yashsingh1/xdaforums huggingface dataset:
[Samsung Galaxy Watch 4] adfree:
Still need solution for NOT rooted normal device to enter f%&ing FOTA menu...

.class public interface abstract Lcom/idm/fotaagent/enabler/interfaces/IDMEnablerSettingInterface;
.super Ljava/lang/Object;
.source "IDMEnablerSettingInterface.java"

# static fields
.field public static final IDM_SETTING_PROVIDER_BADGE_COUNT:Ljava/lang/String; = "badge_for_fota"

.field public static final IDM_SETTING_PROVIDER_EE_DEVICE:Ljava/lang/String; = "enterprise_edition"

.field public static final IDM_SETTING_PROVIDER_FOTA_POLICY_OTA_VERSION:Ljava/lang/String; = "FOTA_SYSTEM_POLICY_OTA_VERSION"

.field public static final IDM_SETTING_PROVIDER_FOTA_POLICY_TYPE:Ljava/lang/String; = "FOTA_SYSTEM_POLICY_TYPE"

.field public static final IDM_SETTING_PROVIDER_FOTA_POLICY_VALID_TIME:Ljava/lang/String; = "FOTA_SYSTEM_POLICY_VALID_TIME"

.field public static final IDM_SETTING_PROVIDER_FOTA_POLL_MODE:Ljava/lang/String; = "FOTA_CLIENT_TEST"

.field public static final IDM_SETTING_PROVIDER_FOTA_POLL_TIME:Ljava/lang/String; = "FOTA_CLIENT_POLLING_TIME"

.field public static final IDM_SETTING_PROVIDER_FOTA_REGISTRAION:Ljava/lang/String; = "FOTA_CLIENT_REGISTRATION"

.field public static final IDM_SETTING_PROVIDER_FOTA_SMLDM_BEARER:Ljava/lang/String; = "SMLDM_BEARER"

.field public static final IDM_SETTING_PROVIDER_FOTA_TERM_TIME:Ljava/lang/String; = "FOTA_CLIENT_FOTA_TIME"

.field public static final IDM_SETTING_PROVIDER_FOTA_TERM_VER:Ljava/lang/String; = "FOTA_CLIENT_TERM_VER"

.field public static final IDM_SETTING_PROVIDER_LAST_CHECKED_DATE:Ljava/lang/String; = "SOFTWARE_UPDATE_LAST_CHECKED_DATE"

.field public static final IDM_SETTING_PROVIDER_WIFI_AUTO_DOWNLOAD:Ljava/lang/String; = "SOFTWARE_UPDATE_WIFI_ONLY2"

.field public static final STATE_NOT_SET:I = -0x1

.field public static final STATE_OFF:I = 0x0

.field public static final STATE_ON:I = 0x1

Leads to "FOTA Agent"...

After I saw this:

a20e:/ # settings list system
FOTA_CLIENT_HEARTBEAT_ADD=
FOTA_CLIENT_HEARTBEAT_PERIOD=0
FOTA_CLIENT_HEARTBEAT_TIME=0
FOTA_CLIENT_POLLING_TIME=1666295687489
FOTA_CLIENT_REGISTRATION=1
FOTA_CLIENT_TEST=0
GPIO_DUMP=0
KLMS_EXPIRY_DATE=2114467140000
SEM_VIBRATION_FORCE_TOUCH_INTENSITY=4
SEM_VIBRATION_NOTIFICATION_INTENSITY=5
SMLDM_BEARER=0
SOFTWARE_UPDATE_LAST_CHECKED_DATE=1650860813595
SOFTWARE_UPDATE_WIFI_ONLY2=0

Now Question... can this help us?

FOTA_CLIENT_TEST=1

Secret Code is blocked...

*#8736364#
[Samsung Galaxy Watch 4] adfree:
For CSC change SM-R860... we have maybe something "new"...

Untested... and maybe "dangerous"...

In theory we "need" only:

optics.img
prism.img

"We" could "force" SM-R860 to CSC XAA IMHO...

I have NO idea if in K01 CSC any of these CSC change Codes work...

