Open dasavick opened 2 years ago
There seem to be no signal when remote is turned on. Only after pairing sequence (visible from about the half of the signal).
After pairing sequence (throttle up then down), there is a repeating signal at about 2474,9MHz:
There seems to be about 5 ms delay (4.95 ms to be exact) of the signals on 2474,9MHz:
Universal Radio Hacker detected PSK with 3 samples per symbol:
0001101101100101101101011100000101110011010010100000010001101011101101001001010101101101100100111000101111010101101010101011101 [Pause: 9532 samples]
111011001001101100110111001011111011000110010110101111110111010110101101101101001010100101101100110111000101011010101010001010000010 [Pause: 9533 samples]
11101100100110100110101101011111110001100011101011111101110101101011101011010010010110010111011011110101011010111010111111010100011 [Pause: 9532 samples]
111011011011111101111011010111101100011000110001110110011010110100010100101010110100111010001011000010101001010001011010010101010001 [Pause: 9535 samples]
1110110010011101101111010010101100110001100011000111011001111011010111110110100100100100110110011001110001011110111010101000110101001 [Pause: 9532 samples]
11000101100100111101110100101001010010100100100100101000000011101010001101001010110100111100000011010010010100110001011011010101101 [Pause: 9533 samples]
00110110010011000000010110101101011011011111011111010111011100101001010110011010110010110000011111001001011101100111010100010011111101 [Pause: 9533 samples]
110001001100100111111101001010010100001000001000001011001000110010101110101101001001011000011111101111010101100111010101001010100010 [Pause: 9531 samples]
110001001001001111011010010100000100101001001000001010000000110101010100101101101010110100010111011000111010100101010110000011101110 [Pause: 9532 samples]
001100100110011000010000110101101011010110101111101011101110010010101001001011001011000001011100100011101010010101000101010100101 [Pause: 9533 samples]
110001001001000111101110100101000000010010000010000010100000001010110101101101100000000001101101100110011100010111101101010011111100111 [Pause: 9532 samples]
1110100110110101111111011010100110010000100000000001011001000010100101011001101011001011000001011110010010111011001110100101011011100100 [Pause: 9532 samples]
0001001100100010010000100101000010111001110011100010011001101010111010101001001001001011101001110101011010111010101100101010010 [Pause: 9532 samples]
100011010011001111011010010100100101010010010000010010000000000100101110010110110010110000111110010110111011001110100100101010001001 [Pause: 9532 samples]
The pattern is a bit different when the drone is also on (every second fragment):
This is the current data gathered on the 4DRC V4 drone.
Tx
RW1608P
This is currently only a guess because of similarities to the 4DRC V8 (#643). There is no visible text on the radio chip.
Rx
I haven't quite figured it out yet.