yashsingh1/xdaforums huggingface dataset:
[Sony Smartwatch 2] Xtreme_FIRMWARE:
Is there a way to replace the image resources and reflash modded firmware???
[Sony Smartwatch 2] bl00dy:
try chaning the SONY boot logo, dd a new dfu and writing it
[Sony Smartwatch 2] Depump:
Can you mod for support other language ?
[Sony Smartwatch 2] naheel azawy:
Thanks, this looks really interesting but actually I didn't understand anything! :eek:

can we somehow do some modifications on the smartwatch2 system through your work?

and could you please explain more about what is "dfu-util"?
[Sony Smartwatch 2] maneulyori:
I tried it basic method (replace image from rom address) and failed.

I replaced 0x10D654 png file with another png file with cp sw2.bin sw2-mod.bin; dd if=10D654-mod.png of=sw2-mod.bin bs=1 seek=1103444 conv=notrunc .

I fiashed it and booted it. After flashing, my watch seems noticed some change. It disconnected from my phone but settings app icon does not changed. It seems watch has another icon store location in somewhere.
[Sony Smartwatch 2] bl00dy:
http://rc.fdr.hu/UM0391.pdf

dfu is just a firmware update format (dfuse)

did you re-upload (dev > file) and see if it stuck like redDragon did?

they could have a checksum or check from the fone app or mmc ?
[Sony Smartwatch 2] maneulyori:
I re-uploaded firmware from watch and checked it is same as modded firmware. I re-paired my watch to phone and phone didn't seem to notice my watch is modded firmware.

Additionally, I tried to mod sony boot logo. I write some modification with kolourpaint and modded firmware. It failed boot and I noticed both files header is different. Smartwatch's one has Exif header and my file has JFIF header.

Does anyone know how to attach exif header to image same as sony's way?

It starts with FF D8 FF E1 00 18 45 78 69 66 00 00 49 49 2A 00.
[Sony Smartwatch 2] Xtreme_FIRMWARE:
http://en.wikipedia.org/wiki/Exchangeable_image_file_format - it might be this???
[Sony Smartwatch 2] Xtreme_FIRMWARE:
Did you manage it?
[Sony Smartwatch 2] Xtreme_FIRMWARE:
It has many icons built into the host app source /res/
[Sony Smartwatch 2] lukasz2367:
Already anyone ever tried it http ://lunarius.fe80.eu/blog/smartwatch2-first-steps.html
[Sony Smartwatch 2] Xtreme_FIRMWARE:
Basically lists what we have already found out.
[Sony Smartwatch 2] :
My progress:

SmartWatch 2 uses a variant of STM32F43xxx (Datasheet) On page 84, figure 19, you can see the memory mapping. It tells you that eMMC is accessible from 0x0 to 0x1fffff, so

dfu-util -U eMMC.dmp --alt 1 --intf 0 -s 0x0:0x200000

It holds the A-Firmware (currently at 1.0.A.4.11).

You can also read that 0x80000000 - 0x81fffff is Internal Flash, so

dfu-util -U internal.dmp --alt 0 --intf 0 -s 0x08000000:0x200000

It holds the B-Firmware (currently at 1.0.B.4.154). It seems to be major parts of the userland. Also, it seems to have "MHIB" as magic. (Might be something like Main Human Interface Binary? Just guessing).

Of course you have to change --intf appropriately for your setup. Actually --alt is not necessary as --alt 0 seems to be mapped to --alt 1. Nevertheless dfu-util needs to know where to read from.

eMMC is advertised as 512 MiB, but only the first 2 MiB are mapped at boot time, so no chance to dump it via DFU mode.

While some pages are marked as non-readable, trying to read from 0x81FFFFF seems to crash DFU mode and makes it exit it.

Looking at the SmartWatch 2 license agreement Sony tells us about used open source tools. Interesting parts are Miniz and FatFs. Actually the fat.bin file in the SmartWatch-APK is compressed using Miniz. Have a look at Miniz's example3.c. It can decompress it. After that you can mount it using a loop-device. It shows up as a weird set of CID files, I'm currently investigating them. They have a header starting with the file's name and contain their length at 0xC. I'm quite sure this actually is the payload length and marks the end of the header.

