Ninebot KickScooter Max
| Property |
Value |
| Model |
scooter |
| Hardware ID |
36 (0x24) |
| Server ID |
54 |
| Commands |
68 |
| Default timeout |
1000 ms |
| Default retry |
5 |
Default command types
| Type |
Value |
cmd_read |
1 (0x01) |
cmd_readACK |
4 (0x04) |
cmd_write |
2 (0x02) |
cmd_writeACK |
5 (0x05) |
cmd_writeNR |
3 (0x03) |
Command reference
System commands
| Name |
Cmd |
Index |
Ops |
Data |
Description |
iapBegin |
7 (0x07) |
0 |
cmd 7 |
— |
|
iapWrite |
8 (0x08) |
0 |
cmd 8 |
— |
|
iapCRC |
9 (0x09) |
0 |
cmd 9 |
— |
|
firmwareReset |
10 (0x0A) |
0 |
cmd 10 |
0B |
resp idx: 0 |
bms
| Name |
Index |
Ops |
Data |
Resp Index |
rMaxPower |
63 (0x3F) |
read |
2B |
63 |
setMaxPower |
63 (0x3F) |
write |
— |
— |
rBmsSn |
16 (0x10) |
read |
14B |
16 |
rBatterySN |
16 (0x10) |
read |
14B |
— |
rBatteryInfo |
49 (0x31) |
read |
10B |
— |
rVerDC |
23 (0x17) |
read |
4B |
— |
rBmsDate |
32 (0x20) |
read |
2B |
— |
rBmsInfoLowFrequence |
16 (0x10) |
read |
0x12 |
— |
rBmsInfoLowFrequence2 |
27 (0x1B) |
read |
4B |
— |
rBmsInfoHighFrequence |
49 (0x31) |
read |
8B |
— |
rBmsTemp |
53 (0x35) |
read |
2B |
— |
rBmsCellVol |
64 (0x40) |
read |
0x14 |
— |
rBMSCur |
51 (0x33) |
read |
2B |
— |
rBMSVolt |
52 (0x34) |
read |
2B |
— |
rBmsMoreInfo |
139 (0x8B) |
read |
2B |
139 |
rBmsRemainCapacity |
138 (0x8A) |
read |
2B |
138 |
rBmsManufactureDate |
32 (0x20) |
read |
2B |
32 |
rBmsEnergyThroughput |
128 (0x80) |
read |
4B |
128 |
rBmsCapacityThroughput |
130 (0x82) |
read |
4B |
130 |
rBmsCycleCount |
27 (0x1B) |
read |
2B |
27 |
rBmsDeepDischargeCount |
133 (0x85) |
read |
2B |
133 |
rBmsExtremeUseTime |
136 (0x88) |
read |
4B |
136 |
rBmsExtremeChargeTime |
134 (0x86) |
read |
4B |
134 |
ctrl
| Name |
Index |
Ops |
Data |
Resp Index |
rBool |
178 (0xB2) |
read |
2B |
178 |
active |
0 |
cmd 87 (0x57) |
— |
— |
rActDate |
105 (0x69) |
read |
2B |
105 |
rFunBool |
125 (0x7D) |
read |
2B |
125 |
setFunBool |
125 (0x7D) |
writeNR |
— |
— |
setCruice |
124 (0x7C) |
writeNR |
1B |
124 |
readCruice |
124 (0x7C) |
read |
2B |
124 |
setDecMode |
123 (0x7B) |
writeNR |
2B |
123 |
readDecMode |
123 (0x7B) |
read |
2B |
123 |
lock |
112 (0x70) |
writeNR |
1B |
112 |
unlock |
113 (0x71) |
writeNR |
1B |
113 |
rLeftMileage |
37 (0x25) |
read |
2B |
37 |
rBattery |
180 (0xB4) |
read |
2B |
180 |
rSN |
16 (0x10) |
read |
14B |
16 |
rMileage |
183 (0xB7) |
read |
4B |
183 |
rBodyTemp |
62 (0x3E) |
read |
2B |
— |
rCtrlV |
26 (0x1A) |
read |
2B |
— |
rBmsV |
103 (0x67) |
read |
2B |
— |
rBleV |
104 (0x68) |
read |
2B |
— |
rEbsStrength |
115 (0x73) |
read |
2B |
— |
wEbsStrength |
115 (0x73) |
writeNR |
— |
— |
rStartSpeed |
127 (0x7F) |
read |
2B |
— |
wStartSpeed |
127 (0x7F) |
writeNR |
— |
— |
rPedestrianMode |
119 (0x77) |
read |
2B |
— |
wPedestrianMode |
119 (0x77) |
writeNR |
— |
— |
setHCali |
122 (0x7A) |
writeNR |
1B |
— |
rCPUId |
218 (0xDA) |
read |
12B |
218 |
rSpeed |
181 (0xB5) |
read |
2B |
— |
setBleName |
— |
cmd 80 (0x50) |
— |
— |
turnOff |
121 (0x79) |
writeNR |
1B |
— |
rBlePwd |
23 (0x17) |
read |
6B |
23 |
setBlePwdEncrypt |
23 (0x17) |
writeNR |
2B |
23 |
rErrorCode |
176 (0xB0) |
read |
2B |
— |
rWarnCode |
190 (0xBE) |
read |
2B |
— |
rRand |
228 (0xE4) |
read |
6B |
228 |
rFlag |
231 (0xE7) |
read |
2B |
231 |
rSingleMileage |
185 (0xB9) |
read |
2B |
— |
rRunningTime |
186 (0xBA) |
read |
2B |
— |
rFunDisplayBool |
35 (0x23) |
read |
2B |
35 |
setMaxSpeed |
144 (0x90) |
writeNR |
— |
144 |
rEncryptionFlag |
145 (0x91) |
read |
2B |
145 |