General Firmware and Combination Firmware and FOTA Delta and CSC change and...

Search This thread

Dundunbra

New member
Oct 4, 2022
4
3
I am not familiar with those words, what is CSC, PAP and LDU? Sorry

I can activate developer options and debugging
 
  • Like
Reactions: adfree

adfree

Senior Member
Jun 14, 2008
10,237
5,978
Samsung Galaxy Watch 4
Samsung Galaxy S22
@Dundunbra

I mean what you see in About Watch Software... tap tap if Developer Mode is enabled?

Example attached.

Thanx in advance.

I sent Conversation to you... with Link to SM-R880 Firmware...

Best Regards
 

Attachments

  • 26553533.png
    26553533.png
    52.4 KB · Views: 36

JazonX

Senior Member
Dec 16, 2009
2,239
877
Xiaomi Mi 11 Ultra
@JazonX
I am still confused...

SM-R910F or you mean BT only Version SM-R910...

R910FAU1AVH2​

Is Combination Firmware... Google spit out where to buy...

Best Regards

Love the theatrics. No, I saw this already and been using that since they were called Halabtech.

Any chance of a normal firmware ?

Combination has no use, because there is no stock firmware to revert back to normal usage.

Yes, It's the BT version of Watch 5.

Thanks a lot in advance if you can manage to get a normal firmware.
 

adfree

Senior Member
Jun 14, 2008
10,237
5,978
Samsung Galaxy Watch 4
Samsung Galaxy S22
No idea why...

But seems I have read AND write access to /system... GVH2

Code:
freshbl:/system/priv-app # rm -r GalaxyStore

Need some time for stupid tests...

Only as info...

Best Regards

Edit 1.

Code:
freshbl:/sdcard # mount -vo remount,rw /
try '/dev/block/dm-0' type 'ext4' on '/'
freshbl:/sdcard # cp Keystring_factory_FB.zip /system/priv-app
freshbl:/sdcard # cd /system/priv-app
freshbl:/system/priv-app # ziptool unzip Keystring_factory_FB.zip
Archive:  Keystring_factory_FB.zip
  inflating: Keystring_factory_FB/Keystring_factory_FB.apk
  inflating: Keystring_factory_FB/oat/arm/Keystring_factory_FB.odex
  inflating: Keystring_factory_FB/oat/arm/Keystring_factory_FB.vdex
freshbl:/system/priv-app # reboot
 
Last edited:

iBowToAndroid

Senior Member
Nov 9, 2010
5,503
1
1,752
Twin Cities MN
Love the theatrics. No, I saw this already and been using that since they were called Halabtech.

Any chance of a normal firmware ?

Combination has no use, because there is no stock firmware to revert back to normal usage.

Yes, It's the BT version of Watch 5.

Thanks a lot in advance if you can manage to get a normal firmware.
I have sources who can get me firmware for models ending in 0 or U
 

adfree

Senior Member
Jun 14, 2008
10,237
5,978
Samsung Galaxy Watch 4
Samsung Galaxy S22
Code:
freshbl:/sdcard # mount -vo remount,rw /
try '/dev/block/dm-0' type 'ext4' on '/'

freshbl:/sdcard # cp Keystring_factory_FB.zip /system/priv-app
freshbl:/sdcard # cd /system/priv-app
freshbl:/system/priv-app # ziptool unzip Keystring_factory_FB.zip
Archive:  Keystring_factory_FB.zip
  inflating: Keystring_factory_FB/Keystring_factory_FB.apk
  inflating: Keystring_factory_FB/oat/arm/Keystring_factory_FB.odex
  inflating: Keystring_factory_FB/oat/arm/Keystring_factory_FB.vdex

freshbl:/system/priv-app # rm Keystring_factory_FB.zip

freshbl:/system/priv-app # rm -r GalaxyStore

freshbl:/system/priv-app # rm -r WFotaAgent


I will try first to remove few more Apps...
Before modify or add...

Removed:
Galaxy Store ... for later play...
FOTA Agent ... to prevent Update... I have Root...


Added:
Factory IME from Combination Firmware




WISHlist:

A

More then 1 Minute screen time...

At the moment no idea where...


B

Modified System APKs...

First attempt few days ago with Magisk Module fail...

So I have more to search in XDA or Google... other Android 11 devices...


C

More APKs to add...

Will test to add Magisk... and my other must install Apps...

Few of them splitted...
No idea yet... maybe convert into 1 APK or I can find working Single APKs...


