Tryfun Blackhole SE not connecting

[huzpsb]

Describe the bug
Tryfun Blackhole SE not connecting

Expected behavior
It should connect

Actual behavior
It doesn't

Additional context
:(

HCI dump:
attach.zip

---

Additional information that may be useful:

[Mobile<-] 04 01 00 09 20 c8 03 00 0a 02 0b 01 fd
[Mobile<-] 05 01 00 09 20 c8 03 00 0a 02 0b 01 fd 00 00 00 00
[Mobile->] 00 20 00 01 00
[Mobile<-] 00 21 00 05 02 04 00 01 00
[Mobile<-] 06 01 00 09 20 c8 03 00 0a 02 0b 01 fd
[Mobile<-] 07 01 00 09 20 c8 03 00 0a 02 0b 01 fd
[Mobile<-] 08 01 00 09 20 c8 03 00 0a 02 0b 01 fd
[Mobile<-] 09 01 00 09 20 c8 03 00 0a 02 0b 01 fd
[Mobile<-] 0a 01 00 09 20 c8 03 00 0a 02 0b 01 fd
[Mobile->] 01 02 00 03 0b 01 f4
[Mobile<-] 01 03 00 09 20 c8 03 00 0a 01 0b 01 fe
[Mobile<-] 0b 07 00 03 0c 03 e7
[Mobile<-] 0c 07 00 03 0c 06 e4
[Mobile<-] 0d 07 00 03 0c 09 e1
[Mobile<-] 0e 07 00 03 0c 0c de
[Mobile<-] 0f 07 00 03 0c 0f db
[Mobile<-] 01 07 00 03 0c 12 d8
[Mobile<-] 02 07 00 03 0c 15 d5
[Mobile<-] 03 07 00 03 0c 18 d2
[Mobile<-] 04 07 00 03 0c 1b cf
[Mobile<-] 05 07 00 03 0c 1e cc
[Mobile<-] 06 07 00 03 0c 21 c9
[Mobile<-] 07 07 00 03 0c 24 c6
[Mobile<-] 08 07 00 03 0c 27 c3
[Mobile<-] 09 07 00 03 0c 2a c0
[Mobile<-] 0a 07 00 03 0c 2d bd
[Mobile<-] 0b 07 00 03 0c 30 ba
[Mobile<-] 0c 07 00 03 0c 32 b8
[Mobile->] 02 02 00 03 0b 02 f3
[Mobile<-] 02 03 00 09 20 c8 03 00 0a 01 0b 02 fd
[Mobile<-] 0d 07 00 03 0c 36 b4
[Mobile<-] 0e 07 00 03 0c 3a b0
[Mobile<-] 0f 07 00 03 0c 3f ab
[Mobile<-] 01 07 00 03 0c 43 a7
[Mobile<-] 02 07 00 03 0c 48 a2
[Mobile<-] 03 07 00 03 0c 4c 9e
[Mobile<-] 04 07 00 03 0c 51 99
[Mobile<-] 05 07 00 03 0c 55 95
[Mobile<-] 06 07 00 03 0c 5a 90
[Mobile<-] 07 07 00 03 0c 5e 8c
[Mobile<-] 08 07 00 03 0c 63 87
[Mobile<-] 09 07 00 03 0c 64 86
[Mobile<-] 0a 01 00 09 20 bc 03 00 0a 01 0b 02 09
[Mobile->] 03 02 00 03 0b 03 f2
[Mobile<-] 03 03 00 09 20 bc 03 00 0a 01 0b 03 08
[Mobile<-] 0b 07 00 03 0c 32 b8
[Mobile<-] 0c 07 00 03 0c 33 b7
[Mobile<-] 0d 07 00 03 0c 34 b6
[Mobile<-] 0e 07 00 03 0c 35 b5
[Mobile<-] 0f 07 00 03 0c 36 b4
[Mobile<-] 01 07 00 03 0c 37 b3
[Mobile<-] 02 07 00 03 0c 38 b2
[Mobile<-] 03 07 00 03 0c 39 b1
[Mobile<-] 04 07 00 03 0c 3a b0
[Mobile<-] 05 07 00 03 0c 3b af
[Mobile<-] 06 07 00 03 0c 3c ae
[Mobile<-] 07 07 00 03 0c 3d ad
[Mobile<-] 08 07 00 03 0c 3e ac
[Mobile<-] 09 07 00 03 0c 3f ab
[Mobile<-] 0a 07 00 03 0c 40 aa
[Mobile<-] 0b 07 00 03 0c 41 a9
[Mobile<-] 0c 07 00 03 0c 42 a8
[Mobile<-] 0d 07 00 03 0c 43 a7
[Mobile<-] 0e 07 00 03 0c 44 a6
[Mobile<-] 0f 07 00 03 0c 45 a5
[Mobile<-] 01 07 00 03 0c 46 a4
[Mobile<-] 02 07 00 03 0c 47 a3
[Mobile<-] 03 07 00 03 0c 48 a2
[Mobile<-] 04 07 00 03 0c 49 a1
[Mobile<-] 05 07 00 03 0c 4a a0
[Mobile<-] 06 07 00 03 0c 4b 9f
[Mobile<-] 07 07 00 03 0c 4c 9e
[Mobile<-] 08 07 00 03 0c 4d 9d
[Mobile<-] 09 07 00 03 0c 4e 9c
[Mobile<-] 0a 07 00 03 0c 4f 9b
[Mobile<-] 0b 07 00 03 0c 50 9a
[Mobile<-] 0c 07 00 03 0c 51 99
[Mobile<-] 0d 07 00 03 0c 52 98
[Mobile<-] 0e 07 00 03 0c 53 97
[Mobile<-] 0f 07 00 03 0c 54 96
[Mobile<-] 01 07 00 03 0c 55 95
[Mobile<-] 02 07 00 03 0c 56 94
[Mobile<-] 03 07 00 03 0c 57 93
[Mobile<-] 04 07 00 03 0c 58 92
[Mobile<-] 05 07 00 03 0c 59 91
[Mobile<-] 06 07 00 03 0c 5a 90
[Mobile->] 04 02 00 03 ff 00 01
[Mobile<-] 04 03 00 09 20 bc 03 00 0a 02 0b 03 07
[Mobile<-] 07 07 00 03 0c 00 ea
[Mobile->] 05 02 00 03 ff 00 01
[Mobile<-] 05 03 00 09 20 bc 03 00 0a 02 0b 03 07
[Mobile->] 06 02 00 03 ff 00 01
[Mobile<-] 06 03 00 09 20 bc 03 00 0a 02 0b 03 07
[Mobile<-] 08 01 00 09 20 bc 03 00 0a 02 0b 03 07
[Mobile<-] 09 01 00 09 20 bc 03 00 0a 02 0b 03 07
[Mobile<-] 0a 01 00 09 20 bc 03 00 0a 02 0b 03 07
[Mobile<-] 0b 01 00 09 20 bc 03 00 0a 02 0b 03 07

