yashsingh1/xdaforums huggingface dataset:
[Samsung Galaxy Watch 4] adfree:
No risk no fun...

OWN risk!

AP_R860ZCU1BUHG_CL22353390_QB42796093_REV00_user_low_ship_MULTI_CERT_meta_WATCH_OS11.tar.md5

BL_R860ZCU1BUHG_CL22353390_QB42796093_REV00_user_low_ship_MULTI_CERT.tar.md5

CSC_OMC_CHC_R860CHC1BUHG_CL22353390_QB42796093_REV00_user_low_ship_MULTI_CERT.tar.md5

SM-R860
R860ZCU1BUHG

Hmmmm... Model Name seems 1:1 same in Bootloader

AP_R860XXU1DULB_CL22777597_QB47736163_REV00_user_low_ship_MULTI_CERT_meta_WATCH_OS11.tar.md5

BL_R860XXU1DULB_CL22777597_QB47736163_REV00_user_low_ship_MULTI_CERT.tar.md5

CSC_OMC_OXM_R860OXM1DULB_CL22777597_QB47736163_REV00_user_low_ship_MULTI_CERT.tar.md5

SM-R860
R860XXU1DULB

Short compared from what I have...

Risk(s):

-

Knox bye bye

-

Not boot because other unknown Security crap...

-

Unknown if FOTA updates fully working...

If I am correct... then you need Teamviewer Software because remote...

So if something fail...

Only my opinion.

Best Regards
[Samsung Galaxy Watch 4] janjan:
Do you have the OTA files? Is this the boot image?
[Samsung Galaxy Watch 4] adfree:
I still have only the Delta files... aka FOTA...

Best Regards

Edit 1.

Older files as example...

https://xdaforums.com/t/firmware-an...d-csc-change-and.4323469/page-5#post-85801783
[Samsung Galaxy Watch 4] tids2k:
@janjan which OTA are you looking for ..
[Samsung Galaxy Watch 4] Niko5610:
Ota 700mb

Firmware 3+ GB
[Samsung Galaxy Watch 4] janjan:
Any OTA for SM-R875F.
[Samsung Galaxy Watch 4] adfree:
http://fota-cloud-dn.ospserver.net/firmware/DBT/SM-R875F/version.xml

Latest seems:

R875FXXU1DUJA/R875FOXA1DUJA/R875FXXU1DUJA

I have taken DBT because Germany...

Seems 500 MB... from BUH9 or BUI5...

I am very lazy at the moment...

Best Regards
[Samsung Galaxy Watch 4] adfree:
Here 3 Videos...

How to get FOTA Delta file with old Tablet...

R875FXXU1DUJA/R875FOXA1DUJA/R875FXXU1DUJA

from:

R875FXXU1BUH9/R875FOXA1BUH9/R875FXXU1BUH9

Tablet is easier to fake also Baseband/Modem...

Otherwise really tough to bypass Security check...

I will upload the 500 MB update.zip...

Need some time...

Edit 1.

Delta added...
[Samsung Galaxy Watch 4] adfree:
A

Last attempt to download my own update.zip from prior post fail...

No idea why, will try again from other PC...

B

Can somebody help to find correct Tool to unpack few things from Delta update.zip?

I fail with Win Tools... trying now this on Ubuntu Linux...

https://xdaforums.com/t/linux-free-superrs-kitchen-v1-2-1-5-01-08-2022.3597434/

Best Regards

Edit 1.

Missing step 1...

sudo apt-get install openjdk-8-jre

Hmmm... not correct...

I have

Ubuntu 20.04.3 LTS...​

Wil try to follow this...

Installation von Java mit Apt unter Ubuntu 20.04 | DigitalOcean

Java und die JVM (Java Virtual Machine) werden für viele Arten von Software benötigt, einschließlich Tomcat, Jetty, Glassfish, Cassandra und…

www.digitalocean.com

Will try this:

sudo apt install openjdk-8-jre-headless

Edit 2.

