General Firmware and Combination Firmware and FOTA Delta and CSC change and...

Search This thread

kevinjansen

Member
Jun 4, 2016
10
1
netOdin known from Tizen world... old Smartwatches from Samsung... also work with GW4:

You can see Link from 2017...
I NEVER found other Version. IMHO only 1 Version leaked... maybe in 2016..
So this Tool is 6 yearS old...

EVA8 Firmware for SM-R870:


Remove/rename file extension .ABC... then possible to unpack with 7Zip

Result looks hopefully like this:
Code:
smR870_EVA8_OXM_v1.tar

This 1 TAR file can be flashed to SM-R870 with netOdin.


Best Regards
Dear Sir,

Can you re-upload the SM-R870 firmware file?
The links aren't working anymore..
Thanks in advance!

Kind regards,
Kevin.
 

adfree

Senior Member
Jun 14, 2008
10,092
5,927
Samsung Galaxy Watch 4
Google Pixel Watch
A

I was able to fix my FOTA Update problem on my SM-R870 and my SM-R860...

SM-R860 stupid me set something and disabled access to Recovery... only black screen...

Long time ago I did something stupid...

Only realized how deadly... as I was not able to finish Update to GVH2...

Solution for my SM-R860:
Bootloader unlock... this Reset param etc and Recovery is avalaible again...
Then lock Bootloader again...
Knox NOT dripped because nothing flashed...

B

My Update Problem with SM-R870 was deeper because rooted...

Solution for me:

Bootloader Lock
Then downgrade via Odin to DUK1... via USB cable...

Then FOTA worked...

DUK1 ---> FVD4 ---> GVH2

And my Root with help of Magisk 24.3 also work.


C

I have nothing tested under DUK1... not sure if same result. If flashed EVA8 files to my SM-R870... EVA8.

But as FOTA work... correctly...


This means sboot.bin downgrade really work.
From EVA8 to DUK1


Only as info.

Best Regards
 
  • Like
Reactions: TheIntruder

Lucas0511

Senior Member
Mar 14, 2006
1,031
71
Thanks for your reply. Any chance we could change the CSC of U model so that it could recognize the networks outside the United States? I currently have GW5 U model, but it doesn't get activated by Canadian carriers.
This video explains how to gain access to "non-supported" eSIM of independent carriers the world over
 
Last edited:

adfree

Senior Member
Jun 14, 2008
10,092
5,927
Samsung Galaxy Watch 4
Google Pixel Watch
SM-R870 DUK1



SM-R870 EVA8




Here is DUK1... older as EVA8.

I can confirm full downgrade possible with Bootloader sboot.bin ...

This fixed my FOTA problem.

So FOTA update from DUK1 to FVD4 to GVH2 with success.


Tested only via USB cable and Odin.

I have NO idea if same result with netOdin.

Also NO idea if newer Firmware also can full downgrade back to DUK1...

For instance latest GVH2.


Only as info.

Best Regards
 

adfree

Senior Member
Jun 14, 2008
10,092
5,927
Samsung Galaxy Watch 4
Google Pixel Watch
Memo to me:

SM-R860
Code:
[ro.sf.lcd_density]: [320]

SM-R870
Code:
[ro.sf.lcd_density]: [340]

Because this is really helpfull to change density... to play with Phone Android Apps for instance...

Code:
adb shell wm density 235

User gave me nice hint for SM-R860...


So need some time to understand what to set for density 340.. is "better"...


Edit 1.

Some Google search result(s):

Edit 2.

Code:
D:\Android\ADB>adb shell
freshbl:/ $ wm density reset
freshbl:/ $ wm --help
Unknown command: --help
255|freshbl:/ $ wm -h
Window manager (window) commands:
  help
      Print this help text.
  size [reset|WxH|WdpxHdp] [-d DISPLAY_ID]
    Return or override display size.
    width and height in pixels unless suffixed with 'dp'.
  density [reset|DENSITY] [-d DISPLAY_ID]
    Return or override display density.
  folded-area [reset|LEFT,TOP,RIGHT,BOTTOM]
    Return or override folded area.
  scaling [off|auto] [-d DISPLAY_ID]
    Set display scaling mode.
  dismiss-keyguard
    Dismiss the keyguard, prompting user for auth if necessary.
  set-user-rotation [free|lock] [-d DISPLAY_ID] [rotation]
    Set user rotation mode and user rotation.
  dump-visible-window-views
    Dumps the encoded view hierarchies of visible windows
  set-fix-to-user-rotation [-d DISPLAY_ID] [enabled|disabled]
    Enable or disable rotating display for app requested orientation.

