[Amazfit] 5tormChild:
Hey all,

it would be better to create a dedicated subforum for the Amazfit, because there are already at least 15-20 topics.

Just played with this plugin of Total Commander: https://totalcmd.net/plugring/android_adb.html

It's quite nice, since you can do almost anything ADB-related without searching for commands.

If you like open source just like me, you can use Double Commander instead of TC.

** My findings according /etc/ folder (/system/etc): **

- All_Setting.txt contains the screen settings for both screens (there are 2 overlapped),

- fonts.xml and system_fonts.xml contains the list of available fonts, and fallback_fonts.xml, you can bet,

- media_profiles.xml contains the settings for video and audio encoders (this watch could play MPEG-4 and RealVideo 9 files, but in media_codecs.xml there is a reference for Google Audio codec only),

- mixer_paths.xml contains the audio volume levels (this can be useful, because you don't have a dedicated mixer app ATM),

- Is logwatch.conf used for something nasty? https://github.com/mingming-killer/abc,

- hosts file can be used to redirect OTA requests to localhost

- if you can't connect your bluetooth device, there is a blacklist for vendors / MACs in /etc/bluetooth/auto_pair_devlist.conf file,

- /etc/firmware/bcm43438/ contains the FW file of this wifi/BT/FM chip: http://www.cypress.com/file/298076/download ("Single-Chip IEEE 802.11ac b/g/n MAC/Baseband/Radio with Integrated Bluetooth 4.1 and FM Receiver"); this is kinda nice, and it seems it even has an FM receiver, albeit without proper antenna I don't think it would work,

- the above folder has the bt_addr file, which contains the bluetooth MAC address,

- the comments are mostly English in almost every config and xml files, which is nice from Huami,

- in /etc/security/ there is a file named otacerts.zip, which contains the key (releasekey.x509.pem) for the released firmware, so we can sign a custom FW with it.

** My findings according /proc/ folder (/system/proc/): **

- the cpuinfo file contains a lot about the CPU ("system type: huanghe / machine: Unknown / processor: 0 / cpu model: Ingenic Xburst V4.15 FPU V0.0 / BogoMIPS: 1030.55 / wait instruction	: yes / microsecond timers: no / tlb_entries: 32 / extra interrupt vector: yes / hardware watchpoint: yes, count: 1, address/irw mask: [0x0fff] / isa: mips32r1 / ASEs implemented: / shadow register sets: 1 / kscratch registers: 0 / core: 0 / VCED exceptions: not available / VCEI exceptions: not available / Hardware: watch / Serial: 00000000 00000000 00000000 00000000"),

- devices and diskstats files contain the partition info,

- interrupts contains how the IRQ's of the HW parts are handled,

- meminfo contains a lot of interesting things about the RAM handling,

- mounts contains how the partitions are mounted,

- partitions has the partition layout (there are 9 partitions),

- timer_list contains the active timers and watchdogs,

- uptime has the time in seconds since last boot,

- version has this: "Linux version 3.10.14-00562-ge3eb21b (ubuntu@vm10-254-107-57.ksc.com) (gcc version 4.9 20140827 (prerelease) (GCC) ) #1 PREEMPT Fri Feb 10 18:52:34 CST 2017" - it's a pretty old Linux kernel, and the latest GCC is version 6, but at least it was compiled on 10th of February, 2017,

- /proc/hardware/list has this: "mmi.item:software_version,touchkey,lcddisplay,backlight,charge,usb,audioplay,mic,vibrator,gsensor,gyrsensor,stepcount,pressuresensor,heartrate_adc,bluetooth,wifi,factory_data_reset / lcd.exterior:round / lcd.dpi:240 / lcd.size:1.34 / lcd.name:lpm013m091a / lcd.chip:jdi / bluetooth.port:ttyS1 / bluetooth.chip:bcm43438 / system.name:ingenic / system.type:iwds / system.chip:m200" -=> Ingenic M200 is this: https://www.imgtec.com/blog/mips-based-ingenic-m200-chip-and-newton2-platform-wearables-and-iot/, the display is this: http://www.panelook.com/LPM013M091A_JDI_1.34_LCM_overview_27096.html...

** Things worth to mention IMO: **

- This watch seems to have ext4 filesystem,

- /sys/devices/ folder contains the available HW and their settings, like display brightness (in /sys/devices/jdi_lpm013m091a-lcd/backlight/pwm-backlight.0/ there is three files named brightness, max_brightness and actual_brightness),

- the /apps/ has all the installed applications, and it even has a mediaplayer; I think I'll upload all of them to VirusTotal to check if everything is nice, clean and tidy around them (you know, better to be cautious; I don't say this watch is spying on you, maybe the Chinese Amazfit Watch app does, or Mi Fit, or maybe neither of them),

- /bugreport/ folder has some live bugreport (the file is refreshed each time you enter this folder),

- /logcat/ folder has some nice live logs,

- /screenshot/ folder contains the watch's live display,

- /d/ folder stands for debug?... and so on...

(Windows uses backslash ('\') instead of slash ('/'), but since Amazfit runs Linux, I wrote the paths this way.)

Well, there is a slight chance that some Linux guru / geek / god(dess) has this watch, and after reading my post s/he thinks s/he could do a lot of things unimaginable ATM; my Linux knowledge is pretty basic, but I love Linux a lot, and it seems this watch has a lot of potential, so I'll continue tinkering.

Have a nice day / weekend, folks,

Regards,

StormChild