phonedawgz
08-27-2014, 12:34 AM
Looking to modify the Lotus $74 1228708 adx file to be used bluetooth but it has a password on it. Anyone have any ideas on this?
http://www.tunerpro.net/download/Datastreams/Lotus/01228708_SE.adx
----------ALDL Mode 1 Data Stream
Last Updated 14 September 2000
The Mode 1 data stream is probably the most interesting of all the data streams. It contains all the ECU data you need to diagnose complex faults.Request Mode 1 Data - PC transmit to ECUAs stated earlier, there is no idle chatter on the LC's ALDL link. To request the ECU to transmit the Mode 1 packet, the PC must transmit the following 5 data bytes.(The Datastream 0xF4, 0x56, 0x01, 0xB5 can also be used)
Data Byte (hex)
Description
Notes
F4
Frame Start
0xF4 indicates the start of a message
57
Length of Packet
0x57 (0x52 + Length of Packet)
01
Request Mode 1
0x01
00
B4
Checksum
Packet added together then MOD 255 = 00
Reply Mode 1 Data - ECU transmit to PCOnce the ECU has received the Request Mode 1 Data packet, it will start to respond (within a mili-second) with the following data stream. Note - where 16 bit values are transmitted, the MSByte is transmitted first, followed by the LSByte. The ECU ensures that the value does not change between transmitting the first byte and the second byte of a 16 bit value.
Byte Number
Byte Name
Field Type
Notes
01
ECMID
8 bit Constant
0xF4 indicates the start of a message
02
LENGTH
8 bit Constant
0x95 (0x52 + Length of Packet)
03
MODE1
8 bit Constant
0x01
04-05
PROMID
16 bit Constant
0x0919 - identifies the version of software the ECU is running. All LC's I have tested so far have a PROM ID value of 2329 decimal (0x0919 hex)
06
MALFWD1
8 bit flags
0x01 - TC23 MAT Voltage Lo
0x02 - TC22 TPS Voltage Lo
0x04 - TC21 TPS Voltage Hi
0x08 - TC16 Wastegate Overboost
0x10 - TC15 Water Temp Lo / Voltage Hi
0x20 - TC14 Water Temp Hi / Voltage Lo
0x40 - TC13 Front O2 Open Circuit
0x80 - TC12 No Reference Pulses (Never set)
07
MALFWD2
8 bit flags
0x01 - TC35 Unused
0x02 - TC34 MAP Sensor Voltage Lo
0x04 - TC33 MAP Sensor Voltage Hi
0x08 - TC32 Unused
0x10 - TC31 Camshaft Speed Sensor Error
0x20 - TC26 Unused
0x40 - TC25 MAT Sensor Voltage High
0x80 - TC24 No Speed Signal
08
MALFWD3
8 bit flags
0x01 - TC51 PROM/MEMCALError
0x02 - TC46 Unused
0x04 - TC45 Front O2 Rich
0x08 - TC44 Front O2 Lean
0x10 - TC43 Knock Sensor Error
0x20 - TC42 Bypass or EST Line Fail
0x40 - TC41 CYL Select Error
0x80 - TC36 Unused
09
MALFWD4
8 bit flags
0x01 - TC63 Rear O2 Open Circuit
0x02 - TC62 Unused
0x04 - TC61 Unused
0x08 - TC56 Unused
0x10 - TC55 Unused
0x20 - TC54 Unused
0x40 - TC53 Batttery Voltage High
0x80 - TC52 Unused
10
MALFWD5
8 bit flags
0x01 - TC75 Unused
0x02 - TC74 Unused
0x04 - TC73 Unused
0x08 - TC72 Unused
0x10 - TC71 Unused
0x20 - TC66 Boost System Errror
0x40 - TC65 Rear O2 Rich
0x80 - TC64 Rear O2 Lean
11
NVMW1
8 bit flags ?
12
NVMW2
8 bit flags
0x01 -
0x02 -
0x04 -
0x08 -
0x10 -
0x20 - Fuel Pump On
0x40 -
0x80 - ESC On (Electronic Spark Control)
13
WGATEMW
8 bit flags ?
