[Scootermansussex]

Mine is definitely can I can I tryed UART then had it connected to canbus transceiver but not clever enough to go any further there is a Rx and TX on the BMS but wouldn't know what to do with them lol

[MikeSnow]

CAN interface should be CAN H and CAN L (high and low) and not RX TX. This makes me belive its actually uart interface. Is there anyone that have sniffed the communication to the battery? I would do it my self if I had access to a complete system but I only have a battery so I'm out of luck.

[Scootermansussex]

Where are you buddy

[Domsed]

Chast said something about "stealing someone else's work" but honey, we're discussing hacking a rental-only scooter model. 100% of any work here is stolen.
As much as I value the work of independent creators, Chast was not only gatekeeping all of his research behind a paywall, he was also sending everyone who paid a mostly useless hex file *for 10 EUR*.
Save this code block with a .hex extension and upload it to an arduino nano with a MCP2515 CAN module connected (standard SPI pinout, INT pin to D2)

Code: Select all

:100000000C945D000C9485000C9485000C94850084
:100010000C9485000C9485000C9485000C9485004C
:100020000C9485000C9485000C9485000C9485003C
:100030000C9485000C9485000C9485000C9485002C
:100040000C9461040C9485000C942F040C94090406
:100050000C9485000C9485000C9485000C9485000C
:100060000C9485000C94850000000008000201003B
:100070000003040700000000000000000000000072
:10008000250028002B0000000000240027002A0083
:10009000010204081020408001020408102001021F
:1000A00004081020040404040404040402020202EC
:1000B0000202030303030303AB0411241FBECFEFAB
:1000C000D8E0DEBFCDBF11E0A0E0B1E0EAEFF7E19C
:1000D00002C005900D92A839B107D9F724E0A8E92C
:1000E000B1E001C01D92A032B207E1F710E0CDE50A
:1000F000D0E004C02197FE010E94EC0BCC35D10763
:10010000C9F70E9439050C94FB0B0C94000090E099
:10011000FC01E057FF4F24918C559F4FFC018491C7
:10012000882399F090E0880F991FFC01EA57FF4F50
:10013000A591B491FC01E458FF4F859194918FB73C
:10014000F894EC91E22BEC938FBF0895AF92BF929D
:10015000CF92DF92EF92FF920F931F93CF93DF9393
:100160006C017B018B01040F151FEB015E01AE18C2
:10017000BF08C017D10759F06991D601ED91FC91E4
:100180000190F081E02DC6010995892B79F7C50111
:10019000DF91CF911F910F91FF90EF90DF90CF9063
:1001A000BF90AF900895FC01538D448D252F30E012
:1001B000842F90E0821B930B541710F0CF96089574
:1001C00001970895FC01918D828D981761F0A28DA1
:1001D000AE0FBF2FB11D5D968C91928D9F5F9F7367
:1001E000928F90E008958FEF9FEF0895FC01918D1D
:1001F000828D981731F0828DE80FF11D858D90E08A
:1002000008958FEF9FEF0895FC01918D228D892F26
:1002100090E0805C9F4F821B91098F73992708950E
:1002200084E793E00E94040121E0892B09F420E097
:10023000822F089580E090E0892B29F00E94100120
:1002400081110C9400000895FC01A48DA80FB92F12
:10025000B11DA35ABF4F2C91848D90E001968F73EE
:100260009927848FA689B7892C93A089B1898C910D
:10027000837080648C93938D848D981306C002885C
:10028000F389E02D80818F7D80830895EF92FF9226
:100290000F931F93CF93DF93EC0181E0888F9B8DA9
:1002A0008C8D98131AC0E889F989808185FF15C063
:1002B0009FB7F894EE89FF896083E889F989808186
:1002C0008370806480839FBF81E090E0DF91CF9155