D

I hate this s h ttt...

I disable BT in hope of better Wifi stable connection... after Reboot BT is enabled by default...
This s u x xxxxX


Best Regards

Edit 1.

I think I will delete something from here... before for Test I will Fac Reset...

Code:
freshbl:/system/priv-app # cd ..
freshbl:/system # cd preload
freshbl:/system/preload # ls -a1l
total 48
drwxr-xr-x 12 root root 4096 2008-12-31 16:00 .
drwxr-xr-x 18 root root 4096 2008-12-31 16:00 ..
drwxr-xr-x  3 root root 4096 2008-12-31 16:00 BudsController
drwxr-xr-x  3 root root 4096 2008-12-31 16:00 CalculatorWatch
drwxr-xr-x  3 root root 4096 2008-12-31 16:00 GlobalGoals
drwxr-xr-x  3 root root 4096 2008-12-31 16:00 GlobalGoalsClassicWF
drwxr-xr-x  3 root root 4096 2008-12-31 16:00 GlobalGoalsCountDownWF
drwxr-xr-x  3 root root 4096 2008-12-31 16:00 GlobalGoalsDigitalWF
drwxr-xr-x  3 root root 4096 2008-12-31 16:00 GlobalGoalsSpinWF
drwxr-xr-x  3 root root 4096 2008-12-31 16:00 MSOutlook_Samsung
drwxr-xr-x  3 root root 4096 2008-12-31 16:00 VoiceRecorderWatch
drwxr-xr-x  3 root root 4096 2008-12-31 16:00 WatchMusic

Edit 2.

Okidoki... Deleted 3 more folders from preload...
Code:
freshbl:/system/preload # rm -r BudsController
freshbl:/system/preload # rm -r GlobalGoals
freshbl:/system/preload # rm -r MSOutlook_Samsung

Now Fac Reset... and check in Standalone and with paired Phone Setup...
To check if problems...
 
Last edited:
  • Like
Reactions: 73sydney

adfree

Senior Member
Jun 14, 2008
10,237
5,978
Samsung Galaxy Watch 4
Samsung Galaxy S22
@evil22

For me it is easier if you ask concrete Question for your device... exact for your device.

Then I can try to help... Because I have no Crystal Ball and only limited time and energy...

Otherwise I waste my time to write in my bad English...

Maybe you realized, that CSC change is not more easy 1 Click in Android 11 Samsung devices...

Users or Owner from INU (India) devices can simple enter Code...
All others NOT...
Look here:


Firmware Flashing with netOdin nor Odin change CSC by easy 1 click...
More NO...

Best Regards
 
@evil22

For me it is easier if you ask concrete Question for your device... exact for your device.

Then I can try to help... Because I have no Crystal Ball and only limited time and energy...

Otherwise I waste my time to write in my bad English...

Maybe you realized, that CSC change is not more easy 1 Click in Android 11 Samsung devices...

Users or Owner from INU (India) devices can simple enter Code...
All others NOT...
Look here:


Firmware Flashing with netOdin nor Odin change CSC by easy 1 click...
More NO...

Best Regards
Okay so, Model is Galaxy Watch 4 Classic LTE (SM-R895F) INU version, I've seen the code thing and my point is just to know if LTE does not work for me lets say after changing my CSC to XSG(United Arab Emirates). If I could revert back to INU by flashing firmware/changing firmware files/rooting, whatever is possible.
If you have this information for Galaxy Watch 4/5 and let's say upcoming wear os watches from Samsung, maybe if you make a guide on how to tweak things, it'd take the development further and genuinely interested people with prior knowledge would also be able to utilise and harness.

Best Regards
 
  • Like
Reactions: adfree

adfree

Senior Member
Jun 14, 2008
10,237
5,978
Samsung Galaxy Watch 4
Samsung Galaxy S22
@evil22

A

Sorry never used any kind of eSIM device...

Also never hold LTE Samsung Watch in my own fat hands...


B

SM-R895F

I have NO LTE Firmware for netOdin/Odin use...


C

SM-R895F Firmware not leaked from Samsung Server...


D

"""Our""" Firmware ""Dealer"" has no access to SM-R895F Firmware...

E

Only to US Firmware...
BUT SM-R895U can create new/more/other problems for you...


F

I see posts where users after CSC change have no FOTA updates anymore...

1 reason they are not really understand how this work...