14
FMD1
8 bit flags ?
15
FMD2
8 bit flags ?
16
MW1
8 bit flags
0x01 -
0x02 -
0x04 - Auxilary Electric Water Pump On
0x08 -
0x10 -
0x20 - Air Conditioning Cutoff Relay (0=ON, 1=OFF)
0x40 -
0x80 -
17
MW2
8 bit flags ?
18
MW3
8 bit flags ?
19
LCCPWM
8 bit flags ?
20
CLCCMW
8 bit flags ?
21
FPR
8 bit flags ?
22
MWFA1
8 bit flags ?
23
FMDSDI
8 bit flags ?
24
MWFA1
8 bit flags ?
Repeat of Byte 22
25
COOLDEGA
8 bit value
Water Temp = (COOLDEGA * 0.75) - 40 degC
26
ADMAP
8 bit value
Absolute MAP = (ADMAP / 128) + 0.08 Bar
27
ADTHROT
8 bit value
TPS Analog to Digital Converter value
28
ADBAT
8 bit value
Battery Voltage = (ADBAT / 10)
29
ADBARO
8 bit value
Air Pressure = (ADBARO / 256) + 0.06 Bar
30
PA3DELTA
8 bit value?
31
ADMAT
8 bit value
MAT Analog to Digital Converter value (not linear)
0x00 = - 40 Deg C
0x10 = - 7 Deg C
0x20 = + 6 Deg C
0x40 = + 24 Deg C
0x60 = + 37 Deg C
0x80 = + 50 Deg C
0xA0 = + 64 Deg C
0xC0 = + 81 Deg C
0xE0 = + 109 Deg C
0xF0 = + 138 Deg C
0xFF = + 196 Deg C
32
ADLO2
8 bit value
Front Lambda Voltage = (ADLO2 * 4.42) mV
33
ADRO2
8 bit value
Rear Lambda Voltage = (ADR02 * 4.42) mV
34
LBLM
8 bit value
Front BLM Cell Value (Should be 128 +/- 10)
35
RBLM
8 bit value
Rear BLM Cell Value (Should be 128 +/- 10)
36
BLMCELL
8 bit value
BLM Cell Number (0 to 15)
37
LHFLMW
8 bit flags ?
0x01 - Front O2 Sensor Ready
0x02 -
0x04 -
0x08 -
0x10 -
0x20 -
0x40 -
0x80 -
38
RHFLMW
8 bit flags ?
0x01 - Front O2 Sensor Ready
0x02 -
0x04 -
0x08 -
0x10 -
0x20 -
0x40 -
0x80 -
39
LINT
8 bit value
Front Lambda O2 Integrator Value (Should be 128)
40
RINT
8 bit value
Rear Lambda O2 Integrator Value (Should be 128)
41
WGATEDC
8 bit value
Waste Gate Duty Cycle = (WGATEDC / 2.55) %
42
PURGEDC
8 bit value
Canister Purge Duty Cycle = (PURGEDC / 2.55) %
43
IAC
8 bit value
Idle Air Control Valve stepper motor position
44
ISESDD
8 bit value
Desired Engine Idle = (ISESDD * 12.5) RPM
A cold engine, when started initially has a value of 1400 RPM, but this will drop in stages to 750 RPM after a few minuites (COOLDEGA related).