Edit 3.

So Value 72 is smallest I can set...
Code:
D:\Android\ADB>adb shell wm density 10
Error: density must be >= 72

D:\Android\ADB>adb shell wm density 72
 
Last edited:

adfree

Senior Member
Jun 14, 2008
10,092
5,927
Samsung Galaxy Watch 4
Google Pixel Watch
@sergey1977

First test result... without Root:

Code:
D:\Android\ADB>adb shell am broadcast -W -a android.provider.Telephony.SECRET_CODE -d android_secret_code://9920
Broadcasting: Intent { act=android.provider.Telephony.SECRET_CODE dat=android_secret_code://9920 flg=0x400000 }

Exception occurred while executing 'broadcast':
java.lang.SecurityException: Permission Denial: not allowed to send broadcast android.provider.Telephony.SECRET_CODE from pid=6271, uid=2000
        at com.android.server.am.ActivityManagerService.broadcastIntentLocked(ActivityManagerService.java:16621)
        at com.android.server.am.ActivityManagerService.broadcastIntentLocked(ActivityManagerService.java:16479)
        at com.android.server.am.ActivityManagerService.broadcastIntentWithFeature(ActivityManagerService.java:17338)
        at com.android.server.am.ActivityManagerShellCommand.runSendBroadcast(ActivityManagerShellCommand.java:746)
        at com.android.server.am.ActivityManagerShellCommand.onCommand(ActivityManagerShellCommand.java:198)
        at android.os.BasicShellCommandHandler.exec(BasicShellCommandHandler.java:98)
        at android.os.ShellCommand.exec(ShellCommand.java:44)
        at com.android.server.am.ActivityManagerService.onShellCommand(ActivityManagerService.java:10970)
        at android.os.Binder.shellCommand(Binder.java:929)
        at android.os.Binder.onTransact(Binder.java:813)
        at android.app.IActivityManager$Stub.onTransact(IActivityManager.java:5070)
        at com.android.server.am.ActivityManagerService.onTransact(ActivityManagerService.java:2980)
        at android.os.Binder.execTransactInternal(Binder.java:1159)
        at android.os.Binder.execTransact(Binder.java:1123)


Second attempt with my rooted SM-R870 GVH2

Code:
D:\Android\ADB>adb shell
freshbl:/ $ su
Permission denied
13|freshbl:/ $ su
freshbl:/ # am broadcast -W -a android.provider.Telephony.SECRET_CODE -d android_secret_code://9920
Broadcasting: Intent { act=android.provider.Telephony.SECRET_CODE dat=android_secret_code://9920 flg=0x400000 }
Broadcast completed: result=0
freshbl:/ #


Thank you very much sergey1977.

I will try other Codes...

Best Regards
 
Last edited:

adfree

Senior Member
Jun 14, 2008
10,092
5,927
Samsung Galaxy Watch 4
Google Pixel Watch
Few tests... SECRET Codes taken from...

A
Code:
freshbl:/ # am broadcast -W -a android.provider.Telephony.SECRET_CODE -d android_secret_code://83052020100812173552301071192687
Broadcasting: Intent { act=android.provider.Telephony.SECRET_CODE dat=android_secret_code://83052020100812173552301071192687 flg=0x400000 }
Broadcast completed: result=0
freshbl:/ #

I see nothing on screen... but can not look live... I have to walk between PC and Watch...


B
Code:
freshbl:/ # am broadcast -W -a android.provider.Telephony.SECRET_CODE -d android_secret_code://27262826
Broadcasting: Intent { act=android.provider.Telephony.SECRET_CODE dat=android_secret_code://27262826 flg=0x400000 }
Broadcast completed: result=0

I press Return on PC... then run as fast as I can to my rooted SM-R870...
:)

C
Code:
freshbl:/ # am broadcast -W -a android.provider.Telephony.SECRET_CODE -d android_secret_code://22623277326634424320
Broadcasting: Intent { act=android.provider.Telephony.SECRET_CODE dat=android_secret_code://22623277326634424320 flg=0x400000 }
Broadcast completed: result=0

Edit 1.

If all tested will check if difference Space...

Code:
<action android:name="com.samsung.android.action.SECRET_CODE"/>
                <data android:host="\ 83052020100812173552301071192687" android:scheme="android_secret_code"/>
                <data android:host="27262826" android:scheme="android_secret_code"/>
                <data android:host="\ 22623277326634424320" android:scheme="android_secret_code"/>
                <data android:host="\ 272837883" android:scheme="android_secret_code"/>



Edit 2.

