OK so I have found some time to play with CAN as it gets warmer. My method is kinda brute force. I'm replaying messages previously recorded at different car state (like SOC, weather). I don't see people are willing to share the knowledge so I will do - as there is so little known about FFE CAN and everybody looks to be happy with Forscan so far.
0x178 is outside temperature - there might be some more information encoded there - I don't know what bytes do what but will find out later.
------
0x24C is SOC - when I did inject previously recorded can messages I did get this:
https://youtu.be/HW4CvpDTiCM
still don't know the bytes and stuff but will find out soon. This one alone is enough to do safe DC charging IMHO.
------
0x352 - tells about time to full charge:
https://youtu.be/cka7UdCSV_g
Sometimes I got wrench with See manual information.
------
Replaying 0x416 does this Christmas tree effect:
https://youtu.be/lmF_sN0j_7A
------
Still will be looking for individual cell voltages and other stuff like that but so far I'm closer to my solution.
Cheers
Martin