General Firmware and Combination Firmware and FOTA Delta and CSC change and...

Search This thread

Dundunbra

New member
Oct 4, 2022
4
3
I am not familiar with those words, what is CSC, PAP and LDU? Sorry

I can activate developer options and debugging
 
  • Like
Reactions: adfree

adfree

Senior Member
Jun 14, 2008
10,085
5,926
Samsung Galaxy Watch 4
Google Pixel Watch
@Dundunbra

I mean what you see in About Watch Software... tap tap if Developer Mode is enabled?

Example attached.

Thanx in advance.

I sent Conversation to you... with Link to SM-R880 Firmware...

Best Regards
 

Attachments

  • 26553533.png
    26553533.png
    52.4 KB · Views: 30

JazonX

Senior Member
Dec 16, 2009
2,228
866
Xiaomi Mi 11 Ultra
@JazonX
I am still confused...

SM-R910F or you mean BT only Version SM-R910...

R910FAU1AVH2​

Is Combination Firmware... Google spit out where to buy...

Best Regards

Love the theatrics. No, I saw this already and been using that since they were called Halabtech.

Any chance of a normal firmware ?

Combination has no use, because there is no stock firmware to revert back to normal usage.

Yes, It's the BT version of Watch 5.

Thanks a lot in advance if you can manage to get a normal firmware.
 

adfree

Senior Member
Jun 14, 2008
10,085
5,926
Samsung Galaxy Watch 4
Google Pixel Watch
No idea why...

But seems I have read AND write access to /system... GVH2

Code:
freshbl:/system/priv-app # rm -r GalaxyStore

Need some time for stupid tests...

Only as info...

Best Regards

Edit 1.

Code:
freshbl:/sdcard # mount -vo remount,rw /
try '/dev/block/dm-0' type 'ext4' on '/'
freshbl:/sdcard # cp Keystring_factory_FB.zip /system/priv-app
freshbl:/sdcard # cd /system/priv-app
freshbl:/system/priv-app # ziptool unzip Keystring_factory_FB.zip
Archive:  Keystring_factory_FB.zip
  inflating: Keystring_factory_FB/Keystring_factory_FB.apk
  inflating: Keystring_factory_FB/oat/arm/Keystring_factory_FB.odex
  inflating: Keystring_factory_FB/oat/arm/Keystring_factory_FB.vdex
freshbl:/system/priv-app # reboot
 
Last edited:

iBowToAndroid

Senior Member
Nov 9, 2010
5,434
1
1,720
Twin Cities MN
Love the theatrics. No, I saw this already and been using that since they were called Halabtech.

Any chance of a normal firmware ?

Combination has no use, because there is no stock firmware to revert back to normal usage.

Yes, It's the BT version of Watch 5.

Thanks a lot in advance if you can manage to get a normal firmware.
I have sources who can get me firmware for models ending in 0 or U
 

adfree

Senior Member
Jun 14, 2008
10,085
5,926
Samsung Galaxy Watch 4
Google Pixel Watch
Code:
freshbl:/sdcard # mount -vo remount,rw /
try '/dev/block/dm-0' type 'ext4' on '/'

freshbl:/sdcard # cp Keystring_factory_FB.zip /system/priv-app
freshbl:/sdcard # cd /system/priv-app
freshbl:/system/priv-app # ziptool unzip Keystring_factory_FB.zip
Archive:  Keystring_factory_FB.zip
  inflating: Keystring_factory_FB/Keystring_factory_FB.apk
  inflating: Keystring_factory_FB/oat/arm/Keystring_factory_FB.odex
  inflating: Keystring_factory_FB/oat/arm/Keystring_factory_FB.vdex

freshbl:/system/priv-app # rm Keystring_factory_FB.zip

freshbl:/system/priv-app # rm -r GalaxyStore

freshbl:/system/priv-app # rm -r WFotaAgent


I will try first to remove few more Apps...
Before modify or add...

