11/17/2015

Turnigy/Flyskyi6SecretMenu

14thOctober Turnigy/Flyskyi6SecretMenu
*Forupdatestofirmwareflashingpleasereadupdatesatthe
bottomofarticle*
IrecentlydiscoveredthattheTurnigy/Flyskyi6transmitterhasasecret
hiddenmenu.

[http://3.bp.blogspot.com/
Nj7mgAIT7MA/Vh5VKxS7OHI/AAAAAAAAEws/Srsql8ZaRrE/s1600/i6tx.jpg]

Byholdingbothsticksdownleftthenpoweringonthetransmitter,we
thengetanewmenuwiththefollowingdisplay:

[http://2.bp.blogspot.com/2SkUTturYxk/Vh5ZVmN7rEI/AAAAAAAAEw4/JVzvzO
mdfhs/s1600/20151014%2B141646.329.jpg]

Andthemenutreeisthus:

http://dalybulge.blogspot.co.uk/2015/10/turnigyflyskyi6secretmenu.html

1/10

11/17/2015

Turnigy/Flyskyi6SecretMenu

[http://4.bp.blogspot.com/2VoNcjyxok/Vh5ZktnN3WI/AAAAAAAAEw8/HZ8
ryeElaA/s1600/1menui6.jpg]

Updateon:i6GhettoControllerarticle
[http://dalybulge.blogspot.com/2015/02/ghettocontrolleridea.html]

Lookingatthecodeforthei6updaterfiletoday,it'sclearthatthereare
twofilesuploadedtothei6transmittereachfileis55kbandalmost
identicalincode(Ihavenotfiguredouttheexactdifferencesyet).A
goodguesswouldbetoassumethatonefileisfortheusermenuthat
usersexperience,thesecondfileisabackupforfactoryreset.*Itmight
notbepossibleitisthiswaybecausetheMCUissupposedtobe64kb
[http://uk.mouser.com/ProductDetail/Freescale
Semiconductor/MKL16Z64VLH4/?qs=GRnjYRM7H5YElcKsBFo1oA%3D%3D]

storageso55kb+55kb=110kbtoolargesoImustlookmorewhythe
updaterhastwofiles*

[http://2.bp.blogspot.com/OjLNV25b0h8/VhnLfby
CI/AAAAAAAAExY/xmCP9H_kjPk/s1600/mcustack.jpg]

http://dalybulge.blogspot.co.uk/2015/10/turnigyflyskyi6secretmenu.html

2/10

11/17/2015

Turnigy/Flyskyi6SecretMenu

Whatdoesthismean?Potentially,itmeansthereismoredataforthe
usertouse,moremenuscanbeadded(doubletheamount),and
potentialforer9xtobeportedtothistransmitter.
ItseemsthatthistransmitteriscapableofPPMsignal&Telemetrydata
betweentransmitter(Tx)andreceiver(RX)usingtheia6breceiver(is
notincludedasastandardreceiveruponpurchaseyet,butprobably
eventually[http://www.banggood.com/FlySkyFSi62_4G6CHAFHDSRC
TransmitterWithFSiA6BReceiverp983537.html] ),itisalsofeasibleto
assumethatthetransmittercanbehackedtoallowfulltelemetryand
morethan6channels(potentially16channelsforcontrollingallthe
switches,knobs,sticks,andnotforgettingtrainerport/headtracking
channelonthisremote.
Someprogressisbeingmadeonmodificationofchannelnumbershere
[https://basejunction.wordpress.com/2015/08/23/enflyskyi614channelspart1/]

.thereisalsoaneedtoexperimentwiththeia6btelemetrydataisit
standardasciiorbinarybeingsentfromtxtorx.Oncethisis
understooditcanbeusedtodetermineifthecodeneedstobe
encodedusinganarduinominiinbetweentheardupilotandthe
receiverorcanitjustbesent'asitis'.

[http://2.bp.blogspot.com/
ZDTgnG9OANQ/VObCDX1bxpI/AAAAAAAADaE/_tDcXbvUxL0/s1600/33.jpg]

Itispotentiallypossibletonothavetojusthopefori6/Ardupilot
telemetrydisplayedonthei6transmittermenu.Itisalsopotentially
possibletoaddaHC06bluetoothmoduletothei6(tx&rx)andsend
telemetrytoaDroidplannerphoneortabletlikeithasbeendonewith
OrangeRXopenLRSradioshere[http://www.itluxembourg.lu/site/] .
Alsowhatisthepotentialforreplacingthei6MCUwithaTeensy
[https://www.pjrc.com/teensy/] ?MoreRAM,betterprocessor.
Update(telemetrypossible):

http://dalybulge.blogspot.co.uk/2015/10/turnigyflyskyi6secretmenu.html

3/10

11/17/2015

Turnigy/Flyskyi6SecretMenu

[http://2.bp.blogspot.com/
dI2D8b_Mc9Q/VjmQQf7kplI/AAAAAAAAEx8/kTeqiLk2FpY/s1600/telem
examplecrop.jpg]

Update:Howtounbrickyouri6.
ftdidiyconnection

[http://4.bp.blogspot.com/8cAZaMrxo7E/VOfhg4rcxlI/AAAAAAAADd4/MQmE
XYOo0/s1600/flyskydiycable.jpg]

http://dalybulge.blogspot.co.uk/2015/10/turnigyflyskyi6secretmenu.html

4/10

11/17/2015

Turnigy/Flyskyi6SecretMenu

bricked i6 fix

Update:
astraightforwardMod_i6_Programmer.exehasbeencreated.Some
testingtoperform,butfingerscrossed.