But I know it is possible to "erase" active CSC by prism.img and optics.img...

Tested with fac files from Combination Firmware on my SM-R870...

We have now 3 AUGJ

K01

ALL_K01_R860XXU1AUGJ_R860K011AUGJ_CL22197329_QB41964795_REV00_user_low_ship_MULTI_CERT.tar.md5

OXT Region... maybe more then 1 CSC... need to be checked...

ALL_OXT_R860TBU1AUGL_R860OXT1AUGL_CL22197329_QB42028072_REV00_user_low_ship_MULTI_CERT.tar.md5

And OXM package... with 3 TAR Files...

Only as info...

I am NOT willing to test self for now...

I killed my SM-R870... so need new Victim Test Device for stupid Adventure.

I have NO plan to destroy my SM-R860.

Best Regards
[Samsung Galaxy Watch 4] iBowToAndroid:
Yes, R860 (and I think some other models) have 3 different CSC, for firmware: OMK, OXM, and OXT (This one is the special Thom Browne edition I think, like R860TBU1AUGL)
[Samsung Galaxy Watch 4] adfree:
Still no idea what K01 exactly is...

Is this something official in public?

"We" can see it is Korea...

Attached extracted files from optics.img and prism.img with imjtool and 7Zip...

At the moment I can not check self... if K01 is special like INU in case of CSC change...

Best Regards
[Samsung Galaxy Watch 4] adfree:
Tiny exercise about LTE OLB Region...

Taken from SM-R875F OLB Delta...

csc_information=OLB(BRI TGY THL XME XNZ XSA XSE XSP XTC XXV KDI)

I need matching CSC for leaked AUGF Firmware...

I know XSA is set... by using this Firmware... but it NOT contain AUGF...

http://fota-cloud-dn.ospserver.net/firmware/XSA/SM-R875F/version.xml

BRI

http://fota-cloud-dn.ospserver.net/firmware/BRI/SM-R875F/version.xml

TGY

http://fota-cloud-dn.ospserver.net/firmware/TGY/SM-R875F/version.xml

THL

http://fota-cloud-dn.ospserver.net/firmware/THL/SM-R875F/version.xml

XME

http://fota-cloud-dn.ospserver.net/firmware/XME/SM-R875F/version.xml

XNZ !!! EMPTY

http://fota-cloud-dn.ospserver.net/firmware/XNZ/SM-R875F/version.xml

XSE !!! EMPTY

http://fota-cloud-dn.ospserver.net/firmware/XSE/SM-R875F/version.xml

XSP

http://fota-cloud-dn.ospserver.net/firmware/XSP/SM-R875F/version.xml

XTC !!! EMPTY

http://fota-cloud-dn.ospserver.net/firmware/XTC/SM-R875F/version.xml

XXV

http://fota-cloud-dn.ospserver.net/firmware/XXV/SM-R875F/version.xml

KDI

http://fota-cloud-dn.ospserver.net/firmware/KDI/SM-R875F/version.xml

Great... means i have exact 2 CSC to update leaked AUGF OLB...

BRI and TGY

Best Regards
[Samsung Galaxy Watch 4] adfree:
Rooted my SM-R875F AUGF OLB Region...

Now changed CSC from XSA to TGY...

D:\Android\ADB>adb shell
freshul:/ $ cd efs
freshul:/efs $ ls
ls: .: Permission denied
1|freshul:/efs $ su
freshul:/efs # ls
Battery FactoryApp biometrics carrier cpdebug gatekeeper imei lost+found lpm lpm_boot.log pdp_bkup pfw_data recovery sec_efs
freshul:/efs # cd imei
freshul:/efs/imei # ls
cid.dat mps_code.dat omcnw_code.dat prodcode.dat
freshul:/efs/imei # cd /sdcard
freshul:/sdcard # cp mps_code.dat /efs/imei
freshul:/sdcard # cp omcnw_code.dat /efs/imei

In SM-R870 I changed ever 3 files... but here tooo lazy...

LTE have 1 more file... cid.dat

Edit 1.