Removed:
Galaxy Store ... for later play...
FOTA Agent ... to prevent Update... I have Root...


Added:
Factory IME from Combination Firmware




WISHlist:

A

More then 1 Minute screen time...

At the moment no idea where...


B

Modified System APKs...

First attempt few days ago with Magisk Module fail...

So I have more to search in XDA or Google... other Android 11 devices...


C

More APKs to add...

Will test to add Magisk... and my other must install Apps...

Few of them splitted...
No idea yet... maybe convert into 1 APK or I can find working Single APKs...


D

I hate this s h ttt...

I disable BT in hope of better Wifi stable connection... after Reboot BT is enabled by default...
This s u x xxxxX


Best Regards

Edit 1.

I think I will delete something from here... before for Test I will Fac Reset...

Code:
freshbl:/system/priv-app # cd ..
freshbl:/system # cd preload
freshbl:/system/preload # ls -a1l
total 48
drwxr-xr-x 12 root root 4096 2008-12-31 16:00 .
drwxr-xr-x 18 root root 4096 2008-12-31 16:00 ..
drwxr-xr-x  3 root root 4096 2008-12-31 16:00 BudsController
drwxr-xr-x  3 root root 4096 2008-12-31 16:00 CalculatorWatch
drwxr-xr-x  3 root root 4096 2008-12-31 16:00 GlobalGoals
drwxr-xr-x  3 root root 4096 2008-12-31 16:00 GlobalGoalsClassicWF
drwxr-xr-x  3 root root 4096 2008-12-31 16:00 GlobalGoalsCountDownWF
drwxr-xr-x  3 root root 4096 2008-12-31 16:00 GlobalGoalsDigitalWF
drwxr-xr-x  3 root root 4096 2008-12-31 16:00 GlobalGoalsSpinWF
drwxr-xr-x  3 root root 4096 2008-12-31 16:00 MSOutlook_Samsung
drwxr-xr-x  3 root root 4096 2008-12-31 16:00 VoiceRecorderWatch
drwxr-xr-x  3 root root 4096 2008-12-31 16:00 WatchMusic

Edit 2.

Okidoki... Deleted 3 more folders from preload...
Code:
freshbl:/system/preload # rm -r BudsController
freshbl:/system/preload # rm -r GlobalGoals
freshbl:/system/preload # rm -r MSOutlook_Samsung

Now Fac Reset... and check in Standalone and with paired Phone Setup...
To check if problems...
 
Last edited:
  • Like
Reactions: 73sydney

adfree

Senior Member
Jun 14, 2008
10,085
5,926
Samsung Galaxy Watch 4
Google Pixel Watch
@evil22

For me it is easier if you ask concrete Question for your device... exact for your device.

Then I can try to help... Because I have no Crystal Ball and only limited time and energy...

Otherwise I waste my time to write in my bad English...

Maybe you realized, that CSC change is not more easy 1 Click in Android 11 Samsung devices...

Users or Owner from INU (India) devices can simple enter Code...
All others NOT...
Look here:


Firmware Flashing with netOdin nor Odin change CSC by easy 1 click...
More NO...

Best Regards
 
@evil22

For me it is easier if you ask concrete Question for your device... exact for your device.

Then I can try to help... Because I have no Crystal Ball and only limited time and energy...

Otherwise I waste my time to write in my bad English...

Maybe you realized, that CSC change is not more easy 1 Click in Android 11 Samsung devices...

Users or Owner from INU (India) devices can simple enter Code...
All others NOT...
Look here:


Firmware Flashing with netOdin nor Odin change CSC by easy 1 click...
More NO...

Best Regards
Okay so, Model is Galaxy Watch 4 Classic LTE (SM-R895F) INU version, I've seen the code thing and my point is just to know if LTE does not work for me lets say after changing my CSC to XSG(United Arab Emirates). If I could revert back to INU by flashing firmware/changing firmware files/rooting, whatever is possible.
If you have this information for Galaxy Watch 4/5 and let's say upcoming wear os watches from Samsung, maybe if you make a guide on how to tweak things, it'd take the development further and genuinely interested people with prior knowledge would also be able to utilise and harness.