If you use

binwalk -D 'jpeg.*:jpg' -D 'png.*:png' dump.full

you will end up with large files. They can be shortened and for the PNGs, I wrote a short C-program to cut them. If you want it, tell me.

fat.bin has to be written somewhere into eMMC after the first 2 MiB. This is also where I suspect settings to go into as dumpable eMMC and Internal Flash as changes to settings didn't reflect in them.
[Sony Smartwatch 2] Xtreme_FIRMWARE:
Sorry been busy any way to edit these png and reflash
[Sony Smartwatch 2] JustPlayingHard:
Man this SmartWatch 2 modding looks awesome :D. Hope we can have custom icons soon
[Sony Smartwatch 2] maneulyori:
Possibility reverse engineer bootloader using STM32F42 Discovery board

I got stm32f42 discovery board (www <dot> st <dot> com/web/catalog/tools/FM116/SC959/SS1532/LN1848/PF259090 (sorry, I cannot post link yet..)) from ebay. I uploaded smartwatch ROM dump on it and run it. After few second, I halted it and checked program counter. It says it is running on 0x08000000 - 0x080FFFFF. It means smartwatch bootloader is finished doing some initialization on this board and successfully jumped into main firmware code.

Since we cannot attach JTAG on smartwatch without removing sealed front touchscreen, I think it allows dynamic analysis using OpenOCD and some gdb client which specialized in reverse engineering (I'm still finding suitable gdb client. Does anyone know suitable gdb client for this purpose?) to discover possible memory remapping during booting, etc.
[Sony Smartwatch 2] Xtreme_FIRMWARE:
Thanks. Getting close now. I dont have any to mind right now. But I will tell you if I see anything.
[Sony Smartwatch 2] Xtreme_FIRMWARE:
what is planned

Basically when we finish and we have found a way to edit source aswell as resources we need to find out how the smartwatch 2 app communicates with the device. So when completed we can have modified firmwares with normal end-user functions. Such as it still having a companion app ect. But this is not our concentration at present. This only what we might do in the future.
[Sony Smartwatch 2] Xtreme_FIRMWARE:
Maybe this? Taken from arduino github for sw2

https://docs.google.com/file/d/0B6T0DsBnCmMDUDZJdVpJaUJGR1U/edit?usp=docslist_api
[Sony Smartwatch 2] Xtreme_FIRMWARE:
Latest firmware dump. dumped as much as i could.

Attatched below.
[Sony Smartwatch 2] Mavman42:
I guess sony still somewhat supporting smartwatch 2?http://developer.sonymobile.com/2014/10/29/smartwatch-2-api-documentation-now-available-online/
[Sony Smartwatch 2] Xtreme_FIRMWARE:
Somewhat yes. but only through liveware apps. Not through firmware. I am hoping that by the time the smartwatch 2 is 'Officially' unlocked to developers that we will have some sort of way to edit code and recompile or just resources and work from there.
[Sony Smartwatch 2] Mavman42:
Me too! Just got my smartwatch 2 yesterday and i love it!
[Sony Smartwatch 2] Xtreme_FIRMWARE:
Its a great platform. But with custom firmwares the community could get involved and give it even more features, and of course when sony give up on it and end support. community updates will still be rolled out. I need more input and help from other members to get this worked through, but so far we have come a long way and are almost at basic customization.
[Sony Smartwatch 2] JustPlayingHard:
How could I help Xtreme ?
[Sony Smartwatch 2] Xtreme_FIRMWARE:
If you could in any way fully extract the dumps somehow (maybe binwalk) or find a way to get nodded resources back onto the device without it resetting back that would be great. But if you can't that's fine
[Sony Smartwatch 2] JustPlayingHard:
Hmmm. Any beginners tips? Linux based system needed?
[Sony Smartwatch 2] Xtreme_FIRMWARE:
Linux? Yep. Just do in a terminal

Sudo apt-get dfu-util

Sudo apt-get binwalk

Assuming you already have done apt-get update.

