An Electric Scooter Community on a Mission to Stamp out Transportation Mediocrity.

Covers electric scooter models whether shared or for consumers.
#17260
Chuchin wrote:
Sun Sep 15, 2019 6:13 am
tokala wrote:
Sun Mar 31, 2019 2:15 am
Hello everyone

I thought I would share what I’ve found on the Lime GPS/Cellular module so far. I was given two Lime front green boxes to play with.

The green box contains two boards, the larger board contains the main processor, Bluetooth module, GPS module and voltage regulators. The smaller board looks like it is simply a voltage regulator, dropping the battery voltage down to 5V.

The main chip on the SLT181 board is a MeiG Smart SLM750 LTE (cellular) chip with UART (Serial), USB 2.0, Bluetooth HCI and I2C interfaces. The CPU is a Qualcomm ARMv7 and is running a Linux 3.18 Ubuntu kernel.

[ 0.000000] Booting Linux on physical CPU 0x0
[ 0.000000] Initializing cgroup subsys cpu
[ 0.000000] Initializing cgroup subsys cpuacct
[ 0.000000] Linux version 3.18.20 (xiaoqinqin@ubuntu-241) (gcc version 4.9.2 (GCC) ) #1 PREEMPT Thu Aug 16 17:16:19 CST 2018
[ 0.000000] CPU: ARMv7 Processor [410fc075] revision 5 (ARMv7), cr=10c53c7d
[ 0.000000] CPU: PIPT / VIPT nonaliasing data cache, VIPT aliasing instruction cache
[ 0.000000] Machine model: Qualcomm Technologies, Inc. MDM 9607 MTP
[ 0.000000] Early serial console at I/O port 0x0 (options '')
[ 0.000000] bootconsole [uart0] enabled
[ 0.000000] Memory: 148036K/257024K available (8204K kernel code, 1096K rwdata, 3668K rodata, 348K init, 1156K bss, 108988K reserved)

The board also contains a SIM card on the bottom. The SIM is from Twilio who offer a “super sim” which can be used internationally to send data via SMS or Mobile data.

https://www.twilio.com/wireless/super-sim

I powered the board with a USB to Serial converter connected to the serial pins of the plug. I have included the pinouts that I know so far.
The issue I have is that the chip boots until I get “Error code 303e at boot_flash_dev_nand.c Line 571”
The chip has NAND flash on board so I’m not sure if the error is referring to the on-chip NAND or if it is trying to contact storage elsewhere on the same or another board?

If I drop the Serial TX to earth for 2 seconds at boot, I can put the SLM750 into a programming mode and get an almost full boot. If I earth out Serial TX for 5 second-ish, I get a different boot sequence but both end with a kernel panic and a reboot back to the error code 303e.

The links below are to Pastebin showing the default boot, the 2 second earth and the 5 second earth.

Default boot: https://pastebin.com/PiV3xiGS
2 second earth: https://pastebin.com/eCA5VPx8
5-ish second earth: https://pastebin.com/ed85ceeQ

This is the pinouts of the main plug on the main board.
Image

If anyone has anything to help me get the chip to fully boot I would like to hear from you.

Hello, i have a full boot.
https://pastebin.com/bG110UCt
Could you share how you managed to get a full boot?
#17330
wurecec wrote:
Sun Nov 10, 2019 9:56 pm
Chuchin wrote:
Sun Sep 15, 2019 6:13 am
tokala wrote:
Sun Mar 31, 2019 2:15 am
Hello everyone

I thought I would share what I’ve found on the Lime GPS/Cellular module so far. I was given two Lime front green boxes to play with.

The green box contains two boards, the larger board contains the main processor, Bluetooth module, GPS module and voltage regulators. The smaller board looks like it is simply a voltage regulator, dropping the battery voltage down to 5V.