:1002D0001F910F91FF90EF900895F62E0B8D10E077
:1002E0000F5F1F4F0F731127E02E8C8D8E110CC0E6
:1002F0000FB607FCFACFE889F989808185FFF5CF31
:10030000CE010E942401F1CFEB8DEC0FFD2FF11DEA
:10031000E35AFF4FF0829FB7F8940B8FEA89FB896D
:1003200080818062CFCFCF93DF93EC01888D8823CB
:10033000B9F0AA89BB89E889F9898C9185FD03C048
:10034000808186FD0DC00FB607FCF7CF8C9185FF2D
:10035000F2CF808185FFEDCFCE010E942401E9CF4D
:10036000DF91CF91089590E0FC01E859FF4F24916F
:10037000FC01E057FF4F3491FC01EC55FF4FE49135
:10038000EE23C9F0222339F0233001F1A8F4213003
:1003900019F1223029F1F0E0EE0FFF1FE458FF4F72
:1003A000A591B4918FB7F894EC91611126C0309566
:1003B0003E233C938FBF08952730A9F02830C9F021
:1003C000243049F7809180008F7D03C080918000A8
:1003D0008F7780938000DFCF84B58F7784BDDBCFAC
:1003E00084B58F7DFBCF8091B0008F778093B00074
:1003F000D2CF8091B0008F7DF9CF3E2BDACF61E074
:10040000809113040C94B3013FB7F8948091990143
:1004100090919A01A0919B01B0919C0126B5A89B57
:1004200005C02F3F19F00196A11DB11D3FBFBA2F86
:10043000A92F982F8827BC01CD01620F711D811D46
:10044000911D42E0660F771F881F991F4A95D1F7CB
:1004500008958F929F92AF92BF92CF92DF92EF92C8
:10046000FF924B015C010E9404026B017C010E941F
:1004700004026C197D098E099F09683E734081054D
:100480009105A8F321E0821A9108A108B10888EE2D
:10049000C80E83E0D81EE11CF11C81149104A10454
:1004A000B10429F7FF90EF90DF90CF90BF90AF900D
:1004B0009F908F9008958EBD00000DB407FEFDCF74
:1004C0008EB508950F931F93009114041091150495
:1004D000209116043091170440E052E16AE770E081
:1004E00080E0041715072607370740F476956795CF
:1004F000579547958F5F8630A1F787E0982F906AD0
:100500009695809581709CBD8DBD60E080911304AF
:100510001F910F910C94B301CF93C82F0E946202D8
:1005200083E00E945B028C2F0E945B0280E00E94AD
:100530005B02C82F0E94FF018C2FCF9108951F935B
:10054000CF93DF93182FD62FC42F0E94620285E02D
:100550000E945B02812F0E945B028D2F0E945B0232
:100560008C2F0E945B02DF91CF911F910C94FF01B1
:10057000CF92DF92EF92FF92CF93C82F482F60EE79
:100580008FE00E949F028FB7F894C0907003D090C4
:100590007103E0907203F09073038FBF8AE0C80E7E
:1005A000D11CE11CF11C2FB7F8948091700390913D
:1005B0007103A0917203B09173032FBF8C159D0539
:1005C000AE05BF0580F48EE00E948C02807EC813C9
:1005D000EACF81E091E0892790E0CF91FF90EF9002
:1005E000DF90CF90089580E0F5CFCF93DF93D82FA1
:1005F000C62F0E94620282E00E945B028D2F0E9441
:100600005B028C2F0E945B02DF91CF910C94FF0163
:10061000FF920F931F93CF93DF93C82FF62E172FC0
:10062000042F0E94620282E00E945B028C2F0E94D3
:100630005B02CF2DD12F0C0F1D2F111DC017D1071D
:1006400021F089910E945B02F9CFDF91CF911F9138
:100650000F91FF900C94FF014F925F926F927F92E7
:100660008F929F92AF92BF92CF92DF92EF92FF92C2
:100670000F931F93CF93DF93CDB7DEB763970FB67A
:10068000F894DEBF0FBECDBFFC012481293008F0F5
:100690008DC05C0186E0E0E0F1E0DE011E96019095
:1006A0000D928A95E1F73E01FEE06F0E711C8E01FE
:1006B0000C5E1F4FF301C190D1903F017601EE0C0B
:1006C000FF1CF701EC0DFD1DE458FE4F8080882DC6
:1006D0000E948C0283FD96C0F5019480F8E0F91524
:1006E00008F464C0F5010081118122813381B901D0
:1006F000A801442777FD4395552766277727D90119
:10070000C80188279927AA27B07444244A94542CF6
:10071000642C7FE1772E411106C044244A9467E09F
:10072000562E612C712C04211521262137214423BA