Now I see chinese... maybe BRI...

Edit 2.

Bootloader locked again... now Flashing again AUGF for FOTA attempt...

Edit 3.

FOTA seems to work now... need some time to reach GVH1

Edit 4.

My SM-R875F now via FOTA here:

R875FXXU1GVH1/R875FOLB1GVH1/R875FXXU1GVH1

Need some time to charge Battery and prepare boot.img for Rooting GVH1...
[Samsung Galaxy Watch 4] MrNRod:
@adfree do you know where I could possibly find firmware for the LTE GW4 SM-R865U United States region or America however it's listed.
[Samsung Galaxy Watch 4] adfree:
Please I need help from friendly SM-R875F user(s)

I need files from folderS:

/optics
/prism

Attached example from GVH1 OLB Region... TGY is 1 CSC for instance...

Searching for OXX Region like INU India:

R875FXXU1GVH1/R875FOXX1GVH1/R875FXXU1GVH1

Also OXA Region is welcome.

R875FXXU1GVH1/R875FOXA1GVH1/R875FXXU1GVH1

Thanx in advance.

Best Regards

Edit 1.

Will check if without Root possible...

D:\Android\ADBnew>adb shell
freshul:/ $ cd /
freshul:/ $ cd /sdcard
freshul:/sdcard $ mkdir 22
freshul:/sdcard $ cd /
freshul:/ $ cp -r /optics /sdcard/22
cp: /optics/lost+found: Permission denied
1|freshul:/ $ cp -r /prism /sdcard/22
cp: /prism/lost+found: Permission denied

Edit 2.

Okidoki. Seems working without Root to get files...

D:\Android\ADBnew>adb pull /sdcard/22 .\lte
/sdcard/22/: 240 files pulled, 0 skipped. 2.5 MB/s (187175014 bytes in 71.838s)
[Samsung Galaxy Watch 4] adfree:
Will check later if this is working for our GW4 files:

GitHub - chenxiaolong/keystrings-decrypter: Simple decryption tool for TouchWiz keystrings.dat files

Simple decryption tool for TouchWiz keystrings.dat files - chenxiaolong/keystrings-decrypter

github.com

Maybe we can then better understand why INU can change CSC easily by Codes...
[Samsung Galaxy Watch 4] adfree:
<keystring>
<keysequence>*#272*IMEI#</keysequence>
<output>83052020100812173552301071192687#</output>
<packagename>com.sec.android.Preconfig</packagename>
<enable>true</enable>
<alwaysopen>true</alwaysopen>
<usesection>DEV,PRD,USER,AS,BIZ,ELSE</usesection>
</keystring>

This I found in decrypted INU... from old EVA8...
[Samsung Galaxy Watch 4] sergey1977:
*#7785# what does this code do
[Samsung Galaxy Watch 4] adfree:
@sergey1977

WARNING! Be carefully. Looks like Sensor related... from your Screenshots...

I have no idea what exactly... but for me this looks dangerous.

Risk to brick some Hardware for ever.

Best Regards

Edit 1.

TSP is IMHO Touch related... so Display touch screen
[Samsung Galaxy Watch 4] adfree:
Memo to me...

freshul:/ $ su
freshul:/ # cd /efs/imei
freshul:/efs/imei # ls -a1l
total 32
drwxrwxr-x 2 root radio 4096 2021-11-21 06:38 .
drwxrwx--x 15 system radio 4096 2021-11-21 06:26 ..
-rw-r--r-- 1 system system 3 2021-11-21 06:25 cid.dat
-rw-rw-r-- 1 radio system 3 2022-11-09 01:21 mps_code.dat
-rw-rw-r-- 1 radio root 3 2022-11-08 21:42 omcnw_code.dat
-rwxrwxr-x 1 system radio 14 2021-11-21 06:25 prodcode.dat
freshul:/efs/imei # cat cid.dat
DBTfreshul:/efs/imei # cat mps_code.dat
XSAfreshul:/efs/imei # cat omcnw_code.dat
XSAfreshul:/efs/imei # cat prodcode.dat

Will try to simplify for me...

