Ninebot S-Max
| Property |
Value |
| Model |
balance |
| Hardware ID |
26 (0x1A) |
| Server ID |
351 |
| Commands |
92 |
| Default timeout |
1000 ms |
| Default retry |
5 |
Default command types
| Type |
Value |
cmd_read |
1 (0x01) |
cmd_readACK |
4 (0x04) |
cmd_write |
2 (0x02) |
cmd_writeACK |
5 (0x05) |
cmd_writeNR |
3 (0x03) |
Command reference
System commands
| Name |
Cmd |
Index |
Ops |
Data |
Description |
iapBegin |
7 (0x07) |
0 |
cmd 7 |
— |
|
iapWrite |
8 (0x08) |
0 |
cmd 8 |
— |
|
iapCRC |
9 (0x09) |
0 |
cmd 9 |
— |
|
firmwareReset |
10 (0x0A) |
0 |
cmd 10 |
0B |
resp idx: 0 |
ahrs
| Name |
Index |
Ops |
Data |
Resp Index |
rAHRSBox |
16384 (0x4000) |
cmd 5 (0x05) |
4B |
16384 |
bms
| Name |
Index |
Ops |
Data |
Resp Index |
rBmsSn |
16 (0x10) |
read |
14B |
16 |
rBatteryInfo |
49 (0x31) |
read |
10B |
— |
rBatterySN |
16 (0x10) |
read |
14B |
— |
rVerDC |
23 (0x17) |
read |
4B |
— |
rBmsDate |
32 (0x20) |
read |
2B |
— |
rBmsInfoLowFrequence |
16 (0x10) |
read |
0x12 |
— |
rBmsInfoLowFrequence2 |
27 (0x1B) |
read |
4B |
— |
rBmsInfoHighFrequence |
49 (0x31) |
read |
8B |
— |
rBmsCellVol |
64 (0x40) |
read |
0x1E |
— |
rBmsTemp |
53 (0x35) |
read |
2B |
— |
rBmsDate |
32 (0x20) |
read |
2B |
— |
rBmsInfoLowFrequence |
16 (0x10) |
read |
0x12 |
— |
rBmsInfoLowFrequence2 |
27 (0x1B) |
read |
4B |
— |
rBmsInfoHighFrequence |
49 (0x31) |
read |
8B |
— |
rBmsCellVol |
64 (0x40) |
read |
0x1E |
— |
rBmsTemp |
53 (0x35) |
read |
2B |
— |
ctrl
| Name |
Index |
Ops |
Data |
Resp Index |
rActDate |
105 (0x69) |
read |
2B |
105 |
rBattery |
34 (0x22) |
read |
2B |
34 |
rLeftMileage |
37 (0x25) |
read |
2B |
37 |
rSteerSensitivity |
161 (0xA1) |
read |
2B |
161 |
setSteerSensitivity |
161 (0xA1) |
writeNR |
— |
— |
rRidingSensitivity |
162 (0xA2) |
read |
2B |
162 |
setRidingSensitivity |
162 (0xA2) |
writeNR |
— |
— |
rIdleModeBlancePoint |
163 (0xA3) |
read |
2B |
163 |
setIdleModeBlancePoint |
163 (0xA3) |
writeNR |
— |
— |
active |
0 |
cmd 87 (0x57) |
— |
— |
rCPUId |
218 (0xDA) |
read |
12B |
218 |
rCPUIdA |
218 (0xDA) |
read |
2B |
218 |
rFunBool |
211 (0xD3) |
read |
2B |
211 |
setFunBool |
211 (0xD3) |
writeNR |
— |
— |
rMode |
224 (0xE0) |
read |
2B |
224 |
setMode |
224 (0xE0) |
writeNR |
— |
— |
rBool |
178 (0xB2) |
read |
2B |
178 |
rControlMode |
83 (0x53) |
read |
2B |
83 |
setControlMode |
83 (0x53) |
writeNR |
— |
