Please help, bricked Gear S3 SM-R765S - Samsung Gear S3

Hello,
I have a SM-765S (SM-R765SDAASKC). Unfortunately it is bricked, completely stuck in the ODIN mode. In the recovery non of the options are working (except for the power off).
I managed to connect to the pc using a usb cable, but the problem is that the watch not accepting any firmware that is currently available here. ODIN fails with the "complete(write) operation failed" error. If I try to repartition the watch will display the "Secure Check Fail: (PIT)" message.
Probably I need the proper firmware for it but I could not find and similar one, 765A and 765T not working.
Please help how can this be fixed.

Are you from Germany or Korea?
I am from Germany...
Reason for asking is...
I was not really able to detect Firmware Infos about your Device...
If you look at your PHOTO...
You see Bootloader is from:
Code:
SM-R765
not
SM-R765[B]S[/B]
This leads to info latest/last FOTA Firmware was:
Code:
R765[B][COLOR="Red"]K[/COLOR][/B]OU2BQE2
Btw, do you see in menu also Upload wireless Upload usb ?
We have some similar Problem with SM-R765F... but here it is possible to find Firmware on paid site...
https://forum.xda-developers.com/gear-s3/help/please-rom-765f-t3651165
https://forum.xda-developers.com/gear-s3/help/sm-r765f-teardown-t3659431
Best Regards

adfree said:
Are you from Germany or Korea?
I am from Germany...
Reason for asking is...
I was not really able to detect Firmware Infos about your Device...
If you look at your PHOTO...
You see Bootloader is from:
Code:
SM-R765
not
SM-R765[B]S[/B]
This leads to info latest/last FOTA Firmware was:
Code:
R765[B][COLOR="Red"]K[/COLOR][/B]OU2BQE2
Btw, do you see in menu also Upload wireless Upload usb ?
We have some similar Problem with SM-R765F... but here it is possible to find Firmware on paid site...
https://forum.xda-developers.com/gear-s3/help/please-rom-765f-t3651165
https://forum.xda-developers.com/gear-s3/help/sm-r765f-teardown-t3659431
Best Regards
Click to expand...
Click to collapse
In the recovery Upload and Upload wireless also leads to ODIN downloading mode. The recovery is bricked also.
Maybe the product name shows only the main model number

@szegi2
Try to work together with SM-R765S user...
Maybe we can find working Firmware...
Step 1
Reading PIT (partition table) from device...
With USB cable would be easier...
With Tool Heimdall...
With WiFi I have only idea to sniff ODIN connection
Good question how... ...
I will check on weekend what I have on my HD... SM-R765 related...
So maybe good idea to share infos which Firmware you allready found and Link...
I can only remember ATT... which I have only AP part... not the others...
Full... all files I have only from T-Mobile...
So I have only 1 PIT file... if I remember correct...
Best Regards
---------- Post added at 11:14 PM ---------- Previous post was at 10:44 PM ----------
To find something about SM-R765S is really hard...
Google search results for today...
http://doc.samsungmobile.com/SM-R765/SKC/doc.html
http://doc.samsungmobile.com/SM-R765/KTC/doc.html
http://developer.samsung.com/forum/...795?boardName=SDK&listLines=40&startId=zzzzz~
https://gigglehd.com/gg/mobile/1051010
Best Regards
Edit 1.
The hardest hard way to get compatible Kernel seems here:
http://opensource.samsung.com/reception/receptionSub.do?method=sub&sub=F&searchValue=SM-R765
But if download wireless is alive...
Also Linux Kernel is valid and alive...
Also few other files should be valid... on device...

You can find my PIT file attached.
Heimdall could not read the pit using windows. I installed Ubuntu to an old laptop and it worked
Thx for the links.

Wow... how you made it with WiFi.
I have last time used Heimdall few years ago...
Maybe I am not up2date...
Thanx for PIT. :good:
Compared with SM-R765T from here:
https://forum.xda-developers.com/gear-s3/development/rom-samsung-gear-s3-sm-r765-att-t3588066
We can see major differences... and I mean not the additional dumped data...
Attached PIT from:
SM-R765T
I still have no ATT PIT...
@szegi2
If you can help this user to dump PIT from SM-R765F... please.
https://forum.xda-developers.com/gear-s3/help/sm-r765f-teardown-t3659431
Thanx in advance.
Best Regards

I have cut/removed additional data from sm-r765s_readoutfrombricked.zip
Result is attached... usable for ODIN action...
1.
In PIT file you can see which Bootloader "Revision" is active...
Similar to Odin Download Mode Info...
02
Close to last 256 Byte RSA 2048 Signature...
2.
If we compare this PIT dumped from SM-R765S...
with SM-R760... for instance BQC5...
Then 1:1 except the last 256 Byte RSA 2048 Signature...
Best Regards
Edit 1.
SM-R770 PIT too
Again... only RSA 2048 differ... 256 Byte...

