[Jnsystems]

so controller on way from aliexpress and in the meantime i can install a new bms.... but just a couple questions:
- did i need to order a new throttle or is the lime one compatible?
- and whats the best way to rewire the battery release?

I tried using the lime throttle, but looks like it's compatible, I might have a controller issue on my end, gotta confirm with bird v3 throttle, or take apart the lime throttle and solder my own wires. Maybe I gotta re-order another controller since mines looks like it is defective.
For the battery release, I don't have a way to rewire the battery release because my way of getting it out is the grinder method, therefore every time I release the battery I just push the manual tab on the bottom of the scooter up.

[Jevako030]

Ali Express
€ 24,09 21%OFF | Jrahk Ebike Controller 36V 48V 350W-400W 3 ‑Mode Elektrische Scooter Controller Fiets Onderdelen voor Elektrische Fiets Motor
https://a.aliexpress.com/_EzzjEnD

so controller on way from santa aka aliepress and in the meantime i can install a new bms.... but just a couply questions:

- did i need to order a new throttle or is the lime one compatible?

You can simply use the throttle of the Lime. 3 wires plus (red) minus (black) and return 5 volts. You can connect this to the controller,

I opened the release motor and wired it directly to 5 volts. An up-down switch was added that reversed the plus and minus, so say open and closed.
I installed this in the hole I made to remove the battery.

The 5 volts come through a USB connection that I fed through a phone charger so they can't just take it out.

This only works if your unlocking motor still works, otherwise you have to do it with a cable that is also described on the forum


https://nl.aliexpress.com/item/40000742 ... pt=glo2nld

Succes.

Regards, Jerry.

[nz_rackalhahn]

thanks again guys and wishing everyone a safe and happy xmas and new year

[Jevako030]

thanks again guys and wishing everyone a safe and happy xmas and new year

Thanks , you also

[zavorka]

I haven’t been checking this thread for past few months, so please excuse me if this is old news here already.

I’ve extracted and analyzed firmware of the battery lock. Here’s the useful bits of what I was able to figure out:
- a command consists of: preamble (2 bytes, 0x46 [F], 0x4c [L]), function (2 bytes), data length (2 bytes, big endian), data, and CRC-16/XMODEM checksum
- function for operating the lock is 0x16 0x10
- it accepts 3 values: 0xf0 shuts the bolt closed, 0xf1 leaves the bolt spring-loaded, 0xf4 holds the bolt in unlocked position

Thus you can control the lock with these 3 messages (sent over 9600bps 8n1 uart on the yellow wire):

Code: Select all

46 4c 16 10 00 01 f0 13 6c

Code: Select all

46 4c 16 10 00 01 f1 03 4d

Code: Select all

46 4c 16 10 00 01 f4 53 e8

Also, I’ve learned how to activate the scooter itself via its CAN bus (using only STM32F103 and a CAN transceiver) and ride it freely like we were used to with ES200G. However, there remain some intricacies which I’m yet to crack, so I’m hesitant to do a write up on it until I understand what’s actually going on there.

-------

EDIT 2/3/2023: I messed up and got the 2 bytes of function code swapped. The correct order is 0x16 0x10 (or 0x1016 in little endian)

[Scootermansussex]

Come on buddy please share your findings that's how we all learn and I am struggling

[Jevako030]

I haven’t been checking this thread for past few months, so please excuse me if this is old news here already.

I’ve extracted and analyzed firmware of the battery lock. Here’s the useful bits of what I was able to figure out:
- a command consists of: preamble (2 bytes, 0x46 [F], 0x4c [L]), function (2 bytes), data length (2 bytes, big endian), data, and CRC-16/XMODEM checksum
- function for operating the lock is 0x16 0x10
- it accepts 3 values: 0xf0 shuts the bolt closed, 0xf1 leaves the bolt spring-loaded, 0xf4 holds the bolt in unlocked position

Thus you can control the lock with these 3 messages (sent over 9600bps 8n1 uart on the yellow wire):

Code: Select all

46 4c 16 10 00 01 f0 13 6c

Code: Select all

46 4c 16 10 00 01 f1 03 4d

Code: Select all

46 4c 16 10 00 01 f4 53 e8

Also, I’ve learned how to activate the scooter itself via its CAN bus (using only STM32F103 and a CAN transceiver) and ride it freely like we were used to with ES200G. However, there remain some intricacies which I’m yet to crack, so I’m hesitant to do a write up on it until I understand what’s actually going on there.

-------

EDIT 2/3/2023: I messed up and got the 2 bytes of function code swapped. The correct order is 0x16 0x10 (or 0x1016 in little endian)

I haven’t been checking this thread for past few months, so please excuse me if this is old news here already.

I’ve extracted and analyzed firmware of the battery lock. Here’s the useful bits of what I was able to figure out:
- a command consists of: preamble (2 bytes, 0x46 [F], 0x4c [L]), function (2 bytes), data length (2 bytes, big endian), data, and CRC-16/XMODEM checksum
- function for operating the lock is 0x16 0x10
- it accepts 3 values: 0xf0 shuts the bolt closed, 0xf1 leaves the bolt spring-loaded, 0xf4 holds the bolt in unlocked position

Thus you can control the lock with these 3 messages (sent over 9600bps 8n1 uart on the yellow wire):

Code: Select all

46 4c 16 10 00 01 f0 13 6c

Code: Select all

46 4c 16 10 00 01 f1 03 4d

Code: Select all

46 4c 16 10 00 01 f4 53 e8

Also, I’ve learned how to activate the scooter itself via its CAN bus (using only STM32F103 and a CAN transceiver) and ride it freely like we were used to with ES200G. However, there remain some intricacies which I’m yet to crack, so I’m hesitant to do a write up on it until I understand what’s actually going on there.

-------

EDIT 2/3/2023: I messed up and got the 2 bytes of function code swapped. The correct order is 0x16 0x10 (or 0x1016 in little endian)

Hi Hi,
Thanks for this information, very interesting to be able to control it via Canbus, but I don't quite understand what you are connecting this to and with some {separate canbus controller} and on which {motor controller or that thing under the front lamp}
The battery lock connects this to the cable in the handlebars and with what exactly?
Regards, Jerry.

[Jevako030]

my man, thank you much

And work it good ?

[Jevako030]

I have now connected that 48 or 52 volt battery and can now drive almost 55 km per hour but limit it to 35 km

[Jevako030]

That new big battery, I think it's a 14s, everything points to this.
When I start counting, do I always end up with blocks of 12 and not 14? Who knows more about this?