New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Power zone (FCC/CE) in GL300a/b/c RC Firmware #10

Open
MrBurnsAT opened this Issue Jan 12, 2017 · 408 comments

Comments

Projects
None yet
@MrBurnsAT

MrBurnsAT commented Jan 12, 2017

RC Firmware must be changeable too.

Some limitations was added with RC Firmwares 1.6 and newer.
Output Power is reduced from 25mW to 10mW in CE Mode.

And
It should be possible to change CE to FCC Mode
(RC Checks via GPS location and Sets than FCC or CE Mode, USA = FCC, Europe = CE

@mefistotelis

This comment has been minimized.

Collaborator

mefistotelis commented Jan 12, 2017

Actually, the power output mode needs to be changed in both transmitter in radio controller and in the transmitter on OFDM board.

It's good to know the change in power was made with 1.6 - it should allow to find the change by comparing two firmwares. Please make sure that this information is correct, if you can.

@MrBurnsAT

This comment has been minimized.

MrBurnsAT commented Jan 12, 2017

Yes the change was with RC Firmware 1.6 (C1_FW_v01.06.0000.bin)
(DJI support confirmed me this! They must do this because of local laws)

Craft and RC Firmwares are not the same since 1.3.2 which was the last Craft and RC update which was done by USB drive. Since there RC Firmware is only updated via DJI GoApp.

And not every craft firmware Version there was a RC Firmware Update.
For P3 actual RC Firmware is 1.6 (where encryption of the Transmission also has been changed)

RC Firmware 1.6 is only compatible with craft firmware 1.8 or newer!!!

@mefistotelis

This comment has been minimized.

Collaborator

mefistotelis commented Jan 12, 2017

Thank you, I didn't know many of these facts. I will take a look at RC firmware.

@mefistotelis

This comment has been minimized.

Collaborator

mefistotelis commented Jan 18, 2017

In Ph3 Pro/Adv the hardware related to RF transmission is different than for Ph3 Std.

It would seem that transmission is configured by:
m1500 radio transmitter 'IG810 LB2_68013_TX'
and
m1600 radio receiver 'IG810 LB2_68013_RX ground'

I don't know whether these transmitters are visible from any other firmware as network interfaces.

I also don't know if the tx power is configurable within these firmwares directly, or sent to it from a more complex module.

EDIT: We now have wikis which explain what each hardware chip does, and what each FW module does.

@mefistotelis

This comment has been minimized.

Collaborator

mefistotelis commented Jan 18, 2017

Yes the change was with RC Firmware 1.6 (C1_FW_v01.06.0000.bin)
(DJI support confirmed me this! They must do this because of local laws)

I compared C1_FW_V01.05.0080 and C1_FW_V01.06.0000. The only modules which are different between these versions are m1400 and m1401, which are MCUs for A and B remotes.

Will look in detail at this module.

@notsolowki

This comment has been minimized.

notsolowki commented Jan 20, 2017

mefistotelis : these seems to be lots of variables in mi09.bin have you had and success defining any of them. and can you tell me what the FPGA ground module is?

@mefistotelis

This comment has been minimized.

Collaborator

mefistotelis commented Jan 20, 2017

Will arm_bin2elf.py work on RC firmware m1400/m1401

Yes; but I'm not sure what is the correct base address. Without it, some pointers may lead to invalid locations. Maybe it's 0? Not sure, will figure it out later.

The ".bss" section should probably start at 0x10000000. Its size seem to extend to 0x50000000, but so much data would slow down any disassembler - I will try to select narrowed area.

these seems to be lots of variables in mi09.bin have you had and success defining any of them.

I'm not sure what you mean, you shoul ask for specific mXXYY module.

can you tell me what the FPGA ground module is?

I'm not sure what is the function of FPGAs used in the drone. I don't have much experience in analysing synthesised hardware programming; without debug symbols, it is very hard to grasp the purpose of the circuit. Hardware definition is something completely different than processor programming, even if the languages seem to look alike.

@mefistotelis

This comment has been minimized.

Collaborator

mefistotelis commented Feb 1, 2017

RC hacking update:

We don't know what information the RC receives to set output power:

  • if it receives GPS coordinates, then the firmware must have definition of CE area
  • if it receives simple "set CE mode" instruction, then CE area definition must be in the aircraft FW

Either way, since we know how the CE area is defined in the mobile app (for P3 Standard), we can expect one of the firmware modules will have similar float/double numbers within. I believe this is the best starting point for getting the CE/FCC code - search for coordinates.