Example... why choosing text string in Developer/Engineer Menu... if this is not supported by FOTA Server?

MEA for instance...

EUX

You see nothing... correct. Because this is not really valid CSC...

XSG is valid, but look here:

Now we look for your LTE...

I see NOTHING inside XSG folder... this is exact what you will get...
NOTHING, no FOTA Update, because not supported by Samsung


G

Samsung was able to find and block all (nearly all) unauthorized GSPN access...
This is why no leaks...

Also since Galaxy Watch Tizen crap... they did some funny things with F devices...

So problems to get F is not really new...

But since GW4 absolute Mega Knockout... because no F Firmware leaked nor in """darknet""" you can buy...

Same Situation for GW5...

Best Regards
 

adfree

Senior Member
Jun 14, 2008
10,237
5,978
Samsung Galaxy Watch 4
Samsung Galaxy S22
@evil22

About Rooting...

SM-R895F

A

I have no Firmware and it is impossible to create boot.img... to patch with Magisk.


B

Rooting at the moment only possible with attached USB cable, like this:

B.1

Rooting kills Knox... means bye bye Warranty stuff and some support of Apps...

BUT...

C

Look again at A.

We have no leaked Stock Firmware...

We have no Custom Kernel...

"""We""" could use SM-R895U Kernel from Combination Firmware for instance...

BUT again.

A is Mega KO

Best Regards
 

esca91

New member
Jun 13, 2022
3
0
Hello everybody,

Could you share firmware of Sm-r900 ?

Thanls All for good work !
Bests regards.
 

Top Liked Posts

  • There are no posts matching your filters.
  • 3
    This looks interesting... not tested yet:

    Best Regards

    Edit 1.

    Only short tested with installing APK nor systemshell.exe used...
    With my rooted SM-R875F... GVK6

    Code:
    freshul:/ $ su
    freshul:/ # am start -n com.sec.hiddenmenu/.IOTHiddenMenu -e 7267864872 72678647376477466
    Starting: Intent { cmp=com.sec.hiddenmenu/.IOTHiddenMenu (has extras) }
    Error type 3
    Error: Activity class {com.sec.hiddenmenu/com.sec.hiddenmenu.IOTHiddenMenu} does not exist.
    freshul:/ # am start -n com.samsung.android.cidmanager/.modules.preconfig.PreconfigActivity -a com.samsung.android.action.SECRET_CODE -d secret_code://27262826 --ei type 2
    Starting: Intent { act=com.samsung.android.action.SECRET_CODE dat=secret_code://27262826 cmp=com.samsung.android.cidmanager/.modules.preconfig.PreconfigActivity (has extras) }
    Error type 3
    Error: Activity class {com.samsung.android.cidmanager/com.samsung.android.cidmanager.modules.preconfig.PreconfigActivity} does not exist.
    freshul:/ # am start -n com.sec.hiddenmenu/.OTATest -e 7267864872 72678647376477466
    Starting: Intent { cmp=com.sec.hiddenmenu/.OTATest (has extras) }
    Error type 3
    Error: Activity class {com.sec.hiddenmenu/com.sec.hiddenmenu.OTATest} does not exist.

    If I have time I will check the full way...
    3
    Here's the SM-R920 AVK7 -> AWA3 DBT OTA update.zip, my friend JeyKul captured the link so I can share it.

    Cheers
    2
    Nice.

    I can now also change CSC WITHOUT Root.


    Need few minutes to charge battery.
    Then I can also check if local FOTA Delta aka update.zip work...

    Now I am on SM-R875F AUGF...

    If I am on GVK6 I can check again if still CSC change work.

    Best Regards
    2
    I can now also change CSC WITHOUT Root.
    Please write the instructions
    2
    I have installed GWA3 Update on my German (DBT) SM-R860 via FOTA update.zip Delta file...

    From GVK7... with help of earlier mentioned System Shell exploit...

    Here is the Delta file:

    GVK7 --> GWA3 SM-R860

    Step 1 is to push the file to device with ADB.

    Code:
    adb push update.zip /sdcard

    For Step 2.

    Later... I need some tester... to confirm...

    But in general Exploit... then Command for FOTA Admin... looks like my Screenshots...

    OWN RISK!

    Best Regards
  • 5
    Looks like it could be harder since Tizen...

    A
    Stock Firmware for netOdin/Odin not available yet...