A sniff of the official impl.

[huzpsb]

package hs.cloud.app;

import android.Manifest;
import android.app.Activity;
import android.bluetooth.*;
import android.bluetooth.le.BluetoothLeScanner;
import android.bluetooth.le.ScanCallback;
import android.bluetooth.le.ScanResult;
import android.content.Context;
import android.content.pm.PackageManager;
import android.os.Build;
import android.os.Bundle;
import android.util.Log;
import android.view.View;
import android.widget.Button;
import android.widget.LinearLayout;
import android.widget.SeekBar;
import android.widget.TextView;
import black.hole.R;

import java.util.*;

@SuppressWarnings({"MissingPermission", "SetTextI18n"})
public class MainActivity extends Activity {

    private static final String TAG = "MassagerControl";
    private static final int PERMISSION_REQUEST_CODE = 999;

    private static final String TARGET_DEVICE_NAME = "DK-BHSE";
    private static final UUID CHAR_MODE_UUID = UUID.fromString("0000ffb5-0000-1000-8000-00805f9b34fb");
    private static final UUID CHAR_INTENSITY_UUID = UUID.fromString("0000ffb7-0000-1000-8000-00805f9b34fb");
    private static final UUID CHAR_NOTIFY_UUID = UUID.fromString("0000ffb8-0000-1000-8000-00805f9b34fb");
    private static final UUID DESCRIPTOR_CFG_UUID = UUID.fromString("00002902-0000-1000-8000-00805f9b34fb");

    private BluetoothAdapter bluetoothAdapter;
    private BluetoothLeScanner bluetoothLeScanner;
    private ScanCallback scanCallback;
    private BluetoothGatt bluetoothGatt;

    private TextView tvStatus;
    private Button btnConnect, btnModeToggle, btnStop;
    private LinearLayout llAutoButtons;
    private Button btnAuto1, btnAuto2, btnAuto3, btnAuto4;
    private LinearLayout llManualSlider;
    private SeekBar seekBarIntensity;
    private TextView tvIntensityValue;

    private byte currentSeq = 0x01;

    private BluetoothGattCharacteristic writeCharMode;      // ffb5
    private BluetoothGattCharacteristic writeCharIntensity; // ffb7
    private BluetoothGattCharacteristic notifyChar;         // ffb8

    private boolean isAutoMode = false;   // false = manual
    private boolean isConnected = false;

