- Tue Sep 29, 2020 6:21 am
#25481
UNLOCK GUIDE (Still needs some work, ECU Shuts down after 2 Minutes of driving with E28):
Hook up an arduino and an MCP2515 Interface. Remove the IOT From the scooter, but keep the wires in the handle, Out of the IOT come two cables, one goes to the electric battery lock, the other one to the display/Light unit in the handle, later which controls the ECU. The 5 wire Cable is the one we need. Connect the blue wire to black (ground). This enables CAN BUS recieving of the ECU. Be aware that the battery voltage is on the red wire, so shorting the red wire out will damage the scooter permanently. Connect the Yellow Wire to CAN_LOW and Green wire to CAN_HIGH of the MCP2515. The Jumper on the board has to be set. Now Download the CAN Dumps of an Scooter unlocking Rick posted in the start of the thread. Download the software of the Logic Analyzer he used. Open the biggest file in Ricks Archive. In the software there is an option to export the CANBUS Data as CSV. Do that. Now you'll need some programming skills since i can't provide my scripts due to a bad hard drive and my non-existant backup solution. Write some Arduino Code that Interfaces with the MCP2515 and just dumps the first half of the CAN Frames from the CSV file into the Scooter CAN. Somwhere in there are probably the necessary commands to unlock the scooter. Compile, Upload. Connect the Arduino to the Scooter. Connect the Arduino to 12V y voilá!
To-Do is now to find the keep-alive commands in the CAN Data. After two Minutes the ECU Shuts down and displays "E28" in the Display. It puts the Motor under voltage so you can't move it anymore. Disconnect the Black and Blue wire, this will shut down the ECU. Connect them again and re-do the CAN dumping, and repeat after two minutes....