I tried looking at the RC firmware code directly, but this isn't easy - there are almost no debug messages which would allow to locate points of interests.

@ferraript

This comment has been minimized.

ferraript commented Feb 1, 2017

@mefistotelis: thanks for info
who knows, maybe P3X and P3A obey that SetPowerMode command too :)
I edited my DJI GO in a way I was talking about, but I have no resources to actually measure, if it has any effect

@notsolowki

This comment has been minimized.

notsolowki commented Feb 2, 2017

i can tell you i had a fly away at a really high altitude and i was 9,000ft away before i was loosing signal but i never totally lost it. could someone use a mltimeter to measure the mw from the antenna output?

@rulppa

This comment has been minimized.

rulppa commented Feb 2, 2017

Measured GL300A and B model radios, without GPS-lock, both 0.72-0.76mW. I will measure again during weekend, with GPS lock. Tested with RC 1.5.8 only, 1.7.6 doesnt seem to work with 1.6 radio.

@ferraript

This comment has been minimized.

ferraript commented Feb 2, 2017

1.7.6 doesnt seem to work with 1.6 radio

yeah, that's right
RC FW 1.6 (and newer) is compatible only with AC FW 1.8 (and newer)
and since you said you don't have Android phone, I doubt you'll be able to downgrade RC to 1.4.3 to test power output :-(

@mefistotelis

This comment has been minimized.

Collaborator

mefistotelis commented Feb 4, 2017

I prepared a list of places in C1_FW_V01.06.0000 which could store Europe coordinates. Now each of the matches needs to be checked.

How I made the list:

# Europe is around 71,-18 .. 27,50; match -19..0 and 0..69 with no exponent
ls -1 C1_FW_*.bin | xargs -I {} sh -c 'od -tfF -w4 {} | sed "s/^\(.*\)/{}: \1/g"' | grep '^.*: [0-9]*[ ]*\([1-6]\?[0-9]\|[-][1]\?[0-9]\)\([.][0-9]*\)\?$' | grep -v "^.*: [0-9]*[ ]*[-]\?0\([.][0-9]*\|\)$" > _match_f1.txt
ls -1 C1_FW_*.bin | xargs -I {} sh -c 'od -tfD -w8 -j0 {} | sed "s/^\(.*\)/{}: \1/g"' | grep '^.*: [0-9]*[ ]*\([1-6]\?[0-9]\|[-][1]\?[0-9]\)\([.][0-9]*\)\?$' | grep -v "^.*: [0-9]*[ ]*[-]\?0\([.][0-9]*\|\)$" > _match_d1.txt
ls -1 C1_FW_*.bin | xargs -I {} sh -c 'od -tfD -w8 -j4 {} | sed "s/^\(.*\)/{}: \1/g"' | grep '^.*: [0-9]*[ ]*\([1-6]\?[0-9]\|[-][1]\?[0-9]\)\([.][0-9]*\)\?$' | grep -v "^.*: [0-9]*[ ]*[-]\?0\([.][0-9]*\|\)$" > _match_d2.txt
# Now assuming lon lat coords are adjacent, let's find 71..27 and get one before and one after
grep -B1 -A1 '^.*: [0-9]*[ ]*[2-7][0-9]\([.][0-9]*\)\?$' _match_f1.txt > _match_f1b.txt
grep -B1 -A1 '^.*: [0-9]*[ ]*[2-7][0-9]\([.][0-9]*\)\?$' _match_d1.txt > _match_d1b.txt
grep -B1 -A1 '^.*: [0-9]*[ ]*[2-7][0-9]\([.][0-9]*\)\?$' _match_d2.txt > _match_d2b.txt

Files with list of possible coords:
_match_d1b.txt
_match_d2b.txt
_match_f1b.txt

@ferraript

This comment has been minimized.

ferraript commented Feb 4, 2017

interesting (and crazy linux commands :D )

just remember, that coordinates may be saved in different ways
in DJI GO, Europe is stored as (55.529627,15.702531,2824707), where coordinates are double and radius is int
but, for example, coordinates may be stored as long (and they are then divided by 1000000)
or, they can be stored in radian format, so 55.529627° = 0.969174823554

@KennethMcNutt

This comment has been minimized.