:1007300009F43FC00C831B83890122273327402FF4
:10074000440F440F440F407E502F53705860452B88
:100750004A8355E0169507955A95E1F70983892B49
:100760008A2B8B2BA1F1892D80648D83492D50E03C
:10077000B501685F7F4FCE0106960E94F20B45E0FF
:10078000490DF701EC0DFD1DE458FE4FBE016F5FF2
:100790007F4F81810E94080348E068E0882D0E9415
:1007A0009F02882D0E948C02807799F084E090E06F
:1007B00012C0A80123E0569547952A95E1F7498391
:1007C0000295000F007E0A831C821B82C8CF892DF0
:1007D000CCCF90E080E063960FB6F894DEBF0FBEFA
:1007E000CDBFDF91CF911F910F91FF90EF90DF90E0
:1007F000CF90BF90AF909F908F907F906F905F90C1
:100800004F9008956016710609F054CF82E090E091
:10081000E2CF1F920F920FB60F9211242F933F93A6
:100820004F935F936F937F938F939F93AF93BF93F8
:10083000EF93FF9384E793E00E942401FF91EF91EF
:10084000BF91AF919F918F917F916F915F914F91E8
:100850003F912F910F900FBE0F901F9018951F92F0
:100860000F920FB60F9211242F938F939F93EF93B4
:10087000FF93E0918403F09185038081E0918A03E6
:10088000F0918B0382FD1BC0908180918D038F5F5F
:100890008F7320918E03821741F0E0918D03F0E079
:1008A000EC58FC4F958F80938D03FF91EF919F91B2
:1008B0008F912F910F900FBE0F901F9018958081F0
:1008C000F4CF1F920F920FB60F9211242F933F93E4
:1008D0008F939F93AF93BF93809170039091710317
:1008E000A0917203B09173033091980123E0230F1C
:1008F0002D3758F50196A11DB11D209398018093C5
:10090000700390937103A0937203B093730380916B
:10091000990190919A01A0919B01B0919C0101963F
:10092000A11DB11D8093990190939A01A0939B0101
:10093000B0939C01BF91AF919F918F913F912F9167
:100940000F900FBE0F901F90189526E8230F029668
:10095000A11DB11DD2CFCF931092770310927603D1
:1009600088EE93E0A0E0B0E0809378039093790361
:10097000A0937A03B0937B0389E891E09093750389
:100980008093740385EC90E09093810380938003BF
:1009900084EC90E0909383038093820380EC90E05A
:1009A000909385038093840381EC90E09093870378
:1009B0008093860382EC90E0909389038093880370
:1009C00086EC90E090938B0380938A0310928D03C2
:1009D00010928E0310928F031092900382E194E0A4
:1009E0009093190480931804CFB7F8948091110460
:1009F000811124C0EEEAF0E08491EAE9F0E09491FC
:100A0000E82FF0E0EE0FFF1FEA57FF4FA591B491DA
:100A1000EC91E92321F461E08AE00E94B3018AE0CD
:100A20000E9487008CB580618CBD8CB580648CBDC4
:100A30008DE00E9487008BE00E9487008091110466
:100A40008F5F80931104CFBF8AE08093130480E806
:100A500096E9A8E9B0E08093140490931504A0935C
:100A60001604B09317048AE00E948700CF910C947B
:100A7000FF01CF93DF93CDB7DEB7C85FD1090FB6C3
:100A8000F894DEBF0FBECDBF789484B5826084BD7C
:100A900084B5816084BD85B5826085BD85B5816082
:100AA00085BD80916E00816080936E001092810000
:100AB00080918100826080938100809181008160BB
:100AC000809381008091800081608093800080917C
:100AD000B10084608093B1008091B0008160809308
:100AE000B00080917A00846080937A0080917A00CF
:100AF000826080937A0080917A00816080937A008E
:100B000080917A00806880937A001092C10088E01A
:100B1000E6E0F1E0DE01A553BF4F01900D928A950A
:100B2000E1F788E0EEE0F1E0DE01AD53BF4F019068
:100B30000D928A95E1F788E0E6E1F1E0DE01A55447
:100B4000BF4F01900D928A95E1F788E0EEE1F1E068
:100B5000DE01AD54BF4F01900D928A95E1F787E019
:100B6000E6E2F1E0DE01A652BF4F01900D928A95B8
:100B7000E1F787E0EDE2F1E0DE01AD52BF4F019019