After Java seems to continue...

------------------------------------------------------------
SuperR's Kitchen Free
by SuperR
------------------------------------------------------------

NOTICE:
You need tools to continue.
(approximately 24MB download)

Would you like to download/install them now? y/n

Edit 3.

Downloading/Installing now ...
64-bit_python.zip: 7.6 MB ...
AIK_linux.zip: 7.43 MB ...
srk_smali.zip: 5.79 MB ...
update-binary-x86_64: 1.69 MB ...
update-binary-meta: 825 KB ...
update-binary-arm64: 1.48 MB ...
update-binary-x86: 1.68 MB ...
busybox-arm: 1.27 MB ...
busybox-x86: 1.62 MB ...
update-binary-arm: 1.06 MB ...
srkp_devices.zip: 535 KB ...
[Samsung Galaxy Watch 4] adfree:
I can NOT download attachment update.zip from here:

https://xdaforums.com/t/firmware-an...-csc-change-and.4323469/page-11#post-86335251

No idea why...

Tried only with Firefox on Win 10 and Ubuntu...

Is somebody able to download full and coorect?

Best Regards

Edit 1.

Hmmm... succeess with Edge and NOT loged in...

Will try with Firefox again and not loged in in XDA...

Maybe Uploader protection to load own files?
[Samsung Galaxy Watch 4] Fritz Fischer:
wget https://xdaforums.com/attachments/update-zip.5521681/ -O super_PROJECTNAME/update.zip

works for me
[Samsung Galaxy Watch 4] adfree:
superr shows in Log something about bsdiff...

If I Google...

android 11 bsdiff

I can find something like this...

refs/tags/android-11.0.0_r11 - platform/external/bsdiff - Git at Google

https://kth.diva-portal.org/smash/get/diva2:1538229/FULLTEXT01.pdf
[Samsung Galaxy Watch 4] Niko5610:
hello brother what exactly do you need?
[Samsung Galaxy Watch 4] shaker74:
Hello. Who can tell how easy it is to flash GW 4
[Samsung Galaxy Watch 4] TheIntruder:
Flash what? You haven't been reading the post have you...
[Samsung Galaxy Watch 4] adfree:
Can somebody help with PHP script?

I have deleted my old Ubuntu... now I can not use this PHP script in new Ubuntu...

Best Regards
[Samsung Galaxy Watch 4] Fritz Fischer:
try after installing php7.4-xml if you're using php7.4 (on ubuntu 20.04 for example) to get rid of the "Uncaught Error: Class 'SimpleXMLElement'" error
[Samsung Galaxy Watch 4] adfree:
Looks like "magic" Firmware Update EVA8 is avaliable for KOO...
[Samsung Galaxy Watch 4] thanito:
Just received the update in Greece. Huge update description 😂
[Samsung Galaxy Watch 4] marco_lu:
man new modality on watch 4
[Samsung Galaxy Watch 4] iBowToAndroid:
For anyone needing Watch firmware, I always have access to whatever the latest version is, for any and all USA models (no F models, etc).

{Mod edit: Linked thread has been deleted}
[Samsung Galaxy Watch 4] Jacob1004:
I purchased a watch4 LTE US version from eBay. Unfortunately it is software broken. But it was cheap vs a new watch4. I need stock firmware for this watch. Can you help me with this?
[Samsung Galaxy Watch 4] adfree:
BT only GW4 Firmware looks like this... 20 Files + PIT

fota.zip etc. not necessary...