KennethMcNutt commented Feb 5, 2017

Also thought this might be useful..
DJI PHANTOM 3 PROFESSIONAL HASHES AND PASSWORDS

UPDATE: ftp password is cracked: admin999

Some hashes and passwords:

  1. System access:

root:$6$zi2k1pqQ$aYoxWoM9suJzq4xcIz0Uh/sMBQxIrM7QzqpNH.UMrX6TAmBx37jN0ygKlnpmHkgilWV5YzpfikkaylTWWo8RU0:16184:0:99999:7:::
bin::10933:0:99999:7:::
daemon:
:10933:0:99999:7:::
adm::10933:0:99999:7:::
lp:
:10933:0:99999:7:::
sync::10933:0:99999:7:::
shutdown:
:10933:0:99999:7:::
halt::10933:0:99999:7:::
uucp:
:10933:0:99999:7:::
operator::10933:0:99999:7:::
ftp:$6$Kt6U5MHk$aCy81r9Wz49TlfDwSPHkx8bEouNFdt0khJg7Pj1HOJtECe5.t9KfNWOKKQXnyVqjd5whliLQGTQkXfB8p3rBX/:10933:0:99999:7:::
nobody:
:10933:0:99999:7:::
default::10933:0:99999:7:::
a8sdk:HHTiH8SGMjHoM:0:0:99999:7:::
root, ftp, default, a8sdk has an access to /bin/sh

  1. Wireless networks:

ESSID=Amba_AP
PASSWORD=PWFORAMBA

ESSID=amba_boss
PASSWORD=1234567890
P.S.

Wi-Fi Channel is number 5

ifconfig wlan0 192.168.42.1
…dhcp-range=192.168.42.2,192.168.42.6

Have a safe flight! ;-)

@notsolowki

This comment has been minimized.

notsolowki commented Feb 6, 2017

@ferraript what would be involved in making the latest dji go app send all the parameters like 2.4

@ferraript

This comment has been minimized.

ferraript commented Feb 6, 2017

@notsolowki: I don't know if I would be able to hack DJI GO 3 in such a way
in 2.4.3, there is one class (dji\pilot\fpv\stage\cs) with onClick method
and according to clicked button, it does some actions
if "Reset All Settings" is clicked, there are some checks and in the end DataFlycResetParams class sends command to AC

however, in 3.0.1, every button has its own class and onClick method
(fortunately?) class for "Reset All Settings" button exists (dji\setting\ui\flyc\ResetView), but it's not used
maybe I could redirect actions from here to another button - and the most similar button (I mean with similar class structure) is ClearFlightLogsButton

but I can't guarantee it will work

I still think the easiest way is to use DJI GO 2 with existing "Reset All Settings" button

@notsolowki

This comment has been minimized.

notsolowki commented Feb 7, 2017

someone pointed this out to me

there is a lot of FDI things, freqs, max. FCC ids, (all fcc id's starts with with FDI) so i think this is the way to get more power out? (dB/mW) as you might know, when eg. inspire1 controller is hooked to I1, measuring it's power, its WAY better than same remote, linked to p3p. (same remote, same fw, just different pairing process which adjust the output)

There is one interesting number..

"
"defaultValue" : 0.150000,
"name" : "g_config.fdi.max_ctrl_frequency_power_0""

This is what i think it will affect..

https://dl.dropboxusercontent.com/u/1177154/phantompilots/p3p/Video 06-02-2017, 16.28.33.mov

left work already, i will test tomorrow to see if it "handshakes" with more power when the number is more than 0.15, what do you think?

@mefistotelis

This comment has been minimized.

Collaborator

mefistotelis commented Feb 7, 2017

"name" : "g_config.fdi.max_ctrl_frequency_power_0""

Sounds promising. I will check it in the code.

EDIT: checked. The value does not seem to be used for any computations in the flight controller itself, so it is possible it's used for another module.

@notsolowki

This comment has been minimized.

notsolowki commented Feb 8, 2017

does that mean it could change the output power?

@mefistotelis

This comment has been minimized.

Collaborator

mefistotelis commented Feb 8, 2017

It could. This means the value isn't used by the flight controller directly, but this also means its value is not set by flight controller based on home point. It would be best to check by experiment.

@mefistotelis

This comment has been minimized.

Collaborator

mefistotelis commented Feb 21, 2017

I have a change which I need to test as part of developing the FCC hack.

I need someone with RF Power Meter to test it. If there's anyone interested, please give me a firmware version you prefer.

There is a chance of bricking your RC with this; I will do my best to verify it on my end, but still, volunteer takes the risk.
Anyone interested?

