• Introducing XDA Computing: Discussion zones for Hardware, Software, and more!    Check it out!

G4H Kids smartwatch ?

Search This thread

ghatothkach

Senior Member
Jun 1, 2011
175
9
geehat.wordpress.com
hi

I got my hands on this smartwatch
https://www.amazon.com/gp/product/B07XTCGD7B
It seems to be a "G4H" kids smartwatch, which seems to be available from multiple vendors.
It seems to be running Android...
It has a pogopin based charging adapter, where the middle 3 pins are not usually connected but seem to be "USB pins"
I opened this up and I was able to find a ribbon cable G4E-USB-FPC-V0.1. / F6-2C connecting those pins to the PCB.

I bet someone make a USB data cable which also has connections to those middle pins.
[ Perhaps this one https://www.alibaba.com/product-detail/high-quality-custom-male-gold-plating_62427401556.html ]

Has anyone tried to hack this one yet ? Anyone knows what those middle 3 pins are ?
Any hints on putting this device into recovery mode or fastboot mode ?

G

Update: 2020-09-26
I got a 4 pin smartwatch fast charging cable
from EBAY. This now Charges and also gets me to connect to the watch as USB... I can do a lsusb on the device from my Rpi Linux.

lsusb -v

Code:
Bus 001 Device 065: ID 1782:5d03 Spreadtrum Communications Inc.
Couldn't open device, some information will be missing
Device Descriptor:
  bLength                18
  bDescriptorType         1
  bcdUSB               2.00
  bDeviceClass            0
  bDeviceSubClass         0
  bDeviceProtocol         0
  bMaxPacketSize0        64
  idVendor           0x1782 Spreadtrum Communications Inc.
  idProduct          0x5d03
  bcdDevice            4.04
  iManufacturer           1
  iProduct                2
  iSerial                 3
  bNumConfigurations      1
  Configuration Descriptor:
    bLength                 9
    bDescriptorType         2
    wTotalLength       0x0020
    bNumInterfaces          1
    bConfigurationValue     1
    iConfiguration          4
    bmAttributes         0xc0
      Self Powered
    MaxPower              500mA
    Interface Descriptor:
      bLength                 9
      bDescriptorType         4
      bInterfaceNumber        0
      bAlternateSetting       0
      bNumEndpoints           2
      bInterfaceClass         8 Mass Storage
      bInterfaceSubClass      6 SCSI
      bInterfaceProtocol     80 Bulk-Only
      iInterface              5
      Endpoint Descriptor:
        bLength                 7
        bDescriptorType         5
        bEndpointAddress     0x81  EP 1 IN
        bmAttributes            2
          Transfer Type            Bulk
          Synch Type               None
          Usage Type               Data
        wMaxPacketSize     0x0200  1x 512 bytes
        bInterval               0
      Endpoint Descriptor:
        bLength                 7
        bDescriptorType         5
        bEndpointAddress     0x01  EP 1 OUT
        bmAttributes            2
          Transfer Type            Bulk
          Synch Type               None
          Usage Type               Data
        wMaxPacketSize     0x0200  1x 512 bytes
        bInterval               1



PS: India based dev's, (we cannot really stop made-in-china, but we can at-least reflash all the made-in-china with AOSP)
[PS => Political Statement :cyclops: )

Some more Info:
https://omg-solutions.com/gps-tracker/latest-singapore-waterproof-video-call-gps-kids-watch-gps033w/
https://riseofsmart.com/smartwatche...ch-display-camera-take-video-smartwatch-kids/
https://www.flipkart.com/arroha-kids-smart-watch-gps-wifi-4g-smartwatch/p/itm40654c01873c8
https://naijarom.com/infinity-chinese-miracle-2-spd-v124
https://forum.hovatek.com/thread-21776.html
https://www.gadgetvictims.com/2017/07/diy-magnetic-charger-for-kingwear-lemfo.html



LEMFO is one of the manufacturers/brand names

Its using SC9820E from http://www.unisoc.com/sc9820e
https://sc9820e-datasheet.com/
The Wireless MAC on the device starts with
"40-45-DA" which is for...
Spreadtrum Communications (Shanghai) Co., Ltd.
Building 1, Spreadtrum Center, No.2288, Zuchongzhi Rd
Shanghai 201203

The build number seems to be G4H_EMMC_OVERSEA_240_5M_akq_IPS_w_2020.07.09_09.55.00, on the watch depicted in the pictures.
I also have another similar device whish has build number as G4H_EMMC_240_5M_YDE_A36H_OVERSEA_LINE_20200506_10.35.00