D:\Android\ADBnew>adb push mps_code.dat /sdcard
mps_code.dat: 1 file pushed, 0 skipped. 0.0 MB/s (3 bytes in 0.008s)

D:\Android\ADBnew>adb shell
freshul:/ $ su
freshul:/ # cd /sdcard
freshul:/sdcard # cp mps_code.dat /efs/imei

I hope 1 file is enough for CSC change...

Edit 1.

After Command chinese Language is visable as I set TGY for Hong Kong...

But still XSA und Software...

Then I did FAC Reset... in Standalone Mode I see now TGY is fully set...

Flashing now AUGF OLB again to undo Root... and be ready for FOTA update...
[Samsung Galaxy Watch 4] adfree:
Not sure if Sa.sung plays tiny Games...

My SM-R860 is on GVI3...

I will try to downgrade with netOdin back to EVB4:

smR860_EVB4_OXM_v1.tar

Reason:

https://xdaforums.com/t/galaxy-watch-4-classic-update-issues.4505237/page-2#post-87702239

https://xdaforums.com/t/galaxy-watch-4-classic-update-issues.4505237/page-2#post-87702883

I will check if Downgrade drip Knox...

For now on GVI3:

D:\Android\ADB>adb shell getprop ro.boot.warranty_bit
0

I am charging Battery from 70 % to full...

Later result...

Best Regards

Edit 1.

Great...

2 times failed to flash full pack...

Then I removed super.img...

This time luck to flash all files inside this pack...

<ID:0/001> 192.168.49.1
<ID:0/001> Odin engine v(ID:1.0000)..
<ID:0/001> File analysis..
<ID:0/001> SetupConnection..
<ID:0/001> Initialzation..
<ID:0/001> Set PIT file..
<ID:0/001> DO NOT TURN OFF TARGET!!
<ID:0/001> Get PIT for mapping..
<ID:0/001> Get PIT Transmission
<ID:0/001> Firmware update start..
<ID:0/001> SingleDownload.
<ID:0/001> boot.img
<ID:0/001> NAND Write Start!!
<ID:0/001> cache.img
<ID:0/001> dtbo.img
<ID:0/001> keystorage.bin
<ID:0/001> ldfw.img
<ID:0/001> metadata.img
<ID:0/001> misc.bin
<ID:0/001> omr.img
<ID:0/001> optics.img
<ID:0/001> prism.img
<ID:0/001> recovery.img
<ID:0/001> sboot.bin
<ID:0/001> super.img
<ID:0/001>
<ID:0/001> XmitData
<ID:0/001> Complete(Write) operation failed.
<ID:0/001> Removed!!
<OSM> All threads completed. (succeed 0 / failed 1)

XmitData is not new to me...

Saw this in Tizen time... but not with GW4... first time...

Now I have only 40 % battery left...

GW4 seems not to charge in Download Wireless Mode like Tizen Watches...

I need "only" to flash super.img...

Lets count how many attempts I need...

Edit 2.

Few attempts later...

Restarted my Notebook... hope this time more luck

Edit 3.

Boah I ha..e

This not happen with SM-R870 nor SM-R875F...

Maybe last attempt as only 24 % Battery left...

netOdin work since 20 minutes...

F%&ing progress bar less 50 %

Edit 4.

F%&... 19 % left.

I was able to do FAC Reset in Recovery... now on Charger...

netOdin started...

Edit 5.

Boah ...

Maybe I found way to charge battery...

In DL Wireless Mode...

After Warning to charge minimum to 15 %... I was on 11 %...

I pressed Power Button twice... like for AP Mode...

Now I see in ( DN_Err) but battery is now at 15 %...

No idea if good for display... as Display is full on...

But I will wait for 100 % battery charge before I remove from Charger and try again on other Notebook...

Edit 6.

This is absolute horror...

I can charge 15 % battery in Download Wireless... then I can double press Power Button... for AP connection to netOdin...

Still fail... but more then 15 % battery charge not possible...

AAAAAAAAAAAAAAAAAARGHHHHHhhhhhhhhhhhh....

