[Other SmartWatches] david0rk:
So I'm new to xda, but this forum has been very helpful in my research and digging into this little gadget.

My girlfriend picked it up online on some auction site for $3, ~$10 total shipped..

I've lurked quite a bit and haven't found anyone with the exact same model as mine, although it may just be a software difference.

Anyway, here's what I've found out.

dmesg:

[ 457.431574] usb 3-2: New USB device found, idVendor=0e8d, idProduct=0003

[ 457.431579] usb 3-2: New USB device strings: Mfr=0, Product=0, SerialNumber=0

[ 457.488571] cdc_acm 3-2:1.1: ttyACM0: USB ACM device

[ 457.488894] usbcore: registered new interface driver cdc_acm

[ 457.488896] cdc_acm: USB Abstract Control Model driver for USB modems and ISDN adapters

[ 457.496454] usbcore: registered new interface driver usbserial

[ 457.496504] usbcore: registered new interface driver usbserial_generic

[ 457.496544] usbserial: USB Serial support registered for generic

[ 457.514004] usbcore: registered new interface driver option

[ 457.514718] usbserial: USB Serial support registered for GSM modem (1-port)

[ 460.031180] usb 3-2: USB disconnect, device number 3

[ 469.379588] usb 3-2: new full-speed USB device number 4 using xhci_hcd

[ 469.522639] usb 3-2: New USB device found, idVendor=0e8d, idProduct=0002

[ 469.522644] usb 3-2: New USB device strings: Mfr=2, Product=3, SerialNumber=4

[ 469.522646] usb 3-2: Product: CARNEO

[ 469.522648] usb 3-2: Manufacturer: MediaTek Inc

[ 469.522649] usb 3-2: SerialNumber: 532598606846370

[ 469.617795] usb-storage 3-2:1.0: USB Mass Storage device detected

[ 469.617894] scsi host6: usb-storage 3-2:1.0

[ 469.618060] usbcore: registered new interface driver usb-storage

[ 469.622778] usbcore: registered new interface driver uas

[ 470.640854] scsi 6:0:0:0: Direct-Access MEDIATEK FLASH DISK PQ: 0 ANSI: 0 CCS

[ 470.641722] sd 6:0:0:0: Attached scsi generic sg2 type 0

[ 470.642509] sd 6:0:0:0: [sdb] 15564800 512-byte logical blocks: (7.97 GB/7.42 GiB)

[ 470.643253] sd 6:0:0:0: [sdb] Write Protect is off

[ 470.643258] sd 6:0:0:0: [sdb] Mode Sense: 03 00 00 00

[ 470.643836] sd 6:0:0:0: [sdb] No Caching mode page found

[ 470.643842] sd 6:0:0:0: [sdb] Assuming drive cache: write through

lsusb:

-Watch powered on, no selection made (usb charging)

Bus 003 Device 004: ID 0e8d:0002 MediaTek Inc.

-Watch powered on, selected com port from menu

Bus 003 Device 008: ID 0e8d:0003 MediaTek Inc. MT6227 phone

Device info from menus/dialer codes:

[VERSION]

NX9_COB_V1_1_G09_B_HC_IPS_170516_1041

[BRANCH]

11CW1352MP

GPLUS61A_11C_NX9

BUILD:BUILD_NO

SERIAL#:

[BUILD TIME]

2017/05/16 10:41

[MRE VERSION] 3100

HAL_VERNO:

mtk soft ver: 0x1308

mtk hw ver: unknown

ver: 0x74

userid: 0

os: mtk52d

osvern:

model:c1

company:f001

width:0, height:0

maxram:716800

kbd:0

touchscreen:1

cap:0x40010

macro:

fae:dongming

build date: 20170516

buildtime: 2017/05/16 10:41

MRE

[version] 3100

[build time] 2017/05/16 10:41

[mem size] 888868

[support modules]

base

resmrg

comm

sm

resmrgc

ch

draw

gfxold

image

http

IMEIini

mul

xml

aud

camera

cell

pb

sim

sms

soc

status

tel

timer

launch

Dialer codes I found in the rom and tested:

*#9966*# engineering mode ?

*#0000# english

*#00000000# menu (needs sim)

*#6810# ???

*#931# ???

*#902# ???

*#932# ???

*#903# ???

*#993646633# menu of some sort

*#1234# BT mode

*#0044# set language to eng

*#63342835# mtk logo

*#8375# build info

*#06# imei

*#9987# quick test

A2DP ACP Mode: *#1234#

A2DP INT Mode: *#1234#

[MEM TEST]

=============== Memory Detection Report ===============

Internal RAM:	Size = 0x0000D000 (52KB)

External RAM:	Type = SRAM

Size = 0x00400000 (4MB/32Mb)

NOR Flash:	Device ID = "[Winbond] SF_W25Q32JV" (275)

Size = 0x00400000 (4MB/32Mb)

NAND Flash:	ERROR: NAND Flash wasnt detected!

cpu/pcb: drive [dot] google[dot]com/file/d/0BzNc0mWX8OZGRkszQXRLZXcxbFU/view?usp=sharing

Identifying mark? drive [dot] google[dot]com/file/d/0BzNc0mWX8OZGTk44VGYxbGNmWGs/view?usp=sharing

Extracted FW: drive[dot]google[dot]com/open?id=0BzNc0mWX8OZGUzJBZEI3R21WYm8

Raw Readback: drive[dot]google[dot]com/open?id=0BzNc0mWX8OZGM0xJVnUyekdHZkU

note: my master copy of the firmware has original bootlogo, but also has my address book & contacts in it, this is a restored/cleaned fw dump, but it has a custom boot animation (rotating picture of dickbutt) I have added.

I've been digging around in the rom, trying to figure out how to remove apps from the firmware to free up space, or possibly add new apps.

I found www[dot]dr-lex[dot]be/hardware/china_phone_flashing[dot]html , which has been very helpful but I'm not able to mount the partition as described in the post.

I'm a regular linux user and have done a bit of cross compiling stuff for my raspi, so i'm kind of curious if theres any info on how to get custom code running on these.

I've found these, but haven't had a chance to dig into them as of yet.

github[dot]com/xobs/fernvale-qemu

github[dot]com/xobs/fernly

In addition to the info above I have a few questions:

Does anyone have any sort of info on how to cut stuff out of the rom or possibly swap apps?

In regards to the CPU, I'm sure its arm, but is it armv5 v6 v7 ?

Has anyone dug into the internals of the nucleus OS?