:100B80000D928A95E1F788E0E4E3F1E0DE01A555F6
:100B9000BF4F01900D928A95E1F79E012D553F4F71
:100BA00088E0F901482F11924A95E9F7ECE3F1E06A
:100BB000DE01A556BF4F982F01900D929A95E1F74F
:100BC000BE016D567F4FC751DF4F79836883C95E81
:100BD000D040FB01482F11924A95E9F78E01055745
:100BE0001F4FF801482F11924A95E9F7E4E4F1E02C
:100BF000DE01AD57BF4F982F01900D929A95E1F706
:100C0000ECE4F1E0DE01A558BF4F982F01900D9262
:100C10009A95E1F71E0153E7250E311CF101482F8B
:100C200011924A95E9F768527109C551DF4F7983EE
:100C30006883CB5ED040FB01482F11924A95E9F7BB
:100C400068507109C351DF4F79836883CD5ED0400E
:100C5000FB01482F11924A95E9F7E4E5F1E0DE0146
:100C6000A55ABF4F982F01900D929A95E1F76051C8
:100C70007109C151DF4F79836883CF5ED040FB019A
:100C8000482F11924A95E9F7ECE5F1E0DE01A55B0A
:100C9000BF4F982F01900D929A95E1F7605171091D
:100CA000CF50DF4F79836883C15FD040FB01482F6D
:100CB00011924A95E9F768507109CD50DF4F798359
:100CC0006883C35FD040FB01482F11924A95E9F732
:100CD000E4E6F1E0DE01D396982F01900D929A950B
:100CE000E1F7EEE0F1E0DE019B96982F01900D9286
:100CF0009A95E1F768517109CB50DF4F798368838A
:100D0000C55FD040FB01482F11924A95E9F7685022
:100D10007109C950DF4F79836883C75FD040FB01F9
:100D2000482F11924A95E9F746E056E168E172E8EA
:100D30004093600350936103609362037093630375
:100D400080936403FE01E553FF4FA8E6B3E0982FBC
:100D500001900D929A95E1F741E056E16FEF73E84B
:100D60004093500350935103609352037093530385
:100D700080935403FE01ED53FF4FA8E5B3E0982F95
:100D800001900D929A95E1F792E0892E96E1992EC5
:100D9000AA24AA9493E8B92E80924003909241032A
:100DA000A0924203B092430380934403FE01E554B2
:100DB000FF4FA8E4B3E0982F01900D929A95E1F7C8
:100DC00042E056E26FEF72E84093300350933103F4
:100DD000609332037093330380933403FE01ED5428
:100DE000FF4FA8E3B3E0982F01900D929A95E1F799
:100DF000E9E04E2EE6E45E2EE2E16E2EE5E87E2E80
:100E000040922003509221036092220370922303A8
:100E100097E090932403FE01E652FF4FA8E2B3E06F
:100E2000D92E01900D92DA94E1F74092100350927E
:100E30001103609212037092130390931403FE0146
:100E4000ED52FF4FA8E1B3E001900D929A95E1F7C2
:100E5000F6E04F2EF6E35F2EF0E26F2EF2E87F2EE3
:100E600040920003509201036092020370920303C8
:100E700080930403FE01E555FF4FA8E0B3E0982FEF
:100E800001900D929A95E1F7412CA4E35A2E662425
:100E90006A94A4E87A2E4092F0025092F102609295
:100EA000F2027092F3028093F402F901A8EFB2E02B
:100EB000982F01900D929A95E1F7C12CB5E4DB2EA5
:100EC000B2E1EB2EB5E8FB2EC092E002D092E10237
:100ED000E092E202F092E30222E02093E40291E049
:100EE0009093E8022093E9024093D0025093D102FC
:100EF0006093D2027093D3028093D402FE01E55630
:100F0000FF4FA8EDB2E0382F01900D923A95E1F72E
:100F1000CC24C39435E4D32E32E1E32E35E8F32E0E
:100F2000C092C002D092C102E092C202F092C3020B
:100F30002093C4029093C80237E13093C902C12CB8
:100F4000E5E1DE2EEE24EA94E3E8FE2EC092B00244
:100F5000D092B102E092B202F092B3028093B40256
:100F60003EECCA56DF4F3883C659D040FE01ED56DD
:100F7000FF4FA8EBB2E0382F01900D923A95E1F7C0
:100F8000CC24C394F5E1DF2EEE24EA94F3E8FF2E9F
:100F9000C092A002D092A102E092A202F092A3021B
:100FA0008093A4023DE0F8013383A8EAB2E0382F31
:100FB00001900D923A95E1F7A2E0CA2EA5E4DA2E4F
:100FC000A2E1EA2EA5E8FA2EC0929002D0929102F8
:100FD000E0929202F092930280939402FE01ED5708