Seems Space only to block... but not work for this Command...

Code:
freshbl:/ # am broadcast -W -a android.provider.Telephony.SECRET_CODE -d android_secret_code://272837883
Broadcasting: Intent { act=android.provider.Telephony.SECRET_CODE dat=android_secret_code://272837883 flg=0x400000 }
Broadcast completed: result=0
freshbl:/ # am broadcast -W -a android.provider.Telephony.SECRET_CODE -d android_secret_code:// 272837883
Broadcasting: Intent { act=android.provider.Telephony.SECRET_CODE dat=android_secret_code:// flg=0x400000 pkg=272837883 }
Broadcast completed: result=0
 
Last edited:

KNCI

New member
Sep 23, 2022
2
1
Hi, I own a galaxy watch 4 classic, it is seriously bootlooping, by this I mean no matter what I try it does not boot. I even tried going into recovery mode, the second recovery mode loads, the watch restarts. Please help, I don't know if maybe installing some firmware through netodin will work? I have been able to get into usb download mode
 

adfree

Senior Member
Jun 14, 2008
10,092
5,927
Samsung Galaxy Watch 4
Google Pixel Watch
Code:
<?xml version="1.0" encoding="utf-8" standalone="no"?><manifest xmlns:android="http://schemas.android.com/apk/res/android" android:compileSdkVersion="30" android:compileSdkVersionCodename="11" android:sharedUserId="android.uid.phone" package="com.samsung.android.cidmanager" platformBuildVersionCode="30" platformBuildVersionName="11">
    <uses-feature android:name="android.hardware.type.watch"/>
    <uses-permission android:name="com.sec.phone.permission.SEC_FACTORY_PHONE"/>
    <uses-permission android:name="android.permission.SYSTEM_ALERT_WINDOW"/>
    <uses-permission android:name="android.permission.MASTER_CLEAR"/>
    <uses-permission android:name="android.permission.REBOOT"/>
    <uses-permission android:name="com.samsung.permission.SHOW_MASTER_CLEAR_SETTINGS"/>
    <uses-permission android:name="android.permission.READ_PHONE_STATE"/>
    <uses-permission android:name="android.Manifest.permission.READ_PRIVILEGED_PHONE_STATE"/>
    <uses-permission android:name="android.permission.DELETE_PACKAGES"/>
    <uses-permission android:name="android.permission.CLEAR_APP_USER_DATA"/>
    <uses-permission android:name="android.permission.WAKE_LOCK"/>
    <uses-permission android:name="android.permission.INTERACT_ACROSS_USERS"/>
    <uses-permission android:name="com.sec.permission.preconfig"/>
    <uses-permission android:name="com.samsung.android.wearable.setupwizard.permission.RECEIVE_SETUPWIZARD_COMPLETED"/>
    <application android:allowBackup="false" android:appComponentFactory="android.support.v4.app.CoreComponentFactory" android:defaultToDeviceProtectedStorage="true" android:directBootAware="true" android:enabled="true" android:extractNativeLibs="false" android:label="@string/app_name" android:supportsRtl="true" android:usesNonSdkApi="true">
        <activity android:label="preconfig" android:name="com.samsung.android.cidmanager.preconfig.PreconfigActivity" android:noHistory="true" android:permission="com.sec.permission.preconfig" android:screenOrientation="portrait">
            <intent-filter>
                <action android:name="android.intent.action.MAIN"/>
                <category android:name="android.intent.category.DEVELOPMENT_PREFERENCE"/>
            </intent-filter>
        </activity>
        <receiver android:name="com.samsung.android.cidmanager.receiver.WCIDManagerReceiver">
            <intent-filter android:priority="999">
                <action android:name="android.intent.action.SIM_STATE_CHANGED"/>
            </intent-filter>
            <intent-filter>
                <action android:name="com.samsung.android.wearable.setupwizard.action.SETUPWIZARD_COMPLETE"/>
                <action android:name="com.samsung.android.wearable.sysui.action.TUTORIAL_COMPLETED"/>
            </intent-filter>
        </receiver>
        <receiver android:name="com.samsung.android.cidmanager.receiver.PreconfigReceiver" android:permission="com.sec.permission.preconfig">
            <intent-filter>
                <action android:name="com.samsung.android.action.SECRET_CODE"/>
                <data android:host="\ 83052020100812173552301071192687" android:scheme="android_secret_code"/>
                <data android:host="27262826" android:scheme="android_secret_code"/>
                <data android:host="\ 22623277326634424320" android:scheme="android_secret_code"/>
                <data android:host="\ 272837883" android:scheme="android_secret_code"/>
            </intent-filter>
            <intent-filter>
                <action android:name="com.samsung.intent.action.CHAMELEON_PRECONFIG"/>
                <data android:host="\ 3472867046185743" android:scheme="android_secret_code"/>
            </intent-filter>
        </receiver>
        <service android:name="com.samsung.android.cidmanager.service.WCIDManagerService" android:process="com.android.phone"/>
        <service android:name="com.samsung.android.cidmanager.service.SimStateIntentService" android:process="com.android.phone"/>
        <service android:exported="true" android:name="com.samsung.android.cidmanager.service.PreconfigService" android:permission="com.sec.permission.preconfig"/>
        <uses-library android:name="sec_platform_library"/>
    </application>
</manifest>