Looks like the Nokia 3310-4G is also powered by the same chipset
https://www.gizmochina.com/2018/03/26/nokia-3310-4g-packs-spreadtrum-sc9820-chipset/
The phone seems to be using "YunOS" which is some version of AOSP, also called AliOS (Alibaba version)
Does anyone have the Nokia 3310-4G model #TA-1077
 

Attachments

  • IMG_20200911_112451.jpg
    IMG_20200911_112451.jpg
    160.1 KB · Views: 137
  • IMG_20200911_112135.jpg
    IMG_20200911_112135.jpg
    149.2 KB · Views: 134
  • IMG_20200911_112127.jpg
    IMG_20200911_112127.jpg
    144.1 KB · Views: 127
  • IMG_20200911_070444.jpg
    IMG_20200911_070444.jpg
    121.9 KB · Views: 131
  • IMG_20200926_172301.jpg
    IMG_20200926_172301.jpg
    30.7 KB · Views: 138
  • IMG_20200926_172313.jpg
    IMG_20200926_172313.jpg
    41.5 KB · Views: 133
  • IMG_20200926_172322.jpg
    IMG_20200926_172322.jpg
    39.3 KB · Views: 123
  • IMG_20200926_172332.jpg
    IMG_20200926_172332.jpg
    39.9 KB · Views: 118
  • IMG_20200926_172341.jpg
    IMG_20200926_172341.jpg
    36.8 KB · Views: 134
Last edited:

pritish sahoo

Senior Member
Feb 17, 2014
303
461
26
Bhubaneswar
www.linkedin.com
hi

I got my hands on this smartwatch
https://www.amazon.com/gp/product/B07XTCGD7B
It seems to be a "G4H" kids smartwatch, which seems to be available from multiple vendors.
It seems to be running Android...
It has a pogopin based charging adapter, where the middle 3 pins are not usually connected but seem to be "USB pins"
I opened this up and I was able to find a ribbon cable G4E-USB-FPC-V0.1. / F6-2C connecting those pins to the PCB.

I bet someone make a USB data cable which also has connections to those middle pins.
[ Perhaps this one https://www.alibaba.com/product-detail/high-quality-custom-male-gold-plating_62427401556.html ]

Has anyone tried to hack this one yet ? Anyone knows what those middle 3 pins are ?
Any hints on putting this device into recovery mode or fastboot mode ?

G

Update: 2020-09-26
I got a 4 pin smartwatch fast charging cable
from EBAY. This now Charges and also gets me to connect to the watch as USB... I can do a lsusb on the device from my Rpi Linux.

lsusb -v

Code:
Bus 001 Device 065: ID 1782:5d03 Spreadtrum Communications Inc.
Couldn't open device, some information will be missing
Device Descriptor:
  bLength                18
  bDescriptorType         1
  bcdUSB               2.00
  bDeviceClass            0
  bDeviceSubClass         0
  bDeviceProtocol         0
  bMaxPacketSize0        64
  idVendor           0x1782 Spreadtrum Communications Inc.
  idProduct          0x5d03
  bcdDevice            4.04
  iManufacturer           1
  iProduct                2
  iSerial                 3
  bNumConfigurations      1
  Configuration Descriptor:
    bLength                 9
    bDescriptorType         2
    wTotalLength       0x0020
    bNumInterfaces          1
    bConfigurationValue     1
    iConfiguration          4
    bmAttributes         0xc0
      Self Powered
    MaxPower              500mA
    Interface Descriptor:
      bLength                 9
      bDescriptorType         4
      bInterfaceNumber        0
      bAlternateSetting       0
      bNumEndpoints           2
      bInterfaceClass         8 Mass Storage
      bInterfaceSubClass      6 SCSI
      bInterfaceProtocol     80 Bulk-Only
      iInterface              5
      Endpoint Descriptor:
        bLength                 7
        bDescriptorType         5
        bEndpointAddress     0x81  EP 1 IN
        bmAttributes            2
          Transfer Type            Bulk
          Synch Type               None
          Usage Type               Data
        wMaxPacketSize     0x0200  1x 512 bytes
        bInterval               0
      Endpoint Descriptor:
        bLength                 7
        bDescriptorType         5
        bEndpointAddress     0x01  EP 1 OUT
        bmAttributes            2
          Transfer Type            Bulk
          Synch Type               None
          Usage Type               Data
        wMaxPacketSize     0x0200  1x 512 bytes
        bInterval               1