[http://2.bp.blogspot.com/
jpy7wsgCUvU/VjreVfQz_gI/AAAAAAAAEyM/G4sf2MFDNhg/s1600/modi6
snap.jpg]

Update:
Hello,IhavetestedtheRcloggertransmitterupdateonmyflyskyi6and
itinstallsjustfine.
Toperformthisexperimentyouneedto(howIdidit):
1)useanftdiadapterconnectedtothei6transmitter:
http://dalybulge.blogspot.co.uk/2015/10/turnigyflyskyi6secretmenu.html

5/10

11/17/2015

Turnigy/Flyskyi6SecretMenu

[http://4.bp.blogspot.com/8cAZaMrxo7E/VOfhg4rcxlI/AAAAAAAADd4/MQmE
XYOo0/s1600/flyskydiycable.jpg]

2)DownloadtheRcloggerupdaterhere
[https://drive.google.com/file/d/0B1cVb3uX0f0dZy1EQ2JlNVFXb1k/view?
usp=sharing]

3)Turnonthei6transmitterusingfirmwaremode:

[http://4.bp.blogspot.com/L71EbAD5BOw/VjwdEn_
eOI/AAAAAAAAEys/0qlKbKI8ZUk/s1600/i6firmwaremodepic.jpg]

4)Openapp,Connectandpressupdate,waitforupdate:

http://dalybulge.blogspot.co.uk/2015/10/turnigyflyskyi6secretmenu.html

6/10

11/17/2015

Turnigy/Flyskyi6SecretMenu

[http://3.bp.blogspot.com/
IJv3gP12gaU/VjwblJ6GttI/AAAAAAAAEyg/ElYQMXe_QFU/s1600/1.jpg]

Result:

novax firmware on flysky i6

PleasenotethatIamusingmyownftdiadapterandnottheofficial
flysky/turnigyupdateadapter.
Pleasealsoletmeknowyourupdateexperiences.
YouperformthisatyourownriskIamnotresponsibleforyour
mistakes(However,Ihadnoproblems,youcanalsousethestandard
flyskyupdaterexetorevertbacktostandardifyouwishto)
Update:
http://dalybulge.blogspot.co.uk/2015/10/turnigyflyskyi6secretmenu.html

7/10

11/17/2015

Turnigy/Flyskyi6SecretMenu

[http://4.bp.blogspot.com/9ExgrkFVkRY/Vj1kcrMBKRI/AAAAAAAAEy4/HtmSe78
X7EM/s1600/41LltcTaRNL._SY355_.jpg]

Iamnowabletousea18650lionbattery.IamusingthePanasonic
3400mahNCR18650Bcell,ina1cellholder,thensolderedtothei6
+ive&iveterminals.Icanadjustthei6powervoltagereadingtooffset
thecellalarmbyusingthesecretmenu.Theaimistosetthevoltage
readingsothatittriggersthealarmwhenthe18650cellreaches3.2v

[http://4.bp.blogspot.com/
QkxCnaXQJXo/Vj1mVcmZoEI/AAAAAAAAEzE/Kp_DLIQ7VrA/s1600/i6volts.jpg]

Notaperfectsolution,butmeansthatthelithiumcellwon'tbe
damaged.Ifigurethattheflyskyi10usesaliionbatterysoitmightbe
worthwhilesearchingforoneofthosecellstofitmoreeasily.Maybe
evenaflatcellphoneorcameralioncell,huaweilion+chargersets
areavailablecheaponebay

http://dalybulge.blogspot.co.uk/2015/10/turnigyflyskyi6secretmenu.html

8/10

11/17/2015

Turnigy/Flyskyi6SecretMenu

[http://1.bp.blogspot.com/3DKocz_oC44/Vj1oE34mnVI/AAAAAAAAEzY/6Hr
zFyLTwU/s1600/100New1730mAhHB5V1batteryforhuaweiY300U8833
T8833C8833Y500Y511Y516G350Y535C.jpg]

[http://4.bp.blogspot.com/
nTzax00AaBI/Vj1nmyPP9I/AAAAAAAAEzQ/BvF
WJV9k/s1600/81s2zP03YSL._SX425_.jpg]

Posted14thOctoberbyDalyBulge
3 Viewcomments

Coriolan 4November2015at17:13
Interestingwork!
Reply
Replies
nickpye 6November2015at12:21
Hi the flying 3d x8 chinese quad available from from
banggood uses this tx an comes with telemetry runng
right out of the box the price if the quad is 170 might
bewithreverseengineeringthatquad

DalyBulge 6November2015at18:33
Yes! great news. please help me to find the flying x8
softwareupdater?
Reply
http://dalybulge.blogspot.co.uk/2015/10/turnigyflyskyi6secretmenu.html

9/10

11/17/2015

Turnigy/Flyskyi6SecretMenu

Enteryourcomment...

Commentas:

Publish

Penguinn(Google)

Preview

Signout

Notifyme

Google Drive For Work

http://dalybulge.blogspot.co.uk/2015/10/turnigyflyskyi6secretmenu.html

10/10