Similar problem like with SM-R765F...
FOTA packages contain only 2 full Image files...
Attached from BQHA for SM-R765(S)
Code:
cm.bin
sboot.bin
Please try to flash with Odin and let us know about result...
Thanx in advance.
Best Regards

Looks like in SM-R765(S) Firmware these Sales Codes/CSC inside:
Code:
SKC
SKO
LUO
LUC
KTO
KTC
Best Regards

adfree said:
Similar problem like with SM-R765F...
FOTA packages contain only 2 full Image files...
Attached from BQHA for SM-R765(S)
Code:
cm.bin
sboot.bin
Please try to flash with Odin and let us know about result...
Thanx in advance.
Best Regards
Click to expand...
Click to collapse
Hi,
Flash is failing with the "Complete (Write) operation failed" message
Need the full rom or maybe it needs a re-partition. Unfortunately I get the security check failed (PIT) message when I try to re-partition with the PIT file which was read out from the device.

Please.
Maybe user(s) with alive SM-R765S are here?
Maybe somebody could check with SDB the partition...
Code:
cat /proc/partitions
Then we could compare if this dvice have Original PIT or something is wrong...
Thanx in advance.
Best Regards

Service Manual
Code:
SM-R765A_Tshoo_7.pdf
SM-R765A_EVAPL_3.pdf
SM-R765A_EPLIS_11.pdf
SM-R765A-PSPEC_2.pdf
SM-R765A-Direy-6.pdf
SM-R765A-COVER_1.pdf
Please, if somebody have these files...
Please share. :angel:
Thanx in advance.
Best Regards

Meanwhile Service Manual for SM-R765 public available. :good:
About Reactivation Lock... I found this:
http://forum.gsmhosting.com/vbb/f162/gsm-flasher-frp-reactivation-lock-remover-pro-2200193/
Not tested.
Own risk...
Best Regards

Today I have checked again dumped PIT file...
Now I am pretty sure something is complete wrong...
https://forum.xda-developers.com/showpost.php?p=73661547&postcount=7
I wrote 1:1 similar to SM-R760...
But if we remember...
SM-R765 have modem.bin
And if we simple search for text string modem...
So I am more sure... Somebody tried to flash Combination Firmware from SM-R760...
Only difference why RSA 2048 Signature differ...
I have an theory...
Maybe Gear is really able to self sign...
Maybe RSA 2048 private key is somewhere...
Because also strange if FOTA update from Revision 01 to 02...
Best Regards

No idea why... maybe I was blind. As I have compared few PIT files...
But if we compare Combination BQC2 PIT from SM-R760 with:
https://forum.xda-developers.com/showpost.php?p=73633460&postcount=5
PIT match 1:1...
https://forum.xda-developers.com/showpost.php?p=73661547&postcount=7
So on this SM-R765S somebody forced Combination Firmware BQC2 from SM-R760 with re-partition option...
Best Regards

testfile
OWN RISK!
Best Regards

We have now more infos about partition layout... PIT:
https://forum.xda-developers.com/gear-s3/help/help-r765l-gear-s3-frontier-t3718252
No idea why SM-R765L shows not all infos... maybe again security increased...
But it seems similar to SM-R765A ATT...
Still we have no PIT nor Firmare for SM-R765 group/family:
Code:
SM-R765 S
SM-R765 L
Best Regards

1.
Meanwhile I have realised that netOdin writes partition.pit to device...
SET PIT
So no wonder...
No re-partition mandatory to get wrong PIT, if wrong Firmware is choosen...
2.
Now I was able to compare PIT from SM-R765A and SM-R765T and SM-R765F...
All are identical... except 256 Byte Signature...
3.
Tizen 3 for SM-R765S is online...
But same problem...
Only cm.bin and sboot.bin as FULL file...
No idea if packages for Odin will leak...
Best Regards

SM-R765A firmware
adfree said:
1.
Meanwhile I have realised that netOdin writes partition.pit to device...
SET PIT
So no wonder...
No re-partition mandatory to get wrong PIT, if wrong Firmware is choosen...
2.
Now I was able to compare PIT from SM-R765A and SM-R765T and SM-R765F...
All are identical... except 256 Byte Signature...
3.
Tizen 3 for SM-R765S is online...
But same problem...
Only cm.bin and sboot.bin as FULL file...
No idea if packages for Odin will leak...
Best Regards
Click to expand...
Click to collapse
Hi...i'm new, sorry for my english...
I need help with S3 Frontier Model: SM-R765A, i found this firmware:
(i can't post it right know)
Some one can tell me if it will work and tell about some tutorial to do it? I want to make a downgrade; my software version is: Version Tizen 3.0.0.1, version software R765AUCU2CQL1.
I will explain why i want to do it: When i try to download an app from galaxy apps, it says: Verify your identity to activate your samsung account...
That's rare because my samsung account is fine in my galaxy S7. Also tried with other samsung S7 and it's the same, i made factory reset and nothing, i don't know what else to do.
If you can help me i will apreciate it.
Thanks!

https://forum.xda-developers.com/gear-s3/how-to/att-frontirt-odin-firmware-sm-r765a-t3724475
SM-R765A
NO Firmware available for downgrade...
If you ignore my warning... you will end like here:
https://forum.xda-developers.com/gear-s3/help/please-help-bricked-gear-s3-sm-r765a-t3733140
NOt flash this OBSOLETE Firmware!
Code:
[COLOR="Red"][B]R765AUCU1APJ8/R765AATT1APJ8/R765AUCU1APJ8[/B][/COLOR]
Best Regards

Related

[ROM] [BL] [CSC] [MODEM] Samsung Gear S3 SM-R765A ( R765AUCU1APJ8 )

