Firmware V1. 31

[Melotron]

Is there any way to change the speed on firmware v1.31. I updated the firmware by mistake.

Even with a gps hack so are the scooter locked to 20km/h.

[BenjaminSoelberg]

I'm working on it, but it is quite difficult as I do not have a scooter to test it on. But you can become a beta tester if you would like.

[BenjaminSoelberg]

In fact I really could use a few beta testers

[bmbdk]

Hi As I can see from ealier conversations, you live in Copenhagen? I can get you access to a physical scooter there. However, I live in another part of Denmark and do have some background knowledge that might be helpful for testing.

[BenjaminSoelberg]

That is true. I'm not sure if I understood: Would you be able to give me physical access to a scooter with firmware 1.31 on it ?

[Melotron]

Sure. I can be a beta tester. What would you want me to do?

[Melotron]

I think the speed lock are in the firmware. Ive set the location to Finland on my GPS and the max speed are showing as 25km/h in the app, but the scooter won't go faster then 20km/h.

I can take a few screenshots on it later today.

[BenjaminSoelberg]

@Melotron I suspect that you are right. But I'll give it a go anyway.

[BenjaminSoelberg]

Try this version, please note that it is completely untested. I have tried to port the fixes from the old version but in the end it seems like the bluetooth communication was unchanged. https://github.com/BenjaminSoelberg/wilfa-e-way-electric-scooter-hack/raw/main/EWay_Scooter_v1.2.03_speed.apk

[Melotron]

Ive tested the new software, but it's the same.

Here are the speed settings.

But when I go back to the home screen it stills say Sweden 20km/h.

Ive also tired a GPS hack with your new app, and it's the same.

[Melotron]

Sorry, I pressed the wrong button 😂😂😂

[BenjaminSoelberg]

The location and Max speed on the main screen is informative only. But i suspect that the firmware is locked. If anyone Can give me a copy of the firmware (the app downloads it to the phone befrie updating) then i can take a look at that. Can you copy all the files from the app data folder and zip them and send a copy to me ?

[Melotron]

I cant locate the firmware or the apps location in /android/data. Ive also removed the original app and installed your app, so the firmware might to total gone from my phone.

[BenjaminSoelberg]

I'll try and make a patch that downloads the firmware and don't delete it after.

[Melotron]

The speed are caped at 20km. Tested it a few times on my to work. I also tried with the GPS hack, and it's still caped at 20km. So it feels as the limitations are in the firmware.

[larswibier]

I was able to roll back the firmware of my E-600 MAX to 1.26 after accidentally upgrading to 1.31 through an old version of the KingSong "Soft Tuner" app (version 139). You can find it here: https://mega.nz/file/ndZ2VbaR#sw9NYqnkG4t2a4pftiepBA3-JP2GhbtaXEmvCAnOYgY Only give the app location access, the rest is not needed. The app will give you trouble logging in, so what you can do is after pressing "login as guest", immediately disable Wi-Fi/mobile data. That way the app cannot communicate with the server and kick you out. Then connect to your scooter. After that, press on "Firmwaer update" (no, that's not a typo on my end), and connect to Wi-Fi/mobile data again. Then you'll get a list of previous firmwares. Select the one you want to use, and then press "update firmware". The app will give you a warning that you're downloading a previous firmware, just press "OK". This way I was able to get the speedhack working again, as it seems that the 20km/h limit is in the 1.31 firmware, and I assume that it is difficult to remove.

[Melotron]

@larswibier THANK YOU SO MUCH! It worked to roolback the firmware. I was just outside and took it for a spin. Got up to 22km on the first test outside work. I can try to download the firmwares, but the best solution are to have this as solution if you update the firmware. And use the the hacked app as speed setter.

Also thanks alot to @BenjaminSoelberg for all his work with it.

[bmbdk]

This is a great tip, thank you @larswibier The timing of not being kicked out when logging in as guest is a bit tricky - after numbers of failed attempts, I made it work by only having wifi data on the phone and pull the network plug on my router when logging in ;) Now firmware is downgraded to 1.26

Also many thanks to @BenjaminSoelberg for the updated APP that now works flawless setting the speed limit

[BenjaminSoelberg]

Thats good stuff riget there guys! Both the downgrading and the list of firmwares. I'll see if I can fix the firmware if I get the time. I might also fix the kingsong app so you don't need the Wi-Fi on/off trick.

[RZG0]

Hey new to forum but its odd that your scooter goes only 20kmh. I have one in finland with latest drivers and it goes 25 no problem. I will try that apk 139 trick today also. I have suspicion that the device stores some original gps data of you connect with eway app since on their terms it states this "

[BenjaminSoelberg]

@RZG0 After looking into the APP all i can say is that they track you in every way they can. To be honest I would do the same if I could. The more data you have the better informed you can be about everything from marketing/targeting and reliability and production issues.

[RZG0]

Yea exactly. I tries to downgrade to 1.26 and it worked. Now i can get up to 34-36km on level ground. And your app works well aswell. Gona keep it topped max at 30.

[BenjaminSoelberg]

I have created a new version which is available here: https://github.com/BenjaminSoelberg/wilfa-e-way-electric-scooter-hack/raw/main/EWay_Scooter_v1.2.03_speed.apk

It still do not have any fix for newer firmwares but read above on how to downgrade. I have reworked the speed selection engine and it should work better now. I will work on a way to downgrade from within the app and I'll try to remove unneeded permissions and "newer version" alert boxes

Give it a go and report back thanks.

[RZG0]

Installed, will test on next drive, it would be good to have option change speeds on different modes so in finland i would have 10/25/unlimited

[BenjaminSoelberg]

@RZG0 I try not to change the original app too much (as it is hard to maintain patches). But I think you can mix both max speed and gear settings (P1/P2/P3) to get what you ask for.

[BenjaminSoelberg]

@all I have concluded that the firmware is encrypted and only decrypted by the scooter after updating as there is no code in the APP that does the decryption. So there is currently no to me known way to fix the firmware in v1.31. This means that the only way to fix the speed lock issue is to downgrade. But i did manage to grab a copy of the firmware "2021-08-11-07-17-04.bin" which i believe to be v1.26. So i could patch the app to use that. But I don't know if this firmware works on other scooters than e-way e-350.

[BenjaminSoelberg]

@RZG0 @Melotron @bmbdk @larswibier I have patched the KingSong SoftTuner so you don't have to do the awkward / difficult trick with wifi on/off. So you guys should be able to use the KingSong SoftTuner to downgrade at will. Also it seems like only v131 & v126 of the firmware are available for actual installation. Give it a go: https://github.com/BenjaminSoelberg/kingsong-soft-tuner-hack

[BenjaminSoelberg]

This also concludes this issue and we can finally close it