Eachine E015 Flight Boat Car

  • goebish
  • goebish's Avatar Topic Author
  • Away
  • I Void Warranties
More
24 Oct 2018 09:47 - 07 Nov 2018 10:36 #71481 by goebish
Eachine E015 Flight Boat Car was created by goebish
I was sent this machine to check if I could deviate it (Thanks Fred!) as the range in car/boat mode is no more than 10 meters using the stock transmitter.
Also, the stock controller is pretty bad, I found out that 2/3 of the sticks throw is just dead zone !

Both Tx & Rx have a MCU with built-in 2.4 GHz transceiver, no SPI bus.
(Tx= RW1608, Rx= Sonix SN32F706, according to the datasheet this IC isn't supposed to have a built-in RF transceiver ...)

With SDR I was able to figure out the transceiver is a HS6200: bit.ly/2O0D2pu

Last time I tried to emulate the HS6200 using the nrf24l01 or cyrf6936 (they're the only 2 transceivers we have that can do gfsk @ 1 Mbps) it didn't went too well, remember:
www.deviationtx.com/forum/protocol-devel...-e012?start=20#62970
www.deviationtx.com/forum/protocol-devel...-e012?start=40#63026
but hey, let's try again ....



... and that's a fail :P
(I decreased packet period after I made this video, that's better now, but still not usable, same as E012)

Same as last time, the HS6200 misses most of the packets that are sent by the nrf24l01 (that's the same the other way round) although they've the same GFSK center frequencies and deviation ...

It won't make its way into nightly builds, but if someone wanna try it anyway here are a few test builds:
www.dropbox.com/sh/9zcfhpj46zwszq2/AADMM...1gSrLl-bDZS89Ta?dl=0
Protocol: E015
CHANNEL5: Arm
CHANNEL6: Led
CHANNEL7: Flip
CHANNEL9: Headless
CHANNEL10: RTH

Source: github.com/goebish/deviation/blob/protoc...ocol/e015_nrf24l01.c

Now I won't waste my time the next time I see a HS6200 ;)

Protocol notes:
EAchine E015

radio
-----
HS6200, GFSK @ 1Mbps
preamble|5 byte address|2 byte guard|9 bit PCF|scrambled payload|16 bit crc (pcf+payload)

packet period: 9ms

bind & data freq
----------------
2445 MHz
same freq for bind & data, no freq hopping

bind preamble
-------------
0101010101010101 // 0x5555

bind address
------------
53 38 79 54 62 62 62 // raw out of the air (address + 2 guard bytes)
62 54 79 38 53 // reversed for nrf24

bind packet
-----------
00 01 02 03 04 05 06 07 08
18 04 06 53 cb b2 52 89 ab
[00:02] = fixed, firmware date ?
[03] = data guard byte
[03:07] = address for data phase
[08] = sum[03:07] & 0xff

data preamble
-------------
(110)1010101010101010 // 0xaaaa
determined by msb of the raw address

data address
------------
received during bind
89 52 b2 cb 53 53 53 // raw out of the air (address + 2 guard bytes)
53 cb b2 52 89 // reversed for nrf24

data packet
-----------
00 01 02 03 04 05 06 07 08 09
70 70 70 70 20 20 00 00 00 00
[00] = throttle 0-225
[01] = rudder 0-225
[02] = aileron 225-0
[03] = elevator 225-0
[04] = elevator trim 0x3f-0x20-0x00
[05] = aileron trim 
[06] = arm flags
       0x80 = disarm (toggle to turn off motors)
       0x40 = arm (toggle to turn on motors)
[07] = flags
       0x80 = flip
       0x10 = headless
       0x08 = rth
       0x04 = leds
       0x02 = expert mode
       0x01 = intermediate mode
[08] = 0x00
[09] = sum[00:08] & 0xff
Last edit: 07 Nov 2018 10:36 by goebish.

Please Log in or Create an account to join the conversation.

More
31 Oct 2018 16:03 #71517 by planger
Replied by planger on topic Eachine E015 Flight Boat Car
Goebish you might want to try what I did for the Shenqi protocol using LT8900 emulation.
I had the same problem of packet loss. Instead of sending a lot more packets I've just sent 2 packets but without waiting for the 1st one to be completed.
I think the target RF decoding part is looking at a flow of bits and look for the sync and address in it and takes whatever is after in the payload. By transmitting even a "bad/not complete" packet before with "no time in between" helps the target RF demodulator to start.
Anyway this is what worked for the Shenqi protocol to get a smoth connection.
Pascal

Please Log in or Create an account to join the conversation.

  • goebish
  • goebish's Avatar Topic Author
  • Away
  • I Void Warranties
More
02 Nov 2018 22:14 #71526 by goebish
Replied by goebish on topic Eachine E015 Flight Boat Car
I was eager to check that out hoping it would work, but it doesn't.

Please Log in or Create an account to join the conversation.

  • goebish
  • goebish's Avatar Topic Author
  • Away
  • I Void Warranties
More
03 Nov 2018 14:28 #71529 by goebish
Replied by goebish on topic Eachine E015 Flight Boat Car
After fiddling a bit it seems to work now!
I've to make a few more tests with the E012 as well to confirm what works best.

Thanks Pascal, you were on the right track, once again ;)

Please Log in or Create an account to join the conversation.

More
03 Nov 2018 15:28 #71530 by planger
Replied by planger on topic Eachine E015 Flight Boat Car
Cool, that it works in this case as well!
Let me know when I'll be able to port the protocols to multi.
Pascal

Please Log in or Create an account to join the conversation.

  • goebish
  • goebish's Avatar Topic Author
  • Away
  • I Void Warranties
More
03 Nov 2018 16:42 #71533 by goebish
Replied by goebish on topic Eachine E015 Flight Boat Car
I confirm it works with the E012 as well!
I'll cleanup my code and tell you once it's ready.