    B
    Combination Firmware not available yet

    C
    FOTA Delta File for study I have:
    Code:
    current_version=R860XXU1AUGE/R860OXM1AUGE/
    updated_version=R860XXU1BUH9/R860OXM1BUH9/

    D

    In this FOTA Delta file from SM-R860 I can see overview... from CSC... Region Code OXM:
    Code:
    csc_information=OXM
    
    ACR
    AFR
    ARO
    ASA
    ATO
    AUT
    BGL
    BNG
    BRI
    BTU
    BVO
    CAC
    CAM
    CHO
    CIS
    COO
    DBT
    DKR
    ECT
    EGY
    EUR
    EUX
    ILO
    INU
    ITV
    KOO
    KSA
    LTA
    LUX
    MEA
    MID
    MRU
    MWD
    MXO
    MYM
    NEE
    NPL
    PAK
    PEO
    PHE
    PHN
    ROM
    SEB
    SEE
    SEK
    SER
    SIO
    SKZ
    SLK
    SWA
    TGY
    THO
    TPA
    TPH
    TTT
    TUN
    TUR
    UPO
    UYO
    XAA
    XAC
    XEF
    XEH
    XEO
    XEZ
    XFA
    XJP
    XME
    XNZ
    XSA
    XSE
    XSG
    XSK
    XSP
    XTC
    XXV
    ZTO

    More things... comes... later...

    Best Regards
    5
    No idea when Full firmwares for study leak...

    Meanwhile to understand maybe more about funny Region... helpfull this Android App to check Firmware:

    It is possible to decrypt from Test Server...

    Then maybe more clear...


    OXM seems also for DBT ZTO and so on...

    A
    In theory linked FOTA Delta should work for AUGE DBT or SER or ZTO...

    Question is only how to update manually...

    B
    Roll out official could be in waves... but could be also more funny like we allready knows...

    We will see the future of GW4 support.

    Best Regards
    5
    Tiny progress...

    GFX Card is Nvidia GTX 460...

    I thought this is Samsung joke with G account...

    Anyway. I have Root access to this Image...

    So will do some stupid tests...

    Best Regards
    5
    Tiny progress...

    Searched in system.img... 3 GB File for text string:
    Code:
    sdk_gwear_x86

    27 hits... then I changed few of them and renamed...
    Now I see:
    Code:
    sdk_gwear_x05

    05 is inside:
    Code:
    # begin common build properties
    # autogenerated by build/make/tools/buildinfo_common.sh
    ro.product.build.date=Thu Dec 16 16:58:02 UTC 2021
    ro.product.build.date.utc=1639673882
    ro.product.build.fingerprint=google/sdk_gwear_x86/generic_x86_arm:11/RWD4.211013.004/8008904:userdebug/dev-keys
    ro.product.build.id=RWD4.211013.004
    ro.product.build.tags=dev-keys
    ro.product.build.type=userdebug
    ro.product.build.version.incremental=8008904
    ro.product.build.version.release=11
    ro.product.build.version.release_or_codename=11
    ro.product.build.version.sdk=30
    ro.product.product.brand=google
    ro.product.product.device=generic_x86_arm
    ro.product.product.manufacturer=unknown
    ro.product.product.model=sdk_gwear_x05
    ro.product.product.name=sdk_gwear_x06
    # end common build properties
    #
    # ADDITIONAL PRODUCT PROPERTIES
    #
    ro.build.characteristics=emulator,nosdcard,watch
    persist.traced.enable=1
    ro.com.google.ime.system_lm_dir=/product/usr/share/ime/google/wear_lms
    dalvik.vm.systemservercompilerfilter=speed-profile
    ro.product.vndk.version=30


    Okidoki:
    Code:
    ro.product.product.model=sdk_gwear_x05


    Need few attempts...

    But good I can edit system.img without crash... so no Hash check or something in this Direction...

    Edit 1.

    Step 1 done in funny riddle... puzzle...

    Need more time to correct the other props...

    Goal is to enter exact Playstore for GW4... and/or Samsung Apps...

    In Emulator on PC...
    5
    "We" have still tiny problems...

    My problemS

    A
    I have NO device nor plan to buy in near future...

    B
    + no full Firmware for Odin/netOdin nor study...
    + no Combination Firmware...

    C
    No Service Manual leak...

    D
    Community to find solution is sooooooo f. huge...
    This problem is not new... something like this I know since years...

    Feel free to find solution for us. :cowboy:


    Thanx in advance.


    No joke.

    Feel free to do something.

    Best Regards