Looking to modify the Lotus $74 1228708 adx file to be used bluetooth but it has a password on it. Anyone have any ideas on this?

http://www.tunerpro.net/download/Dat...1228708_SE.adx

----------ALDL Mode 1 Data Stream
Last Updated 14 September 2000
The Mode 1 data stream is probably the most interesting of all the data streams. It contains all the ECU data you need to diagnose complex faults.
Request Mode 1 Data - PC transmit to ECU

As stated earlier, there is no idle chatter on the LC's ALDL link. To request the ECU to transmit the Mode 1 packet, the PC must transmit the following 5 data bytes.(The Datastream 0xF4, 0x56, 0x01, 0xB5 can also be used)
Data Byte (hex) Description Notes
F4 Frame Start 0xF4 indicates the start of a message
57 Length of Packet 0x57 (0x52 + Length of Packet)
01 Request Mode 1 0x01
00
B4 Checksum Packet added together then MOD 255 = 00
Reply Mode 1 Data - ECU transmit to PC

Once the ECU has received the Request Mode 1 Data packet, it will start to respond (within a mili-second) with the following data stream. Note - where 16 bit values are transmitted, the MSByte is transmitted first, followed by the LSByte. The ECU ensures that the value does not change between transmitting the first byte and the second byte of a 16 bit value.
Byte Number Byte Name Field Type Notes
01 ECMID 8 bit Constant 0xF4 indicates the start of a message
02 LENGTH 8 bit Constant 0x95 (0x52 + Length of Packet)
03 MODE1 8 bit Constant 0x01
04-05 PROMID 16 bit Constant 0x0919 - identifies the version of software the ECU is running. All LC's I have tested so far have a PROM ID value of 2329 decimal (0x0919 hex)
06 MALFWD1 8 bit flags 0x01 - TC23 MAT Voltage Lo
0x02 - TC22 TPS Voltage Lo
0x04 - TC21 TPS Voltage Hi
0x08 - TC16 Wastegate Overboost
0x10 - TC15 Water Temp Lo / Voltage Hi
0x20 - TC14 Water Temp Hi / Voltage Lo
0x40 - TC13 Front O2 Open Circuit
0x80 - TC12 No Reference Pulses (Never set)
07 MALFWD2 8 bit flags 0x01 - TC35 Unused
0x02 - TC34 MAP Sensor Voltage Lo
0x04 - TC33 MAP Sensor Voltage Hi
0x08 - TC32 Unused
0x10 - TC31 Camshaft Speed Sensor Error
0x20 - TC26 Unused
0x40 - TC25 MAT Sensor Voltage High
0x80 - TC24 No Speed Signal
08 MALFWD3 8 bit flags 0x01 - TC51 PROM/MEMCALError
0x02 - TC46 Unused
0x04 - TC45 Front O2 Rich
0x08 - TC44 Front O2 Lean
0x10 - TC43 Knock Sensor Error
0x20 - TC42 Bypass or EST Line Fail
0x40 - TC41 CYL Select Error
0x80 - TC36 Unused
09 MALFWD4 8 bit flags 0x01 - TC63 Rear O2 Open Circuit
0x02 - TC62 Unused
0x04 - TC61 Unused
0x08 - TC56 Unused
0x10 - TC55 Unused
0x20 - TC54 Unused
0x40 - TC53 Batttery Voltage High
0x80 - TC52 Unused
10 MALFWD5 8 bit flags 0x01 - TC75 Unused
0x02 - TC74 Unused
0x04 - TC73 Unused
0x08 - TC72 Unused
0x10 - TC71 Unused
0x20 - TC66 Boost System Errror
0x40 - TC65 Rear O2 Rich
0x80 - TC64 Rear O2 Lean
11 NVMW1 8 bit flags ?
12 NVMW2 8 bit flags 0x01 -
0x02 -
0x04 -
0x08 -
0x10 -
0x20 - Fuel Pump On
0x40 -
0x80 - ESC On (Electronic Spark Control)
13 WGATEMW 8 bit flags ?
14 FMD1 8 bit flags ?
15 FMD2 8 bit flags ?
16 MW1 8 bit flags 0x01 -
0x02 -
0x04 - Auxilary Electric Water Pump On
0x08 -
0x10 -
0x20 - Air Conditioning Cutoff Relay (0=ON, 1=OFF)
0x40 -
0x80 -
17 MW2 8 bit flags ?
18 MW3 8 bit flags ?
19 LCCPWM 8 bit flags ?
20 CLCCMW 8 bit flags ?
21 FPR 8 bit flags ?
22 MWFA1 8 bit flags ?
23 FMDSDI 8 bit flags ?
24 MWFA1 8 bit flags ? Repeat of Byte 22
25 COOLDEGA 8 bit value Water Temp = (COOLDEGA * 0.75) - 40 degC
26 ADMAP 8 bit value Absolute MAP = (ADMAP / 128) + 0.08 Bar
