C-17 Transport

I've been asked to look at this model: www.banggood.com/C17-C-17-Transport-373m...ch&cur_warehouse=USA
I think the model GD006 DA62 is using the same remote: www.tomtop.com/p-rm9903.html

The main board has only a single chip with no marking: photos.app.goo.gl/eJNWzNJo66HJsPZC9

Using SDR, I've looked at it:
- It has the signature of a xn297l (0x71 0x0F 0x55), same xor table and using the problematic 250Kbps...
- Address is 0xcc,0xcc,0xcc,0xcc,0xcc and does not change between bind and normal modes.
- Bind is sent on RF channel 2 every 3.5ms.
- Normal packets are sent every 3.5ms on 4 RF channels in that order 79, 77, 75 and 73.
- 15 bytes payload in bind and normal mode.

Payload: 0xAA, 0x1F, 0x39, 0x12, 0x13, 0xDC, 0x05, 0xE8, 0x03, 0xDC, 0x05, 0x00, 0x00, 0x00, 0x00
- packet[0]=0xAA -> bind, 0x55 -> normal
- packet[1..4]=unknown but must be TXID/RF channels
- packet[5..6]=0x5DC=1500 => aileron centered value, min 0x3E8, max 0x7D0
- packet[7..8]=0x3E8=1000 => low throttle, min 0x3E8, max 0x7D0
- packet[9..10]=0x5DC=1500 => trim channel. Each trim press adds +/-0x20 to the current value
- packet[11]=08->Dual Rate, 04->Light
- packet[12..14]=0x00

Pascal

The protocol GD00X is working and available on Multi wih only 1 ID for now.
I'll have access to 2 other remotes in a week or 2 which might enable me to find how the RF channels are calculated... If not there will be 3 IDs/freqs available at that time.
Pascal

Hi
I own this model airplane, I am interested in your work.
I'm waiting for the rest. Good job
Jérome

Good !!!!

goebish wrote: Test builds available:
www.dropbox.com/sh/nkqd89fkeepimc8/AACwZ...SBuHyOL7vZK-h3a?dl=0
Let me know if your transmitter isn't in the list.

Devo 12S

Thanks

Ok I'm testing this tonight:)

better than words :



Test fly tomorrow.
Good job

Don't forget that there is only 1 ID for now. I'll add some more soon.
Pascal

goebish wrote: Pascal, is this a mistake in your repo:
hopping_frequency[0]=79-(i<<1);
shouldn't it be
hopping_frequency[ i ]=79-(i<<1); ?

Good catch. It's a mistake that I've corrected after the first release.
The good thing is that I know it works with only 1 Freq, so if I can get hold of the plane I should be able to change the ID and do a scanner to find which frequency it has choosen.
Anyway more to come may be next week.
Thanks, Pascal

Even if everything is not finished ... it works.

@jejeg : would you send me your remote so I can at least add your ID (might help me to figure out the ID/Freq)?
Pascal

planger wrote: @jejeg : would you send me your remote so I can at least add your ID (might help me to figure out the ID/Freq)?
Pascal

I have not established a fixed identifier for the link. Tell me exactly what you need. I use google translate (English / French); it's not always very clear.
Jérome

Je n'ai eu accès qu'à une télécommande sans l'avion pour refaire ce protocole.
Le problème c'est qu'il n'y a donc qu'1 seul identifiant (ID+Fréquences) de disponible et donc 1 seul avion peut voler en même temps en utilisant une devo ou un multi module. Si je pouvais avoir une autre télécommande cela me mettra peut-être sur la piste pour générer plus d'ID/Fréq ou tout du moins cela permettra de voler à 2.
Donc je demandais si tu pouvais m'envoyer ta télécommande...
Pascal

J'ai bien compris ce que tu veux faire mais "envoyer la télécommande "???!!