XXU1BUH9/R860OXM1BUH9/

    D

    In this FOTA Delta file from SM-R860 I can see overview... from CSC... Region Code OXM:
    Code:
    csc_information=OXM
    
    ACR
    AFR
    ARO
    ASA
    ATO
    AUT
    BGL
    BNG
    BRI
    BTU
    BVO
    CAC
    CAM
    CHO
    CIS
    COO
    DBT
    DKR
    ECT
    EGY
    EUR
    EUX
    ILO
    INU
    ITV
    KOO
    KSA
    LTA
    LUX
    MEA
    MID
    MRU
    MWD
    MXO
    MYM
    NEE
    NPL
    PAK
    PEO
    PHE
    PHN
    ROM
    SEB
    SEE
    SEK
    SER
    SIO
    SKZ
    SLK
    SWA
    TGY
    THO
    TPA
    TPH
    TTT
    TUN
    TUR
    UPO
    UYO
    XAA
    XAC
    XEF
    XEH
    XEO
    XEZ
    XFA
    XJP
    XME
    XNZ
    XSA
    XSE
    XSG
    XSK
    XSP
    XTC
    XXV
    ZTO

    More things... comes... later...

    Best Regards
    5
    Tiny progress...

    GFX Card is Nvidia GTX 460...

    I thought this is Samsung joke with G account...

    Anyway. I have Root access to this Image...

    So will do some stupid tests...

    Best Regards
    5
    Tiny progress...

    Searched in system.img... 3 GB File for text string:
    Code:
    sdk_gwear_x86

    27 hits... then I changed few of them and renamed...
    Now I see:
    Code:
    sdk_gwear_x05

    05 is inside:
    Code:
    # begin common build properties
    # autogenerated by build/make/tools/buildinfo_common.sh
    ro.product.build.date=Thu Dec 16 16:58:02 UTC 2021
    ro.product.build.date.utc=1639673882
    ro.product.build.fingerprint=google/sdk_gwear_x86/generic_x86_arm:11/RWD4.211013.004/8008904:userdebug/dev-keys
    ro.product.build.id=RWD4.211013.004
    ro.product.build.tags=dev-keys
    ro.product.build.type=userdebug
    ro.product.build.version.incremental=8008904
    ro.product.build.version.release=11
    ro.product.build.version.release_or_codename=11
    ro.product.build.version.sdk=30
    ro.product.product.brand=google
    ro.product.product.device=generic_x86_arm
    ro.product.product.manufacturer=unknown
    ro.product.product.model=sdk_gwear_x05
    ro.product.product.name=sdk_gwear_x06
    # end common build properties
    #
    # ADDITIONAL PRODUCT PROPERTIES
    #
    ro.build.characteristics=emulator,nosdcard,watch
    persist.traced.enable=1
    ro.com.google.ime.system_lm_dir=/product/usr/share/ime/google/wear_lms
    dalvik.vm.systemservercompilerfilter=speed-profile
    ro.product.vndk.version=30


    Okidoki:
    Code:
    ro.product.product.model=sdk_gwear_x05


    Need few attempts...

    But good I can edit system.img without crash... so no Hash check or something in this Direction...

    Edit 1.

    Step 1 done in funny riddle... puzzle...

    Need more time to correct the other props...

    Goal is to enter exact Playstore for GW4... and/or Samsung Apps...

    In Emulator on PC...
    5
    I want to make a small contribution to the thread in question, I have a gw4 ldu which did not allow any device configuration. I downloaded the SM-R890 EVA8 file and unzipped it with 7zip and then retransformed in tar format again with 7zip. I then connected the gw4 with netodin and uploaded the file to the device. Finished the job everything works wonders, it also received the latest update released by samsung. Tanks to Adfree for his hard job
    5
    "We" have still tiny problems...

    My problemS

    A
    I have NO device nor plan to buy in near future...

    B
    + no full Firmware for Odin/netOdin nor study...
    + no Combination Firmware...

    C
    No Service Manual leak...

    D
    Community to find solution is sooooooo f. huge...
    This problem is not new... something like this I know since years...

    Feel free to find solution for us. :cowboy:


    Thanx in advance.


    No joke.

    Feel free to do something.

    Best Regards