— |
rAssistMode |
84 (0x54) |
read |
2B |
84 |
setAssistMode |
84 (0x54) |
writeNR |
— |
84 |
rFunBool2 |
209 (0xD1) |
read |
2B |
209 |
rCtrlV |
26 (0x1A) |
read |
2B |
26 |
rBleV |
104 (0x68) |
read |
2B |
104 |
rBmsV |
103 (0x67) |
read |
2B |
103 |
rBodyTemp |
62 (0x3E) |
read |
2B |
62 |
rSN |
16 (0x10) |
read |
14B |
16 |
setBlePwdEncrypt |
23 (0x17) |
writeNR |
2B |
23 |
rBlePwd |
23 (0x17) |
read |
6B |
23 |
resetData |
155 (0x9B) |
writeNR |
1B |
— |
turnOff |
121 (0x79) |
writeNR |
1B |
— |
lock |
112 (0x70) |
writeNR |
1B |
112 |
unlock |
113 (0x71) |
writeNR |
1B |
113 |
rMileage |
183 (0xB7) |
read |
4B |
— |
rCtrlBox |
16384 (0x4000) |
cmd 5 (0x05) |
4B |
16384 |
setLedModel |
198 (0xC6) |
writeNR |
— |
198 |
readLedModel |
198 (0xC6) |
read |
2B |
198 |
setLedColor1 |
200 (0xC8) |
writeNR |
— |
200 |
rLedColor1 |
200 (0xC8) |
read |
2B |
200 |
setLedColor2 |
202 (0xCA) |
writeNR |
— |
202 |
rLedColor2 |
202 (0xCA) |
read |
2B |
202 |
setLedColor3 |
204 (0xCC) |
writeNR |
— |
204 |
rLedColor3 |
204 (0xCC) |
read |
2B |
204 |
setLedColor4 |
206 (0xCE) |
writeNR |
— |
206 |
rLedColor4 |
206 (0xCE) |
read |
2B |
206 |
setBleName |
— |
cmd 80 (0x50) |
— |
— |
rLimitModeSpeed |
116 (0x74) |
read |
2B |
116 |
setLimitSpeed |
116 (0x74) |
writeNR |
2B |
116 |
setSpeedMode |
114 (0x72) |
writeNR |
— |
114 |
rHighestSpeed |
188 (0xBC) |
read |
2B |
188 |
rTeachStep |
166 (0xA6) |
read |
2B |
— |
setTeachStep |
166 (0xA6) |
writeNR |
— |
— |
rTeachSpeed |
38 (0x26) |
read |
6B |
— |
rLeftAngle |
167 (0xA7) |
read |
2B |
— |
rRightAngle |
168 (0xA8) |
read |
2B |
— |
rMileage |
183 (0xB7) |
read |
4B |
— |
enableRemoteControl |
122 (0x7A) |
writeNR |
1B |
122 |
setRemoteSpeed |
123 (0x7B) |
writeNR |
2B |
123 |
rRemoteInfo |
178 (0xB2) |
read |
8B |
178 |
rSpeed |
181 (0xB5) |
read |
2B |
— |
rMaxRemoteSpeed |
125 (0x7D) |
read |
2B |
— |
setMaxRemoteSpeed |
125 (0x7D) |
writeNR |
2B |
125 |
rErrorCode |
176 (0xB0) |
read |
2B |
— |
rWarnCode |
190 (0xBE) |
read |
2B |
— |
rSysCur |
80 (0x50) |
read |
2B |
— |
rDrvVolt |
71 (0x47) |
read |
2B |
— |
rSingleMileage |
185 (0xB9) |
read |
2B |
— |
rRunningTime |
186 (0xBA) |
read |
2B |
— |
rSigMaxSpeed |
191 (0xBF) |
read |
2B |
— |
rAveSpeed |
182 (0xB6) |
read |
2B |
— |
driver
| Name |
Index |
Ops |
Data |
Resp Index |
rDriverBox |
16384 (0x4000) |
cmd 5 (0x05) |
4B |
16384 |