PS: India based dev's, (we cannot really stop made-in-china, but we can at-least reflash all the made-in-china with AOSP)
[PS => Political Statement :cyclops: )

Some more Info:
https://omg-solutions.com/gps-tracker/latest-singapore-waterproof-video-call-gps-kids-watch-gps033w/
https://riseofsmart.com/smartwatche...ch-display-camera-take-video-smartwatch-kids/
https://www.flipkart.com/arroha-kids-smart-watch-gps-wifi-4g-smartwatch/p/itm40654c01873c8
https://naijarom.com/infinity-chinese-miracle-2-spd-v124
https://forum.hovatek.com/thread-21776.html
https://www.gadgetvictims.com/2017/07/diy-magnetic-charger-for-kingwear-lemfo.html



LEMFO is one of the manufacturers/brand names

Its using SC9820E from http://www.unisoc.com/sc9820e
https://sc9820e-datasheet.com/
The Wireless MAC on the device starts with
"40-45-DA" which is for...
Spreadtrum Communications (Shanghai) Co., Ltd.
Building 1, Spreadtrum Center, No.2288, Zuchongzhi Rd
Shanghai 201203

The build number seems to be G4H_EMMC_OVERSEA_240_5M_akq_IPS_w_2020.07.09_09.55.00, on the watch depicted in the pictures.
I also have another similar device whish has build number as G4H_EMMC_240_5M_YDE_A36H_OVERSEA_LINE_20200506_10.35.00

Looks like the Nokia 3310-4G is also powered by the same chipset
https://www.gizmochina.com/2018/03/26/nokia-3310-4g-packs-spreadtrum-sc9820-chipset/
The phone seems to be using "YunOS" which is some version of AOSP, also called AliOS (Alibaba version)
Does anyone have the Nokia 3310-4G model #TA-1077

Hi, can you pull the system os using adb?
That can help you to get the drivers, if you want to port another watch os.
 

harunyes

New member
Feb 17, 2009
1
0
Hello, Have you connected with adb? I opened the system engineer mode with dial *#*#83781#*#* But under Debug&Log tab, there is no enable debug mode. I think, If I can open debug mode, I can connect with adb.
 

wyofsj

New member
Mar 15, 2021
1
0
Thanks you all for those useful info. I have a watch like this. One of the things I am interested is to turn the watch's LTE to a wifi hotspot for other devices, and I found a way to do so, though not very convenience. I am posting the instruction here. Hopefully it is useful to others, and maybe there is a better way to do so:
  1. From Phone, dial *#*#83781#*#* to enter Engineer Mode
  2. Under Connectivity tab, “Start Services”, the go to “Sfatap Wifi Channel”, toggle Auto (off->on->off), then “OK” when seeing “Auto Close Warning”. Optionally choose a 2.4GHz Wifi Channel
  3. Back to the top/root screen, slide from the screen top, and choose the little blue icon at the upper-left most corner to setup Wifi hotspot’s name, security mode (open, WPA PSK, WPA2 PSK) and password.
Note that enabling hotspot will disable the watch's wifi to internet. Any change such as, reboot, turning off hotspot in 3), or enabling wifi will shutdown the hotspot. To enable again, repeat step 1-2 (settings in 3 is saved)
 

mardizajn

New member
Apr 5, 2021
2
0
I have same watch. After changing one parameter in Engineer mode, shartwatch doesn't recognize the SIM card and restarts automatically 1 min after boot.

Can you please support how to fix this issue? is there any possibility to do a factory reset using the button on Watch?
Or restore Engineer Mode to default?

THX a lot in advance
 

tedl2014

New member
Apr 29, 2016
3
0
hi

I got my hands on this smartwatch
https://www.amazon.com/gp/product/B07XTCGD7B
It seems to be a "G4H" kids smartwatch, which seems to be available from multiple vendors.
It seems to be running Android...
It has a pogopin based charging adapter, where the middle 3 pins are not usually connected but seem to be "USB pins"
I opened this up and I was able to find a ribbon cable G4E-USB-FPC-V0.1. / F6-2C connecting those pins to the PCB.

I bet someone make a USB data cable which also has connections to those middle pins.
[ Perhaps this one https://www.alibaba.com/product-detail/high-quality-custom-male-gold-plating_62427401556.html ]

Has anyone tried to hack this one yet ? Anyone knows what those middle 3 pins are ?
Any hints on putting this device into recovery mode or fastboot mode ?