45-46
ENGSPD
16 bit value
Spark interval = (ENGSPD / 65.536) mS
Engine RPM = (1310720 / ENGSPD)
47-48
SPKADV
16 bit value
49
NTRPMX
8 bit value
Engine RPM = (NTRPMX * 25) RPM
50-51
TIME
16 bit value
Engine Running Time in seconds
52
NOCKRTD
8 bit value
Knock Retart Angle = (NOCKRTD / 255) * 90 Deg
53-54
NOCKCNT
16 bit value
Knock Sensor Counts
55
MPH
8 bit value
Road Speed in MPH
56
NTPSLD
8 bit value
Throttle Load = (NTPSLD / 2.55) %
57
CUREFIAP
8 bit value
58
CUREFIBP
8 bit value
59-60
LBPINJC
16 bit value
Front Injector Pulse Width = (LBPINJC / 65.536) mS
61-62
RBPINJC
16 bit value
Rear Injector Pulse Width = (RBPINJC / 65.536) mS
63
ALDMDST
8 bit value
64
SEQMW1
8 bit value
65
WGATEBLM
8 bit value
Wastegate Solenoid BLM Value
66
FMW
8 bit flags
0x01 - Auxilary Electric Cooling Fan On
0x02 -
0x04 -
0x08 -
0x10 -
0x20 -
0x40 -
0x80 -
67
CHECKSUM
8 bit value
Packet added together then MOD 255 = 00
ALDL Mode 0 Data Stream
Last Updated 31 May 2000
As far as I can tell, the Mode 0 data stream never contains any useable information, and is only used to 'wake up' the ECU. To wake up the ECU, the ignition must be turned on. The ECU will remain 'awake' for approximatley 5 minuites after the ignition is turned off again. Once the ECU is woken up, any of the other ALDL Mode commands can be used. If the user issues an ALDL command without having first woken up the ECU, then the ECU will ignore the request, and respond with a Mode 0 command of its own.Request Mode 0 Data - PC transmit to ECU
Data Byte (hex)
Description
Notes
F4
Frame Start
0xF4 indicates the start of a message
56
Length of Packet
0x56 (0x52 + Length of Packet)
00
Request Mode 0
0x00
B6
Checksum
Packet added together then MOD 255 = 00
Reply Mode 0 Data - ECU transmit to PCOnce the ECU has received the Request Mode 0 Data packet (or any other valid Mode command packet if the ECU is not woken up first), it will respond (within a mili-second) with an identical Mode 00 packet.
Data Byte (hex)
Description
Notes
F4
Frame Start
0xF4 indicates the start of a message
56
Length of Packet
0x56 (0x52 + Length of Packet)
00
Request Mode 0
0x00
B6
Checksum
Packet added together then MOD 255 = 00
http://www.tunerpro.net/download/Datastreams/Lotus/01228708_SE.adx
----------ALDL Mode 1 Data Stream
Last Updated 14 September 2000
The Mode 1 data stream is probably the most interesting of all the data streams. It contains all the ECU data you need to diagnose complex faults.Request Mode 1 Data - PC transmit to ECUAs stated earlier, there is no idle chatter on the LC's ALDL link. To request the ECU to transmit the Mode 1 packet, the PC must transmit the following 5 data bytes.(The Datastream 0xF4, 0x56, 0x01, 0xB5 can also be used)
Data Byte (hex)
Description
Notes
F4
Frame Start
0xF4 indicates the start of a message
57
Length of Packet
0x57 (0x52 + Length of Packet)
01
Request Mode 1
0x01
00
B4
Checksum
Packet added together then MOD 255 = 00
Reply Mode 1 Data - ECU transmit to PCOnce the ECU has received the Request Mode 1 Data packet, it will start to respond (within a mili-second) with the following data stream. Note - where 16 bit values are transmitted, the MSByte is transmitted first, followed by the LSByte. The ECU ensures that the value does not change between transmitting the first byte and the second byte of a 16 bit value.