Password for fota.zip is fotatest1234

lz4.exe -d super.img.lz4 super.img

lz4.exe -d prism.img.lz4 prism.img

lz4.exe -d recovery.img.lz4 recovery.img

lz4.exe -d boot.img.lz4 boot.img

lz4.exe -d sboot.bin.lz4 sboot.bin

lz4.exe -d tzar.img.lz4 tzar.img

lz4.exe -d optics.img.lz4 optics.img

lz4.exe -d tzsw.img.lz4 tzsw.img

lz4.exe -d up_param.bin.lz4 up_param.bin

lz4.exe -d dtbo.img.lz4 dtbo.img

lz4.exe -d ldfw.img.lz4 ldfw.img

lz4.exe -d uh.bin.lz4 uh.bin

lz4.exe -d keystorage.bin.lz4 keystorage.bin

lz4.exe -d userdata.img.lz4 userdata.img

lz4.exe -d vbmeta.img.lz4 vbmeta.img

lz4.exe -d cache.img.lz4 cache.img

lz4.exe -d metadata.img.lz4 metadata.img

lz4.exe -d misc.bin.lz4 misc.bin

lz4.exe -d omr.img.lz4 omr.img

lz4.exe -d vbmeta_system.img.lz4 vbmeta_system.img

Our old netOdin 5 yearS or older need some unpack/repack into TAR Action...

Working lz4 tool I take from here:

https://xdaforums.com/t/how-to-unpack-and-recompile-system-img-ext4-lz4.3776423/#post-76267065

I have Batch file... *.bat

Maybe somebody have better idea for lz4 decompression tool...

It is possible to put all 21 files into 1 TAR...

So IMHO 1 problem solved. Or 2... as old netOdin work.

Next "problem(S)"...

Files are secured by this AVB crap...

Android Verified Boot 2.0​

GitHub - jcrutchvt10/AVBTOOL

Contribute to jcrutchvt10/AVBTOOL development by creating an account on GitHub.

github.com

I can find Version String:

avbtool 1.1.0

Extract files from prism.img and super.img seems "no problem"...

With superr I have success...

But the harder part is...

How to modify super.img... and create valid super.img AND bypass Security...

Without exploding GW4?

super.img is very huge... ca. 4 GB

No idea if I will focus on prism.img...

Only as info.

Btw...

Samsung is working on more Watch Faces...

R8.0XXU1FVB1

:ROFLMAO:

Best Regards
[Samsung Galaxy Watch 4] adfree:
asu@asu:~/imj$ ./imjtool prism.img extract
Sparse image v1.0 detected, 153600 blocks of 4096 bytes
153600 blocks of 4096 bytes compressed into 20 chunks (42% compressed)
0 - Extracted image is in extracted/image.img

imjtool seems easy to use on Ubuntu...

Edit 1.

With imjtool I can little bit better understand how this work... instead superr

asu@asu:~/imj$ ./imjtool super.img extract
Sparse image v1.0 detected, 1310720 blocks of 4096 bytes
1310720 blocks of 4096 bytes compressed into 74 chunks (27% compressed)
0 - Extracted image is in extracted/image.img
asu@asu:~/imj$ ./imjtool superX1.img extract
liblp dynamic partition (super.img) - Blocksize 0x1000, 2 slots
LP MD Header @0x3000, version 10.0, with 4 logical partitions on block device of 2560 GB, at partition super, first sector: 0x800
Partitions @0x3080 in 2 groups:
Group 0: default
Group 1: group_basic
Name: system (read-only, Linux Ext2/3/4/? Filesystem Image, @0x100000 spanning 1 extents and 3 GB) - extracted
Name: vendor (read-only, Linux Ext2/3/4/? Filesystem Image, @0xdda00000 spanning 1 extents and 83 MB) - extracted
Name: product (read-only, Linux Ext2/3/4/? Filesystem Image, @0xe2e00000 spanning 1 extents and 141 MB) - extracted
Name: odm (read-only, Linux Ext2/3/4/? Filesystem Image, @0xebc00000 spanning 1 extents and 4 MB) - extracted

No idea if also lz4 supported...

it took 2 rounds...

Round 1

super.img

Round 2.

moved result from extracted folder and run again imjtool

Results I can unpack now with 7zip Tool under Windows for instance...
[Samsung Galaxy Watch 4] adfree:
superr and imjtool deliver similar results... in unpack... extract...

For me.

Little example... attached.

prism.img is CSC aka Sales Code related...

