ICT 433MHz Transmitter

puffyfish · July 26, 2022, 3:12pm

Hello, I have a remote which seems to be unsupported by Flipper. It does not seem to have a FCC ID on the PCB, but i’ve still included pics.

Based on the manufacturer’s datasheets, its 433.92MHz and AM/ASK modulated.

It’s a common remote in Canada.

I have also seen a Canadian company offer duplication services and a self learning duplication remote for this type of transmitter: ICT Remote – Mr. Key Fob
(youtube video in the product listing showing the operation)

Much appreciated for any help getting this to work!

PCB

Raw Recordings

Raw_signal_1.sub (3.6 KB)
Raw_signal_2.sub (3.6 KB)

puffyfish · August 28, 2022, 7:19pm

Anyone have any ideas?

Spildit · August 28, 2022, 9:02pm

Yes …

You have HCS 300 chip on remote so it’s the same as here

Doc you posted mention rolling codes.

Flipper should already support your protocol as well …

Not many things left to do … flipper should read your codes…

puffyfish · August 29, 2022, 4:11am

Thanks for the reply, how’d you get the terminal output in the thread you linked?
I tried multiple times with read, but flipper never detected my remote… Is it because there are missing manufacturers code for the keeloq?

Spildit · August 29, 2022, 6:29pm

Something is not correct with your readings and/or this remote is using something different …

Try with other modulations ? At any rate the posted document says clear that it’s rolling code so there shouldn’t be a lot to do …

Screen capture from analyzing your posted Raws …

Spildit · August 29, 2022, 6:38pm

Maybe someone with more experience than me can help you out ~???

Either your modulation/capture is wrong or i was wrong regarding your HCS 300 Chip…

Peppy_on_Tour · August 29, 2022, 7:23pm

This remote uses fm instead of ook/ask. Try this first.

puffyfish · August 29, 2022, 9:15pm

Tried with the FM238 and FM476 option as well. Still not picking up anything with Read.

I also recorded the RAW and tried it with the CLI, but still nothing.

RAW_FM476.sub (42.4 KB)
RAW_FM238.sub (195.6 KB)

Peppy_on_Tour · August 30, 2022, 4:50pm

FM (FSK) 433.92MHz - Deviation 10 kHz - which isn’t supported by Flipper (yet). Is there a way to implement other deviation / Bandwidth-Options to Flipper? Have some Trouble with an other remote too. Wrong deviation.

Rgds
Marco.

puffyfish · August 30, 2022, 5:33pm

I see, is there a doc you are referencing for this info? I wasn’t able to find anything with google searching.
As for custom presets, I think this merged PR may have implemented what we’re looking for? https://github.com/flipperdevices/flipperzero-firmware/pull/1398

I don’t really know how the registers work, or how to use this PR to add new presets though

Peppy_on_Tour · August 30, 2022, 5:54pm

Have to take a look. indeed it is implemented… will try some configs and post my results.

Spildit · August 30, 2022, 6:48pm

Example …

github.com

UberGuidoZ/Flipper/blob/main/Sub-GHz/Settings/setting_user

Filetype: Flipper SubGhz Setting File
Version: 1
#
# Add All Standard frequencies
Add_standard_frequencies: false
#
# Default Frequency: used as default for "Read" and "Read Raw"
Default_frequency: 433920000
#
# Frequencies used for "Read", "Read Raw" and "Frequency Analyzer" - they added after default ones if enabled in Add_standard_frequencies
Frequency: 300000000
Frequency: 302757000
Frequency: 303875000
Frequency: 304250000
Frequency: 307000000
Frequency: 307500000
Frequency: 307800000
Frequency: 309000000
Frequency: 310000000
Frequency: 312000000

This file has been truncated. show original

Need to edit settings_user on sdcard. This adds Honda1 and Honda2 presets. Don’t have a clue about how to implement your specific deviation.

And yes … no luck with your files …

puffyfish · August 30, 2022, 7:03pm

hmmm, i see that this is the settings for the built in modulations:

github.com

flipperdevices/flipperzero-firmware/blob/e7a5d19f9c919c1bc5c49f53f93b6ac8bec03b2b/firmware/targets/f7/furi_hal/furi_hal_subghz_configs.h

#pragma once

#include <cc1101.h>

static const uint8_t furi_hal_subghz_preset_ook_270khz_async_regs[][2] = {
    // https://e2e.ti.com/support/wireless-connectivity/sub-1-ghz-group/sub-1-ghz/f/sub-1-ghz-forum/382066/cc1101---don-t-know-the-correct-registers-configuration

    /* GPIO GD0 */
    {CC1101_IOCFG0, 0x0D}, // GD0 as async serial data output/input

    /* FIFO and internals */
    {CC1101_FIFOTHR, 0x47}, // The only important bit is ADC_RETENTION, FIFO Tx=33 Rx=32

    /* Packet engine */
    {CC1101_PKTCTRL0, 0x32}, // Async, continious, no whitening

    /* Frequency Synthesizer Control */
    {CC1101_FSCTRL1, 0x06}, // IF = (26*10^6) / (2^10) * 0x06 = 152343.75Hz

    // Modem Configuration

This file has been truncated. show original

idk how to apply that to the settings_user file though…

Peppy_on_Tour · August 30, 2022, 8:13pm

#2-FSK 200khz BW / 135kHz Filter/ 12.69Khz Deviation + Ramping
Custom_preset_name: FSK12k
Custom_preset_module: CC1101
Custom_preset_data: 02 0D 03 47 08 32 0B 06 15 30 14 00 13 00 12 00 11 32 10 A7 18 18 19 1D 1D 92 1C 00 1B 04 20 FB 22 17 21 B6 00 00 00 12 0E 34 60 C5 C1 C0

This works for my remote… FM / 2-FSK / 10kHz Deviation.

EDIT: Correct 2-FSK-Parameter for Flipper incl. TX

puffyfish · August 30, 2022, 9:12pm

Are you using read or raw?

Still not able to read with “Read” option.
Heres the raw that i’m picking up:
FSK10k.sub (14.1 KB)

Peppy_on_Tour · August 31, 2022, 4:07am

I use read. If you own a sdr receiver, you can take a Look in the spectrum and see if it is fm or am. Maybe i’m wrong with fm for your remote.

Spildit · August 31, 2022, 7:41am

Maybe @Skorp can help us out ?
Maybe the problem is not with modulation/frequency but with protocol itself like your remote using something different from the supported keeloq ?

SkorP · August 31, 2022, 8:46am

maybe I can help. but from the photo I can tell that hcs300 is Keelog. but the antenna is attached to another K110 chip, I don’t know what it is. in full it is possible that the transmission is not in AM modulation. to say for sure, I need to record the package in the sdrsharp program. everything will be visible there. and the frequency and modulation of the signal. and you can record at the same frequency in URH. to be able to reproduce it. but I don’t know how to name it on coffee grounds

SkorP · August 31, 2022, 8:49am

and looking at this graph, I only ask you to assume that the modulation is not AM there

Peppy_on_Tour · August 31, 2022, 1:01pm

This is 2FSK. So if jou get this image in RF Spectrum with your SDR Receiver, then you can be sure this is FM.

And this is ASK / OOK