@notsolowki

This comment has been minimized.

notsolowki commented Feb 21, 2017

Upload version 1.5.8. Thanks,

@rulppa

This comment has been minimized.

rulppa commented Feb 21, 2017

I'm from europe (CE-mode), able to measure directly from RC, GL300A and B versions. I can test the 1.5.8 if needed.

@mefistotelis

This comment has been minimized.

Collaborator

mefistotelis commented Feb 21, 2017

Here's the modification in two firmwares:
C1_FW_V01.05.0080
C1_FW_V01.06.0000
Dl link:
https://mega.nz/#!hcV0URSB!GauZgmpVWEF3Hf8d5N0NPtjSjQT4IcoAPJa3Fs7J9Lg

What is modified:

xxd  -p -c1024 C1_FW_V01.06.0000_mi06.bin | \
  sed 's/\(00b5..4.85b0\)\(c17a\)\(..71017ac1f34112022a..d141f0800101720021\)/\10121\3/' | \
  xxd -r -p -c1024 > C1_FW_V01.06.0000_mi06-mod.bin

xxd  -p -c1024 C1_FW_V01.05.0080_mi06.bin | \
  sed 's/\(00b5..4.85b0\)\(c17a\)\(..71017ac1f34112022a..d141f0800101720021\)/\10121\3/' | \
  xxd -r -p -c1024 > C1_FW_V01.05.0080_mi06-mod.bin

In assembly:

85 B0		SUB             SP, SP, #0x14
-C1 7A		LDRB            R1, [R0,#0xB]
+01 21		MOVS            R1, #1
91 71		STRB            R1, [R2,#(zone_is_fcc - 0x100005E8)]
01 7A		LDRB            R1, [R0,#8]
@rulppa

This comment has been minimized.

rulppa commented Feb 21, 2017

New to android and cant currently do this with iOS. Whats the location where go app downloads these files before up/downgrade so i can replace with new one?

@ferraript

This comment has been minimized.

ferraript commented Feb 21, 2017

Whats the location where go app downloads these files before up/downgrade so i can replace with new one?

was mentioned here

@rulppa

This comment has been minimized.

rulppa commented Feb 21, 2017

@ferraript

Under /Android/ i have only 3 directories, data, media and obb. So not there, or i need rooted device to view those folders, idk. Time to get some sleep, i will try another device tomorrow, which i believe i can root. Can't root this one :(

@ferraript

This comment has been minimized.

ferraript commented Feb 21, 2017

no, it's just written in specific way :D
it's in internal SD card, in DJI/dji.pilot/package

@rulppa

This comment has been minimized.

rulppa commented Feb 21, 2017

Oh ok, what kind of way is that, to give directory that actually exists but is wrong lol. Downgrading now.

@g1dtf

This comment has been minimized.

g1dtf commented Nov 10, 2018

Looks like I might have actually cracked it. Despite all the atten values set to 0 the RC still needs to be connected to the P4 with a GPS lock before the power changes from 10mw (CE). Now I have seen an increase in power I am going to try with just the FCC setting and leave the atten values default and see if there is any change in power and if so how much.

@g1dtf

This comment has been minimized.

g1dtf commented Nov 10, 2018

Tried it again with the default atten values and getting same power as atten's set to 0. Happily still getting FCC power (16dbm on power meter) but no beyond FCC power on this GL300c.

@g1dtf

This comment has been minimized.

g1dtf commented Nov 10, 2018

Looks like FCC for the GL300c is sorted, now just need to get the P4std to output FCC power was hoping the modded firmware on RC would do the trick but seeing no power increase from the drone.

@cdr1981

This comment has been minimized.

cdr1981 commented Nov 10, 2018

@g1dtf
sorry for the delay - at the moment I have a lot of work in the office to do.
I am also not sure if it really works. A test flight with the drone brought no greater range. I must therefore first remove the factory antennas and to connect the meter directly. Then I can see how much more power is really emitted at the output. I hope to make the remodeling of the RC tomorrow. How does it work with the USB RS232 connection and the codes - so I know if the system is running on FCC or CE? Do you need Linux or is it possible with Windows too? Regards

@g1dtf

This comment has been minimized.

g1dtf commented Nov 10, 2018

@cdr1981
For the serial codes I use android phone with usb host connected to micro usb on controller. I use the app Serial USB Terminal and have a couple of macro's set for CE and FCC. I can give you the Hex for the 2 macros if you need them.