Edit 7.

Maybe my fault is Notebooks nearly full... not enough space maybe...

Deleted few files... now 12 GB free...

Edit 8.

25 minutes... 1 % battery left...

progressbar less 50 %...

Something is wrong with this sh it WiFi from SM-R860...

Or my old WiFi crap in my old Notebooks
[Samsung Galaxy Watch 4] adfree:
Oh great.

15 % Battery is around 30 minutes alive in Download Wireless...

Tested with this old USB WiFi...

300Mbit/s-WLAN-Mini-USB-Adapter

Enjoy high-speed performance at 300Mbps with TL-WN823N—a great choice for video streaming, voice calls, and online gaming. It's easy to carry and inserts into any USB port.

www.tp-link.com

Progressbar this time more then 50 % and I was really close... before power down...

Hmmmmm... 1 choice is to find faster WiFi Hardware...

Or I am downgrade from halfdead EVB4... to AUGJ...

Here super.img is 200 MB smaller...
[Samsung Galaxy Watch 4] adfree:
"Funny"...

Charging seems possible but not to 100 %...

Tiny summary...

SM-R860 EVB4 shows something with Charge battery up 15 % in WL DL Mode...

But it really charge to 15 % so you have chance to use netOdin again for 30 Minutes...

My old 300 Mbit WiFi Dongle seems too slow to flash whole 4000 MB super.img

AUGJ shows to charge minimum 20 % battery to use WL DL...

Juhu... 5 % more...

But f&%ing tiny b not charge anymore... to reach 15 % nor 20 %...

It seems only to charge 4 % to land in Odin Mode...

Both AUGJ and EVB4 shows this Picture... found in RAMDISK of Recovery...

I ever looked how much time needed... before...

IMHO 45 minutes or something like this... for all files at once.

Again. Never had problems with SM-R870 nor SM-R875F...

Only my dam. SM-R860 has problem with my old NotebookS WiFi Hardware...

Only as info...

Will try to collect infos... how much time others need for full flash with netOdin...

But 15 % Battery is really Frechheit...

My Tizen Smartwatches charged in Wireless Download up to 100 %...

Without such stupid Restriction...

Best Regards

Edit 1.

According to this Video...

Seems possible to flash whole 4500 MB in 20 minutes...

He started with 33 % battery...
[Samsung Galaxy Watch 4] adfree:
Need help to collect Info(s) about WiFi speed...

IMHO we can see "Link speed"...

Here I see

65 Mbps in 2,4 GHz Network...

I have 54 Mbps... need to check again...

Samsung s h iii RTL work since dayS not... GW4

Also they are not able to add GW5...

Tizen Watches work on RTL... so not my Config Error...

Samsung Support is unterirdisch

Best Regards

Edit 1.

On my SM-R875F I see 72 Mbps... GVH1

Also 2,4 GHz Network

Edit 2.

Okidoki. So I am maybe not alone with no WiFi 6...

Close to 6 minutes I see 65 Mbps

Edit 3.

Low Signal Quality also decrease speed...
[Samsung Galaxy Watch 4] tids2k:
@adfree my friend.

Firmwares soon :

For eg. SM-R880/XSA/R880XXU1AUGE/R880OXM1AUGE/R880XXU1AUGE/R880XXU1AUGE - GW4 CLASSIC BLUETOOTH 42mm

SM-R890/XSA/R890XXU1AUGE/R890OXM1AUGE/R890XXU1AUGE/R890XXU1AUGE - GW4 CLASSIC BLUETOOTH 46mm
[Samsung Galaxy Watch 4] adfree:
CSC related...

Somebody tried with ADB to run APKs?

I am new to this so I need some time...

Meanwhile I found only the Verifier...

