├── README
└── readM365.py


/README:
--------------------------------------------------------------------------------
1 | Python script to read info from a Xiaomi M365 Scooter.
2 | 
3 | Based on the protocol analysis by Camilo Ruiz https://github.com/CamiAlfa/M365-BLE-PROTOCOL


--------------------------------------------------------------------------------
/readM365.py:
--------------------------------------------------------------------------------
 1 | #!/usr/bin/env python
 2 | # -*- mode: python; coding: utf-8 -*-
 3 | #
 4 | # Read data from Xiaomi M365 Scooter
 5 | from gattlib import GATTRequester, GATTResponse
 6 | from struct import *
 7 | from time import sleep
 8 | from binascii import hexlify
 9 | 
10 | MASTER_TO_M365 = 0x20
11 | M365_TO_MASTER = 0x23
12 | BATTERY_TO_MASTER = 0x25
13 | 
14 | DISTANCE_INFO = 0x25
15 | TRIP_INFO = 0xb0
16 | BATTERY_INFO = 0x31
17 | 
18 | 
19 | class Requester(GATTRequester):
20 |     def on_notification(self, handle, data):
21 |         payload = data[3:]
22 |         # print hexlify(payload)
23 |         if len(payload) > 8:
24 |             data_type, address = unpack('<xxxBxB', payload[:6])
25 |             if data_type == M365_TO_MASTER:
26 |                 if address == DISTANCE_INFO:
27 |                     distance_left = unpack('<H', payload[6:8])
28 |                     print 'Distance left:', distance_left[0] / 100., 'km'
29 |                 elif address == TRIP_INFO:
30 |                     error, warning, flags, workmode, battery, speed, speed_average = unpack('<HHHHHHH', payload[6:20])
31 |                     print 'Current speed:', speed / 100., 'km/h'
32 |                     print 'Average speed:', speed_average / 100., 'km/h'
33 | 
34 |             elif data_type == BATTERY_TO_MASTER:
35 |                 if address == BATTERY_INFO:
36 |                     capacity_left, battery_percent, current, voltage, battery_temperature1, battery_temperature2 \
37 |                         = unpack('<HHhHBB', payload[6:16])
38 |                     print 'Battery capacity:', capacity_left, 'mAh'
39 |                     print 'Battery percentage:', battery_percent, '%'
40 |                     print 'Battery current:', current / 100., 'A'
41 |                     print 'Battery voltage:', voltage / 100., 'V'
42 |                     print 'Battery temperature 1:', battery_temperature1 - 20, 'C'
43 |                     print 'Battery temperature 2:', battery_temperature2 - 20, 'C'
44 | 
45 |             else:
46 |                 # this is a second packet from the 0xb0 request
47 |                 total_m, temperature = unpack('<Ixxxxh', payload[:10])
48 |                 print 'Total distance:', total_m / 1000., 'km'
49 |                 print 'Frame temperature', temperature / 10., 'C'
50 | 
51 | 
52 | address = "AA:BB:CC:DD:EE:FF"
53 | requester = Requester(address, False)
54 | 
55 | try:
56 |     requester.connect(True, 'random')
57 | except RuntimeError as e:
58 |     # gattlib.connect's `wait=True` requires elevated permission
59 |     # or modified capabilities.
60 |     # It still connects, but a RuntimeError is raised. Check if
61 |     # `self.gatt` is connected, and rethrow exception otherwise.
62 |     if not requester.is_connected():
63 |         raise e
64 | 
65 | # subscribe to the UART service
66 | requester.write_by_handle(0x000c, str(bytearray([0x01, 0x00])))
67 | sleep(0.1)
68 | # speed, distance and lots of other stuff
69 | requester.write_by_handle(0x000e, str(bytearray.fromhex("55aa 03 2001 b0 20 0bff")))
70 | sleep(0.1)
71 | # km left
72 | requester.write_by_handle(0x000e, str(bytearray.fromhex("55aa 03 2001 25 02 b4ff")))
73 | sleep(0.1)
74 | # battery info
75 | requester.write_by_handle(0x000e, str(bytearray.fromhex("55aa 03 2201 31 0a 9eff")))
76 | sleep(0.1)
77 | 
78 | sleep(1)
79 | 


--------------------------------------------------------------------------------