:100FE000FF4FA8E9B2E0382F01900D923A95E1F752
:100FF000B3E0CB2EB5E4DB2EB2E1EB2EB5E8FB2E51
:10100000C0928002D0928102E0928202F09283022A
:1010100080938402FE01E558FF4FA8E8B2E0382F24
:1010200001900D923A95E1F712E0C12E15E3D12E11
:10103000EE24EA9414E8F12EC0927002D09271026C
:10104000E0927202F092730234E030937402C09026
:101050006C01D0906D01E0906E01F0906F01C09234
:101060007802D0927902E0927A02F0927B0204E058
:10107000C02E05E4D02E02E1E02E05E8F02EC0924D
:101080006002D0926102E0926202F0926302909359
:10109000640233E130936802E2E0CE2EE5E1DE2E19
:1010A000EE24EA94E3E8FE2EC0925002D092510260
:1010B000E0925202F092530280935402F101908325
:1010C000A8E5B2E0182F01900D921A95E1F7F3E030
:1010D000CF2EF5E1DF2EEE24EA94F3E8FF2EC09246
:1010E0004002D0924102E0924202F0924302809389
:1010F0004402AC969FAFAC97FE01E559FF4FA8E4C0
:10110000B2E0982F01900D929A95E1F7A4E0CA2ED3
:10111000A5E1DA2EEE24EA94A3E8FA2EC09230027A
:10112000D0923102E0923202F09233028093340284
:10113000A7963FAFA797FE01ED59FF4FA8E3B2E096
:10114000982F01900D929A95E1F7B1E1CB2EB6E47C
:10115000DB2EB2E1EB2EB5E8FB2EC0922002D0923E
:101160002102E0922202F092230280932402FE01E7
:10117000E55AFF4FA8E2B2E0982F01900D929A95A0
:10118000E1F74092100250921102609212027092A6
:10119000130280931402FE01ED5AFF4FA8E1B2E062
:1011A000982F01900D929A95E1F740930002509389
:1011B0000102609302027093030280930402FE0115
:1011C000E55BFF4FA8E0B2E0982F01900D929A9551
:1011D000E1F742E156E462E175E84093F001509393
:1011E000F1016093F2017093F3018093F401FE0129
:1011F000ED5BFF4FA8EFB1E0982F01900D929A950B
:10120000E1F743E156E462E175E84093E001509371
:10121000E1016093E2017093E3018093E401FE0138
:10122000FB96A8EEB1E0982F01900D929A95E1F708
:1012300044E156E462E175E84093D0015093D10156
:101240006093D2017093D3018093D401FE01F39691
:10125000A8EDB1E0982F01900D929A95E1F741E049
:1012600056E16FEF73E84093C0015093C101609362
:10127000C2017093C3018093C401FE01BB96A8EC28
:10128000B1E0982F01900D929A95E1F78092B0010C
:101290009092B101A092B201B092B3018093B401D7
:1012A00095E09DA3FE01B396A8EBB1E0982F0190C5
:1012B0000D929A95E1F740E054E16FEF73E84093A7
:1012C000A0015093A1016093A2017093A3018093A8
:1012D000A401FE017B96A8EAB1E001900D928A95E7
:1012E000E1F7E0918403F09185032083E09180038E
:1012F000F09181031082E0918203F091830380E1F9
:10130000808310928C03E0918803F091890386E03A
:101310008083E0918603F0918703808180618083E0
:10132000E0918603F0918703808188608083E0915B
:101330008603F0918703808180688083E091860333
:10134000F091870380818F7D80830E94620280EC10
:101350000E945B020E94FF016AE070E080E090E082
:101360000E9429028E010F5F1F4F8EE0F80111923B
:101370008A95E9F74EE0B80180E30E9408034EE049
:10138000B80180E40E9408034EE0B80180E50E94A5
:10139000080360E080E60E94F50260E080E70E94BA
:1013A000F50263EA8BE20E94F50244E067E680E61C
:1013B0000E949F0241E067E680E70E949F028CE066
:1013C000E0E7F1E0DE011F9601900D928A95E1F7CA
:1013D0006E01FFE0CF0ED11CF12CE12C18E0B12EF4
:1013E000F601019111916F0180E80E94B802892BEA
:1013F00071F40230110509F4D0C108F052C1011591
:10140000110509F4D0C10130110509F456C180E875
:101410000E94B802892B61F460E08AE20E94F50222
:1014200061EB89E20E94F50265E888E20E94F5021C
:1014300080E00E94B80200E010E080E693E00E94A5
