[Samsung Gear S3] adfree:
USBlyzer is excat what I meant with Log file was terrible complicated to me...

I used this long time ago to restore PIT files from SM-Z300H... TM1...

Here I spend hours... to solve the puzzle... :rolleyes:

I will later add some example...

Best Regards

Edit 1.

IRP_MJ_WRITE	ssudmdm0000	SUCCESS	Length 1024:
IRP_MJ_READ	ssudmdm0000	SUCCESS	Length 500:

Hmmmmmm... maybe write Commands could be cut... shorter... maybe...

As I see no difference between GT-I9300 and SM-Z130H... in length...

Hmmmmmm.... 8192 Bytes are dumped... but we need less...

16 x 500 Byte Packets...

Last is only 192...

IRP_MJ_READ	ssudmdm0000	SUCCESS	Length 192:

Hmmmmmmmmmmm...

Sniffed with Portmon... now will check full... with Other Tool... to be sure not important Bytes at end of Packet... :D :rolleyes:

Edit 2.

Only as example, why Portmon is compatible with my tiny low brain... I can easier understand and work with Log files:

IRP_MJ_WRITE	Length4:4F44494E

IRP_MJ_READ	Length4:4C4F4B45
IRP_MJ_WRITE	Length1024:6400000000000000030000000000

IRP_MJ_READ	Length8:6400000000000300
IRP_MJ_WRITE	Length1024:6400000005000000000010000000

IRP_MJ_READ	Length8:6400000000000000
IRP_MJ_WRITE	Length1024:6400000002000000000000000000

IRP_MJ_READ	Length8:6400000000000000
IRP_MJ_WRITE	Length1024:6500000001000000000000000000

IRP_MJ_READ	Length8:6500000000200000
IRP_MJ_WRITE	Length1024:6500000002000000000000000000

IRP_MJ_READ	Length500:769834121B000000434F4D5F54415
IRP_MJ_WRITE	Length1024:6500000002000000010000000000

IRP_MJ_READ	Length500:616B2E62696E00000000020000000
IRP_MJ_WRITE	Length1024:6500000002000000020000000000

IRP_MJ_READ	Length500:6E766974656D5F77636E2E62696E0
IRP_MJ_WRITE	Length1024:6500000002000000030000000000

IRP_MJ_READ	Length500:00680000004043534100000000000
IRP_MJ_WRITE	Length1024:6500000002000000040000000000

IRP_MJ_READ	Length500:0000020000000D000000050000000
IRP_MJ_WRITE	Length1024:6500000002000000050000000000

IRP_MJ_READ	Length500:02000000110000000500000006000
IRP_MJ_WRITE	Length1024:6500000002000000060000000000

IRP_MJ_READ	Length500:534338383030475F7363373731355
IRP_MJ_WRITE	Length1024:6500000002000000070000000000

IRP_MJ_READ	Length500:4653000000000000726F6F7466732
IRP_MJ_WRITE	Length1024:6500000002000000080000000000

IRP_MJ_READ	Length500:FFFFFFFFFFFFFFFFFFFFFFFFFFFFF
IRP_MJ_WRITE	Length1024:6500000002000000090000000000

IRP_MJ_READ	Length500:FFFFFFFFFFFFFFFFFFFFFFFFFFFFF
IRP_MJ_WRITE	Length1024:65000000020000000A0000000000

IRP_MJ_READ	Length500:
IRP_MJ_WRITE	Length1024:65000000020000000B0000000000

IRP_MJ_READ	Length500:
IRP_MJ_WRITE	Length1024:65000000020000000C0000000000

IRP_MJ_READ	Length500:
IRP_MJ_WRITE	Length1024:65000000020000000D0000000000

IRP_MJ_READ	Length500:
IRP_MJ_WRITE	Length1024:65000000020000000E0000000000

IRP_MJ_READ	Length500:00000000000000000800002020000
IRP_MJ_WRITE	Length1024:65000000020000000F0000000000

IRP_MJ_READ	Length500:
IRP_MJ_WRITE	Length1024:6500000002000000100000000000

IRP_MJ_READ	Length192:0000
IRP_MJ_WRITE	Length1024:6500000003000000000000000000

IRP_MJ_READ	Length8:6500000000000000
IRP_MJ_WRITE	Length1024:67000000

IRP_MJ_READ	Length8:6700000000000000
IRP_MJ_WRITE	Length1024:6700000001000000000000000000
IRP_MJ_CLEANUP
IRP_MJ_CLOSE

Packets are shorter... as modified to fit here...

Edit 3.

More simplified Log file...

Edit 4.