    // 手动模式的软件波形发生器
    private Timer manualWaveTimer;
    private double wavePhase = 0;

    private final BluetoothGattCallback gattCallback = new BluetoothGattCallback() {
        @Override
        public void onConnectionStateChange(BluetoothGatt gatt, int status, int newState) {
            if (newState == BluetoothProfile.STATE_CONNECTED) {
                updateStatus("已连接，正在发现服务...");
                Log.i(TAG, "Connected to GATT server.");
                bluetoothGatt.discoverServices();
            } else if (newState == BluetoothProfile.STATE_DISCONNECTED) {
                updateStatus("连接已断开");
                writeCharMode = null;
                writeCharIntensity = null;
                notifyChar = null;
                isConnected = false;
                runOnUiThread(() -> setControlsEnabled(false));
            }
        }

        @Override
        public void onServicesDiscovered(BluetoothGatt gatt, int status) {
            if (status == BluetoothGatt.GATT_SUCCESS) {
                for (BluetoothGattService service : gatt.getServices()) {
                    writeCharMode = service.getCharacteristic(CHAR_MODE_UUID);
                    writeCharIntensity = service.getCharacteristic(CHAR_INTENSITY_UUID);
                    notifyChar = service.getCharacteristic(CHAR_NOTIFY_UUID);

                    if (writeCharMode != null && writeCharIntensity != null && notifyChar != null) {
                        updateStatus("找到所有目标通道，开启通知...");
                        gatt.setCharacteristicNotification(notifyChar, true);
                        BluetoothGattDescriptor descriptor = notifyChar.getDescriptor(DESCRIPTOR_CFG_UUID);
                        if (descriptor != null) {
                            descriptor.setValue(BluetoothGattDescriptor.ENABLE_NOTIFICATION_VALUE);
                            gatt.writeDescriptor(descriptor);
                        }
                        return;
                    }
                }
                updateStatus("未找到完整的 FFB5/FFB7/FFB8");
            }
        }

        @Override
        public void onDescriptorWrite(BluetoothGatt gatt, BluetoothGattDescriptor descriptor, int status) {
            if (status == BluetoothGatt.GATT_SUCCESS && DESCRIPTOR_CFG_UUID.equals(descriptor.getUuid())) {
                updateStatus("通知已开启，发送握手包...");
                byte[] handshake = new byte[]{0x00, 0x20, 0x00, 0x01, 0x00};
                sendRaw(writeCharIntensity, handshake);

                isConnected = true;
                runOnUiThread(() -> setControlsEnabled(true));
                updateStatus("连接成功，可进行操作");

                // 启动手动波形发生器
                startSoftwareWave();
            }
        }

        @Override
        public void onCharacteristicWrite(BluetoothGatt gatt, BluetoothGattCharacteristic characteristic, int status) {
            // FFB5 会在这里回调成功
            if (status == BluetoothGatt.GATT_SUCCESS) {
                Log.i(TAG, "写入成功");
            } else {
                Log.e(TAG, "写入失败, 状态码: " + status);
            }
        }

        @Override
        public void onCharacteristicChanged(BluetoothGatt gatt, BluetoothGattCharacteristic characteristic) {
            // 可以在这里监控设备的实时强度反馈
        }
    };

    @Override
    protected void onCreate(Bundle savedInstanceState) {
        super.onCreate(savedInstanceState);
        setContentView(R.layout.activity_main);
        initViews();
        checkAndRequestPermissions();
    }

    private void initViews() {
        tvStatus = findViewById(R.id.tv_status);
        btnConnect = findViewById(R.id.btn_connect);
        btnModeToggle = findViewById(R.id.btn_mode_toggle);
        llAutoButtons = findViewById(R.id.ll_auto_buttons);
        btnAuto1 = findViewById(R.id.btn_auto_1);
        btnAuto2 = findViewById(R.id.btn_auto_2);
        btnAuto3 = findViewById(R.id.btn_auto_3);
        btnAuto4 = findViewById(R.id.btn_auto_4);
        llManualSlider = findViewById(R.id.ll_manual_slider);
        seekBarIntensity = findViewById(R.id.seekbar_intensity);
        tvIntensityValue = findViewById(R.id.tv_intensity_value);
        btnStop = findViewById(R.id.btn_stop);

        btnConnect.setOnClickListener(v -> connectToDevice());
        btnModeToggle.setOnClickListener(v -> toggleMode());
        btnStop.setOnClickListener(v -> sendStop());

        btnAuto1.setOnClickListener(v -> sendAutoWave(0x01));
        btnAuto2.setOnClickListener(v -> sendAutoWave(0x02));
        btnAuto3.setOnClickListener(v -> sendAutoWave(0x03));
        btnAuto4.setOnClickListener(v -> sendAutoWave(0x04));

        seekBarIntensity.setOnSeekBarChangeListener(new SeekBar.OnSeekBarChangeListener() {
            @Override
            public void onProgressChanged(SeekBar seekBar, int progress, boolean fromUser) {
                tvIntensityValue.setText("设定峰值强度: " + progress);
            }