Decompiled CIDManager from GVH2...
Code:
com.samsung.android.cidmanager


Hmmm... what is this?

Code:
android:name="com.samsung.intent.action.CHAMELEON_PRECONFIG"/>

                <data android:host="\ 3472867046185743" android:scheme="android_secret_code"/>
 
  • Like
Reactions: TheIntruder

sergey1977

Senior Member
Mar 5, 2009
114
20
Samsung Galaxy Watch 4
found this. what do the red numbers mean?
Activity Resolver Table:
Non-Data Actions:
android.intent.action.MAIN:
35b7a0d com.samsung.sec.android.application.csc/.ui.CscVerifierActivity filter 311dc2
Action: "android.intent.action.MAIN"

Receiver Resolver Table:
Schemes:
android_secret_code:
206f7d3 com.samsung.sec.android.application.csc/.CscReceiver filter 5f7540e
Action: "android.provider.Telephony.SECRET_CODE"
Scheme: "android_secret_code"
Authority: "9920": -1
 

KNCI

New member
Sep 23, 2022
2
1
@KNCI

Sorry I have not seen your post...


A

Your Model Name?

Example:
SM-R870 or SM-R875U LTE for USA or...


B

You have any kind of idea what happens?
Firmware Update fail? Or accisent or...


C

Your Phone is from Samsung?
Or other Brand...


Best Regards

A
I am pretty sure it is the SM-R890, I got it from At&t as it was my moms, but she got a new one the other day and gave the old one to the tech guy in the house to mess with.

B
My diagnostic came down to firmware update failure that corrupted it, I can`t open anything on the reboot menu besides the usb download so I figured I would try with a different firmware whether its stock or hacked idk I am willing to try anything since it was a free watch.

C
Yes my phone is from Samsung, I am a full on Samsung guy.

Thank you for the reply!
 
Last edited:
  • Like
Reactions: adfree

adfree

Senior Member
Jun 14, 2008
10,092
5,927
Samsung Galaxy Watch 4
Google Pixel Watch
@KNCI

SM-R890 older Firmware EVA8 is here:

netOdin Tool is here:

Youtube Video is here... I have no other...


I know downgrade is possible. BUT I can only confirm from EVA8 to DUK1...

No idea if your Bootloader allow downgrade... So OWN RISK.

Be sure you charge Battery fully.

I hope this is still possible...

Maybe try in Download Wireless Mode to charge Battery... BEFORE Flash attempt with netOdin.

Best Regards
 
  • Like
Reactions: KNCI

adfree

Senior Member
Jun 14, 2008
10,092
5,927
Samsung Galaxy Watch 4
Google Pixel Watch
@salvator101

A

Please... NO Panic.

B

R870XXU1GVH2 is latest for now...

So I can NOT see you have problem now with FOTA Updates...
And we can not test your "feelings" now...


C

NO easy 1 click way back to INU...

Please look A...


D

It makes no sense to get in panic... if you not need waranty exact now...

So many Rumours so many "theories" in Interent...

Few People see UFOs... others talking ever day with Elvis...


E
Look A


F

If new Firmware comes... after GVH2....
Then you can check Fream vs. Reality...

But for now A... because NO way back to INU.


Sometimes better to think first... in other words choose wisely... or better:
OWN RISK!

Check A

Best Regards
 
  • Like
Reactions: TheIntruder

adfree

Senior Member
Jun 14, 2008
10,092
5,927
Samsung Galaxy Watch 4
Google Pixel Watch
Argh...

A
I have less luck with WiFi and GVH2 to dump the whole eMMC...

On EVA8 I can remember 3000 MB or 1 time 5000 MB from 16000...