Best Regards
 
  • Like
Reactions: adfree

adfree

Senior Member
Jun 14, 2008
10,085
5,926
Samsung Galaxy Watch 4
Google Pixel Watch
@evil22

A

Sorry never used any kind of eSIM device...

Also never hold LTE Samsung Watch in my own fat hands...


B

SM-R895F

I have NO LTE Firmware for netOdin/Odin use...


C

SM-R895F Firmware not leaked from Samsung Server...


D

"""Our""" Firmware ""Dealer"" has no access to SM-R895F Firmware...

E

Only to US Firmware...
BUT SM-R895U can create new/more/other problems for you...


F

I see posts where users after CSC change have no FOTA updates anymore...

1 reason they are not really understand how this work...

Example... why choosing text string in Developer/Engineer Menu... if this is not supported by FOTA Server?

MEA for instance...

EUX

You see nothing... correct. Because this is not really valid CSC...

XSG is valid, but look here:

Now we look for your LTE...

I see NOTHING inside XSG folder... this is exact what you will get...
NOTHING, no FOTA Update, because not supported by Samsung


G

Samsung was able to find and block all (nearly all) unauthorized GSPN access...
This is why no leaks...

Also since Galaxy Watch Tizen crap... they did some funny things with F devices...

So problems to get F is not really new...

But since GW4 absolute Mega Knockout... because no F Firmware leaked nor in """darknet""" you can buy...

Same Situation for GW5...

Best Regards
 

adfree

Senior Member
Jun 14, 2008
10,085
5,926
Samsung Galaxy Watch 4
Google Pixel Watch
@evil22

About Rooting...

SM-R895F

A

I have no Firmware and it is impossible to create boot.img... to patch with Magisk.


B

Rooting at the moment only possible with attached USB cable, like this:

B.1

Rooting kills Knox... means bye bye Warranty stuff and some support of Apps...

BUT...

C

Look again at A.

We have no leaked Stock Firmware...

We have no Custom Kernel...

"""We""" could use SM-R895U Kernel from Combination Firmware for instance...

BUT again.

A is Mega KO

Best Regards
 

esca91

New member
Jun 13, 2022
3
0
Hello everybody,

Could you share firmware of Sm-r900 ?

Thanls All for good work !
Bests regards.
 

Top Liked Posts

  • There are no posts matching your filters.
  • 2
    Memo to me...

    Code:
    freshul:/ $ su
    freshul:/ # cd /efs/imei
    freshul:/efs/imei # ls -a1l
    total 32
    drwxrwxr-x  2 root   radio  4096 2021-11-21 06:38 .
    drwxrwx--x 15 system radio  4096 2021-11-21 06:26 ..
    -rw-r--r--  1 system system    3 2021-11-21 06:25 cid.dat
    -rw-rw-r--  1 radio  system    3 2022-11-09 01:21 mps_code.dat
    -rw-rw-r--  1 radio  root      3 2022-11-08 21:42 omcnw_code.dat
    -rwxrwxr-x  1 system radio    14 2021-11-21 06:25 prodcode.dat
    freshul:/efs/imei # cat cid.dat
    DBTfreshul:/efs/imei # cat mps_code.dat
    XSAfreshul:/efs/imei # cat omcnw_code.dat
    XSAfreshul:/efs/imei # cat prodcode.dat

    Will try to simplify for me...

    Code:
    D:\Android\ADBnew>adb push mps_code.dat /sdcard
    mps_code.dat: 1 file pushed, 0 skipped. 0.0 MB/s (3 bytes in 0.008s)
    
    D:\Android\ADBnew>adb shell
    freshul:/ $ su
    freshul:/ # cd /sdcard
    freshul:/sdcard # cp mps_code.dat /efs/imei


    I hope 1 file is enough for CSC change...