            @Override
            public void onStartTrackingTouch(SeekBar seekBar) {
            }

            @Override
            public void onStopTrackingTouch(SeekBar seekBar) {
            }
        });

        setControlsEnabled(false);
    }

    // 软件波形发生器核心逻辑
    private void startSoftwareWave() {
        stopSoftwareWave();
        manualWaveTimer = new Timer();
        manualWaveTimer.schedule(new TimerTask() {
            @Override
            public void run() {
                // 如果处于自动模式或未连接，直接跳过（设备自己会发波）
                if (isAutoMode || !isConnected) return;

                int maxIntensity = seekBarIntensity.getProgress();
                if (maxIntensity == 0) {
                    sendIntensity(0);
                    return;
                }

                // 模拟一个 2 秒周期的呼吸正弦波 (100ms * 20步 = 2000ms)
                // 正弦波在 0 到 1 之间浮动
                double envelope = (Math.sin(wavePhase) + 1.0) / 2.0;
                int currentIntensity = (int) (maxIntensity * envelope);

                sendIntensity(currentIntensity);

                // 推进相位
                wavePhase += Math.PI / 10.0;
                if (wavePhase >= Math.PI * 2) {
                    wavePhase -= Math.PI * 2;
                }
            }
        }, 0, 100); // 100 毫秒刷新一次 FFB7
    }

    private void stopSoftwareWave() {
        if (manualWaveTimer != null) {
            manualWaveTimer.cancel();
            manualWaveTimer = null;
        }
    }

    private void toggleMode() {
        isAutoMode = !isAutoMode;
        if (isAutoMode) {
            btnModeToggle.setText("切换为手动模式");
            llAutoButtons.setVisibility(View.VISIBLE);
            llManualSlider.setVisibility(View.GONE);
            updateStatus("已切换到自动模式");
        } else {
            btnModeToggle.setText("切换为自动模式");
            llAutoButtons.setVisibility(View.GONE);
            llManualSlider.setVisibility(View.VISIBLE);
            sendCommand(writeCharMode, new byte[]{0x0b, 0x00});
            updateStatus("已切换到手动模式");
            // 定时器会因为 isAutoMode 变为 false 而自动开始干活
        }
    }

    private void sendAutoWave(int wave) {
        sendCommand(writeCharMode, new byte[]{0x0b, (byte) wave});
        updateStatus("自动模式 - 波形 " + wave);
    }

    private void sendIntensity(int intensity) {
        if (intensity < 0) intensity = 0;
        if (intensity > 100) intensity = 100;
        sendCommand(writeCharIntensity, new byte[]{0x0c, (byte) intensity});
    }

    private void sendStop() {
        runOnUiThread(() -> seekBarIntensity.setProgress(0));
        sendCommand(writeCharMode, new byte[]{(byte) 0xff, 0x00});
        updateStatus("发送紧急停止命令");
    }

    // 增加 synchronized 确保多线程调用（主线程和 Timer 线程）时 currentSeq 不会错乱
    private synchronized void sendCommand(BluetoothGattCharacteristic characteristic, byte[] payload) {
        if (bluetoothGatt == null || characteristic == null) {
            return;
        }

        int len = payload.length + 1;
        byte[] frame = new byte[4 + payload.length + 1];

        frame[0] = currentSeq;
        frame[1] = 0x02;
        frame[2] = 0x00;
        frame[3] = (byte) len;

        int sum = 0;
        for (int i = 0; i < payload.length; i++) {
            frame[4 + i] = payload[i];
            sum += (payload[i] & 0xFF);
        }

        byte checksum = (byte) ((0x100 - (sum & 0xFF)) & 0xFF);
        frame[frame.length - 1] = checksum;

        currentSeq++;
        if (currentSeq > 0x0F) currentSeq = 0x00; // 修复边界：Seq 应该从0-F循环

        sendRaw(characteristic, frame);
    }

    private void sendRaw(BluetoothGattCharacteristic characteristic, byte[] data) {
        if (characteristic == null) return;
        characteristic.setValue(data);