D:\Android\ADB>adb shell am start -n com.samsung.sec.android.application.csc/com.samsung.sec.android.application.csc.ui.CscVerifierActivity
Starting: Intent { cmp=com.samsung.sec.android.application.csc/.ui.CscVerifierActivity }

Best Regards
[Samsung Galaxy Watch 4] adfree:
D:\Android\ADB>adb shell am start -n com.samsung.android.cidmanager/com.samsung.android.cidmanager.preconfig.PreconfigActivity
Starting: Intent { cmp=com.samsung.android.cidmanager/.preconfig.PreconfigActivity }

Exception occurred while executing 'start':
java.lang.SecurityException: Permission Denial: starting Intent { flg=0x10000000 cmp=com.samsung.android.cidmanager/.preconfig.PreconfigActivity } from null (pid=5489, uid=2000) requires com.sec.permission.preconfig
at com.android.server.wm.ActivityStackSupervisor.checkStartAnyActivityPermission(ActivityStackSupervisor.java:1058)
at com.android.server.wm.ActivityStarter.executeRequest(ActivityStarter.java:1050)
at com.android.server.wm.ActivityStarter.execute(ActivityStarter.java:712)
at com.android.server.wm.ActivityTaskManagerService.startActivityAsUser(ActivityTaskManagerService.java:1217)
at com.android.server.wm.ActivityTaskManagerService.startActivityAsUser(ActivityTaskManagerService.java:1179)
at com.android.server.am.ActivityManagerService.startActivityAsUserWithFeature(ActivityManagerService.java:3779)
at com.android.server.am.ActivityManagerShellCommand.runStartActivity(ActivityManagerShellCommand.java:543)
at com.android.server.am.ActivityManagerShellCommand.onCommand(ActivityManagerShellCommand.java:185)
at android.os.BasicShellCommandHandler.exec(BasicShellCommandHandler.java:98)
at android.os.ShellCommand.exec(ShellCommand.java:44)
at com.android.server.am.ActivityManagerService.onShellCommand(ActivityManagerService.java:10930)
at android.os.Binder.shellCommand(Binder.java:929)
at android.os.Binder.onTransact(Binder.java:813)
at android.app.IActivityManager$Stub.onTransact(IActivityManager.java:5070)
at com.android.server.am.ActivityManagerService.onTransact(ActivityManagerService.java:2974)
at android.os.Binder.execTransactInternal(Binder.java:1159)
at android.os.Binder.execTransact(Binder.java:1123)

No idea if this means Root access required...

Maybe with Watch Face possible...

Look here... on Phones they used Themes...

Samsung Galaxy change CSC by using Theme w/o Samkey | RSR

In Tizen world I was able to perform CSC change via Watch Face and Binary...

But I am absolute Beginner in Android CSC Hacking...

Best Regards
[Samsung Galaxy Watch 4] marco_lu:
hey man
[Samsung Galaxy Watch 4] adfree:
Oh...

Source Code seems online... GW4...

Samsung Open Source

opensource.samsung.com

SM-R885F_EUR_RR_Opensource.zip
SM-R865F_EUR_RR_Opensource_R865FXXU1BUH9_diff.zip
SM-R875F_EUR_RR_Opensource_R875FXXU1BUH9_diff.zip
SM-R895F_EUR_RR_Opensource_R895FXXU1BUH9_diff.zip

SM-R870_NA_RR_Opensource.zip
SM-R860_NA_RR_Opensource_R860XXU1AUGE_diff.zip
SM-R880_NA_RR_Opensource_R880XXU1AUGE_diff.zip
SM-R890_NA_RR_Opensource_R890XXU1AUGE_diff.zip
SM-R865N_KOR_RR_Opensource_R865NKOU1AUGE_diff.zip
SM-R875N_KOR_RR_Opensource_R875NKOU1AUGE_diff.zip
SM-R885N_KOR_RR_Opensource_R885NKOU1AUGE_diff.zip
SM-R895N_KOR_RR_Opensource_R895NKOU1AUGE_diff.zip
SM-R865U_NA_RR_Opensource_R865USQU1AUGC_diff.zip
SM-R875U_NA_RR_Opensource_R875USQU1AUGC_diff.zip
SM-R885U_NA_RR_Opensource_R885USQU1AUGC_diff.zip
SM-R895U_NA_RR_Opensource_R895USQU1AUGC_diff.zip
SM-R860_CHN_RR_Opensource_R860ZCU1AUGF_diff.zip
SM-R870_CHN_RR_Opensource_R870ZCU1AUGF_diff.zip
SM-R880_CHN_RR_Opensource_R880ZCU1AUGF_diff.zip
SM-R890_CHN_RR_Opensource_R890ZCU1AUGF_diff.zip

Only as info...