Hello friends,
Please find the rom files lited below for this device. From now onwards I will include the PIT files in the same thread.
Please note this is for AT & T model.
ROM : AP_R765AUCU1APJ8 Google Drive
BOOTLOADER : BL_R765AUCU1APJ8 Zippyshare
MODEM : CP_R765AUCU1APJ8_CL367188_QB5111100 Zippyshare
PIT : Zippyshare
CSC : CSC_ATT_R765AATT1APJ8 Zippyshare
Is csc is different check mine R765AATT1APJ8 mine also is att
What could happen if I flash this CSC on my S3 Classic?
Since it's a US CSC I believe this could activate SPay on other S3 models
dxzdxz1 said:
What could happen if I flash this CSC on my S3 Classic?
Since it's a US CSC I believe this could activate SPay on other S3 models
Click to expand...
Click to collapse
You will probably brick your watch since this is a firmware for LTE version
10urshin said:
You will probably brick your watch since this is a firmware for LTE version
Click to expand...
Click to collapse
Even flashing only the CSC instead of the entire ROM?
dxzdxz1 said:
Even flashing only the CSC instead of the entire ROM?
Click to expand...
Click to collapse
I have compared CSC versions with people who have Spay on their watches and found we have the same versions. I don't believe it is the CSC that activates*Spay installation. I have tried everything I can think of and nothing works.*I even tried GPS spoofing and that didn't work. It did install Spay into Gear Manager but not onto the watch.
10urshin said:
You will probably brick your watch since this is a firmware for LTE version
Click to expand...
Click to collapse
Sword Fish said:
I have compared CSC versions with people who have Spay on their watches and found we have the same versions. I don't believe it is the CSC that activates*Spay installation. I have tried everything I can think of and nothing works.*I even tried GPS spoofing and that didn't work. It did install Spay into Gear Manager but not onto the watch.
Click to expand...
Click to collapse
Me too man. I did a full dump from my watch and compared to a friend who bought his watch on US (and is able to use SPay here In Brazil) and what I found was that SW_Configuration.xml inside CSC folder was different. Everything else is the same.
I've tried to change the file but the CSC folder is RO.
dxzdxz1 said:
Even flashing only the CSC instead of the entire ROM?
Click to expand...
Click to collapse
I thought you gonna flash the whole rom, idk what would happen if you flash only the csc partition let alone if it even get pass the md5 check on netodin.
Anyone in this firmware got the "Jansky Wearable" update?
Mine did not....
tids2k said:
Hello friends,
Please find the rom files lited below for this device. From now onwards I will include the PIT files in the same thread.
Please note this is for AT & T model.
ROM : AP_R765AUCU1APJ8 Google Drive
BOOTLOADER : BL_R765AUCU1APJ8 Zippyshare
MODEM : CP_R765AUCU1APJ8_CL367188_QB5111100 Zippyshare
PIT : Zippyshare
CSC : CSC_ATT_R765AATT1APJ8 Zippyshare
Click to expand...
Click to collapse
Zippylinks are dead. Does anyone have a copy?
@tids2k
@ others too, who allready downloaded these files
Please re upload files...
Zippyshare Links are expired.
Thanx in advance.
Best Regards
I will upload them again this weekend.
There are tons of reasons to flash a phone or a tablet with a custom rom. Why would I flash my watch?
What does this rom have that the stock rom does not? It seems all that happens is Samsung Pay is disabled.
There are tons of reasons to flash a phone or a tablet with a custom rom. Why would I flash my watch?
What does this rom have that the stock rom does not? It seems all that happens is Samsung Pay is disabled.
Click to expand...
Click to collapse
:cyclops:
1.
This Firmware is outdated + Links are expired...
2.
Are you really sure you know the difference between this Firmware and "Stock"?
Why do you think here is Custom Firmware?
This is Orignal "Service" Firmware for use with ODIN...
3.
Samsung Pay...
If you read other Threads/posts...
Their are enough what disable Spay crap...
4.
NO Custom ROMs for Gear S3 available... as PROTECTED against Modification...
Only as hint for you...
Best Regards
OK that's what I figured. Thanks.
I purchased a used Sm-765A and it is reactivation locked; I'm trying to restore it to factory settings, Can someone tell me where I can find the instructions and files to restore it to factory? Thanks for any help.
P.s. I tried downloading from the zippy links on this thread but files are not there
1.
This Firmware which is NOT fully downloadable is obsolete
Latest know """""""""""""""""""public"""""""""""""""""""""""""... official Version:
Code:
R765AUCU[COLOR="Red"][B]2[/B][/COLOR]BQD4/R765AATT[B][COLOR="Red"]2[/COLOR][/B]BQD4/R765AUCU[B][COLOR="Red"]2[/COLOR][/B]BQD4
Obsolete!
Code:
R765AUCU[B][COLOR="Red"]1[/COLOR][/B]APJ8/R765AATT[COLOR="Red"][B]1[/B][/COLOR]APJ8/R765AUCU[B][COLOR="Red"]1[/COLOR][/B]APJ8
NOT try to flash... you can damage/brick your device! Thanx to Knox and Rollback Prevention...
2.
You have low chance to find Firmware...
3.
Reactivation Lock...
Look at youtube...
Few people offer "Service"... for SM-R760 and SM-R770...
BUT with SM-R765 is seems you will have NO luck...
Also no Combination Firmware for ATT and SM-R765A...
Really, you have no luck with SM-R765... we have more users with no luck:
https://forum.xda-developers.com/gear-s3/help/please-help-bricked-gear-s3-sm-r765s-t3665558
https://forum.xda-developers.com/gear-s3/help/sm-r765f-teardown-t3659431
Try to contact Seller, if he remember Samsung Account... or give him/her the watch back...
Best Regards
what does flashing with this ROM allow you to do?
Code:
R765AUCU[COLOR="Red"][B]1[/B][/COLOR]APJ8/R765AATT[COLOR="Red"][B]1[/B][/COLOR]APJ8/R765AUCU[COLOR="Red"][B]1[/B][/COLOR]APJ8
R765AUCU[COLOR="Green"][B]2[/B][/COLOR]BQD4/R765AATT[COLOR="Green"][B]2[/B][/COLOR]BQD4/R765AUCU[COLOR="Green"][B]2[/B][/COLOR]BQD4
R765AUCU1APJ8 is old and obsolete AND NOT for Flashing...
Risk to brick...
Rollback Prevention...
Software Revision is 01...
Rollback Prevention Security crap require 02...
Otherwise you have similar result like these:
https://forum.xda-developers.com/gear-s3/help/please-help-bricked-gear-s3-sm-r765s-t3665558
https://forum.xda-developers.com/gear-s3/help/sm-r765f-teardown-t3659431
Only as info.
Best Regards
Here is the link for the SM-R765A firmware: https://mega.nz/fm/l8sz2ZhY

HELP

does anyone has the at&t FW ? installed diffrent one and seems didnt work and got stuck !!
Can you try to be more precise?
If ATT means you have SM-R765A...
WHAT exact you have tried?
File from where...what?
Filename etc...
I thought I have told you it is dangerous... risk to brick your Gear Wearable...
https://forum.xda-developers.com/showpost.php?p=74039105&postcount=59
If you play tooooooo much with WRONG files... you will end here:
https://forum.xda-developers.com/gear-s3/help/sm-r765f-teardown-t3659431
1.
Please identify your EXACT model name...
Not smell it...
Read it from Gear...
Way A.
On the Rear Case/Back Cover
Way B.
Enter Download Mode and look with open eyes...
You see Model name from Bootloader...
2.
If you have really ATT SM-R765A...
Then we have tiny little problem...
As NO Firmware available which fit Rollback Prevention balbla crap...
Code:
R765AUCU2BQD4
I have only Bootloader and cm from this version... nothing more...
Sorry...
Best Regards
Edit 1.
Here is example how to read from Download Mode your Model name...
https://forum.xda-developers.com/showpost.php?p=73644320&postcount=16
Look at left Picture...
Code:
ODIN MODE
PRODUCT NAME: SM-R7[COLOR="Red"][B]???[/B][/COLOR]
So meanwhile we have 3 SM-R765? users with similar problem.
NO Firmware for repair available...
SM-R765 (S) for Korean SKC Sales Code:
https://forum.xda-developers.com/gear-s3/help/please-help-bricked-gear-s3-sm-r765s-t3665558
SM-R765F for Singapore XSP Sales Code:
https://forum.xda-developers.com/gear-s3/help/please-rom-765f-t3651165
And now as it seems... SM-R765A user with ATT Sales Code... if I am not wrong...
I have tried many things WITHOUT luck... 1 example... request on paid site:
http://forums.easy-firmware.com/sho...r-SM-R765F-and-SM-R765(S)&p=169979#post169979
Only hope is Tizen 3 incoming Firmware...
No idea when, no idea if for all devices leaked...
Maybe only in 2018 available... maybe NEVER...
Best Regards
Well I returned it to AT&T and getting a new one !! never going to flash anything again at least on the GS3

I succesfully changed my CSC to XAR to enable samsung pay. SM-R770.

Hello Everyone. I have some awesome news for anyone who wants to activate samsung pay on ANY gear s3 classic (SM-R770). I have successfully changed my CSC to XAR (which is the csc for USA)
DISCLAIMER: this is a detailed account of what i did and it worked for me. USE AT YOUR OWN RISK.
Ok so first i want to say thanks to @BiggPharma , @xedamen , @Honestly Annoying , and @adfree as i used guides produced by each of them to do this.
What youll need:
Netodin3
files for current firmware. I got mine from @xedamen post:
https://forum.xda-developers.com/gear-s3/how-to/rom-samsung-gear-s3-classic-sm-r770-t3646789
files for the stock combonation firmware from @HonestlyAnnoying post:
https://forum.xda-developers.com/gear-s3/development/rom-samsung-gear-s3-sm-r770-t3584402
shout out to @BiggPharma for the guide that relates to SM-R760
INSTRUCTIONS:
----------------
1. Check reactivation lock is off
- On your phone, go to Samsung Gear App
- Go to Setttings Tab, choose "Find my Gear"
- Make sure Reactivation Lock is off
2. Connect your watch to your PC
- Hold down the home/power button until you see the "rebooting" screen
- Release the home/power button then quickly press it three times to bring up the boot menu
- Quick press the home/power button to cycle through the menu to "Download (wireless)"
- Long press the home/button to confirm the menu selection
- The phone will then go into WPS mode
- Double press the home/power button to change to AP mode
- On your PC, enable WiFi and connect to the access point on you watch.
NOTE: Until you successfully connect to NetOdin, your watch may display red text stating "Connection Timeout" - this is OK
- Open up NetOdin. You should now be connected to your watch (you should see the IP in the NetOdin window and "Connected to xx.xx.xx.xx" on your watch face.
NOTE: I had to disable Windows Defender public firewall temporarily for NetOdin to work properly
3. Flash combination firmware
- Load the unzipped .tar.md5 file into the "AP" box of NetOdin, wait for it to finish checking then click "Start". This should take about 10 minutes to complete after clicking "Start".
NOTE: I reccomend unchecking auto-reboot in the NetOdin3 program so it doesnt restart after flashing.
4. Flash CSC file from stock firmware
- Load the unzipped CSC_xxx.tar.md5 file into the "CSC" box of NetOdin, wait for it to finish checking then click "Start". This should take about 1-2 minutes to complete after clicking "Start".
5. Factory reset
- In your Gear, go to Settings > Gear Info > Reset Gear > Confirm
NOTE: BiggPharma got a warning at this stage that Reactivation Lock was on. Don't know why they got this message as they had definitely turned it off in step 1. They ignored it (no guts, no glory!) and was fine. Your mileage may vary. I however did not have this happen
6. Set CSC code
- In the Gear, go to the Tizen Keystring app
NOTE: screenshots of what your interface will look like: https://forum.xda-developers.com/showpost.php?p=74591475&postcount=13
- Type in the following code exactly: *#272*719434266344#
- You will be taken to a list of CSC codes that you can scroll through. Find the code you want to change to and select it. I used "XAR" for US so that i could use samsung pay.
7. Reflash complete current stock ROM
- Load the unzipped CSC_xxx.tar.md5 file into the "CSC" box of NetOdin, wait for it to finish checking.
- Load the unzipped AP_xxx.tar.md5 file into the "AP" box of NetOdin, wait for it to finish checking.
- Load the unzipped BL_xxx.tar.md5 file into the "BL" box of NetOdin, wait for it to finish checking.
- Click "Start". This should take about 15 minutes to complete after clicking "OK".
You are done!
i also should mention after i put the current stock firmware it got a FOTA update to R770XXU2BQH1.
ALSO shoutout to @adfree for being so awesome and helping xedamen which enabled me to do all this. he also pmed me and replyed to my comments with some useful info.
To everyone who helped me thanks a billion. you made my birthday (today) AMAZING.
I will try to do it with my watch, I want to change it from spanish to korean to be able to use my korean cards, cause spay is not even activated in Spain xdd
You could try Sales Code:
Code:
KOO
For Korea...
But no guarantee it will help...
It depend also on Firmware Version... and for SM-R770 we have only BQC5 public... not BQH1 nor CQK3 (Tizen 3)...
SM-R760 user can play with more Firmware:
BQC5 or BQH1 or CQK3
See posts, where users after downgrade from CQK3 lost Spay... for instance:
Code:
SER - Russia
Also not forget the Phone part...
It is an chain/riddle/puzzle... to find all working incredients...
Best Regards
adfree said:
It depend also on Firmware Version... and for SM-R770 we have only BQC5 public... not BQH1 nor CQK3 (Tizen 3)...
SM-R760 user can play with more Firmware:
BQC5 or BQH1 or CQK3
Click to expand...
Click to collapse
i also should mention after i put the current stock firmware it got a FOTA update to BQH1.
downgrade tizen 3 -> tizen 2 and change region
Please correct me if I am wrong.
my gear s3 - r770
ap r770xxu2cqk3
csc r770oxa2cqk3
3. I should lflash from https://forum.xda-developers.com/gear-s3/how-to/rom-samsung-gear-s3-classic-sm-r770-t3646789
4. I can't find CSC file in stock combination. Where i can get it?
6. I should flash from https://forum.xda-developers.com/gear-s3/development/rom-samsung-gear-s3-sm-r770-t3584402
Akakiy said:
Please correct me if I am wrong.
my gear s3 - r770
ap r770xxu2cqk3
csc r770oxa2cqk3
3. I should lflash from https://forum.xda-developers.com/gear-s3/how-to/rom-samsung-gear-s3-classic-sm-r770-t3646789
4. I can't find CSC file in stock combination. Where i can get it?
6. I should flash from https://forum.xda-developers.com/gear-s3/development/rom-samsung-gear-s3-sm-r770-t3584402
Click to expand...
Click to collapse
Sorry if what I'm posting confused you.
3. This is where you flash the FACTORY combination firmware.
4. The csc that you are flashing is from whatever firmware you are currently using. The reason for this is because if the csc is downgraded I read that it gets put into a bootloop that soft locks your watch. So you have factory firmware with your same csc.
6. You shouldn't be flashing anything in this step. This step is basically going into a certain menu and changing the watches internal sales code.
namrepus2010 said:
Sorry if what I'm posting confused you.
3. This is where you flash the FACTORY combination firmware.
4. The csc that you are flashing is from whatever firmware you are currently using. The reason for this is because if the csc is downgraded I read that it gets put into a bootloop that soft locks your watch. So you have factory firmware with your same csc.
6. You shouldn't be flashing anything in this step. This step is basically going into a certain menu and changing the watches internal sales code.
Click to expand...
Click to collapse
Thank you for answer.
4. I'am using Tizen 3 and i have no CSC "r770oxa2cqk3" from this version. Сan I solve this problem?
Akakiy said:
Thank you for answer.
4. I'am using Tizen 3 and i have no CSC "r770oxa2cqk3" from this version. Сan I solve this problem?
Click to expand...
Click to collapse
@adfree would probably be able to answer that. AFAIK there is no release for cqk3
Meanwhile I have CQK3 and also Combination Firmware CQK2 for SM-R770...
I could upload...
Best Regards
adfree said:
Meanwhile I have CQK3 and also Combination Firmware CQK2 for SM-R770...
I could upload...
Best Regards
Click to expand...
Click to collapse
@Akakiy maybe pm adfree and get the firmware and do do my guide with the firmware he provides.
Gear S2 Spay issue
Can I Use the same steps on my Gear S2? (of course if I can find the firmware for it)
Thanks
alikhan0056 said:
Can I Use the same steps on my Gear S2? (of course if I can find the firmware for it)
Thanks
Click to expand...
Click to collapse
I have no clue. You might want to ask someone experienced like @adfree
alikhan0056 said:
Can I Use the same steps on my Gear S2? (of course if I can find the firmware for it)
Thanks
Click to expand...
Click to collapse
Yes you can.
Firmwares what you need is: R720XXU2AOJ2 (Combination) / R720XXU2EQH1 (Regular) or R732XXU2AOJ2 / R732XXU2EQH1 based on your model.
Streect said:
Yes you can.
Firmwares what you need is: R720XXU2AOJ2 (Combination) / R720XXU2EQH1 (Regular) or R732XXU2AOJ2 / R732XXU2EQH1 based on your model.
Click to expand...
Click to collapse
Thanks, I'll try to locate these firmwares for R720.
alikhan0056 said:
Thanks, I'll try to locate these firmwares for R720.
Click to expand...
Click to collapse
If you manage to do this can you please let us know. I'm still waiting for Samsung pay to be released for the R720 in the UK.
Cheers
Sent from my SM-G955F using Tapatalk
Good news! I managed to do it. I will send you the links shortly.
Process is similar to Gear S3.
I'd like to change csc on my gear s3 frontier
Does the procedure work for it or is it just for classic?
big thanks to @namrepus2010, @Honestly Annoying and @adfree for the tutorial and all files.
I successfully change my CSC to XAR following your tutorial.
But now I have one question
My Gear S3 was updated to Tizen 3.0.0.1. Can I change my CSC back to ZTO using this combination file or I have to use the CQK2 combination firmware to do this?
At the moment 2BQC2 and 2CQK2 are same Software Revision like:
Code:
[B][COLOR="Green"]2[/COLOR][/B]CQK3
[B][COLOR="Green"]2[/COLOR][/B]CQL1
So you can use both Combination Firmware... if you want.
Best Regards
So friggin awesome!!! Bought my "International" version on the cheap and didn't have SPAY. NOW I DO!!!! Thanks so much for this tutorial!!!! Thanks @namrepus2010, @Honestly Annoying and @adfree for all of your help to this forum. Now, if we could just figure out a way to get android wear on this thing!