        // 核心修复点：动态判断特征值的属性，决定用有响应还是无响应写入！
        int properties = characteristic.getProperties();
        if ((properties & BluetoothGattCharacteristic.PROPERTY_WRITE_NO_RESPONSE) != 0) {
            characteristic.setWriteType(BluetoothGattCharacteristic.WRITE_TYPE_NO_RESPONSE);
        } else {
            characteristic.setWriteType(BluetoothGattCharacteristic.WRITE_TYPE_DEFAULT);
        }

        boolean success = bluetoothGatt.writeCharacteristic(characteristic);
        // 去掉了高频数据的Log，避免刷屏卡死UI
        if (characteristic.getUuid().equals(CHAR_MODE_UUID)) {
            Log.i(TAG, "发送模式指令: " + bytesToHex(data) + " | 结果: " + success);
        }
    }

    private void setControlsEnabled(boolean enabled) {
        isConnected = enabled;
        btnModeToggle.setEnabled(enabled);
        btnStop.setEnabled(enabled);
        if (!enabled) {
            llAutoButtons.setVisibility(View.GONE);
            llManualSlider.setVisibility(View.GONE);
            btnModeToggle.setText("切换为自动模式");
            isAutoMode = false;
        }
    }

    private void connectToDevice() {
        if (bluetoothAdapter == null || !bluetoothAdapter.isEnabled()) {
            updateStatus("请先打开手机蓝牙");
            return;
        }
        updateStatus("正在扫描设备...");
        bluetoothLeScanner = bluetoothAdapter.getBluetoothLeScanner();
        if (scanCallback != null) {
            bluetoothLeScanner.stopScan(scanCallback);
        }
        scanCallback = new ScanCallback() {
            @Override
            public void onScanResult(int callbackType, ScanResult result) {
                BluetoothDevice device = result.getDevice();
                String deviceName = result.getScanRecord() != null ?
                        result.getScanRecord().getDeviceName() : device.getName();
                if (TARGET_DEVICE_NAME.equals(deviceName)) {
                    updateStatus("找到设备，正在连接...");
                    bluetoothLeScanner.stopScan(this);
                    bluetoothGatt = device.connectGatt(MainActivity.this, false, gattCallback);
                }
            }
        };
        bluetoothLeScanner.startScan(scanCallback);
    }

    private void updateStatus(final String text) {
        runOnUiThread(() -> tvStatus.setText("状态: " + text));
    }

    private String bytesToHex(byte[] bytes) {
        StringBuilder sb = new StringBuilder();
        for (byte b : bytes) {
            sb.append(String.format("%02x ", b));
        }
        return sb.toString().trim();
    }

    private void checkAndRequestPermissions() {
        List<String> needed = new ArrayList<>();
        if (checkSelfPermission(Manifest.permission.ACCESS_FINE_LOCATION) != PackageManager.PERMISSION_GRANTED) needed.add(Manifest.permission.ACCESS_FINE_LOCATION);
        if (Build.VERSION.SDK_INT >= 31) {
            if (checkSelfPermission(Manifest.permission.BLUETOOTH_CONNECT) != PackageManager.PERMISSION_GRANTED) needed.add(Manifest.permission.BLUETOOTH_CONNECT);
            if (checkSelfPermission(Manifest.permission.BLUETOOTH_SCAN) != PackageManager.PERMISSION_GRANTED) needed.add(Manifest.permission.BLUETOOTH_SCAN);
        }
        if (!needed.isEmpty()) {
            requestPermissions(needed.toArray(new String[0]), PERMISSION_REQUEST_CODE);
        } else {
            initBluetooth();
        }
    }

    private void initBluetooth() {
        BluetoothManager manager = (BluetoothManager) getSystemService(Context.BLUETOOTH_SERVICE);
        bluetoothAdapter = manager.getAdapter();
        updateStatus("初始化完成，等待连接");
    }

    @Override
    public void onRequestPermissionsResult(int requestCode, String[] permissions, int[] grantResults) {
        super.onRequestPermissionsResult(requestCode, permissions, grantResults);
        if (requestCode == PERMISSION_REQUEST_CODE) {
            initBluetooth();
        }
    }

    @Override
    protected void onDestroy() {
        super.onDestroy();
        stopSoftwareWave();
        if (bluetoothLeScanner != null && scanCallback != null) {
            bluetoothLeScanner.stopScan(scanCallback);
        }
        if (bluetoothGatt != null) {
            bluetoothGatt.close();
            bluetoothGatt = null;
        }
    }
}

I'm not familiar with Rust but this Java works fine with mine DK-BHSE device, and may be helpful :3