    Edit 1.

    After Command chinese Language is visable as I set TGY for Hong Kong...
    But still XSA und Software...
    Then I did FAC Reset... in Standalone Mode I see now TGY is fully set...

    Flashing now AUGF OLB again to undo Root... and be ready for FOTA update...
    1
    Rooted my SM-R875F AUGF OLB Region...

    Now changed CSC from XSA to TGY...

    Code:
    D:\Android\ADB>adb shell
    freshul:/ $ cd efs
    freshul:/efs $ ls
    ls: .: Permission denied
    1|freshul:/efs $ su
    freshul:/efs # ls
    Battery  FactoryApp  biometrics  carrier  cpdebug  gatekeeper  imei  lost+found  lpm  lpm_boot.log  pdp_bkup  pfw_data  recovery  sec_efs
    freshul:/efs # cd imei
    freshul:/efs/imei # ls
    cid.dat  mps_code.dat  omcnw_code.dat  prodcode.dat
    freshul:/efs/imei # cd /sdcard
    freshul:/sdcard # cp mps_code.dat /efs/imei
    freshul:/sdcard # cp omcnw_code.dat /efs/imei

    In SM-R870 I changed ever 3 files... but here tooo lazy...

    LTE have 1 more file... cid.dat

    Edit 1.

    Now I see chinese... maybe BRI...

    Edit 2.

    Bootloader locked again... now Flashing again AUGF for FOTA attempt...

    Edit 3.

    FOTA seems to work now... need some time to reach GVH1

    Edit 4.

    My SM-R875F now via FOTA here:
    Code:
    R875FXXU1GVH1/R875FOLB1GVH1/R875FXXU1GVH1

    Need some time to charge Battery and prepare boot.img for Rooting GVH1...
    1
    Please I need help from friendly SM-R875F user(s)

    I need files from folderS:
    Code:
    /optics
    /prism


    Attached example from GVH1 OLB Region... TGY is 1 CSC for instance...

    Searching for OXX Region like INU India:
    Code:
    R875FXXU1GVH1/R875FOXX1GVH1/R875FXXU1GVH1

    Also OXA Region is welcome.
    Code:
    R875FXXU1GVH1/R875FOXA1GVH1/R875FXXU1GVH1

    Thanx in advance.

    Best Regards

    Edit 1.

    Will check if without Root possible...
    Code:
    D:\Android\ADBnew>adb shell
    freshul:/ $ cd /
    freshul:/ $ cd /sdcard
    freshul:/sdcard $ mkdir 22
    freshul:/sdcard $ cd /
    freshul:/ $ cp -r /optics /sdcard/22
    cp: /optics/lost+found: Permission denied
    1|freshul:/ $ cp -r /prism /sdcard/22
    cp: /prism/lost+found: Permission denied

    Edit 2.

    Okidoki. Seems working without Root to get files...

    Code:
    D:\Android\ADBnew>adb pull /sdcard/22 .\lte
    /sdcard/22/: 240 files pulled, 0 skipped. 2.5 MB/s (187175014 bytes in 71.838s)
    1
    *#7785# what does this code do
  • 5
    Looks like it could be harder since Tizen...

    A
    Stock Firmware for netOdin/Odin not available yet...

    B
    Combination Firmware not available yet

    C
    FOTA Delta File for study I have:
    Code:
    current_version=R860XXU1AUGE/R860OXM1AUGE/
    updated_version=R860XXU1BUH9/R860OXM1BUH9/

    D

    In this FOTA Delta file from SM-R860 I can see overview... from CSC... Region Code OXM:
    Code:
    csc_information=OXM
    