Byte Number
Byte Name
Field Type
Notes
01
ECMID
8 bit Constant
0xF4 indicates the start of a message
02
LENGTH
8 bit Constant
0x95 (0x52 + Length of Packet)
03
MODE1
8 bit Constant
0x01
04-05
PROMID
16 bit Constant
0x0919 - identifies the version of software the ECU is running. All LC's I have tested so far have a PROM ID value of 2329 decimal (0x0919 hex)
06
MALFWD1
8 bit flags
0x01 - TC23 MAT Voltage Lo
0x02 - TC22 TPS Voltage Lo
0x04 - TC21 TPS Voltage Hi
0x08 - TC16 Wastegate Overboost
0x10 - TC15 Water Temp Lo / Voltage Hi
0x20 - TC14 Water Temp Hi / Voltage Lo
0x40 - TC13 Front O2 Open Circuit
0x80 - TC12 No Reference Pulses (Never set)
07
MALFWD2
8 bit flags
0x01 - TC35 Unused
0x02 - TC34 MAP Sensor Voltage Lo
0x04 - TC33 MAP Sensor Voltage Hi
0x08 - TC32 Unused
0x10 - TC31 Camshaft Speed Sensor Error
0x20 - TC26 Unused
0x40 - TC25 MAT Sensor Voltage High
0x80 - TC24 No Speed Signal
08
MALFWD3
8 bit flags
0x01 - TC51 PROM/MEMCALError
0x02 - TC46 Unused
0x04 - TC45 Front O2 Rich
0x08 - TC44 Front O2 Lean
0x10 - TC43 Knock Sensor Error
0x20 - TC42 Bypass or EST Line Fail
0x40 - TC41 CYL Select Error
0x80 - TC36 Unused
09
MALFWD4
8 bit flags
0x01 - TC63 Rear O2 Open Circuit
0x02 - TC62 Unused
0x04 - TC61 Unused
0x08 - TC56 Unused
0x10 - TC55 Unused
0x20 - TC54 Unused
0x40 - TC53 Batttery Voltage High
0x80 - TC52 Unused
10
MALFWD5
8 bit flags
0x01 - TC75 Unused
0x02 - TC74 Unused
0x04 - TC73 Unused
0x08 - TC72 Unused
0x10 - TC71 Unused
0x20 - TC66 Boost System Errror
0x40 - TC65 Rear O2 Rich
0x80 - TC64 Rear O2 Lean
11
NVMW1
8 bit flags ?
12
NVMW2
8 bit flags
0x01 -
0x02 -
0x04 -
0x08 -
0x10 -
0x20 - Fuel Pump On
0x40 -
0x80 - ESC On (Electronic Spark Control)
13
WGATEMW
8 bit flags ?
14
FMD1
8 bit flags ?
15
FMD2
8 bit flags ?
16
MW1
8 bit flags
0x01 -
0x02 -
0x04 - Auxilary Electric Water Pump On
0x08 -
0x10 -
0x20 - Air Conditioning Cutoff Relay (0=ON, 1=OFF)
0x40 -
0x80 -
17
MW2
8 bit flags ?
18
MW3
8 bit flags ?
19
LCCPWM
8 bit flags ?
20
CLCCMW
8 bit flags ?
21
FPR
8 bit flags ?
22
MWFA1
8 bit flags ?
23
FMDSDI
8 bit flags ?
24
MWFA1
8 bit flags ?
Repeat of Byte 22
25
COOLDEGA
8 bit value
Water Temp = (COOLDEGA * 0.75) - 40 degC
26
ADMAP
8 bit value
Absolute MAP = (ADMAP / 128) + 0.08 Bar
27
ADTHROT
8 bit value
TPS Analog to Digital Converter value
28
ADBAT
8 bit value
Battery Voltage = (ADBAT / 10)
29
ADBARO
8 bit value
Air Pressure = (ADBARO / 256) + 0.06 Bar
30
PA3DELTA
8 bit value?
31
ADMAT
8 bit value
MAT Analog to Digital Converter value (not linear)
0x00 = - 40 Deg C
0x10 = - 7 Deg C
0x20 = + 6 Deg C
0x40 = + 24 Deg C
0x60 = + 37 Deg C
0x80 = + 50 Deg C
0xA0 = + 64 Deg C
0xC0 = + 81 Deg C
0xE0 = + 109 Deg C
0xF0 = + 138 Deg C
0xFF = + 196 Deg C
32
ADLO2
8 bit value
Front Lambda Voltage = (ADLO2 * 4.42) mV
33
ADRO2
8 bit value
Rear Lambda Voltage = (ADR02 * 4.42) mV
34
LBLM
8 bit value
Front BLM Cell Value (Should be 128 +/- 10)
35
RBLM
8 bit value
Rear BLM Cell Value (Should be 128 +/- 10)
36
BLMCELL
8 bit value
BLM Cell Number (0 to 15)
37
LHFLMW
8 bit flags ?