G

Update: 2020-09-26
I got a 4 pin smartwatch fast charging cable
from EBAY. This now Charges and also gets me to connect to the watch as USB... I can do a lsusb on the device from my Rpi Linux.

lsusb -v

Code:
Bus 001 Device 065: ID 1782:5d03 Spreadtrum Communications Inc.
Couldn't open device, some information will be missing
Device Descriptor:
  bLength                18
  bDescriptorType         1
  bcdUSB               2.00
  bDeviceClass            0
  bDeviceSubClass         0
  bDeviceProtocol         0
  bMaxPacketSize0        64
  idVendor           0x1782 Spreadtrum Communications Inc.
  idProduct          0x5d03
  bcdDevice            4.04
  iManufacturer           1
  iProduct                2
  iSerial                 3
  bNumConfigurations      1
  Configuration Descriptor:
    bLength                 9
    bDescriptorType         2
    wTotalLength       0x0020
    bNumInterfaces          1
    bConfigurationValue     1
    iConfiguration          4
    bmAttributes         0xc0
      Self Powered
    MaxPower              500mA
    Interface Descriptor:
      bLength                 9
      bDescriptorType         4
      bInterfaceNumber        0
      bAlternateSetting       0
      bNumEndpoints           2
      bInterfaceClass         8 Mass Storage
      bInterfaceSubClass      6 SCSI
      bInterfaceProtocol     80 Bulk-Only
      iInterface              5
      Endpoint Descriptor:
        bLength                 7
        bDescriptorType         5
        bEndpointAddress     0x81  EP 1 IN
        bmAttributes            2
          Transfer Type            Bulk
          Synch Type               None
          Usage Type               Data
        wMaxPacketSize     0x0200  1x 512 bytes
        bInterval               0
      Endpoint Descriptor:
        bLength                 7
        bDescriptorType         5
        bEndpointAddress     0x01  EP 1 OUT
        bmAttributes            2
          Transfer Type            Bulk
          Synch Type               None
          Usage Type               Data
        wMaxPacketSize     0x0200  1x 512 bytes
        bInterval               1



PS: India based dev's, (we cannot really stop made-in-china, but we can at-least reflash all the made-in-china with AOSP)
[PS => Political Statement :cyclops: )

Some more Info:
https://omg-solutions.com/gps-tracker/latest-singapore-waterproof-video-call-gps-kids-watch-gps033w/
https://riseofsmart.com/smartwatche...ch-display-camera-take-video-smartwatch-kids/
https://www.flipkart.com/arroha-kids-smart-watch-gps-wifi-4g-smartwatch/p/itm40654c01873c8
https://naijarom.com/infinity-chinese-miracle-2-spd-v124
https://forum.hovatek.com/thread-21776.html
https://www.gadgetvictims.com/2017/07/diy-magnetic-charger-for-kingwear-lemfo.html



LEMFO is one of the manufacturers/brand names

Its using SC9820E from http://www.unisoc.com/sc9820e
https://sc9820e-datasheet.com/
The Wireless MAC on the device starts with
"40-45-DA" which is for...
Spreadtrum Communications (Shanghai) Co., Ltd.
Building 1, Spreadtrum Center, No.2288, Zuchongzhi Rd
Shanghai 201203

The build number seems to be G4H_EMMC_OVERSEA_240_5M_akq_IPS_w_2020.07.09_09.55.00, on the watch depicted in the pictures.
I also have another similar device whish has build number as G4H_EMMC_240_5M_YDE_A36H_OVERSEA_LINE_20200506_10.35.00

Looks like the Nokia 3310-4G is also powered by the same chipset
https://www.gizmochina.com/2018/03/26/nokia-3310-4g-packs-spreadtrum-sc9820-chipset/
The phone seems to be using "YunOS" which is some version of AOSP, also called AliOS (Alibaba version)
Does anyone have the Nokia 3310-4G model #TA-1077
Have you tried to send a text message to turn on debug mode? try this (no space): pw,123456,DEVELOP,1#
 

tedl2014

New member
Apr 29, 2016
3
0
hi

I got my hands on this smartwatch
https://www.amazon.com/gp/product/B07XTCGD7B
It seems to be a "G4H" kids smartwatch, which seems to be available from multiple vendors.
It seems to be running Android...
It has a pogopin based charging adapter, where the middle 3 pins are not usually connected but seem to be "USB pins"
I opened this up and I was able to find a ribbon cable G4E-USB-FPC-V0.1. / F6-2C connecting those pins to the PCB.

I bet someone make a USB data cable which also has connections to those middle pins.
[ Perhaps this one https://www.alibaba.com/product-detail/high-quality-custom-male-gold-plating_62427401556.html ]

Has anyone tried to hack this one yet ? Anyone knows what those middle 3 pins are ?
Any hints on putting this device into recovery mode or fastboot mode ?