To enter dfu mode plug cable into computer, then when the watch is off plug in the cable to watch and quickly hold power for 2sec. Screen will stay blank even with cable in this is supposed to happen.

Dfu-util (root) should work now. Any more help refer to other posts in this thread. Binwalk can extract somehow...
[Sony Smartwatch 2] Xtreme_FIRMWARE:
Social group made.

Anyone on this thread will be invited to the Smartwatch 2 Advanced Development Team

Social group. Where things like devbuilds and tests can be done without the public thread.

;)
[Sony Smartwatch 2] JustPlayingHard:
Sadly. I don't have a Linux machine on me :(
[Sony Smartwatch 2] Xtreme_FIRMWARE:
Use a virtual machine like virtualbox
[Sony Smartwatch 2] BatRoger:
My SW2 died

Folks, I know this is out of topic question but my SW2 died after the update. It seems to be in DFU mode "forever". Even with that "15 seconds pressing the button" thing and nothing happens.

But my PC recognize the SW2 when I plug the USB cable.

Is there some fix to this issue? I have the dfu-util and I will try to reload the original firmware... what do you think? But I can not find the SW2 orignal dfu file.

Some guidance will be appreciate. :D

Thanks!
[Sony Smartwatch 2] finalgravity525:
Same here, I hope someone knows how to reflash or reupgrade the sw2 or just to reset using a smartphones so that it can install again the sw2 app.

Sorry for my bad english :(
[Sony Smartwatch 2] reednoel4u:
[MENTION=5905421]Xtreme_FIRMWARE[/MENTION]

My SW2 was bricked, please help me to re install firmware for it.

My laptop using win8, 64 bit

Waiting for your support with many thanks
[Sony Smartwatch 2] reednoel4u:
Pls help me, how to flash this file to sw2? I just know windows system
[Sony Smartwatch 2] reednoel4u:
Me too,

I waiting for [MENTION=5905421]Xtreme_FIRMWARE[/MENTION] all time of day, but him not online yet.
[Sony Smartwatch 2] finalgravity525:
Guys, please check this link http://xdaforums.com/showthread.php?t=2635999&page=3 . [MENTION=5393937]bl00dy[/MENTION] attached a DFU file. Is this the firmware to reflash our sw2 or just the DFU firmware for the mn2(sw1)? I hope someone knows how to flash this :)
[Sony Smartwatch 2] bl00dy:
SW2 (stock)- i dont hv a SW1
[Sony Smartwatch 2] finalgravity525:
So this is for Smartwatch 2 sw2 device. Do you know how to flash this to our sw2 ? My sw2 right now is a half dead. So my only option is to reflash with working firmware. Thanks mate :)
[Sony Smartwatch 2] bl00dy:
this is somewhere else in the forums, but i'm lazy...

http://developer.sonymobile.com/ser...-to-flash-alternative-firmware-to-smartwatch/

also if you're not on nix, you can search for 'man' pages of programs, dfu-util has a few commands.

you want to 'download' (-D, as if you're the device).

this thread has people posting what they did to extract (upload) their dfu, you just replace -U with -D

i'm not exactly sure the memory adderss but it was something someone used in this forum, probably 0x8000* and 0x100* - or you can try without addresses and see what happens (i would do that last though)
[Sony Smartwatch 2] reednoel4u:
My sw2 was died, can log in dfu, who can help me how repair it.
[Sony Smartwatch 2] finalgravity525:
If only someone can post a specific steps to reflash this dfu files or bins to our sw2. :) I don't really have an idea to what addresses should I download the bins. :confused::confused: The .dfu file that Sir Bloody attached cannot be downloaded to our sw2 ,because dfu-util only supports dfuse upto 1.1a and sw2 is on a higher version. So only the parts/bins can be specifically downloaded to sw2 I think. :confused: Sorry for my bad english.
[Sony Smartwatch 2] Ry Chy®:
+1
[Sony Smartwatch 2] kokesh:
Anyone notices the following text in asw.bin?