WARNING! This file is not flashable IMHO. NOT use with netOdin!!!

This is only result after some steps of decompression...

decompress prism.img.lz4 -> decompress with imjtool or supperrr -> prism.img

Now we can for instance use under Windows Tool 7zip to extract Files...

Or WinHex or mount or blablabla...

So unpack/extract part is successfully done.

Best Regards
[Samsung Galaxy Watch 4] adfree:
asu@asu:~/imj$ ./imjtool boot.img extract
Boot image version 2 for OS version 0x16000161 (11.128 Patch Level 2022-1) detected (1660 byte header)
Part Size Pages Addr
Kernel (@0x0000800): 24913936 12166 0x10008000
Ramdisk (@0x17c3800): 743483 364 0x10000000
Device Tree(@0x1879800): 110416 54 0x10000000
MAGIC: 0x1eabb7d7
Extracting dtbo
Found SEANDROIDENFORCE@0x1894800
AVB0 (@0x1895000): 2112
AVBf (@0x23fffc0):
Tags: 0x10000000
Flash Page Size: 2048 bytes
ID: 91ce87ace8608829dd39f4e783fe9ccdd20a806c000
Name: SRPUC30A001
CmdLine:
Found GZ Magic at offset 14333096
extracted/kernelimage.gz:
gzip: extracted/kernelimage.gz: decompression OK, trailing garbage ignored
-84.3% -- replaced with extracted/kernelimage
Extracting kernel
Extracting ramdisk
Searching for DT at 0x1879800
MAGIC: 0x1eabb7d7
Extracting dtbo - exists so renaming to _dtbo
asu@asu:~/imj$ ./imjtool recovery.img extract
Boot image version 2 for OS version 0x16000161 (11.128 Patch Level 2022-1) detected (1660 byte header)
Part Size Pages Addr
Kernel (@0x0000800): 24913936 12166 0x10008000
Ramdisk (@0x17c3800): 11643186 5686 0x10000000
Device Tree(@0x22de800): 110416 54 0x10000000
Recovery DTBO/ACPIO: 344128
MAGIC: 0x1eabb7d7
Extracting dtbo
AVB0 (@0x234f000): 2112
AVBf (@0x34fffc0):
Tags: 0x10000000
Flash Page Size: 2048 bytes
ID: 83c991ae477267b9fd3deb3365167f8cf82517e000
Name: SRPUC30A001
CmdLine:
Found GZ Magic at offset 14333096
extracted/kernelimage.gz:
gzip: extracted/kernelimage.gz: decompression OK, trailing garbage ignored
-84.3% -- replaced with extracted/kernelimage
Extracting kernel
Extracting ramdisk
Searching for DT at 0x22de800
MAGIC: 0x1eabb7d7
Extracting dtbo - exists so renaming to _dtbo
asu@asu:~/imj$ ./imjtool cache.img extract
Sparse image v1.0 detected, 51200 blocks of 4096 bytes
51200 blocks of 4096 bytes compressed into 10 chunks (100% compressed)
0 - Extracted image is in extracted/image.img
asu@asu:~/imj$ ./imjtool dtbo.img extract
DTBO version 0, with 5 entries over 344128 bytes (Page size: 0x800)
0: @0xc0-0x10d30 (0x10c70) ID: 0x0 Rev: 0 - extracted OK
1: @0x10d30-0x219d0 (0x10ca0) ID: 0x0 Rev: 0 - extracted OK
2: @0x219d0-0x32670 (0x10ca0) ID: 0x0 Rev: 0 - extracted OK
3: @0x32670-0x43354 (0x10ce4) ID: 0x0 Rev: 0 - extracted OK
4: @0x43354-0x54040 (0x10cec) ID: 0x0 Rev: 0 - extracted OK

imjtool very usefull to analyse GW4 Firmware Files.

