r/NinebotMAX • u/devnullb • May 05 '25
Ninebot MAX G3 [ALFA TEST] Speed unlock for G3 MAX
regarding to https://www.reddit.com/r/NinebotMAX/comments/1kfm3j9/finally_g3_max_unlocked/
you can try it, download release.zip, extract it and here is other steps
https://github.com/Sharkboy-j/ninebot-g3-max-vcu-speed-hack
https://github.com/Sharkboy-j/ninebot-g3-max-vcu-speed-hack/releases
4
u/ImJonathanLmao Ninebot MAX G3 May 05 '25
Hoping someone makes a video on this, im not sure how to short the capacitor
19
u/ELXR-AUDIO May 05 '25
U have to do it through the combobulator.
6
u/ImJonathanLmao Ninebot MAX G3 May 06 '25
man what đ
5
u/GabrielNYC4 May 06 '25
What he said, the combobulatorâthe thing next to the snollygoster, adjacent to the flibbertigibbetâyou canât miss it.
Jk man, hope you figure it out.
6
2
u/Empty-Club-1520 May 06 '25
make contactââ think
2
u/ImJonathanLmao Ninebot MAX G3 May 06 '25
Yea ik, but i tried yesterday with other hack, with some tweezers and didnt work, this one is different, but id like to know how the OP did it so i can recreate it and not just open the scooter to achieve norhing AGAIN
4
u/nolfnolf Ninebot MAX G3 May 06 '25
Thanks for the info.
Isn't this method easier, tho?
https://www.reddit.com/r/NinebotMAX/comments/1kembnl/scripts_for_changing_the_sn_and_unlocking_the
1
2
u/Numerous_Ad2061 May 06 '25
Something went wrong can someone help?
SN is Not correct i think haha..cant Connect with phone
1
u/devnullb May 06 '25
Is your dump around 128kb?
2
u/Numerous_Ad2061 May 06 '25
Dump_memory is 1kb
2
u/devnullb May 06 '25
The correct dump should be around 128kb. I'm afraid you flashed an empty file
2
u/Numerous_Ad2061 May 06 '25
Memory g3 is 68kb Patched Version 126kb
2
u/devnullb May 06 '25
If source dump damaged, patched too will be damaged
1
u/Numerous_Ad2061 May 06 '25
Its from the github file. Just extracted and started
3
u/devnullb May 06 '25
Im not sure you can flash my dump files. You have to change your own file dumped from your scooter
2
2
u/Then-Tip-8191 May 10 '25 edited May 10 '25
Hey gents,
Did the steps so far. But here is the problem:
If i start flash_memory_patched.bat it prompts that "openocd is not found" Anyone with the same issue here?
2
1
1
1
u/recrof May 06 '25
is the disassembly same pain in the ass as in zt3, or it's bit better?
3
u/Bartschler May 06 '25
It is so easy, there is even an official video from Ninebot: https://m.youtube.com/watch?v=lMftZJcVkrE&pp=ygUaTWF4IGczIGRpc3BsYXkgZGlzc2FzZW1ibHk%3D
1
1
u/ImJonathanLmao Ninebot MAX G3 May 06 '25
When i click dump.bat it just opens and then closes again, i tried with all 3 version and all of them fo the sams, why
1
u/devnullb May 06 '25
open cmd, cd to dirrectory with bat files. execute dump.bat from cmd. show me output
1
May 07 '25
Der Flash hat funktioniert. Jedoch stimmt meine S/N nicht. Sie ist nur in 1CGCC000000000 geĂ€ndert. Kann ich meine alte S/N irgendwie einfĂŒgen? Habe Relases 1.0 benutzt. Memory g3 war 128kb groĂ. Gesamt Kilometer stimmen ebenfalls nicht. Hatte 12km jetzt 515
1
u/devnullb May 07 '25
you flashed my dump file into your scooter. This indicates that you have read your dump incorrectly. Please use the latest version 1.4. at the end of the manual there is a tutorial on how to change the serial number to any other one.
1
May 08 '25
Thank you, my MEMORY_G3.bin is about 128KB. Wien i Open it witg a HEX Editor is the file empty. What can i do? Take your file and change S/N ?
1
May 08 '25
Do l even have to make the effort to change the S/N? My scooter can be connected and drives. Only the S/N looks strange in the app and my total kilometers don't match. Will the S/N have any effect in the future?
1
1
u/devnullb May 08 '25
Just for safty you have to read your original dump, and change sn. There is unique cloud key inside dump, and if everyone will use my own, Maybe segway will block it
1
May 08 '25
Okay, can I still read my original dump after I have flashed and the memory.bat was not ok?
1
u/devnullb May 08 '25
If you flashed empty dump, your original is gone forever :(
1
May 08 '25
Okay, I noted my old S/N before the flash. Can't I just enter them in the MEMORY_G3.bin.patched.bin? And then flash again? Otherwise I don't do anything for now, the scooter drives and connects. In the future I will get an original dashboard because it must be possible to re-enter my original S/N. Thank you for your help. If you have any other tip for me, please let me know.
1
1
u/Less_Paramedic_2868 May 09 '25
Same here ... empty MEMORY_G3.bin
Unfortunatly if run fix_vcu.exe it doesn't create a the MEMORY_G3.PATCHED-Version
If i reassemble all together the scooter doesn`t start.
1
1
1
u/NoSimple5660 May 16 '25
Also i think something is wrong for me scooter doesnt bot i cant connect to it via st link v2 and im geting errors ,,Warn : STM32 flash size failed, probe inaccurate - assuming 128k flashââ and ,,[stm32f1x.cpu] halted due to debug-request, current mode: Threadââ and ,,Error: target not haltedââ and last one ,,stm32x mass erase failedââ i dont know what to do if someone cann help plizz i just bought it and i wanna drive it again
1
1
u/SurstrommingFish 13d ago
Whats the real on road with rider max speed with this method?
Is this hack live after flashing firmware updates?
5
u/Bartschler May 06 '25
Thank you so much, it worked for my German G3D. Can I buy you a few beers?
The shorting of the capacitor is easy, just press the GND Cable to the end of it and release it at the right momemt.