Turning off [B]Lifelog [/B]activity tracking will change your Smart wake up alarms to regular
alarms.u000du000aContinue to turn off [B]Lifelog[/B]? You can select up to three watch faces to swipe
between when the screen is lit. Deselect a watch face before selecting another one At least one
watch face must be selected Lifelog activity tracking may increase SmartWatch 2 battery consumption.
Open [B]Lifelog [/B]Steps Walking Sleeping Create bookmark Bookmark created Deep sleep Light
sleep Awake Please log in to Lifelog on your phone or tablet. Goal reached! Running You have now
slept <Number_%02u:%02u> hours and reached your daily sleeping goal. You have now walked <Number_%02u:%02u> hours and reached your daily walking goal. You have now run
<Number_%02u:%02u> hours and reached your daily running goal. You have now walked
<Number_%u> steps and reached your daily steps goal.

Hmm....
[Sony Smartwatch 2] XperianPro:
I managed to decompile asw.bin and bl.bin to assembler code,changes can be mode and uploaded back to smartwatch again. Also smartwatch has ability to reboot itself to bootloader mode ( I guess this is bl.bin for? ),then it unlocks rest of emmc memory and proceeds to write to it.
[Sony Smartwatch 2] symbuzzer:
can you share?
[Sony Smartwatch 2] D0MINO:
I'm guessing there has been no progress on this and any hacking of the SW2 is dead.

Shame, as I got this for free and frankly, I find it rather useless and don't know what the point of it is! If I was able to load something more useful on it rather than it basically being an overpriced notification device it might make me use it!
[Sony Smartwatch 2] energyaxel:
hi !

I need your help !

my SW2 doesn't load, only SONY logo, load line, and reboot.... ;(

I download to sw2 files

dfu-util -c 1 -i 0 -a 0 -D memdump.raw -s 0x08000000

dfu-util -c 1 -i 0 -a 0 -D asw.bin -s 0x08040000

dfu-util -c 1 -i 0 -a 1 -D fat.bin -s 0x00000001

SW2 not work...

maybe i need to download bl.bin but i dont now adress 0x0****

and i have eMMC.dmp and internal.dmp files... how to flash it.

tnx !
[Sony Smartwatch 2] matin0611:
Hi

I have question

Is there anyway to make compass work again on sony smartwatch 2? With some hacking maybe? Because this app (compass for smartwatch 2) seems work on smartwatch 2 but sony remove magnetic sensor support
[Sony Smartwatch 2] hansitogo:
I reanimated 2 SW2 with the download of the 3 system files from /res/raw in com.sonymobile.smartconnect.smartwatch2.apk

(before black screen from flashing system for SW1)

commands:

dfu-util -c 1 -i 0 -a 0 -s 0x08000000 -D bl.bin

dfu-util -c 1 -i 0 -a 0 -s 0x08040000 -D asw.bin

dfu-util -c 1 -i 0 -a 1 -s 0x01 -D fat.bin
[Sony Smartwatch 2] pimikiel:
Hi.

I get managed to flash files to internal memory, but flashing last one (the important one for me) on to eMMC i got an "Error during download get_status" then watch goes into weird dfu-unreadable mode until i restart it.

Can this thing means that my eMMC memory is unsolidered, or damaged?

I was swimming with my watch, and as soon as I realised that it's dead I took it of. At home I fried it under a lightbulb, which was a little too close, trying to dry it out. Glass cracked into a webshape and display turned partly white. I replaces a glass and display, having one less damaged. But watch remained dead. When trying to run it again after a week or two it displays Flash FS message which brought me here.
[Sony Smartwatch 2] RedDragonTaff:
For my SmartWatch 2, the first 2 steps run fine, but step three doesn't progress at all using the bl.bin, asw.bin, fat.bin I extracted from the apk. Here's the verbose console log from my failed step 3:

$ sudo ./dfu-util -c 1 -i 0 -a 0 -s 0x01 -D ../../SW2_unpack/res/raw/fat.bin -v

dfu-util 0.7

Copyright 2005-2008 Weston Schmidt, Harald Welte and OpenMoko Inc.