Best Regards
[Samsung Galaxy Watch 4] adfree:
R8.0XXU1EVB4

or

R8.0XXU1FVB1

Seems Samsung working again at same time on "different" Watch Face(s)

:rolleyes:

Only as info.

We will see how long it take for public release...

Best Regards
[Samsung Galaxy Watch 4] adfree:
Ramdisk extracted with imjtool from EVA8 Kernel(s)

boot.img and recovery.img

Maybe for study...

I can unpack with 7Zip tool under Windows...

Best Regards
[Samsung Galaxy Watch 4] adfree:
In Recovery Ramdisk we can find in... wirelessd

/system/bin/wirelessd

netOdin aka Download wireless related Commands...

wd_emmc_wait_for_write_complete
wd_pit_write_bota_data
wd_emmc_write_buffer_init
wd_emmc_writer_main
wd_core_process_cmd
wd_emmc_get_blksize
wd_util_sock_recv_end
wd_sys_init
wd_comp_buffer_init
wd_odin_cmd_pit
wd.param.offset
wd_util_sock_accept
wd_emmc_write
wd_low_battery
wd_decompress_main
wd_odin_get_version
wd_emmc_read Unknown
wd_em_lite_install_token
wd_em_cmd start
wd_core_connect_to_server
wd_pit_write_bota_data_header
wd_core_close_socket
wd_cm_wait_for_setup
wd_decomp_request
wd_cm_connection_notify
wd_pit_bota_info_init
wd_pit_write
wd_ess_command KERNEL
wd_init_handler_cmd
wd_cm_connection_changed_cb
wd_odin_cmd_xmit
wd_pit_write_bota_header
wd_comp_cleanup_buffer
wd_em_lite_get_status
wd_emmc_size_read
wd_cm_main
wd_core_recv_data
wd_util_reboot
wd_ui_draw_image
wd_core_process_download
.
.

Upload Mode aka Ramdump aka RDX...

wu_rdx_dump_info_init
wu_rdx_do_upload_file
wu_rdx_cmd_probe
wu_rdx_cmd_data_transfer
wu_rdx_handle_cmd
wu_rdx_init
wu_rdx_send_cmd
wu_main Success
wu_rdx_cmd_search
wu_rdx_recv_ack

Best Regards
[Samsung Galaxy Watch 4] adfree:
Meanwhile I have own GW4... my own SM-R860.

No idea why. Preinstalled Firmware was DUK1...

I spent first some time in Standalone Mode...

Yes it is possible to play with GW4 WITHOUT pairing Phone...

Video Capture is also possible ... no need Root.

After some time I updated to EVA8 via Phone...

Interesting. Found today project of SM-R760 aka Gear S3:

https://xdaforums.com/t/dev-porting-wearos.4400757/

Seems he has progress with Recovery TWRP.

IMHO this is first time I saw TWRP on Samsung Smartwatch...

Only as info...

Best Regards
[Samsung Galaxy Watch 4] adfree:
asu@asu:~/imj$ ./imjtool ldfw.img extract
ldfw.img is not a recognized image. Sorry
asu@asu:~/imj$ ./imjtool tzar.img extract
tzar.img is not a recognized image. Sorry
asu@asu:~/imj$ ./imjtool optics.img extract
Sparse image v1.0 detected, 10240 blocks of 4096 bytes
10240 blocks of 4096 bytes compressed into 9 chunks (95% compressed)
0 - Extracted image is in extracted/image.img
asu@asu:~/imj$ ./imjtool userdata.img extract
Sparse image v1.0 detected, 524288 blocks of 4096 bytes
524288 blocks of 4096 bytes compressed into 23 chunks (100% compressed)
0 - Extracted image is in extracted/image.img
asu@asu:~/imj$ ./imjtool tzsw.img extract
tzsw.img is not a recognized image. Sorry
asu@asu:~/imj$ ./imjtool omr.img extract
Sparse image v1.0 detected, 5120 blocks of 4096 bytes
5120 blocks of 4096 bytes compressed into 7 chunks (100% compressed)
0 - Extracted image is in extracted/image.img
asu@asu:~/imj$ ./imjtool metadata.img extract
Sparse image v1.0 detected, 8192 blocks of 4096 bytes
8192 blocks of 4096 bytes compressed into 7 chunks (100% compressed)
0 - Extracted image is in extracted/image.img
asu@asu:~/imj$ ./imjtool vbmeta.img extract
Android Verified Boot image, version 1.0, Release String avbtool 1.1.0
asu@asu:~/imj$ ./imjtool vbmeta_system.img extract
Android Verified Boot image, version 1.0, Release String avbtool 1.1.0