G

Update: 2020-09-26
I got a 4 pin smartwatch fast charging cable
from EBAY. This now Charges and also gets me to connect to the watch as USB... I can do a lsusb on the device from my Rpi Linux.

lsusb -v

Code:
Bus 001 Device 065: ID 1782:5d03 Spreadtrum Communications Inc.
Couldn't open device, some information will be missing
Device Descriptor:
  bLength                18
  bDescriptorType         1
  bcdUSB               2.00
  bDeviceClass            0
  bDeviceSubClass         0
  bDeviceProtocol         0
  bMaxPacketSize0        64
  idVendor           0x1782 Spreadtrum Communications Inc.
  idProduct          0x5d03
  bcdDevice            4.04
  iManufacturer           1
  iProduct                2
  iSerial                 3
  bNumConfigurations      1
  Configuration Descriptor:
    bLength                 9
    bDescriptorType         2
    wTotalLength       0x0020
    bNumInterfaces          1
    bConfigurationValue     1
    iConfiguration          4
    bmAttributes         0xc0
      Self Powered
    MaxPower              500mA
    Interface Descriptor:
      bLength                 9
      bDescriptorType         4
      bInterfaceNumber        0
      bAlternateSetting       0
      bNumEndpoints           2
      bInterfaceClass         8 Mass Storage
      bInterfaceSubClass      6 SCSI
      bInterfaceProtocol     80 Bulk-Only
      iInterface              5
      Endpoint Descriptor:
        bLength                 7
        bDescriptorType         5
        bEndpointAddress     0x81  EP 1 IN
        bmAttributes            2
          Transfer Type            Bulk
          Synch Type               None
          Usage Type               Data
        wMaxPacketSize     0x0200  1x 512 bytes
        bInterval               0
      Endpoint Descriptor:
        bLength                 7
        bDescriptorType         5
        bEndpointAddress     0x01  EP 1 OUT
        bmAttributes            2
          Transfer Type            Bulk
          Synch Type               None
          Usage Type               Data
        wMaxPacketSize     0x0200  1x 512 bytes
        bInterval               1



PS: India based dev's, (we cannot really stop made-in-china, but we can at-least reflash all the made-in-china with AOSP)
[PS => Political Statement :cyclops: )

Some more Info:
https://omg-solutions.com/gps-tracker/latest-singapore-waterproof-video-call-gps-kids-watch-gps033w/
https://riseofsmart.com/smartwatche...ch-display-camera-take-video-smartwatch-kids/
https://www.flipkart.com/arroha-kids-smart-watch-gps-wifi-4g-smartwatch/p/itm40654c01873c8
https://naijarom.com/infinity-chinese-miracle-2-spd-v124
https://forum.hovatek.com/thread-21776.html
https://www.gadgetvictims.com/2017/07/diy-magnetic-charger-for-kingwear-lemfo.html



LEMFO is one of the manufacturers/brand names

Its using SC9820E from http://www.unisoc.com/sc9820e
https://sc9820e-datasheet.com/
The Wireless MAC on the device starts with
"40-45-DA" which is for...
Spreadtrum Communications (Shanghai) Co., Ltd.
Building 1, Spreadtrum Center, No.2288, Zuchongzhi Rd
Shanghai 201203

The build number seems to be G4H_EMMC_OVERSEA_240_5M_akq_IPS_w_2020.07.09_09.55.00, on the watch depicted in the pictures.
I also have another similar device whish has build number as G4H_EMMC_240_5M_YDE_A36H_OVERSEA_LINE_20200506_10.35.00

Looks like the Nokia 3310-4G is also powered by the same chipset
https://www.gizmochina.com/2018/03/26/nokia-3310-4g-packs-spreadtrum-sc9820-chipset/
The phone seems to be using "YunOS" which is some version of AOSP, also called AliOS (Alibaba version)
Does anyone have the Nokia 3310-4G model #TA-1077
Try this tutorial to enable adb/root: https://github.com/eisaev/SuperSUInstaller
 

StillDRE

Senior Member
Oct 23, 2010
138
4
Hi! I got a G4H(KGG KG70) watch as well for my kid, problem is that touch does work, every second time I turn on/off the screen. It worked perfectly before, but now it only works every second time I turn on/off the screen. I think that might be a software issue.

I've just started to research so haven't got far, any things I might could try?

The watch works perfectly other then that, but sometimes have trouble get the location.