@g1dtf

This comment has been minimized.

g1dtf commented Nov 10, 2018

@mefistotelis
I may have found a small issue with the lightbridge hardcoder. If I mod the power zone override to 1 in the json file and use the hardcoder to create the new elf file and then again use the hardcoder to extract the json from the newly modded elf it fails to find 3 functions associated with power zone.

C1_FW_V01.06.0000_m1401.elf: Warning: No variant of function 'tcx_config_power_zone' was found
C1_FW_V01.06.0000_m1401.elf: Warning: No variant of function 'update_tcx_power_zone_flag-original' was found
C1_FW_V01.06.0000_m1401.elf: Warning: No variant of function 'update_tcx_power_zone_flag-setfcc' was found
C1_FW_V01.06.0000_m1401.elf: Warning: From expacted functions, 3 were not found
C1_FW_V01.06.0000_m1401.elf: Value 'og_hardcoded.lightbridge_stm32.power_zone_selection_override' not found in ELF file.

Hope this output from terminal may be of help .

This only happens if the power zone override is changed to 1 in m1401. When doing the same with m1400 everything works as it should.

@cdr1981

This comment has been minimized.

cdr1981 commented Nov 11, 2018

@g1dtf
yes please and thank you.

@g1dtf

This comment has been minimized.

g1dtf commented Nov 11, 2018

@cdr1981

CE = 55 10 04 56 2a 0e b0 15 40 09 06 f7 ff 00 e0 93

FCC = 55 10 04 56 2a 0e b1 15 40 09 06 f7 ff 01 d6 03

@cdr1981

This comment has been minimized.

cdr1981 commented Nov 11, 2018

Assistant 2 to connect to RC (GL300c). Has anyone got a copy of v1.0.7
here we go:
https://we.tl/t-naBw6yyHOr

@cdr1981

This comment has been minimized.

cdr1981 commented Nov 11, 2018

@g1dtf
thanks. What I have to install on Android? - only "Serial USB Terminal" and connect to RC and send those hex codes? or do I need the python scripts from mefistotelis?

@g1dtf

This comment has been minimized.

g1dtf commented Nov 11, 2018

Just set it to hex and type the codes into one of the 6 macro memories, set driver to CDC, Baud rate 19200 8 bits no parity 1 stop bit. Then connect microusb on RC to usb host on android tab/phone

@mefistotelis

This comment has been minimized.

Collaborator

mefistotelis commented Nov 11, 2018

I may have found a small issue with the lightbridge hardcoder. If I mod the power zone override to 1 in the json file and use the hardcoder to create the new elf file and then again use the hardcoder to extract the json from the newly modded elf it fails to find 3 functions associated with power zone.

This shoudn't happen.

Make sure you're updated - I recently fixed a few issues I introduced last week. I will check whether I can reproduce this.

@g1dtf

This comment has been minimized.

g1dtf commented Nov 11, 2018

I did a git pull yesterday so should be up to date. as I stated this only happens with M1401 ,M1400 mods and extracts json again ok and only when modding the power zone to 1. I assume the bin is actually modified ok with regards to power zone as the resulting firmware gives me FCC power when the GPS is locked.

@mefistotelis

This comment has been minimized.

Collaborator

mefistotelis commented Nov 12, 2018

I'm not seeing the issue now (at version with commit "amba_sys_hardcoder: Fixed optimization code."), so it was most likely fixed.

@g1dtf

This comment has been minimized.

g1dtf commented Nov 12, 2018

Just done a git pull and got the same error, I can send you the modded the ELF file on which I get the error when running ./lightbridge_stm32_hardcoder.py -vvv -x -e "C1_FW_V01.06.0000_m1401.elf". Maybe you can see if it fault in the creation of the modded elf or the extraction of the JSON from the modded file. I am still getting the following terminal output when the power_zone_override is changed from 0 to 1 in the JSON file.