But crap GVH2 not reach 1000...

I see in Developer Setings some WiFi Debug special stuff... will try if more stable Connection...

B
Still no luck with ADB on USB...

With density I was able to see little bit more... but seems not to help...
Was not able to see all text...
After Reset UART not activated...

IMHO param is ovverrride or blocked or... I am too stupid
 

Attachments

  • Screenshot_20220920_004944_servicemodeapp.png
    Screenshot_20220920_004944_servicemodeapp.png
    21.3 KB · Views: 18
  • Screenshot_20220920_005101_servicemodeapp.png
    Screenshot_20220920_005101_servicemodeapp.png
    13.6 KB · Views: 15
  • Screenshot_20220920_005132_servicemodeapp.png
    Screenshot_20220920_005132_servicemodeapp.png
    21.8 KB · Views: 14
  • Screenshot_20220920_010023_servicemodeapp.png
    Screenshot_20220920_010023_servicemodeapp.png
    21.3 KB · Views: 18
  • Screenshot_20220920_004702_usbsettings.png
    Screenshot_20220920_004702_usbsettings.png
    24.9 KB · Views: 18

adfree

Senior Member
Jun 14, 2008
10,092
5,927
Samsung Galaxy Watch 4
Google Pixel Watch
Argh...

Stupid me set XAA for stupid tests... with result...

WiFi not find my Router...

Now testing to downgrade from GVH2 direct to DUK1... to see if downgrade work like allready success from:
EVA8 to DUK1


I can remember to see some US Settings differ to WiFi crap...
Forgotten where I saw solution... but I am toooo lazy to change my Router config nor to debug over BT...

So if Flash okay... I can test few CSC change things on DUK1...

Best Regards

Edit 1.

DUK1 yes...

WiFi no... (WiFi work because I can see other... but not my, Router power off for few seconds... but no luck yet...)

Now I am setting with Phone... as no luck in Standalone...

Before in recovery chache wipe... then FAC Reset...
 
Last edited:

Top Liked Posts

  • There are no posts matching your filters.
  • 2
    Memo to me...

    Code:
    freshul:/ $ su
    freshul:/ # cd /efs/imei
    freshul:/efs/imei # ls -a1l
    total 32
    drwxrwxr-x  2 root   radio  4096 2021-11-21 06:38 .
    drwxrwx--x 15 system radio  4096 2021-11-21 06:26 ..
    -rw-r--r--  1 system system    3 2021-11-21 06:25 cid.dat
    -rw-rw-r--  1 radio  system    3 2022-11-09 01:21 mps_code.dat
    -rw-rw-r--  1 radio  root      3 2022-11-08 21:42 omcnw_code.dat
    -rwxrwxr-x  1 system radio    14 2021-11-21 06:25 prodcode.dat
    freshul:/efs/imei # cat cid.dat
    DBTfreshul:/efs/imei # cat mps_code.dat
    XSAfreshul:/efs/imei # cat omcnw_code.dat
    XSAfreshul:/efs/imei # cat prodcode.dat

    Will try to simplify for me...

    Code:
    D:\Android\ADBnew>adb push mps_code.dat /sdcard
    mps_code.dat: 1 file pushed, 0 skipped. 0.0 MB/s (3 bytes in 0.008s)
    
    D:\Android\ADBnew>adb shell
    freshul:/ $ su
    freshul:/ # cd /sdcard
    freshul:/sdcard # cp mps_code.dat /efs/imei


    I hope 1 file is enough for CSC change...

    Edit 1.

    After Command chinese Language is visable as I set TGY for Hong Kong...
    But still XSA und Software...
    Then I did FAC Reset... in Standalone Mode I see now TGY is fully set...