:101440002C0362E370E080E090E00E94290280E5D6
:1014500093E00E942C0362E370E080E090E00E9441
:10146000290280E493E00E942C0362E370E080E0B4
:1014700090E00E94290280E393E00E942C0362E343
:1014800070E080E090E00E94290280E293E00E94F8
:101490002C0362E370E080E090E00E94290280E18A
:1014A00093E00E942C0362E370E080E090E00E94F1
:1014B000290280E093E00E942C0362E370E080E068
:1014C00090E00E94290280EF92E00E942C0362E3E8
:1014D00070E080E090E00E94290280EE92E00E949D
:1014E0002C0362E370E080E090E00E94290280ED2E
:1014F00092E00E942C0362E370E080E090E00E94A2
:10150000290280EC92E00E942C0362E370E080E00C
:1015100090E00E94290280EB92E00E942C0362E39B
:1015200070E080E090E00E94290280EA92E00E9450
:101530002C0362E370E080E090E00E94290280E9E1
:1015400092E00E942C0362E370E080E090E00E9451
:10155000290280E892E00E942C0362E370E080E0C0
:1015600090E00E94290280E792E00E942C0362E34F
:1015700070E080E090E00E94290280E692E00E9404
:101580002C0362E370E080E090E00E94290280E595
:1015900092E00E942C0362E370E080E090E00E9401
:1015A000290280E492E00E942C0362E370E080E074
:1015B00090E00E94290280E392E00E942C0362E303
:1015C00070E080E090E00E94290280E292E00E94B8
:1015D0002C0362E370E080E090E00E94290280E149
:1015E00092E00E942C0362E370E080E090E00E94B1
:1015F000290280E092E00E942C0362E370E080E028
:1016000090E00E94290280EF91E00E942C0362E3A7
:1016100070E080E090E00E94290280EE91E00E945C
:101620002C0362E370E080E090E00E94290280EDEC
:1016300091E00E942C0362E370E080E090E00E9461
:10164000290280EC91E00E942C0362E370E080E0CC
:1016500090E00E94290280EB91E00E942C0362E35B
:1016600070E080E090E00E94290280EA91E00E9410
:101670002C0362E370E080E090E00E94290260EDBC
:1016800077E080E090E00E9429020115110509F43D
:10169000D4CE0E941001882309F4CFCE0E9400000E
:1016A000CCCE0430110509F47CC008F478C00530B4
:1016B000110509F0ACCE88E101C084E0F1E0EF163D
:1016C000F10409F072C0CC51DF4F1882C45ED040E3
:1016D000CD51DF4F1882C35ED040CE51DF4FB8826C
:1016E000C25ED040CF51DF4F1882C15ED04044E08F
:1016F000BE016F517F4F0E9408034FEFE41AF40AB6
:1017000056E0E516F10409F06BCECB51DF4F19829C
:101710001882C55ED04081E090E0C951DF4F9983C7
:101720008883C75ED0408E010B511F4F680164E073
:10173000C60ED11C88E0B82EF801E190F1908F011F
:1017400080E80E94B802892B09F061CECC51DF4FAE
:101750001882C45ED040CD51DF4F1882C35ED040A6
:10176000CE51DF4FB882C25ED040CF51DF4F1882DA
:10177000C15ED040E114F10469F1EA94EF2809F068
:1017800046CE84E244E0BE016F517F4F0E940803C1
:101790000C151D0509F43BCECFCF88E08FCF80E13B
:1017A0008DCF84E18BCF80E089CFCF51DF4F18827E
:1017B000C15ED040CE51DF4F1882C25ED040CC51C6
:1017C000DF4F1882C45ED040CD51DF4F1882C35E18
:1017D000D0408DCF80E2D6CFEE0FFF1F0590F49161
:1017E000E02D0994FB01DC0102C001900D924150F3
:0A17F0005040D8F70895F894FFCF99
:1017FA0000000100020001001E01010000016E50FC
:10180A00000000000000F24327000000000098409A
:10181A00ECDB09D1690B0300037003E80003000342
:10182A00B803CA000101000100010000EEF8AAD3C2
:10183A002C1CDF1F52503133533230410013091828
:10184A000000006A006425FA0000216427F0D753DB
:10185A00293E335B0F94050F8C0A0008006F00665F
:10186A000000010002000300040005003031364088
:10187A004146505156000000004601A600D300938D
:08188A00010401E200F6000078
:00000001FF