C1_FW_V01.06.0000_m1401.elf: Search for update_tcx_power_zone_flag-original ver C1_FW_V01.05-m1401, progress 66%
C1_FW_V01.06.0000_m1401.elf: Search for update_tcx_power_zone_flag-original ver C1_FW_V01.05-m1401, progress 100%
C1_FW_V01.06.0000_m1401.elf: Pattern of update_tcx_power_zone_flag-original ver C1_FW_V01.05-m1401 was not found; closest was 1 lines at 0xa83c
C1_FW_V01.06.0000_m1401.elf: Search for update_tcx_power_zone_flag-setfcc ver C1_FW_V01.05-m1401, progress 66%
C1_FW_V01.06.0000_m1401.elf: Search for update_tcx_power_zone_flag-setfcc ver C1_FW_V01.05-m1401, progress 100%
C1_FW_V01.06.0000_m1401.elf: Pattern of update_tcx_power_zone_flag-setfcc ver C1_FW_V01.05-m1401 was not found; closest was 1 lines at 0xa83c
C1_FW_V01.06.0000_m1401.elf: Warning: No variant of function 'tcx_config_power_zone' was found
C1_FW_V01.06.0000_m1401.elf: Warning: No variant of function 'update_tcx_power_zone_flag-original' was found
C1_FW_V01.06.0000_m1401.elf: Warning: No variant of function 'update_tcx_power_zone_flag-setfcc' was found
C1_FW_V01.06.0000_m1401.elf: Warning: From expacted functions, 3 were not found
C1_FW_V01.06.0000_m1401.elf: Extracted 6 hardcoded values

@mefistotelis

This comment has been minimized.

Collaborator

mefistotelis commented Nov 12, 2018

Ok, checked again, reproduced, fixed. Not a dangerous issue, file was modded correctly.

@g1dtf

This comment has been minimized.

g1dtf commented Nov 12, 2018

Thanks, I guessed the mod bit would be ok as it worked so as you say was no biggy.

Just had a chance to try latest version and it worked perfectly, great job.

@g1dtf

This comment has been minimized.

g1dtf commented Nov 17, 2018

The FCC via power zone flag mod is working great on the GL300c switching to FCC power when the PH4 gets its GPS lock. However the PH4 itself is still stuck on CE power of approx 13mw so now looking for a way to force that to FCC if its at all possible. It was stated that the RC firmware mod alone may do it but in my case a least it does not.

@pawelsky

This comment has been minimized.

Contributor

pawelsky commented Nov 17, 2018

How do you measure that? From what I've observed Phantoms switch the transmit antennas based on the orientation of the drone relative to the transmitter.

@g1dtf

This comment has been minimized.

g1dtf commented Nov 17, 2018

I monitored output from both tx antennas simultaneously with close coupled antennas with an immersion rc power meter and rf explorer and saw no difference in power levels between modded and unmodded and with or without gps lock.

@mefistotelis

This comment has been minimized.

Collaborator

mefistotelis commented Nov 27, 2018

I found an error in my script which caused some values to not be updated; maybe that was the cause.

@g1dtf

This comment has been minimized.

g1dtf commented Nov 27, 2018

@mefistotelis which script had the error if you don't mind me asking so I can check it out before I do another pull.

@mefistotelis

This comment has been minimized.

Collaborator

mefistotelis commented Nov 27, 2018

The fixing commit was here:
58fd245

@g1dtf

This comment has been minimized.

g1dtf commented Nov 28, 2018

@mefistotelis I didn't think I was actually using amba_sys_hardcoder to mod the RC (C1) firmware unless its called in the background somewhere by another script? Not had chance to try building another firmware yet with the latest pull but hope to do so soon.

@mefistotelis

This comment has been minimized.

Collaborator

mefistotelis commented Nov 28, 2018

All other hardcoders use the code from amba_*.

@g1dtf

This comment has been minimized.

g1dtf commented Nov 29, 2018

Tried the force FCC mod with the latest pull but still only getting a power increase on RC . Do you know of any way to force FCC power even if only temporarily for testing on a PH4 std (via serial commands etc) without having to actually dismantle the drone to access its internal data buses.

@kikislater

This comment has been minimized.

kikislater commented Dec 10, 2018

Could it work on GL300E ?

@mefistotelis

This comment has been minimized.

Collaborator

mefistotelis commented Dec 10, 2018

Could it work on GL300E ?

Occusync uses a different transceiver. This is only for Lightbridge.

@kikislater

This comment has been minimized.

kikislater commented Dec 10, 2018

Could it work on GL300E ?

Occusync uses a different transceiver. This is only for Lightbridge.

Ok but I ask for pro+ v1 not v2. v1 is lightbridge. Difference between normal and plus version is embedded screen which run android

@mefistotelis

This comment has been minimized.

Collaborator

mefistotelis commented Dec 10, 2018

Try running the tool. If it will find the functions it needs, then it will work.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment