PixMob_waveband reverse engineering

--

the project:

• reverse engineering pixmob RF enabled waveband (868MHz european edition)

  got it working thanks to https://github.com/danielweidman/pixmob-ir-reverse-engineering and https://www.hackster.io/abouhatab/reusing-pixmob-waveband-without-flipper-zero-040f3a

the object:

• • got a waveband labeled "cement v1.1"

  • with MCU , EEPROM , RF , two RGB-LEDs and a diode to prevent battery polarity fault

  • data is transmitted with a checksum only by RF and encoded with special 6b8b line code to stay in sync.

what we need to get it running:

• hardware:
  • arduino
  • TI CC1101
  • levelshifter (if the arduino is 5V variant)
  • ( soic08 clamp: good for development - but the most hardware-work is done)
  • connect all together (see connection )

basic.ino:

• the "basic" arduino script shows how to enable the waveband with an TI CC1101 transceiver and fixed messages
• there is a basic CLI over USBserial@115200: type ? [enter] for help

play.ino:

• simple programm to play with pixmob batch.
• data is send by basic CLI
  • w\r\n mode byte 1, byte 2, byte 3, byte 4, byte 5, byte 6 \r\n (all hex, 6 bit)
  • f (interactiv)

thanks to:

Daniel Weidman Serge