The main chip on the SLT181 board is a MeiG Smart SLM750 LTE (cellular) chip with UART (Serial), USB 2.0, Bluetooth HCI and I2C interfaces. The CPU is a Qualcomm ARMv7 and is running a Linux 3.18 Ubuntu kernel.

[ 0.000000] Booting Linux on physical CPU 0x0
[ 0.000000] Initializing cgroup subsys cpu
[ 0.000000] Initializing cgroup subsys cpuacct
[ 0.000000] Linux version 3.18.20 (xiaoqinqin@ubuntu-241) (gcc version 4.9.2 (GCC) ) #1 PREEMPT Thu Aug 16 17:16:19 CST 2018
[ 0.000000] CPU: ARMv7 Processor [410fc075] revision 5 (ARMv7), cr=10c53c7d
[ 0.000000] CPU: PIPT / VIPT nonaliasing data cache, VIPT aliasing instruction cache
[ 0.000000] Machine model: Qualcomm Technologies, Inc. MDM 9607 MTP
[ 0.000000] Early serial console at I/O port 0x0 (options '')
[ 0.000000] bootconsole [uart0] enabled
[ 0.000000] Memory: 148036K/257024K available (8204K kernel code, 1096K rwdata, 3668K rodata, 348K init, 1156K bss, 108988K reserved)

The board also contains a SIM card on the bottom. The SIM is from Twilio who offer a “super sim” which can be used internationally to send data via SMS or Mobile data.

https://www.twilio.com/wireless/super-sim

I powered the board with a USB to Serial converter connected to the serial pins of the plug. I have included the pinouts that I know so far.
The issue I have is that the chip boots until I get “Error code 303e at boot_flash_dev_nand.c Line 571”
The chip has NAND flash on board so I’m not sure if the error is referring to the on-chip NAND or if it is trying to contact storage elsewhere on the same or another board?

If I drop the Serial TX to earth for 2 seconds at boot, I can put the SLM750 into a programming mode and get an almost full boot. If I earth out Serial TX for 5 second-ish, I get a different boot sequence but both end with a kernel panic and a reboot back to the error code 303e.

The links below are to Pastebin showing the default boot, the 2 second earth and the 5 second earth.

Default boot: https://pastebin.com/PiV3xiGS
2 second earth: https://pastebin.com/eCA5VPx8
5-ish second earth: https://pastebin.com/ed85ceeQ

This is the pinouts of the main plug on the main board.
Image

If anyone has anything to help me get the chip to fully boot I would like to hear from you.

Hello, i have a full boot.
https://pastebin.com/bG110UCt
Could you share how you managed to get a full boot?
As far as I know there are two ways:
1. As written in service manual with magnet, but then you have to have a working SIM, which would mean you have a stolen (not decomissioned) scooter.
2. Other way is to enter "Debug" mode, which is enabled when certain "load" is present on UART lines. I cant remember which one, but either CH340 or CP2102 adapter was recognized as a debug probe.
#17390
ZipperZ wrote:
Wed Nov 13, 2019 1:55 am
wurecec wrote:
Sun Nov 10, 2019 9:56 pm
Chuchin wrote:
Sun Sep 15, 2019 6:13 am



Hello, i have a full boot.
https://pastebin.com/bG110UCt
Could you share how you managed to get a full boot?
As far as I know there are two ways:
1. As written in service manual with magnet, but then you have to have a working SIM, which would mean you have a stolen (not decomissioned) scooter.
2. Other way is to enter "Debug" mode, which is enabled when certain "load" is present on UART lines. I cant remember which one, but either CH340 or CP2102 adapter was recognized as a debug probe.
1) Any link to the service manual, decommissioned unit but still interested in how that would work.
2) Also any link here would be great, I have UART but I get the same error as the other's have pastebin'd
#17395
wurecec wrote:
Thu Nov 14, 2019 9:27 pm
ZipperZ wrote:
Wed Nov 13, 2019 1:55 am
wurecec wrote:
Sun Nov 10, 2019 9:56 pm