    Flashing now AUGF OLB again to undo Root... and be ready for FOTA update...
    1
    *#7785# what does this code do
    1
    Code:
    freshul:/ # mount -vo remount,rw /
    try '/dev/block/dm-0' type 'ext4' on '/'
    freshul:/ # cd /prism
    freshul:/prism # ls -a1l
    total 36
    drwxr-xr-x  6 root root  4096 2008-12-31 15:00 .
    drwxr-xr-x 27 root root  4096 2008-12-31 15:00 ..
    drwxr-xr-x  3 root root  4096 2008-12-31 15:00 HWRDB
    drwxr-xr-x  4 root root  4096 2008-12-31 15:00 etc
    drwx------  2 root root 16384 2008-12-31 15:00 lost+found
    drwxr-xr-x  4 root root  4096 2008-12-31 15:00 sipdb
    freshul:/prism # cd etc
    freshul:/prism/etc # ls -a1l
    total 36
    drwxr-xr-x  4 root root 4096 2008-12-31 15:00 .
    drwxr-xr-x  6 root root 4096 2008-12-31 15:00 ..
    -rw-r--r--  1 root root   14 2008-12-31 15:00 CSCVersion.txt
    -rw-r--r--  1 root root  932 2008-12-31 15:00 SW_Configuration.xml
    drwxr-xr-x 13 root root 4096 2008-12-31 15:00 carriers
    -rw-r--r--  1 root root    4 2008-12-31 15:00 code
    drwxr-xr-x  2 root root 4096 2008-12-31 15:00 init
    -rw-r--r--  1 root root    4 2008-12-31 15:00 sales_code.dat
    -rw-r--r--  1 root root   44 2008-12-31 15:00 sales_code_list.dat
    freshul:/prism/etc # cd carriers
    freshul:/prism/etc/carriers # ls -a1l
    total 52
    drwxr-xr-x 13 root root 4096 2008-12-31 15:00 .
    drwxr-xr-x  4 root root 4096 2008-12-31 15:00 ..
    drwxr-xr-x  2 root root 4096 2008-12-31 15:00 BRI
    drwxr-xr-x  2 root root 4096 2008-12-31 15:00 KDI
    drwxr-xr-x  2 root root 4096 2008-12-31 15:00 TGY
    drwxr-xr-x  2 root root 4096 2008-12-31 15:00 THL
    drwxr-xr-x  2 root root 4096 2008-12-31 15:00 XME
    drwxr-xr-x  2 root root 4096 2008-12-31 15:00 XNZ
    drwxr-xr-x  2 root root 4096 2008-12-31 15:00 XSA
    drwxr-xr-x  2 root root 4096 2008-12-31 15:00 XSE
    drwxr-xr-x  2 root root 4096 2008-12-31 15:00 XSP
    drwxr-xr-x  2 root root 4096 2008-12-31 15:00 XTC
    drwxr-xr-x  2 root root 4096 2008-12-31 15:00 XXV


    Okidoki... reason for landing in XSA or depend on prism.img... is inside
    Code:
    /etc/sales_code.dat

    I am on AUGF OLB on my SM-R875F...

    Attempt 1.
    Code:
    freshul:/prism/etc/carriers # rm -r BRI
    rm ro dir BRI (y/N):y
    rm ro BRI/enforceskippingpackages.txt (y/N):y
    rm: enforceskippingpackages.txt: Read-only file system
    rm ro BRI/sales_code.dat (y/N):y
    rm: sales_code.dat: Read-only file system
    rm ro BRI/BRI_keystrings.dat (y/N):y
    rm: BRI_keystrings.dat: Read-only file system
    rm ro BRI/contents.db (y/N):y
    rm: contents.db: Read-only file system
    rm ro BRI/enforcedeletepackage.txt (y/N):y
    rm: enforcedeletepackage.txt: Read-only file system
    rm ro BRI/byoddeletepackagenames.txt (y/N):y
    rm: byoddeletepackagenames.txt: Read-only file system

    Ehm... need some time to think...
    Code:
    freshul:/prism/etc/carriers # mount -vo remount,rw /prism
    try '/dev/block/platform/10500000.dwmmc0/by-name/prism' type 'ext4' on '/prism'

    Edit 1.

    Ah this work...
    Code:
    freshul:/prism/etc/carriers # rm -r BRI
    freshul:/prism/etc/carriers # rm -r KDI
    freshul:/prism/etc/carriers # rm -r THL
    freshul:/prism/etc/carriers # rm -r XME
    freshul:/prism/etc/carriers # rm -r XNZ
    freshul:/prism/etc/carriers # rm -r XSA
    freshul:/prism/etc/carriers # rm -r XSE
    freshul:/prism/etc/carriers # rm -r XSP
    freshul:/prism/etc/carriers # rm -r XTC
    freshul:/prism/etc/carriers # rm -r XXV
    freshul:/prism/etc/carriers # ls -a1l
    total 12
    drwxr-xr-x 3 root root 4096 2022-11-07 23:31 .
    drwxr-xr-x 4 root root 4096 2008-12-31 15:00 ..
    drwxr-xr-x 2 root root 4096 2008-12-31 15:00 TGY

    Edit 2.
    Reboot work so far but still XSA...

    FAC Reset not tested... maybe better I edit salescode.dat to TGY before...