    ACR
    AFR
    ARO
    ASA
    ATO
    AUT
    BGL
    BNG
    BRI
    BTU
    BVO
    CAC
    CAM
    CHO
    CIS
    COO
    DBT
    DKR
    ECT
    EGY
    EUR
    EUX
    ILO
    INU
    ITV
    KOO
    KSA
    LTA
    LUX
    MEA
    MID
    MRU
    MWD
    MXO
    MYM
    NEE
    NPL
    PAK
    PEO
    PHE
    PHN
    ROM
    SEB
    SEE
    SEK
    SER
    SIO
    SKZ
    SLK
    SWA
    TGY
    THO
    TPA
    TPH
    TTT
    TUN
    TUR
    UPO
    UYO
    XAA
    XAC
    XEF
    XEH
    XEO
    XEZ
    XFA
    XJP
    XME
    XNZ
    XSA
    XSE
    XSG
    XSK
    XSP
    XTC
    XXV
    ZTO

    More things... comes... later...

    Best Regards
    5
    No idea when Full firmwares for study leak...

    Meanwhile to understand maybe more about funny Region... helpfull this Android App to check Firmware:

    It is possible to decrypt from Test Server...

    Then maybe more clear...


    OXM seems also for DBT ZTO and so on...

    A
    In theory linked FOTA Delta should work for AUGE DBT or SER or ZTO...

    Question is only how to update manually...

    B
    Roll out official could be in waves... but could be also more funny like we allready knows...

    We will see the future of GW4 support.

    Best Regards
    5
    Tiny progress...

    GFX Card is Nvidia GTX 460...

    I thought this is Samsung joke with G account...

    Anyway. I have Root access to this Image...

    So will do some stupid tests...

    Best Regards
    5
    Tiny progress...

    Searched in system.img... 3 GB File for text string:
    Code:
    sdk_gwear_x86

    27 hits... then I changed few of them and renamed...
    Now I see:
    Code:
    sdk_gwear_x05

    05 is inside:
    Code:
    # begin common build properties
    # autogenerated by build/make/tools/buildinfo_common.sh
    ro.product.build.date=Thu Dec 16 16:58:02 UTC 2021
    ro.product.build.date.utc=1639673882
    ro.product.build.fingerprint=google/sdk_gwear_x86/generic_x86_arm:11/RWD4.211013.004/8008904:userdebug/dev-keys
    ro.product.build.id=RWD4.211013.004
    ro.product.build.tags=dev-keys
    ro.product.build.type=userdebug
    ro.product.build.version.incremental=8008904
    ro.product.build.version.release=11
    ro.product.build.version.release_or_codename=11
    ro.product.build.version.sdk=30
    ro.product.product.brand=google
    ro.product.product.device=generic_x86_arm
    ro.product.product.manufacturer=unknown
    ro.product.product.model=sdk_gwear_x05
    ro.product.product.name=sdk_gwear_x06
    # end common build properties
    #
    # ADDITIONAL PRODUCT PROPERTIES
    #
    ro.build.characteristics=emulator,nosdcard,watch
    persist.traced.enable=1
    ro.com.google.ime.system_lm_dir=/product/usr/share/ime/google/wear_lms
    dalvik.vm.systemservercompilerfilter=speed-profile
    ro.product.vndk.version=30


    Okidoki:
    Code:
    ro.product.product.model=sdk_gwear_x05


    Need few attempts...

    But good I can edit system.img without crash... so no Hash check or something in this Direction...

    Edit 1.

    Step 1 done in funny riddle... puzzle...

    Need more time to correct the other props...

    Goal is to enter exact Playstore for GW4... and/or Samsung Apps...

    In Emulator on PC...
    5
    "We" have still tiny problems...

    My problemS

    A
    I have NO device nor plan to buy in near future...

    B
    + no full Firmware for Odin/netOdin nor study...
    + no Combination Firmware...

    C
    No Service Manual leak...

    D
    Community to find solution is sooooooo f. huge...
    This problem is not new... something like this I know since years...

    Feel free to find solution for us. :cowboy:


    Thanx in advance.


    No joke.

    Feel free to do something.

    Best Regards