IRP_MJ_WRITE	Length4

IRP_MJ_READ	Length4
IRP_MJ_WRITE	Length1024

IRP_MJ_READ	Length8
IRP_MJ_WRITE	Length1024

IRP_MJ_READ	Length8
IRP_MJ_WRITE	Length1024

IRP_MJ_READ	Length8
IRP_MJ_WRITE	Length1024

IRP_MJ_READ	Length8
IRP_MJ_WRITE	Length1024

IRP_MJ_READ	Length500
IRP_MJ_WRITE	Length1024

IRP_MJ_READ	Length500
IRP_MJ_WRITE	Length1024

IRP_MJ_READ	Length500
IRP_MJ_WRITE	Length1024

IRP_MJ_READ	Length500
IRP_MJ_WRITE	Length1024

IRP_MJ_READ	Length500
IRP_MJ_WRITE	Length1024

IRP_MJ_READ	Length500
IRP_MJ_WRITE	Length1024

IRP_MJ_READ	Length500
IRP_MJ_WRITE	Length1024

IRP_MJ_READ	Length500
IRP_MJ_WRITE	Length1024

IRP_MJ_READ	Length500
IRP_MJ_WRITE	Length1024

IRP_MJ_READ	Length500
IRP_MJ_WRITE	Length1024

IRP_MJ_READ	Length500
IRP_MJ_WRITE	Length1024

IRP_MJ_READ	Length500
IRP_MJ_WRITE	Length1024

IRP_MJ_READ	Length500
IRP_MJ_WRITE	Length1024

IRP_MJ_READ	Length500
IRP_MJ_WRITE	Length1024

IRP_MJ_READ	Length500
IRP_MJ_WRITE	Length1024

IRP_MJ_READ	Length500
IRP_MJ_WRITE	Length1024

IRP_MJ_READ	Length192
IRP_MJ_WRITE	Length1024

IRP_MJ_READ	Length8
IRP_MJ_WRITE	Length1024

IRP_MJ_READ	Length8
IRP_MJ_WRITE	Length1024
IRP_MJ_CLEANUP
IRP_MJ_CLOSE

IRP_MJ_WRITE = 25 x Send Command

IRP_MJ_READ = 24 x

Hmmmm...

25 Commands to get 8 KB data from Phone or Wearable...

PIT is between 4 - 5 KB... so 3 KB additonal...

Edit 5.

Uups... my fault.

I have used USB Analyzer from Eltimo... long time ago...

With such fascinating Logs...

request type="URB" num="142" function="URB_FUNCTION_BULK_OR_INTERRUPT_TRANSFER" dir="Up" time="11:51:47.182" elapsed="00:00:36.251" delta="00:00:00.000" processed="00:00:00.000" buf. size="500 bytes" data dir="IN" status="SUCCESS"
UrbBulkOrInterruptTransfer
Hdr
Length	128	128
Function	0x9 (URB_FUNCTION_BULK_OR_INTERRUPT_TRANSFER)	0x9 (URB_FUNCTION_BULK_OR_INTERRUPT_TRANSFER)
Status	USBD_STATUS_SUCCESS	USBD_STATUS_SUCCESS
UsbdDeviceHandle	0x00001FFF6BAD9CF8	0x00001FFF6BAD9CF8
UsbdFlags	0x0	0x0
PipeHandle	0xFFFFE000942390E0 (0x81 IN BULK)	0xFFFFE000942390E0 (0x81 IN BULK)
TransferFlags	0x3 (IN | SHORT)	0x3 (IN | SHORT)
TransferBufferLength	4096	500
TransferBuffer	0xFFFFE0009807B000	0xFFFFE0009807B000
TransferBufferMDL	0x0000000000000000	0x0000000000000000
UrbLink	0x0000000000000000	0x0000000000000000
hca
Reserved8
[0]	0x0074006600000001	0x0074006600000001
[1]	0x006E00690057005C	0x006E00690057005C
[2]	0x00730077006F0064	0x00730077006F0064
[3]	0x005C0054004E0020	0x005C0054004E0020
[4]	0x0072007200750043	0x0072007200750043
[5]	0x00560074006E0065	0x00560074006E0065
[6]	0x0069007300720065	0x0069007300720065
[7]	0x00640000006E006F	0x00640000006E006F
[B]Data dump:
65 00 00 00 00 20 00 00	76 98 34 12 1d 00 00 00
10 aa 18 aa 90 aa a0 aa	43 4f 4d 5f 54 41 52 32
10 d0 e8 8e 00 e0 ff ff	53 50 52 44 37 37 33 30
00 00 00 00 00 00 00 00	00 00 00 00 00 00 00 00
00 00 00 00 00 00 00 00	02 00 00 00 50 00 00 00
00 00 00 00 00 00 00 00	02 00 00 00 01 00 00 00
00 00 00 00 00 00 00 00	00 00 00 00 64 00 00 00
00 00 00 00 00 00 00 00	00 00 00 00 00 00 00 00
00 00 00 00 00 00 00 00	42 4f 4f 54 00 00 00 00
00 00 00 00 00 00 00 00	00 00 00 00 00 00 00 00
00 00 00 00 00 00 00 00	00 00 00 00 00 00 00 00
00 00 00 00 00 00 00 00	00 00 00 00 00 00 00 00
00 00 00 00 00 00 00 00	73 70 6c 2e 69 6d 67 00
00 00 00 00 00 00 00 00	00 00 00 00 00 00 00 00
00 00 00 00 00 00 00 00	00 00 00 00 00 00 00 00
00 00 00 00 00 00 00 00	00 00 00 00 00 00 00 00
46 00 4f 00 00 00 00 00	00 00 00 00 00 00 00 00
bd 04 ef fe 00 00 01 00	00 00 00 00 00 00 00 00
0c 00 02 00 00 00 00 00	00 00 00 00 00 00 00 00[/B]

:rolleyes:

But I have old Logs from SM-Z300H...

Tool is expired... but maybe I will install on other PC or maybe new Version...

Meanwhile it seems I have also problems with TCP Tools to send more as 1024 Bytes... :rolleyes: :rolleyes: