So i finally looked a bit into the files Masakari upped.
The result is not as positive as i hopped to :/
I could find the Pairing services. So i know the exact steps done for the pairing to be successfull, but it's nothing you can't guess by just capturing network communication. I tryed to get the exact mecanism for the pairing exchange on step 1 and 2 (step 0 is only a "isServiceAlive?" step), but that's where things went unlucky : the methods doing so are native. Which mean there's native library on the device that take care of that part. The load of the library "Pairing" is called, so i expect it to be in libPairing.so (which apparently rely on libcrypto.so), or something close for the name.
the culprits are these methods, which lies in this native lib.
public native String clientstep1(String s);
public native String clientstep2(String s, String s1);
public native String clientstep3(String s);
I don't have a device with access to this lib on hand and i'm not sure that ARM disassembly will be that easy
Still i find that weird, that mean that a non-samsung android device would not work with the TV (which confirm why i couldn't find any app that work with my tv on my nexus, and why the samsung app is unavailable)
I think going further would require to have a look an the Smart View 2.0 window apps. A quick look with hexedit made the SmartView2.Devices.dll looks promising, but dissassembling those is not within my comfort zone. If i get some more free time i may give it a shot.
Hope someone interested can take over!
EDIT : I did have a look in the end. All relies on SCPApi.dll. I don't know what is made inside it atm. The calls made on it are rather simple, but i don't know how i'd use it from kodi, nor i really know python. If someone want more info on it, i'll gladly post it here.
Regards