Could you share how you managed to get a full boot?
As far as I know there are two ways:
1. As written in service manual with magnet, but then you have to have a working SIM, which would mean you have a stolen (not decomissioned) scooter.
2. Other way is to enter "Debug" mode, which is enabled when certain "load" is present on UART lines. I cant remember which one, but either CH340 or CP2102 adapter was recognized as a debug probe.
1) Any link to the service manual, decommissioned unit but still interested in how that would work.
2) Also any link here would be great, I have UART but I get the same error as the other's have pastebin'd
1) I was able to find that using "Google", it took some time, but it is somewhere out there.
2) Everything that you need is here. Take both ICs based adapters and test with each. If the HW is the same it should work the same. (I guess it is different pull-up/pull-down current that triggers "debug mode")
#17503
Zik wrote:
Tue Dec 11, 2018 6:56 am
ZombieScoots wrote:
Mon Dec 10, 2018 7:26 am
Looks like the ES4 has some new way of wiring that doesn’t fit the motherboard you purchased. So it definitely won’t be plug and play. But I’m sure a new clip can be added
Yes in deed, I did found an abandoned Lime, looks like a ES2, don't have a external battery just a GPS module in front and this is the motherboard that I found.

Image

1. Charging port
2. This is connected through the tube to the lower part of the scooter
3. Dashboard connection
4. Connection to battery
5. Goes down through the tube to the lower part of scooter passing by a long rail just in front of battery.
6. To battery
7. That cable was unplugged. I assume to connect directly to a kind of programing interface.
8. That cable goes to GPS module, I assume one of them brings the signal to the motherboard to turn on the scooter.

Image
Userhost wrote:Anyone know how to open the plastic, rectangular Bird head unit non-destructively? I don't want to break anything, but I'm interested in seeing how these things work. The non-destructive part is important because I want to return this Bird to service once I'm done studying it.
And this is the GPS module

Just opened
Image

As you can see the circuit on the left holds the SIM card
Image

Connection description
Image

Pink arrow cable comes from motherboard.

Yellow cable it's the connection between that circuit and the big circuit to the left that holds the SIM card. I assume the white or the orange cable says to other circuit turn on the scooter.

The red arrow cable it's unplugged cable that I found in the back of module. I assume for programing.

So now I ask.

There's any way to replace the motherboard of this model? It's very different than the original one.

Or just run a jumper wires from one side to the other two complete connectivity and omit the SIM card entirely?
Zombiescoots please let me know what happened with the Segway nunebot es2 I believe it is you have the EXACT MODEL I have and the same circuit board that I either need to replace or "jump" I'm heading in the direction of buying a FACTORY OEM DASHBOARD AND a circuit board on eBay and then hopefully from what I have learned flashing it and updatingcthe firmware via the Segway nunebot app.?? If this is the case or any further details please let me know I really LOVE this Scooter and have grown attached to it plus if I understand correctly with the external battery I can get to approx. 19.6. Mph and have a range that's almost double of stock pushing I think like 36 miles. Plus can get a bigger amperage charger making charge time shorter or probably same actually if I think about it please let me know 727-261-3543
#17519
Hi all, new user here from NZ.
Image
Image
This is what the inside of the green box looks like here...
[https://usermanual.wiki/MeiG-Smart-Tech ... LM750/info] is the link for the download for the SLM750 module, although it doesn't appear to tell you much. I'm still playing around with it, and am grateful for any help, assistance and advice from my fellow posters.
I just wanna get this b*tch to run...
The sim card installed in this case appears to be of Chinese origin... dunno how it works here in New Zealand unless its roaming?
  • 1
  • 117
  • 118
  • 119
  • 120
  • 121
  • 136

As this was a rental version whos overstock was […]

Any one got any info on beryl bikes I seen a few[…]

LH/ TF-100 Style Display.

Hi I recently converted a Bird Zero to a personal […]

How do you operate dash without button? I have[…]