The github that I will open source in some time is not related to Chast's code - I don't even have an arduino to upload this to. I've researched the logic analyzer dumps that were sent here and found the correct messages. For now you can try and use this hex file, now that it's free.

Chast, darling, die mad about it.

tak kończą frajerzy - Jan G, 2023

What's the status of github open source version? I really want to see the complete code on only a hex file...

[brightgloaming]

Sorry for the delay with the promised complete writeup but I have a lot of work right now so I can't tell you when I'll be able to finish it.
Chast has already (for some reason) posted the CAN messages needed to run the scooter (and the battery) here, just in a completely unreadable format.

Here are the 29 CAN bus messages, cleaned up:
FORMAT: frame number, message id, number of bytes, message bytes

Code: Select all

1 0x02181606 08  01 00 1E 01 01 00 02 00
2 0x03FF1601 08  6E 50 00 00 00 00 00 00
3 0x03FF1602 08  F2 43 27 00 00 00 00 00
4 0x02FF2602 08  98 40 EC DB 09 D1 69 0B
5 0x05124609 07  03 00 03 70 03 E8 00
6 0x05124609 07  03 00 01 B8 03 CA 00
7 0x02203606 08  01 01 00 01 00 01 00 00
8 0x04FF3400 08  00 00 00 00 00 00 00 00
9 0x05124500 02  01 02
10 0x02FF2602 08  EE F8 AA D3 2C 1C DF 1F
11 0x05124501 02  01 17
12 0x03FF1500 08  00 00 00 CE 00 00 00 00
13 0x03FF1501 08  00 00 00 0D 00 00 00 00
14 0x05124502 08  52 50 31 33 53 32 30 41
15 0x05124503 08  00 13 09 18 00 00 0D 6A
16 0x04FF3502 04  00 6F 00 66
17 0x05124504 01  13
18 0x03FF1502 08  01 00 00 00 00 00 00 00
19 0x03FF1503 08  01 00 00 00 00 00 00 00
20 0x03FF1504 08  00 00 00 13 00 00 00 00
21 0x05124611 08  00 64 25 FA 00 00 21 64
22 0x04FF3400 08  00 00 00 00 00 00 00 00
23 0x02FF2602 08  27 F0 D7 53 29 3E 33 5B
24 0x05124612 08  00 00 00 00 00 00 00 00
25 0x05124613 08  00 00 00 00 00 00 00 00
26 0x05124614 08  0F 94 05 0F 8C 0A 00 08
27 0x03FF1601 08  6E 50 00 00 00 00 00 00
28 0x03FF1602 08  00 00 05 00 00 00 00 00
29 0x03FF1400 08  00 00 00 00 00 00 00 00

For the people asking, the battery in ES400A is definitely communicating via CAN bus. I don't know yet which messages unlock the battery specifically, but you can simply send all of them, the rest will be ignored.
I managed to map out the battery connector (socket, looking down on the battery):

The pinout should be as follows:
1. +V
2. GND
3. Charger input
4. ?
5. ?
6. CAN_L (yellow wire)
7. CAN_H (green wire)
8. ?
9. Enable (blue wire)
When Enable is pulled low, the battery turns it's main voltage on and awaits messages.
That's all you should need to run the battery without a scooter connected, though I haven't had the time to test this out myself. Please reply if it worked for you.

[MikeSnow]

Sorry for the delay with the promised complete writeup but I have a lot of work right now so I can't tell you when I'll be able to finish it.
Chast has already (for some reason) posted the CAN messages needed to run the scooter (and the battery) here, just in a completely unreadable format.

Here are the 29 CAN bus messages, cleaned up:
FORMAT: frame number, message id, number of bytes, message bytes

Code: Select all

1 0x02181606 08  01 00 1E 01 01 00 02 00
2 0x03FF1601 08  6E 50 00 00 00 00 00 00
3 0x03FF1602 08  F2 43 27 00 00 00 00 00
4 0x02FF2602 08  98 40 EC DB 09 D1 69 0B
5 0x05124609 07  03 00 03 70 03 E8 00
6 0x05124609 07  03 00 01 B8 03 CA 00
7 0x02203606 08  01 01 00 01 00 01 00 00
8 0x04FF3400 08  00 00 00 00 00 00 00 00
9 0x05124500 02  01 02
10 0x02FF2602 08  EE F8 AA D3 2C 1C DF 1F
11 0x05124501 02  01 17
12 0x03FF1500 08  00 00 00 CE 00 00 00 00
13 0x03FF1501 08  00 00 00 0D 00 00 00 00
14 0x05124502 08  52 50 31 33 53 32 30 41
15 0x05124503 08  00 13 09 18 00 00 0D 6A
16 0x04FF3502 04  00 6F 00 66
17 0x05124504 01  13
18 0x03FF1502 08  01 00 00 00 00 00 00 00
19 0x03FF1503 08  01 00 00 00 00 00 00 00
20 0x03FF1504 08  00 00 00 13 00 00 00 00
21 0x05124611 08  00 64 25 FA 00 00 21 64
22 0x04FF3400 08  00 00 00 00 00 00 00 00
23 0x02FF2602 08  27 F0 D7 53 29 3E 33 5B
24 0x05124612 08  00 00 00 00 00 00 00 00
25 0x05124613 08  00 00 00 00 00 00 00 00
26 0x05124614 08  0F 94 05 0F 8C 0A 00 08
27 0x03FF1601 08  6E 50 00 00 00 00 00 00
28 0x03FF1602 08  00 00 05 00 00 00 00 00
29 0x03FF1400 08  00 00 00 00 00 00 00 00

For the people asking, the battery in ES400A is definitely communicating via CAN bus. I don't know yet which messages unlock the battery specifically, but you can simply send all of them, the rest will be ignored.
I managed to map out the battery connector (socket, looking down on the battery):

The pinout should be as follows:
1. +V
2. GND
3. Charger input
4. ?
5. ?
6. CAN_L (yellow wire)
7. CAN_H (green wire)
8. ?
9. Enable (blue wire)
When Enable is pulled low, the battery turns it's main voltage on and awaits messages.
That's all you should need to run the battery without a scooter connected, though I haven't had the time to test this out myself. Please reply if it worked for you.