Problems with my Gear S2

Hi. I recently purchased a second hand Gear S2. I managed to connect it to a Huawei P10, but after turning off the bluetooth by mistake and re-enabling it, the watch asks to do a Factory Reset in order to connect with a device that was already connected with it before . After that, I managed to connect it with my older Glaxy A3 2017 and tried to update the software, but surprise, a pop-up shows saying "Your Gear has been modified. Software Update is not avaible.". Ideas how to fix that? Or this issue is because my Gear S2 (purchased second hand) is a Live Demo Unit?
Live Demo Unit
Click to expand...
Click to collapse
Look at Rear Case/Back Cover...
In theory you will find... NOT FOR SALE...
Anyway... if you know which exact model name...
SM-R720X
or
SM-R732X
or
You can flash Retail Firmware... via netOdin...
Better you choose correct Firmware, according to Model Name...
Only as info.
Best Regards
adfree said:
Look at Rear Case/Back Cover...
In theory you will find... NOT FOR SALE...
Anyway... if you know which exact model name...
SM-R720X
or
SM-R732X
or
You can flash Retail Firmware... via netOdin...
Better you choose correct Firmware, according to Model Name...
Only as info.
Best Regards
Click to expand...
Click to collapse
Yeah, it says Not For Sale. Model number is SM-R720X. Can you please give me a link for firmware download?
Check first Firmware on Device... with this Code:
Code:
*#1234#
Problem with LDU... Live Demo Unit
Since EPK5 it looks like Firmware detect LDU... and disable WiFi for use with netOdin...
And for valid FOTA use... you need "valid" Sales Code/CSC + Firmware Combination... otherwise you can again not update via Samsung FOTA...
Best Regards
adfree said:
Check first Firmware on Device... with this Code:
Code:
*#1234#
Problem with LDU... Live Demo Unit
Since EPK5 it looks like Firmware detect LDU... and disable WiFi for use with netOdin...
And for valid FOTA use... you need "valid" Sales Code/CSC + Firmware Combination... otherwise you can again not update via Samsung FOTA...
Best Regards
Click to expand...
Click to collapse
When entering the code *#1234#, the watch shows AP : R720XXU2AOIL and CSC : R720OXX2AOIL .
Also seem like the computer can find the AP connection from the watch and also it can connect, and netOdin does detect the watch too.
Try FIRST with older BOKK Firmware:
https://www.file-upload.net/download-12731427/smR720_BOKK_OXA.zip.html
Be carefully to download the 600 MB package... NOT any .EXE file.
I hope you will find netOdin + Instruction... otherwise ask...
Best Regards
adfree said:
Try FIRST with older BOKK Firmware:
I hope you will find netOdin + Instruction... otherwise ask...
Best Regards
Click to expand...
Click to collapse
OK, after that, what do I need to do next?
If you successfully flashed BOKK Firmware...
You can check if valid Sales Code/SCS is set... and you have your languages...
Because you have now OXX region Firmware... and I have only OXA BOKK...
If BOKK is on device... check via Phone if you get FOTA Update...
If not... then post result...
So we could try something... to make it "compatible"...
Best Regards
adfree said:
If you successfully flashed BOKK Firmware...
You can check if valid Sales Code/SCS is set... and you have your languages...
Because you have now OXX region Firmware... and I have only OXA BOKK...
If BOKK is on device... check via Phone if you get FOTA Update...
If not... then post result...
So we could try something... to make it "compatible"...
Best Regards
Click to expand...
Click to collapse
I successfully installed BOKK firmware and I have my language, which is in my case romanian, but in the Samsung Gear App, I still get the same error: Your Gear has been modified. Software updates are not available.
I still get the same error: Your Gear has been modified. Software updates are not available.
Click to expand...
Click to collapse
Do you know SDB Tool?
You are able to work with it?
We could try to identify, why Gear Manager App detect some Modification...
Maybe they increased Security to identify SM-R720X...
Best Regards
adfree said:
Do you know SDB Tool?
You are able to work with it?
Click to expand...
Click to collapse
No, I never heard of it so I don't know how it works.
As I can do the Samsung Gear in my rom custom .... to install it but try to run it tells me that the phone has been modified.
Have anyone reached out and found a solution then? 👨🏻‍🦯👨🏻‍

Samsung Gear S3 Sensors not working.

Hi,
After last update, the sensors are not working. I used Netodin to install the lower version but still it comes out that it did not solve the problem either. I guess I should stop looking for the solutions desperately as neither Samsung nor I can do anything about it. Bought this watch from Canada and have been desperately looking and following the forums where people are facing similar issue.
If any of you guys have any lead, Please keep this post updated. Samsung is simply ignoring the issue,
You could try if Combination Firmware maybe "resets" reinit Sensors...
Samsung has other "priority"...
As I still not know your Model Name...
So I have NO idea if maybe latest CRK2 do some "magic"... sensor related...
Still I have not killed my Sensors as it seems... So I have no idea how to help...
Still I suggest to increase research "skills"...
We can log if we want... with SDB Tool or by typing:
Code:
*#9900#
Nobody of use have Crystal Ball nor can smell Bits and Bytes...
Best Regards
model number SM-R760.
where can I find the combination firmware. I installed 2.3.2.4 by following the steps.
For SM-R760 Combination Firmware for instance here:
https://forum.xda-developers.com/gear-s3/development/rom-samsung-gear-s3-sm-r760-t3746522
This is Tizen 3 CQL1...
WARNING!
This is Service/Factory Firmware... it looks different and so on...
But MAYBE it could reset Sensor problem.
MAYBE untested theory...
Combination Firmware is SINGLE file... only 1 file instead 3...
Simple select in netOdin for instance under AP...
OWN RISK!
Risk to brick is similar to flash any other Firmware through netOdin...
NOT try wrong Firmware... Really try only CQL1 Tizen 3...
And/or BQC2 FTMA Tizen 2.3... is valid:
https://forum.xda-developers.com/gear-s3/development/rom-samsung-gear-s3-sm-r760-t3588082
Suggestion...
A
Try CQL1 FT30 Combination Firmware...
B
Then flash BQC2 FTMA Combination
C
Then you can flash back to Stock Firmware of your choice...
Maybe try CQL1 Stock Firmware from here:
https://forum.xda-developers.com/gear-s3/development/rom-samsung-gear-s3-sm-r760-t3755374
The idea behind this "funny" chain...
Downgrade from Tizen 3 -> 2.3
Maybe Combination fix automatic something... but it is hard to test...
You can try by pressing these funny Icons... somewhere is Sensor test...
So hopefully after 3 times flashing with netOdin... maybe Sensors are alive again.
Sorry, only theory.
Untested...
And not 10000 % risk free...
Good luck.
Best Regards
I have flashed CRB1 FT30 Combination Firmware...
If I click on Icon with HW...
I can click around... and find if I want few usefull tests...
See Screenshots...
So in theory you can click in BQC2 FTMA Firmware and in CQL1 FT30 to check if something is diffferent or still "damaged"...
Most important info is on Pic 10...
PASS sounds good IMHO.
Please check your result...
Best Regards
Hi adfree,
Thank you so much. I am willing to flash that version. However, I did not understand what you said in second post with screen shots. Can you explain ut again? Thanks though.
I thought it is self explaining...
Flash Combination Firmware... then you will see these Icons...
Click Icon labeled with HW...
In theory simple task(s)...
Maybe if I have time.
I will flash BQC2 FTMA Combination Firmware... and check "Pic 10"...
In Tizen 2.3 if I remember correct I am able to capture Video...
Best Regards
Hi,
I flashed the firware. It shows fail in HW. Any other idea? I am flashing it back to previous software
I flashed the firware.
Click to expand...
Click to collapse
Which?
CQL1 or BQC2?
Can you make Photo...
So we have something to compare.
Best Regards
Edit 1.
Look into this Thread/Post:
https://forum.xda-developers.com/showpost.php?p=77321440&postcount=7
The only difference between our watch is MCU version (checked using test mode, sensor hub, *#0*#):
My MCU version is BRO10 (Status: Fail) where as his MCU version is BR0118032200 (Status: Pass).
Click to expand...
Click to collapse
Used the first link for CQL1
Your 10th image in which it says pass, mine says fail.
I missed the part where you said I should try CQL from a different link. Should I go for it?
Your 10th image in which it says pass, mine says fail.
Click to expand...
Click to collapse
But in this Screenshot you see other text + digits... this is more important to know as Pass or Fail...
Look again into this post:
https://forum.xda-developers.com/showpost.php?p=77321440&postcount=7
Can you please complete text what you can see?
I have no Crystal Ball.
Thanx in advance.
Later I can check what I can see if I flash BQC2 FTMA Firmware...
No idea if output text not differ...
Maybe Sensor Hardware also have this Rollback Prevention sh i t...
And you can only update to higher Firmware... not downgrade...
I mean NOT Firmware for netOdin...
Sensors have also Firmware inside Firmware package...
Best Regards
I flashed CQL1 from the very first link you provided. I missed the part when you mentioned that i should use another link instead. Should i do it again?
Ill flash it again in some time and send you the screenshot
Wait for my next Screenshots... then more clear why...
I hope.
I need few hours before I have result...
Best Regards
Sure,
Ill wait for your reply. Thanks for helping.
Hi adfree,
Currently in the stock firmware. It shows the exact same screen when i installed that firmware.
Screenshot is taken from my SM-R760...
Some Google search leads to:
https://www.broadcom.com/products/wireless/gnss-gps-socs/bcm4774/
Location Hub chip integrates a GNSS receiver with a second-generation sensor hub function in a single chip.
It simultaneously supports Galileo, GPS, GLONASS, SBAS, QZSS and BeiDou satellite systems.
The unique architecture of the Location Hub and extra memory compared to BCM4773 (first generation) extends the battery life of the mobile device. The BCM4774 offloads the data calculations from the system applications processor (AP), enabling the AP to sleep for longer periods of time. Compared to the previous generation, the BCM4774 further improves the on-chip location accuracy. This enables a very efficient and accurate low-power background location.
Click to expand...
Click to collapse
Seems this Combo chip is less 10 $ available
https://www.ebay.com/itm/1-Pcs-BCM4774IUB2G-For-Samsung-S7-wifi-IC-module-chip-/142883725481
https://www.ebay.com/itm/1pcs-BCM47...007&algo=SIM.MBE&ao=1&asc=20131231084308&meid
%3Db694ce6d3b7343a6814dc7727b29345d%26pid%3D100010%26rk%3D5%26rkt%3D12%26sd%3D142883725481%26itm%3D332725821408&_trksid=p2047675.c100010.m2109
IMHO
If WiFi still work... so not the whole chip dead... "only" Sensor part...
No idea if also higher Battery consum/draining...
On my Screenshots I can see... Sensor Hub Firmware changes for "every" Firmware...
Compared with CQL1 and BQC2...
If this chip is also in many other Samsung products...
Maybe answer is also in other Threads...
How to repair broken Firmware manually...
1pcs BCM4774IUB2G BCM47741UB2G wifi ic chip For Samsung S7
Click to expand...
Click to collapse
Maybe search in Samsung S7 threads...
Code:
Template... clean
SENSORHUB
SELFTEST
INT Check:
Firmware Check
MCU Firm Version:
Bin Firm Version:
MCU name:
Combination FT30 CRB1
SENSORHUB
SELFTEST
INT Check:eek:K
Firmware Check
MCU Firm Version:BRO117120400
Bin Firm Version:BRO117120400
MCU name:BCM4774IUB2G
Combination FTMA BQC2
SENSORHUB
SELFTEST
INT Check:
Firmware Check
MCU Firm Version:BRO117032300
Bin Firm Version:BRO117032300
MCU name:BCM4774IUB2G
My results and template as text...
I know Broadcom Firmware is inside Firmware... rootfs.img
Combination FT30 CRB1 as example:
Code:
/usr/lib/firmware/BCM43012B0_002.001.021.0136.0140.hex
HEX file is ca. 150 KB
Questions only...
Has chip own memory for Firmware update of Chip?
Is it possible to manually "flash" ... maybe by Commands or Code or simple replace file
Need more time for study.
Best Regards

Categories

Resources