Best Regards
[Samsung Galaxy Watch 4] adfree:
R860XXU1BUI5/R860OXM1BUI5

BUI5 for OXM region public... for instance:

KOO

XAA

No idea about changelog...

Best Regards
[Samsung Galaxy Watch 4] Willjim:
This update is only rolling out to Galaxy Watch4.

What’s new:

Improved usability of the following applications or features: Touch bezel.

Improved system stability and reliability.
[Samsung Galaxy Watch 4] tids2k:
A quick search :

Responses​

**​

Request URL​

**

Server response​

Code	Details
200

Response body​

Download

{

"latest": "R860XXU1BUI5/R860OXM1BUI5/R860XXU1BUI5/R860XXU1BUI5",

"alternate": [

"R860XXU1AUGE/R860OXM1AUGE/R860XXU1AUGE/R860XXU1AUGE",

"R860TBU1AUGL/R860OXT1AUH1/R860TBU1AUGL/R860TBU1AUGL",

"R860XXU1BUH9/R860OXM1BUH9/R860XXU1BUH9/R860XXU1BUH9"

]

}

Response headers​

connection: keep-alive content-length: 240 content-type: application/json date: Sat,11 Sep 2021 00:50:43 GMT server: uvicorn via: 1.1 vegur

Responses​

No links

This is for XAA CSC. Doesnt look like the firmwares are on the same samsung servers like other firmwares, best to do a packet capture on the phone and understand the full server address and then modify via a script.
[Samsung Galaxy Watch 4] adfree:
CSC change...

Somebody tried with Watch Face """ Hacking""" ?

https://xdaforums.com/t/gear-s3-roo...ear-port-thread.3584588/page-51#post-85492551

Or by modifying existing WF...

?

Only idea...

Best Regards
[Samsung Galaxy Watch 4] tids2k:
Posting here

"

source_ap_file=AP_R860XXU1AUGE_CL22197329_QB41769962_REV00_user_low_ship_MULTI_CERT_meta_WATCH_OS11.tar.md5

source_bl_file=BL_R860XXU1AUGE_CL22197329_QB41769962_REV00_user_low_ship_MULTI_CERT.tar.md5

source_cp_file=

source_csc_file=CSC_OMC_OXM_R860OXM1AUGE_CL22197329_QB41769962_REV00_user_low_ship_MULTI_CERT.tar.md5

target_ap_file=AP_R860XXU1BUH9_CL22353390_QB42369001_REV00_user_low_ship_MULTI_CERT_meta_WATCH_OS11.tar.md5

target_bl_file=BL_R860XXU1BUH9_CL22353390_QB42369001_REV00_user_low_ship_MULTI_CERT.tar.md5

target_cp_file=

target_csc_file=CSC_OMC_OXM_R860OXM1BUH9_CL22353390_QB42369001_REV00_user_low_ship_MULTI_CERT.tar.md5 "

Anyone access to Samsung servers, these are the files to look for...

Thank you @adfree
[Samsung Galaxy Watch 4] tids2k:
Some boot logo files for mods. Please note if you dont know what you are doing dont do it :p

A lot of info available though .. For eg..
[Samsung Galaxy Watch 4] adfree:
BUI5 still only for KOO and XAA... means Korea and USA...

Meanwhile Samsungworking on "new" MAGIC...

CUI9

Could be some "magic" One UI update... or only Securiy increased...