    Now dumped...
    Code:
    freshul:/ # dd if=/dev/block/mmcblk0p31 of=/sdcard/dumpPRISM.bin
    1228800+0 records in
    1228800+0 records out
    629145600 bytes (600 M) copied, 51.328983 s, 12 M/s

    The hard part is IMHO valid for netOdin/Odin... also for my rooted device
    1
    Not sure if Sa.sung plays tiny Games...

    My SM-R860 is on GVI3...
    I will try to downgrade with netOdin back to EVB4:
    Code:
    smR860_EVB4_OXM_v1.tar

    Reason:

    I will check if Downgrade drip Knox...

    For now on GVI3:
    Code:
    D:\Android\ADB>adb shell getprop ro.boot.warranty_bit
    0

    I am charging Battery from 70 % to full...

    Later result...

    Best Regards

    Edit 1.

    Great...
    2 times failed to flash full pack...
    Then I removed super.img...

    This time luck to flash all files inside this pack...
    Code:
    <ID:0/001> 192.168.49.1
    <ID:0/001> Odin engine v(ID:1.0000)..
    <ID:0/001> File analysis..
    <ID:0/001> SetupConnection..
    <ID:0/001> Initialzation..
    <ID:0/001> Set PIT file..
    <ID:0/001> DO NOT TURN OFF TARGET!!
    <ID:0/001> Get PIT for mapping..
    <ID:0/001> Get PIT Transmission
    <ID:0/001> Firmware update start..
    <ID:0/001> SingleDownload.
    <ID:0/001> boot.img
    <ID:0/001> NAND Write Start!!
    <ID:0/001> cache.img
    <ID:0/001> dtbo.img
    <ID:0/001> keystorage.bin
    <ID:0/001> ldfw.img
    <ID:0/001> metadata.img
    <ID:0/001> misc.bin
    <ID:0/001> omr.img
    <ID:0/001> optics.img
    <ID:0/001> prism.img
    <ID:0/001> recovery.img
    <ID:0/001> sboot.bin
    <ID:0/001> super.img
    <ID:0/001>
    <ID:0/001> XmitData
    <ID:0/001> Complete(Write) operation failed.
    <ID:0/001> Removed!!
    <OSM> All threads completed. (succeed 0 / failed 1)

    XmitData is not new to me...
    Saw this in Tizen time... but not with GW4... first time...

    Now I have only 40 % battery left...
    GW4 seems not to charge in Download Wireless Mode like Tizen Watches...

    I need "only" to flash super.img...

    Lets count how many attempts I need...

    Edit 2.
    Few attempts later...
    Restarted my Notebook... hope this time more luck

    Edit 3.
    Boah I ha..e

    This not happen with SM-R870 nor SM-R875F...

    Maybe last attempt as only 24 % Battery left...
    netOdin work since 20 minutes...
    F%&ing progress bar less 50 %


    Edit 4.
    F%&... 19 % left.

    I was able to do FAC Reset in Recovery... now on Charger...
    netOdin started...

    Edit 5.

    Boah ...
    Maybe I found way to charge battery...

    In DL Wireless Mode...

    After Warning to charge minimum to 15 %... I was on 11 %...

    I pressed Power Button twice... like for AP Mode...
    Now I see in ( DN_Err) but battery is now at 15 %...

    No idea if good for display... as Display is full on...

    But I will wait for 100 % battery charge before I remove from Charger and try again on other Notebook...

    Edit 6.
    This is absolute horror...

    I can charge 15 % battery in Download Wireless... then I can double press Power Button... for AP connection to netOdin...

    Still fail... but more then 15 % battery charge not possible...

    AAAAAAAAAAAAAAAAAARGHHHHHhhhhhhhhhhhh....

    Edit 7.

    Maybe my fault is Notebooks nearly full... not enough space maybe...

    Deleted few files... now 12 GB free...

    Edit 8.

    25 minutes... 1 % battery left...

    progressbar less 50 %...

    Something is wrong with this sh it WiFi from SM-R860...
    Or my old WiFi crap in my old Notebooks
    1
    Oh great.

    15 % Battery is around 30 minutes alive in Download Wireless...

    Tested with this old USB WiFi...

    Progressbar this time more then 50 % and I was really close... before power down...

    Hmmmmm... 1 choice is to find faster WiFi Hardware...

    Or I am downgrade from halfdead EVB4... to AUGJ...

    Here super.img is 200 MB smaller...
  • 5
    Looks like it could be harder since Tizen...

    A
    Stock Firmware for netOdin/Odin not available yet...