Please Log in or Create an account to join the conversation.

More
03 Nov 2018 18:39 #71535 by planger
Replied by planger on topic Eachine E015 Flight Boat Car
Will you do a hs6200 emulation layer since you already have 2 different protocols using it?

Please Log in or Create an account to join the conversation.

  • goebish
  • goebish's Avatar Topic Author
  • Away
  • I Void Warranties
More
03 Nov 2018 19:47 - 03 Nov 2018 19:48 #71536 by goebish
Replied by goebish on topic Eachine E015 Flight Boat Car
Yes, that's what I did.

Batteries are in the charger before a last test then I'll make a pull request.
Last edit: 03 Nov 2018 19:48 by goebish.

Please Log in or Create an account to join the conversation.

  • goebish
  • goebish's Avatar Topic Author
  • Away
  • I Void Warranties
More
03 Nov 2018 21:20 #71538 by goebish
Replied by goebish on topic Eachine E015 Flight Boat Car
Seems to work fine.

Test builds:
www.dropbox.com/sh/sm4asxsv4q7yoxm/AABRl...pELdgEImfbYDFqa?dl=0

Protocol: E015
Channel Mapping:
Channel 5: Arm
Channel 6: Leds on / off
Channel 7: Flip
Channel 9: Headless
Channel 10: RTH

source: github.com/DeviationTX/deviation/pull/453/files

Please Log in or Create an account to join the conversation.

More
06 Nov 2018 07:25 - 06 Nov 2018 07:29 #71561 by Wene001
Replied by Wene001 on topic Eachine E015 Flight Boat Car
Heroes@work...thumbs up

Does this mean that there is hope for the Furibee F36?
www.deviationtx.com/forum/protocol-devel...empt?start=120#71048
Last edit: 06 Nov 2018 07:29 by Wene001.

Please Log in or Create an account to join the conversation.

  • goebish
  • goebish's Avatar Topic Author
  • Away
  • I Void Warranties
More
06 Nov 2018 09:54 - 06 Nov 2018 09:55 #71563 by goebish
Replied by goebish on topic Eachine E015 Flight Boat Car
Unfortunately the F36 is a different beast, it's suspected to use a LT8910 with FEC enabled, hard to decode over the air (I wasn't able to do it...) and even harder to emulate.
Last edit: 06 Nov 2018 09:55 by goebish.

Please Log in or Create an account to join the conversation.

More
06 Nov 2018 13:23 #71570 by SeByDocKy
Replied by SeByDocKy on topic Eachine E015 Flight Boat Car
Great news if now all protocols associated with this 2-in-1 MCU/RF chip can be now deviated via the Pascal's trick :)

Please Log in or Create an account to join the conversation.

  • goebish
  • goebish's Avatar Topic Author
  • Away
  • I Void Warranties
More
06 Nov 2018 13:34 #71571 by goebish
Replied by goebish on topic Eachine E015 Flight Boat Car
Any protocol that's using a HS6200 transceiver @ 1Mbps actually :)
I know you were waiting for the E012 protocol, it's in the test build as well!

Please Log in or Create an account to join the conversation.

More
06 Nov 2018 14:16 #71574 by SeByDocKy
Replied by SeByDocKy on topic Eachine E015 Flight Boat Car

goebish wrote: Any protocol that's using a HS6200 transceiver @ 1Mbps actually :)
I know you were waiting for the E012 protocol, it's in the test build as well!


I don't own this machine :) I am just glad of your hard work :) in general.... another breakthru for RF hacking in general :)

Please Log in or Create an account to join the conversation.

More
07 Nov 2018 02:33 #71593 by JayDrone
Replied by JayDrone on topic Eachine E015 Flight Boat Car
bam very nice n a shout out to u in the vid

Please Log in or Create an account to join the conversation.

More
07 Nov 2018 05:03 #71596 by JayDrone
Replied by JayDrone on topic Eachine E015 Flight Boat Car
this one also works - I will let you all know tho if you go to download the slt dfu file with sub models it will remove these 2 protocol and bugs 3 mini- also if you download the 1st dfu file on this thread with only the one protocol it will remove the bugs 3 mini protocol -- loading the mini protocol and the dfu file with the 2 protocols here dosnt remove anything

Please Log in or Create an account to join the conversation.

  • goebish
  • goebish's Avatar Topic Author
  • Away
  • I Void Warranties
More
07 Nov 2018 09:44 #71602 by goebish
Replied by goebish on topic Eachine E015 Flight Boat Car
Thanks for testing and reporting!

Yes, those are test builds, not all in sync with the latest changes, just wait for the next nightly build ;)
(I don't know why but seems the automated build system has been broken for a few days although "Build passing" is showing, there are no new nightly builds ...)

Please Log in or Create an account to join the conversation.

  • goebish
  • goebish's Avatar Topic Author
  • Away
  • I Void Warranties
More
07 Nov 2018 09:45 #71603 by goebish
Replied by goebish on topic Eachine E015 Flight Boat Car
@JayDrone I was sent the E015 without the manual, can you tell me how to start it in car / boat mode please ?

Please Log in or Create an account to join the conversation.

More
08 Nov 2018 04:39 #71642 by JayDrone
Replied by JayDrone on topic Eachine E015 Flight Boat Car
always happy to test these dfu files u guys rock -- ok so the drone normally starts in drone mode -- u need to then toggle it into boat mode - and I think this is what I showed in my video -- 1st mode down n out quad mode - 2nd mode just throttle up

Please Log in or Create an account to join the conversation.

Time to create page: 0.323 seconds
Powered by Kunena Forum