ACR: R860XXU1BUHF
AFR: R860XXU1BUHF
ARO: R860XXU1BUH9
ATO: R860XXU1BUH9
AUT: R860XXU1BUH9
BGL: R860XXU1BUH9
BRI: R860TBU1BUHD
BTU: R860XXU1BUH9
BVO: R860XXU1BUH9
CAC: R860XXU1BUH9
CAM: R860XXU1BUHD
CHC: R860ZCU1BUHG
CHO: R860XXU1BUH9
COO: R860XXU1BUH9
DBT: R860XXU1BUH9
ECT: R860XXU1BUHF
EUR: R860XXU1BUH9
ILO: R860XXU1BUHF
CHC: R860ZCU1BUHG
ITV: R860XXU1BUH9
KOO: R860XXU1BUI5
KSA: R860XXU1BUH9
LUX: R860XXU1BUH9
MID: R860XXU1BUHF
MWD: R860XXU1BUHF
MXO: R860XXU1BUH9
MYM: R860XXU1BUHD
NEE: R860XXU1BUH9
PAK: R860XXU1BUHF
PEO: R860XXU1BUH9
PHE: R860XXU1BUH9
PHN: R860XXU1BUH9
ROM: R860XXU1BUH9
SEB: R860XXU1BUH9
SEE: R860XXU1BUH9
SEK: R860XXU1BUH9
SER: R860XXU1BUH9
SKZ: R860XXU1BUH9
TGY: R860XXU1BUHD
THO: R860XXU1BUHD
TPA: R860XXU1BUH9
TPH: R860XXU1BUH9
TTT: R860XXU1BUH9
TUN: R860XXU1BUHF
TUR: R860XXU1BUH9
UPO: R860XXU1BUH9
XAC: R860XXU1BUH9
XAA: R860XXU1BUI5
XEF: R860XXU1BUH9
XEH: R860XXU1BUH9
XEO: R860XXU1BUH9
XEZ: R860XXU1BUH9
XFA: R860XXU1BUH9
XJP:
XME: R860XXU1BUH9
XNZ: R860XXU1BUH9
XSA: R860XXU1BUH9
XSE: R860XXU1BUH9
XSG: R860XXU1BUHF
XSK: R860XXU1BUH9
XSP: R860XXU1BUHD
XTC: R860XXU1BUHD
XXV: R860XXU1BUH9
ZTO: R860XXU1BUH9

Only as info.

Best Regards
[Samsung Galaxy Watch 4] adfree:
com.samsung.android.cidmanager

com.samsung.android.action.SECRET_CODE

android_secret_code

android:name="com.samsung.android.cidmanager.receiver.PreconfigReceiver" android:permission="com.sec.permission.preconfig">
<intent-filter>
<action android:name="com.samsung.android.action.SECRET_CODE"/>
<data android:host="\ 83052020100812173552301071192687"

<data android:host="27262826"

<data android:host="\ 22623277326634424320"

<data android:host="\ 272837883"

android:name="com.samsung.intent.action.CHAMELEON_PRECONFIG"/>
<data android:host="\ 3472867046185743"

In Manifest...

Edit 1.

Memo to me...

https://xdaforums.com/t/how-to-exyn...s-and-upgrade-firmware.4079353/#post-82220423
[Samsung Galaxy Watch 4] adfree:
Oh. the """new"" magic is available in Korea...

R860XXU1CUIE/R860OXM1CUIE

100 MB Delta FOTA package...

No idea what exactly changed...

Notify Update

Later online...

Best Regards
[Samsung Galaxy Watch 4] adfree:
Strange... or normal... no changelog

AP_R860XXU1CUIE_CL22353390_QB44028222_REV00_user_low_ship_MULTI_CERT_meta_WATCH_OS11.tar.md5
BL_R860XXU1CUIE_CL22353390_QB44028222_REV00_user_low_ship_MULTI_CERT.tar.md5
CSC_OMC_OXM_R860OXM1CUIE_CL22353390_QB44028222_REV00_user_low_ship_MULTI_CERT.tar.md5

Only as info...

So we have to wait for CUIE or someone post details about changes...

Best Regards
[Samsung Galaxy Watch 4] adfree:
Oh funny...

XAA has this:

R860XXU1CUID/R860OXM1CUID

Maybe I will check other CSC too...

Best Regards