Pawelsky
Pawelsky
Hi @0r10nV The firmware does support some limited set of bq40z307 opcodes but not many. As mentioned I've tried both bq400307 and sh366000 native unseal methods but no luck. I...
> there is also probability that unsealing this chip will not grant access to DJI_BARCODE parameter location, because it is handled by non-standard register 0xD8 which is outside of SBS...
Got access to the chip, unfortunately cannot see any markings through the epoxy, only something resembling H6 or 9H on the (I guess) LDO chip in the HSNT-4 package on...
Managed to read the markings on the chip by putting a drop of IPA on top of the resin to smooth out the surface. It does indeed seem to be...
Desoldered the chip and dissolved the epoxy to expose the extra pads. WIll try to connect a programmer and see what I can do with it. 
Plan is to start with FT232H and take it from there.
Interesting observation - even with the FPGA module removed the SH366000 still returns the DJI specific serial number (the one retrieved with the 0xD8 command)...
This begs the question - what is the FPGA module used for?