Scavenge RF module from Toy grade TX?

More
30 Jan 2017 18:48 - 31 Jan 2017 07:15 #58568 by ajtank
Replied by ajtank on topic Scavenge RF module from Toy grade TX?
Some bank1 values of the MJXQ E010 protocol do not match the recommended values from the BK2423 datasheet. If I use the values from the datasheet or simply ignore the initialization of bank1 registers, my simple Arduino Tx works fine. If I use the values from the MJXQ E010 protocol, it does not work.

The difference of the values between MJXQ protocol and BK2423 datasheet:
register 0x03: 0x99,0x00,0x39,0x21 vs 0x99,0x00,0x39,0x41
register 0x04: 0xD9,0x96,0x82,0x1B vs 0xD9,0x9E,0x86,0x0B
register 0x0C: 0x00,0x12,0x83,0x00 vs 0x00,0x12,0x73,0x05
register 0x0D: 0x46,0xB4,0x80,0x00 vs 0x36,0xB4,0x80,0x00

As mentioned by victzh, the code cannot distinguish among BK2421, BK2423, BK2425, etc. The values in the protocol are extracted by SPI capture of the stock transmitter during the hacking process. Such values might be valid or invalid for different Beken chips and there is no documented explanation in the datasheet. So it is better to use nRF24L01+ to avoid compatibility issues.
Last edit: 31 Jan 2017 07:15 by ajtank.

Please Log in or Create an account to join the conversation.

Time to create page: 0.027 seconds
Powered by Kunena Forum