Overview of the 20 Firmware files "we" from GW4... and if imjtool can extract something...

boot.img imjtool
cache.img imjtool
dtbo.img imjtool
ldfw.img -
metadata.img imjtool
omr.img imjtool
optics.img imjtool
prism.img imjtool
recovery.img imjtool
super.img imjtool
tzar.img -
tzsw.img -
userdata.img imjtool
vbmeta.img ? only text string/Version
vbmeta_system.img ? only text string/Version

keystorage.bin
misc.bin
sboot.bin
uh.bin
up_param.bin

About AVB again... found this... aua:

AVB check in Android P - Code World

www.codetd.com

Hmmmmmmmmmmmmmmmm...

I hope 1 day Combination Firmware leak...

Best Regards
[Samsung Galaxy Watch 4] adfree:
Very interesting.

Odin Mode aka Download Mode looks total different from what I know from Tizen and Phones...

Short playing little bit with Reboot Commands...

reboot download

Odin Mode aka Download (USB)

Few text strings taken form kernel... boot.img...

Will check in Source Code if some description possible to find...

sec_reboot
fota
fota_bl
wdownload
wirelessd
fwup
em_mode_force_user
user_dram_test
emergency
dump_sink
forceupload
swsel
sud
multicmd

Carefully! Untested...

Edit 1.

Wireless-download

reboot wdownload

Edit 2.

Drunken test...

freshbs:/ $ reboot wirelessd

Hmmm... no idea it boots normal to Wear OS

Edit 3.

Found something in Kernel Source...

/* PANIC INFORM */
#define SEC_RESET_REASON_PREFIX 0x12345600
#define SEC_RESET_SET_PREFIX 0xabc00000
#define SEC_RESET_MULTICMD_PREFIX 0xa5600000
enum sec_reset_reason {
SEC_RESET_REASON_UNKNOWN = (SEC_RESET_REASON_PREFIX | 0x00),
SEC_RESET_REASON_DOWNLOAD = (SEC_RESET_REASON_PREFIX | 0x01),
SEC_RESET_REASON_UPLOAD = (SEC_RESET_REASON_PREFIX | 0x02),
SEC_RESET_REASON_CHARGING = (SEC_RESET_REASON_PREFIX | 0x03),
SEC_RESET_REASON_RECOVERY = (SEC_RESET_REASON_PREFIX | 0x04),
SEC_RESET_REASON_FOTA = (SEC_RESET_REASON_PREFIX | 0x05),
SEC_RESET_REASON_FOTA_BL = (SEC_RESET_REASON_PREFIX | 0x06), /* update bootloader */
SEC_RESET_REASON_SECURE = (SEC_RESET_REASON_PREFIX | 0x07), /* image secure check fail */
SEC_RESET_REASON_FWUP = (SEC_RESET_REASON_PREFIX | 0x09), /* emergency firmware update */
SEC_RESET_REASON_EM_FUSE = (SEC_RESET_REASON_PREFIX | 0x0a), /* EMC market fuse */
SEC_RESET_REASON_FACTORY = (SEC_RESET_REASON_PREFIX | 0x0c), /* go to factory mode */
SEC_RESET_REASON_BOOTLOADER = (SEC_RESET_REASON_PREFIX | 0x0d), /* go to download mode */
SEC_RESET_REASON_WIRELESSD_BL = (SEC_RESET_REASON_PREFIX | 0x0e), /* go to wireless download BOTA mode */
SEC_RESET_REASON_RECOVERY_WD = (SEC_RESET_REASON_PREFIX | 0x0f), /* go to wireless download mode */
SEC_RESET_REASON_PKEY_HOLD = (SEC_RESET_REASON_PREFIX | 0x12), /* Power Key HOLD during shutdown */
SEC_RESET_REASON_EMERGENCY = 0x0,

SEC_RESET_SET_DPRM = (SEC_RESET_SET_PREFIX | 0x20000),
SEC_RESET_SET_FORCE_UPLOAD = (SEC_RESET_SET_PREFIX | 0x40000),
SEC_RESET_SET_DEBUG = (SEC_RESET_SET_PREFIX | 0xd0000),
SEC_RESET_SET_SWSEL = (SEC_RESET_SET_PREFIX | 0xe0000),
SEC_RESET_SET_SUD = (SEC_RESET_SET_PREFIX | 0xf0000),
SEC_RESET_CP_DBGMEM = (SEC_RESET_SET_PREFIX | 0x50000), /* cpmem_on: CP RAM logging */
SEC_RESET_SET_POWEROFF_WATCH = (SEC_RESET_SET_PREFIX | 0x90000), /* Power off Watch mode */
#if defined(CONFIG_SEC_ABC)
SEC_RESET_USER_DRAM_TEST = (SEC_RESET_SET_PREFIX | 0x60000), /* USER DRAM TEST */
#endif
#if defined(CONFIG_SEC_SYSUP)
SEC_RESET_SET_PARAM = (SEC_RESET_SET_PREFIX | 0x70000),
#endif
SEC_RESET_SET_DUMPSINK = (SEC_RESET_SET_PREFIX | 0x80000),
SEC_RESET_SET_MULTICMD = SEC_RESET_MULTICMD_PREFIX,
};

drivers/samsung/sec_reboot.c

Edit 4.

Next drunken test without visual effect...

freshbs:/ $ reboot dump_sink
[Samsung Galaxy Watch 4] adfree:
netOdin known from Tizen world... old Smartwatches from Samsung... also work with GW4:

[Tutorial] Downgrade Gear S2 (Sport/Classic) to Pair with iPhone again

Firstly, this is not my tutorial, all I do is translating my Vietnamese brother's work to English. So credit is belong to him haihapc2 (he is here as well) Tools you need: Wifi Odin...

xdaforums.com

You can see Link from 2017...

I NEVER found other Version. IMHO only 1 Version leaked... maybe in 2016..

So this Tool is 6 yearS old...

EVA8 Firmware for SM-R870:

File-Upload.net - Datei nicht gefunden

Leider konnte Ihre hochgeladene Datei nicht gefunden werden. Laden Sie die Datei neu hoch.

www.file-upload.net

File-Upload.net - Datei nicht gefunden

Leider konnte Ihre hochgeladene Datei nicht gefunden werden. Laden Sie die Datei neu hoch.

www.file-upload.net

Remove/rename file extension .ABC... then possible to unpack with 7Zip

Result looks hopefully like this:

smR870_EVA8_OXM_v1.tar

This 1 TAR file can be flashed to SM-R870 with netOdin.

Best Regards
[Samsung Galaxy Watch 4] adfree:
Strange...

In EVA8 I have problems to enable/activate Upload and/or Upload Wireless

?

I did few more Reboot Commands/Parameter... like here written:

https://xdaforums.com/t/firmware-an...-csc-change-and.4323469/page-12#post-86458043

I hope for Upload Wireless but nothing visible...

reboot recovery_wd

Funny. Found Fastboot Mode...

In red lettern:

Fastboot Mode..

reboot bootloader

Caution!

Please carefully with "Peek and Poke" adventure...

OWN RISK!

Best Regards

Edit 1.

reboot upload

Nothing... but I have enabled Upload in *#9900# and set Debug to HIGH...
[Samsung Galaxy Watch 4] adfree:
EVB4 is now public available as FOTA update...

Seen for KOO...

No idea... changelog not public visible... Maybe later...

Best Regards
[Samsung Galaxy Watch 4] adfree:
EVB4 FOTA Delta file for SM-R870... from EVA8...

Changelog similar blabla "improved bla system stab blabla"...

Delta file is 100 MB...

Maybe somebody is able to solve the riddle to puzzle offline... as we have EVA8 Full Firmware here:

https://xdaforums.com/t/firmware-an...-csc-change-and.4323469/page-12#post-86470643

Best Regards
[Samsung Galaxy Watch 4] adfree:
Remember Rollback Prevention...

So maybe soon obsolete to easy use...

Here are 2 more EVA8 FirmwareS for netOdin use...

SM-R880 EVA8

File on MEGA

mega.nz

File on MEGA

mega.nz

smR880_EVA8_OXM_v1.tar

SM-R890 EVA8

File on MEGA

mega.nz

smR890_EVA8_OXM_v1.tar

Best Regards
[Samsung Galaxy Watch 4] marco_lu:
where did you find the firmware? can you write me in private?
[Samsung Galaxy Watch 4] adfree:
@marco_lu​

I told you in last PM I have limited time and energy... to prevent to waste toooo much time...

IMHO more helpfull, if you tell me/us if you able to unpack meanwhile .ABC with 7Zip...

by simple rename file...

Summary I have EVA8 for SM-R870 AND SM-R880 AND SM-R890 shared...

=

smR870_EVA8_OXM_v1.tar

smR880_EVA8_OXM_v1.tar

smR890_EVA8_OXM_v1.tar

Maybe other users face similar problem like you told me...

And I told you.

I have no time to repack for you and upload again... as I know other userS were able to unpack...

Thanx in advance.

Best Regards
[Samsung Galaxy Watch 4] marco_lu:
I also managed to extract the firmware but I don't understand where you found the firmware for the watch 4
[Samsung Galaxy Watch 4] adfree:
This is not important IMHO... all infos inside this thread.

For Original Firmware leak we have NO compatible netOdin...

As *.lz4 support is required.

This is reason why I have unpacked 20 *.lz4 files and repack into 1 TAR file... without MD5 check... to safe time and energy.

User tested for me and report success.

IMPORTANT to know is.

OWN RISK!

AND remember Samsungs Rollback Prevention...

As soon as EVB4 or any other newer Firmware as EVA8 is written to device...

EVA8 maybe not more work or create bigger problem...

Like Bootloader sboot.bin can not replaced to fit valid EVA8 chain for FOTA Security crap Chain check crap made by Samsung...

GW4 is Android 11 and Android 11 is HIGH secured...

Take it or not... your choice.

:cowboy:

Best Regards
[Samsung Galaxy Watch 4] adfree:
No idea if I have allready posted...

freshbs:/ $ df -h
Filesystem Size Used Avail Use% Mounted on
tmpfs 693M 1.2M 691M 1% /dev
tmpfs 693M 0 693M 0% /mnt
/dev/block/dm-4 3.4G 3.3G 728K 100% /
/dev/block/dm-5 82M 79M 1.2M 99% /vendor
/dev/block/dm-6 139M 139M 0 100% /product
/dev/block/dm-7 3.9M 980K 2.9M 25% /odm
/dev/block/dm-8 581M 343M 226M 61% /prism
/dev/block/dm-9 39M 1.5M 36M 5% /optics
tmpfs 693M 0 693M 0% /apex
/dev/block/mmcblk0p34 16M 24K 15M 1% /omr
/dev/block/mmcblk0p33 193M 5.8M 183M 4% /cache
/dev/block/mmcblk0p2 3.8M 1.0M 2.6M 29% /efs
/dev/block/dm-10 8.3G 767M 7.4G 10% /data
/dev/fuse 8.3G 767M 7.4G 10% /storage/emulated

Interesting netcat is allready installed...