Copyright 2010-2012 Tormod Volden and Stefan Schmidt

This program is Free Software and has ABSOLUTELY NO WARRANTY

Please report bugs to dfu-util@lists.gnumonks.org

Opening DFU capable USB device... ID 0fce:f0fa

Run-time device DFU version 011a

Found DFU: [0fce:f0fa] devnum=0, cfg=1, intf=0, alt=0, name="@Internal Flash /0x08000000/03*016Kg,01*016Kg,01*064Kg,07*128Kg,03*016Kg,01*016Kg,01*064Kg,07*128Kg"

Claiming USB DFU Interface...

Setting Alternate Setting #0 ...

Determining device status: state = dfuIDLE, status = 0

dfuIDLE, continuing

DFU mode device DFU version 011a

Device returned transfer size 2048

No valid DFU suffix signature

Warning: File has no DFU suffix

DfuSe interface name: "Internal Flash "

Memory segment at 0x08000000 3 x 16384 = 49152 (rew)

Memory segment at 0x0800c000 1 x 16384 = 16384 (rew)

Memory segment at 0x08010000 1 x 65536 = 65536 (rew)

Memory segment at 0x08020000 7 x 131072 = 917504 (rew)

Memory segment at 0x08100000 3 x 16384 = 49152 (rew)

Memory segment at 0x0810c000 1 x 16384 = 16384 (rew)

Memory segment at 0x08110000 1 x 65536 = 65536 (rew)

Memory segment at 0x08120000 7 x 131072 = 917504 (rew)

Downloading to address = 0x00000001, size = 557300

Error: Last page at 0x000880f4 is not writeable

Did anyone successfully perform step 3 yet? If so can I grab you set of these 3 files to flash please?

Thanks

AL
[Sony Smartwatch 2] RedDragonTaff:
Sorry typo, should have used:

$ sudo ./dfu-util -c 1 -i 0 -a 1 -s 0x01 -D ../../SW2_unpack/res/raw/fat.bin -v

This flashes the eMMC partition. Now the watch boots without showing the FlashFS, but instead I see a progress bar and as it almost reaches the end the watch reboots and the cycle starts again. Endless progress bar reaching almost 100% and reboot, <repeat>.

Does anyone else see this?

AL
[Sony Smartwatch 2] nokodanox:
Hi everyone!

Sorry for re-open this thread but, I have a Flash FS problem with my SmartWatch 2.

I tried everything about using the DFU for Downloading the 3 .bin files. And I'm having troubles with the last one (fat.bin) while trying to write on the "eMMC" with this command:

dfu-util -c 1 -i 0 -a 1 -s 0x01 -D fat.bin -v

I can run successfully this two commands but I'm stuck now with the last step:

dfu-util -c 1 -i 0 -a 0 -s 0x08000000 -D bl.bin

dfu-util -c 1 -i 0 -a 0 -s 0x08040000 -D asw.bin

This is what I get.

"Opening DFU capable USB device... ID 0fce:f0fa

Run-time device DFU version 011a

Found DFU: [0fce:f0fa] devnum=0, cfg=1, intf=0, alt=1, name="@eMMC /0x00000000/01*512Mg"

Claiming USB DFU Interface...

Setting Alternate Setting #1 ...

Determining device status: state = dfuIDLE, status = 0

dfuIDLE, continuing

DFU mode device DFU version 011a

Device returned transfer size 2048

No valid DFU suffix signature

Warning: File has no DFU suffix

DfuSe interface name: "eMMC "

Memory segment at 0x00000000 1 x 536870912 = 536870912 (rew)

Downloading to address = 0x00000001, size = 557300

Download from image offset 00000000 to memory 00000001-00000800, size 2048

Poll timeout 0 ms

Error during download get_status

Failed to write whole chunk: -7 of 2048 bytes"

Hope someone could help me unbrick this Smartwatch, If anyone could help me doing it, I would like to send a small gift via PayPal.