0x01 - Front O2 Sensor Ready
0x02 -
0x04 -
0x08 -
0x10 -
0x20 -
0x40 -
0x80 -
38
RHFLMW
8 bit flags ?
0x01 - Front O2 Sensor Ready
0x02 -
0x04 -
0x08 -
0x10 -
0x20 -
0x40 -
0x80 -
39
LINT
8 bit value
Front Lambda O2 Integrator Value (Should be 128)
40
RINT
8 bit value
Rear Lambda O2 Integrator Value (Should be 128)
41
WGATEDC
8 bit value
Waste Gate Duty Cycle = (WGATEDC / 2.55) %
42
PURGEDC
8 bit value
Canister Purge Duty Cycle = (PURGEDC / 2.55) %
43
IAC
8 bit value
Idle Air Control Valve stepper motor position
44
ISESDD
8 bit value
Desired Engine Idle = (ISESDD * 12.5) RPM
A cold engine, when started initially has a value of 1400 RPM, but this will drop in stages to 750 RPM after a few minuites (COOLDEGA related).
45-46
ENGSPD
16 bit value
Spark interval = (ENGSPD / 65.536) mS
Engine RPM = (1310720 / ENGSPD)
47-48
SPKADV
16 bit value
49
NTRPMX
8 bit value
Engine RPM = (NTRPMX * 25) RPM
50-51
TIME
16 bit value
Engine Running Time in seconds
52
NOCKRTD
8 bit value
Knock Retart Angle = (NOCKRTD / 255) * 90 Deg
53-54
NOCKCNT
16 bit value
Knock Sensor Counts
55
MPH
8 bit value
Road Speed in MPH
56
NTPSLD
8 bit value
Throttle Load = (NTPSLD / 2.55) %
57
CUREFIAP
8 bit value
58
CUREFIBP
8 bit value
59-60
LBPINJC
16 bit value
Front Injector Pulse Width = (LBPINJC / 65.536) mS
61-62
RBPINJC
16 bit value
Rear Injector Pulse Width = (RBPINJC / 65.536) mS
63
ALDMDST
8 bit value
64
SEQMW1
8 bit value
65
WGATEBLM
8 bit value
Wastegate Solenoid BLM Value
66
FMW
8 bit flags
0x01 - Auxilary Electric Cooling Fan On
0x02 -
0x04 -
0x08 -
0x10 -
0x20 -
0x40 -
0x80 -
67
CHECKSUM
8 bit value
Packet added together then MOD 255 = 00
ALDL Mode 0 Data Stream
Last Updated 31 May 2000
As far as I can tell, the Mode 0 data stream never contains any useable information, and is only used to 'wake up' the ECU. To wake up the ECU, the ignition must be turned on. The ECU will remain 'awake' for approximatley 5 minuites after the ignition is turned off again. Once the ECU is woken up, any of the other ALDL Mode commands can be used. If the user issues an ALDL command without having first woken up the ECU, then the ECU will ignore the request, and respond with a Mode 0 command of its own.Request Mode 0 Data - PC transmit to ECU
Data Byte (hex)
Description
Notes
F4
Frame Start
0xF4 indicates the start of a message
56
Length of Packet
0x56 (0x52 + Length of Packet)
00
Request Mode 0
0x00
B6
Checksum
Packet added together then MOD 255 = 00
Reply Mode 0 Data - ECU transmit to PCOnce the ECU has received the Request Mode 0 Data packet (or any other valid Mode command packet if the ECU is not woken up first), it will respond (within a mili-second) with an identical Mode 00 packet.
Data Byte (hex)
Description
Notes
F4
Frame Start
0xF4 indicates the start of a message
56
Length of Packet
0x56 (0x52 + Length of Packet)
00
Request Mode 0
0x00
B6
Checksum
Packet added together then MOD 255 = 00