    B
    Combination Firmware not available yet

    C
    FOTA Delta File for study I have:
    Code:
    current_version=R860XXU1AUGE/R860OXM1AUGE/
    updated_version=R860XXU1BUH9/R860OXM1BUH9/

    D

    In this FOTA Delta file from SM-R860 I can see overview... from CSC... Region Code OXM:
    Code:
    csc_information=OXM
    
    ACR
    AFR
    ARO
    ASA
    ATO
    AUT
    BGL
    BNG
    BRI
    BTU
    BVO
    CAC
    CAM
    CHO
    CIS
    COO
    DBT
    DKR
    ECT
    EGY
    EUR
    EUX
    ILO
    INU
    ITV
    KOO
    KSA
    LTA
    LUX
    MEA
    MID
    MRU
    MWD
    MXO
    MYM
    NEE
    NPL
    PAK
    PEO
    PHE
    PHN
    ROM
    SEB
    SEE
    SEK
    SER
    SIO
    SKZ
    SLK
    SWA
    TGY
    THO
    TPA
    TPH
    TTT
    TUN
    TUR
    UPO
    UYO
    XAA
    XAC
    XEF
    XEH
    XEO
    XEZ
    XFA
    XJP
    XME
    XNZ
    XSA
    XSE
    XSG
    XSK
    XSP
    XTC
    XXV
    ZTO

    More things... comes... later...

    Best Regards
    5
    No idea when Full firmwares for study leak...

    Meanwhile to understand maybe more about funny Region... helpfull this Android App to check Firmware:

    It is possible to decrypt from Test Server...

    Then maybe more clear...


    OXM seems also for DBT ZTO and so on...

    A
    In theory linked FOTA Delta should work for AUGE DBT or SER or ZTO...

    Question is only how to update manually...

    B
    Roll out official could be in waves... but could be also more funny like we allready knows...

    We will see the future of GW4 support.

    Best Regards
    5
    Tiny progress...

    GFX Card is Nvidia GTX 460...

    I thought this is Samsung joke with G account...

    Anyway. I have Root access to this Image...

    So will do some stupid tests...

    Best Regards
    5
    Tiny progress...

    Searched in system.img... 3 GB File for text string:
    Code:
    sdk_gwear_x86

    27 hits... then I changed few of them and renamed...
    Now I see:
    Code:
    sdk_gwear_x05

    05 is inside:
    Code:
    # begin common build properties
    # autogenerated by build/make/tools/buildinfo_common.sh
    ro.product.build.date=Thu Dec 16 16:58:02 UTC 2021
    ro.product.build.date.utc=1639673882
    ro.product.build.fingerprint=google/sdk_gwear_x86/generic_x86_arm:11/RWD4.211013.004/8008904:userdebug/dev-keys
    ro.product.build.id=RWD4.211013.004
    ro.product.build.tags=dev-keys
    ro.product.build.type=userdebug
    ro.product.build.version.incremental=8008904
    ro.product.build.version.release=11
    ro.product.build.version.release_or_codename=11
    ro.product.build.version.sdk=30
    ro.product.product.brand=google
    ro.product.product.device=generic_x86_arm
    ro.product.product.manufacturer=unknown
    ro.product.product.model=sdk_gwear_x05
    ro.product.product.name=sdk_gwear_x06
    # end common build properties
    #
    # ADDITIONAL PRODUCT PROPERTIES
    #
    ro.build.characteristics=emulator,nosdcard,watch
    persist.traced.enable=1
    ro.com.google.ime.system_lm_dir=/product/usr/share/ime/google/wear_lms
    dalvik.vm.systemservercompilerfilter=speed-profile
    ro.product.vndk.version=30


    Okidoki:
    Code:
    ro.product.product.model=sdk_gwear_x05


    Need few attempts...

    But good I can edit system.img without crash... so no Hash check or something in this Direction...

    Edit 1.

    Step 1 done in funny riddle... puzzle...

    Need more time to correct the other props...

    Goal is to enter exact Playstore for GW4... and/or Samsung Apps...

    In Emulator on PC...
    5
    "We" have still tiny problems...

    My problemS

    A
    I have NO device nor plan to buy in near future...

    B
    + no full Firmware for Odin/netOdin nor study...
    + no Combination Firmware...

    C
    No Service Manual leak...

    D
    Community to find solution is sooooooo f. huge...
    This problem is not new... something like this I know since years...

    Feel free to find solution for us. :cowboy:


    Thanx in advance.


    No joke.

    Feel free to do something.

    Best Regards