Thank you so much, waiting for your answers...
[Sony Smartwatch 2] heartofgearz:
hey, im getting the same error as yours.."Failed to write whole chunk: -7 of 2048 bytes" when writing the fat.bin file, did you fix yours?
[Nexus 4 Q&A, Help & Troubleshooting] belictony:
I am using Nexus 4 dalvik v4.4.3, flashed factory image.

In all ROMs including stock rom , whenever i press the recents button in nav bar, i get one second lag and its annoying.

changed kernels , tried franco, faux, ak,etc.. nothing fixes the lag
[Nexus 4 Q&A, Help & Troubleshooting] THEBANDIT420:
Get a new phone
[Nexus 4 Q&A, Help & Troubleshooting] Salty Wagyu:
Adjust the animation scales to something lower than 1x in Developer Options.

If that doesn't help, try the optimized dalvik and bionic libraries which you can flash from custom recovery, you can find more info here http://xdaforums.com/nexus-4/general/4-4-4-4-x-qualcomm-optimized-dalvik-t2546120 I'm personally using the Z2 libraries from the Nexus 5 thread at http://xdaforums.com/google-nexus-5/general/mod-dalvik-bionic-library-optimization-t2537299 which work fine on a Nexus 4.
[Nexus 4 Q&A, Help & Troubleshooting] The Zel:
Switch to ART and all lags will be gone
[One (M8) Q&A, Help & Troubleshooting] rusty-ragster:
i am about to switch from the note 3 the only android phones i have used were from samsung so i am a total noob when it comes to the htc dev community...i am about to buy an m8 which is from verizon usa but is sim unlocked meaning it can work in my country pakistan...the questions i have are as follows

the phone is from verizon will i be able to flash all the custom roms like PA,CM and other AOSP roms?because in samsungs world there are different roms for tmobile etc.

will flashing roms affect my phones unlocked status?

can i turn my phone into a gpe edition phone?

if there are any other hiccups or bugs which i should check before buying the phone please fill me in folks.
[One (M8) Q&A, Help & Troubleshooting] rodelisdeman:
First of you need to look at which bands are used in your country and compare them to the Verizon bands. Which can be found on google as I cannot link to other websites . Most countries outside of the US have carriers that use GSM networks so beware as verizon does not and uses a CDMA network. If you have a carrier in pakistan that uses GSM bands you can look at buying an AT&T version and look if bands coincide.

I would also suggest buying a unlocked phone which would make things much easier, as some custom roms cannot be flashed on the verizon/sprint version. If you want to flash custom roms you do need to unlock the bootloader. As I said above GPE roms usually do not work with verizon/sprint edition of a phone, as far as I know you can flash a GPE rom from phones on other carriers. Still I heavily suggest buying an unlocked phone.

I myself am using an unlocked HTC One M8 and have found no bugs whatoever and use a GPE rom and everything is smooth as silk. It's an amazing phone and worth the last penny but if your phone won't work with the bands in your country it's useless so be carefull!
[One (M8) Q&A, Help & Troubleshooting] Doughnut:
If you can buy a used model with s-off. It'll save you any potential headaches.
[One (M8) Q&A, Help & Troubleshooting] rusty-ragster:
thank you for the reply i checked up on the bands and they said it is gsm supported and the bands were alright but i found the verizon thread and there was a very weak number of roms so im holding off .
[HTC One X] cicc74:
I've noticed that the proximity sensor seems not to work properly anymore. The screen will turn off when near the ear during calls and turned back on right away when I took it away from my face just a little. Now it seems that the screen stays turned off for a longer period of time when taking it away from my face, I have to hit the power button to turn the screen on and sometimes multiple times. I never dropped my phone once, and my phone was never rooted with a custom rom it was all stock. Is anyone else having these issues? I have even changed the Power ON OFF Cable flex Proximity Sensor. I did a diagnostic *#*#3424#*#* P-sensor but when I cover the sensor only the lights menu turns on the screen doesn’t get black.

Thanks for help