Thanks! Awsome work! Will try to get this working! With this I might be able to get the es400b battery working as well.

[Johnny05]

I like how this topic is still active.
While reading through the whole thread I couldn't find an easy way to remove the Battery from the scooter.
I looked at the patent drawing and it seems hard to get to the lock from behind.

Do you all yank the batteries out, or is there a more elegant method?

[Marius Petz]

Sorry for the delay with the promised complete writeup but I have a lot of work right now so I can't tell you when I'll be able to finish it.
Chast has already (for some reason) posted the CAN messages needed to run the scooter (and the battery) here, just in a completely unreadable format.

Here are the 29 CAN bus messages, cleaned up:
FORMAT: frame number, message id, number of bytes, message bytes

Code: Select all

1 0x02181606 08  01 00 1E 01 01 00 02 00
2 0x03FF1601 08  6E 50 00 00 00 00 00 00
3 0x03FF1602 08  F2 43 27 00 00 00 00 00
4 0x02FF2602 08  98 40 EC DB 09 D1 69 0B
5 0x05124609 07  03 00 03 70 03 E8 00
6 0x05124609 07  03 00 01 B8 03 CA 00
7 0x02203606 08  01 01 00 01 00 01 00 00
8 0x04FF3400 08  00 00 00 00 00 00 00 00
9 0x05124500 02  01 02
10 0x02FF2602 08  EE F8 AA D3 2C 1C DF 1F
11 0x05124501 02  01 17
12 0x03FF1500 08  00 00 00 CE 00 00 00 00
13 0x03FF1501 08  00 00 00 0D 00 00 00 00
14 0x05124502 08  52 50 31 33 53 32 30 41
15 0x05124503 08  00 13 09 18 00 00 0D 6A
16 0x04FF3502 04  00 6F 00 66
17 0x05124504 01  13
18 0x03FF1502 08  01 00 00 00 00 00 00 00
19 0x03FF1503 08  01 00 00 00 00 00 00 00
20 0x03FF1504 08  00 00 00 13 00 00 00 00
21 0x05124611 08  00 64 25 FA 00 00 21 64
22 0x04FF3400 08  00 00 00 00 00 00 00 00
23 0x02FF2602 08  27 F0 D7 53 29 3E 33 5B
24 0x05124612 08  00 00 00 00 00 00 00 00
25 0x05124613 08  00 00 00 00 00 00 00 00
26 0x05124614 08  0F 94 05 0F 8C 0A 00 08
27 0x03FF1601 08  6E 50 00 00 00 00 00 00
28 0x03FF1602 08  00 00 05 00 00 00 00 00
29 0x03FF1400 08  00 00 00 00 00 00 00 00

For the people asking, the battery in ES400A is definitely communicating via CAN bus. I don't know yet which messages unlock the battery specifically, but you can simply send all of them, the rest will be ignored.
I managed to map out the battery connector (socket, looking down on the battery):

The pinout should be as follows:
1. +V
2. GND
3. Charger input
4. ?
5. ?
6. CAN_L (yellow wire)
7. CAN_H (green wire)
8. ?
9. Enable (blue wire)
When Enable is pulled low, the battery turns it's main voltage on and awaits messages.
That's all you should need to run the battery without a scooter connected, though I haven't had the time to test this out myself. Please reply if it worked for you.

Pin 8 & Pin 5 is used for charging. The original Charging adapter for the ES400 contains only the Pin 1, Pin 5 & Pin 8. All other Pins are not present on the original charger.

[MikeSnow]

I have tried to send CAN messages to the battery but the interface is not working. I measured the CAN levels and its not correct voltage. Either CAN interface is broken on my battery or something else is wrong. How did you come to the conclusion its CAN_L and CAN_H on those pins? I tried all different speeds, 125, 250, 500 and 1000kbit/s and tried switching CAN_L and CAN_H without success.

If I measure the pins and press the button to get charge status I get strange signals on the pins, not data but just repeating voltage spikes with constant period and duty cycle, not even close to how CAN should look.

[Cheap_Skate]

I have tried to send CAN messages to the battery but the interface is not working. I measured the CAN levels and its not correct voltage. Either CAN interface is broken on my battery or something else is wrong. How did you come to the conclusion its CAN_L and CAN_H on those pins? I tried all different speeds, 125, 250, 500 and 1000kbit/s and tried switching CAN_L and CAN_H without success.

If I measure the pins and press the button to get charge status I get strange signals on the pins, not data but just repeating voltage spikes with constant period and duty cycle, not even close to how CAN should look.

Have you short P1+/P2+ ?
Only then the BMS becomes active