27 ADTHROT 8 bit value TPS Analog to Digital Converter value
28 ADBAT 8 bit value Battery Voltage = (ADBAT / 10)
29 ADBARO 8 bit value Air Pressure = (ADBARO / 256) + 0.06 Bar
30 PA3DELTA 8 bit value?
31 ADMAT 8 bit value MAT Analog to Digital Converter value (not linear)
0x00 = - 40 Deg C
0x10 = - 7 Deg C
0x20 = + 6 Deg C
0x40 = + 24 Deg C
0x60 = + 37 Deg C
0x80 = + 50 Deg C
0xA0 = + 64 Deg C
0xC0 = + 81 Deg C
0xE0 = + 109 Deg C
0xF0 = + 138 Deg C
0xFF = + 196 Deg C
32 ADLO2 8 bit value Front Lambda Voltage = (ADLO2 * 4.42) mV
33 ADRO2 8 bit value Rear Lambda Voltage = (ADR02 * 4.42) mV
34 LBLM 8 bit value Front BLM Cell Value (Should be 128 +/- 10)
35 RBLM 8 bit value Rear BLM Cell Value (Should be 128 +/- 10)
36 BLMCELL 8 bit value BLM Cell Number (0 to 15)
37 LHFLMW 8 bit flags ? 0x01 - Front O2 Sensor Ready
0x02 -
0x04 -
0x08 -
0x10 -
0x20 -
0x40 -
0x80 -
38 RHFLMW 8 bit flags ? 0x01 - Front O2 Sensor Ready
0x02 -
0x04 -
0x08 -
0x10 -
0x20 -
0x40 -
0x80 -
39 LINT 8 bit value Front Lambda O2 Integrator Value (Should be 128)
40 RINT 8 bit value Rear Lambda O2 Integrator Value (Should be 128)
41 WGATEDC 8 bit value Waste Gate Duty Cycle = (WGATEDC / 2.55) %
42 PURGEDC 8 bit value Canister Purge Duty Cycle = (PURGEDC / 2.55) %
43 IAC 8 bit value Idle Air Control Valve stepper motor position
44 ISESDD 8 bit value Desired Engine Idle = (ISESDD * 12.5) RPM
A cold engine, when started initially has a value of 1400 RPM, but this will drop in stages to 750 RPM after a few minuites (COOLDEGA related).
45-46 ENGSPD 16 bit value Spark interval = (ENGSPD / 65.536) mS
Engine RPM = (1310720 / ENGSPD)
47-48 SPKADV 16 bit value
49 NTRPMX 8 bit value Engine RPM = (NTRPMX * 25) RPM
50-51 TIME 16 bit value Engine Running Time in seconds
52 NOCKRTD 8 bit value Knock Retart Angle = (NOCKRTD / 255) * 90 Deg
53-54 NOCKCNT 16 bit value Knock Sensor Counts
55 MPH 8 bit value Road Speed in MPH
56 NTPSLD 8 bit value Throttle Load = (NTPSLD / 2.55) %
57 CUREFIAP 8 bit value
58 CUREFIBP 8 bit value
59-60 LBPINJC 16 bit value Front Injector Pulse Width = (LBPINJC / 65.536) mS
61-62 RBPINJC 16 bit value Rear Injector Pulse Width = (RBPINJC / 65.536) mS
63 ALDMDST 8 bit value
64 SEQMW1 8 bit value
65 WGATEBLM 8 bit value Wastegate Solenoid BLM Value
66 FMW 8 bit flags 0x01 - Auxilary Electric Cooling Fan On
0x02 -
0x04 -
0x08 -
0x10 -
0x20 -
0x40 -
0x80 -
67 CHECKSUM 8 bit value Packet added together then MOD 255 = 00



ALDL Mode 0 Data Stream
Last Updated 31 May 2000
As far as I can tell, the Mode 0 data stream never contains any useable information, and is only used to 'wake up' the ECU. To wake up the ECU, the ignition must be turned on. The ECU will remain 'awake' for approximatley 5 minuites after the ignition is turned off again. Once the ECU is woken up, any of the other ALDL Mode commands can be used. If the user issues an ALDL command without having first woken up the ECU, then the ECU will ignore the request, and respond with a Mode 0 command of its own.
Request Mode 0 Data - PC transmit to ECU

Data Byte (hex) Description Notes
F4 Frame Start 0xF4 indicates the start of a message
56 Length of Packet 0x56 (0x52 + Length of Packet)
00 Request Mode 0 0x00
B6 Checksum Packet added together then MOD 255 = 00
Reply Mode 0 Data - ECU transmit to PC

Once the ECU has received the Request Mode 0 Data packet (or any other valid Mode command packet if the ECU is not woken up first), it will respond (within a mili-second) with an identical Mode 00 packet.
Data Byte (hex) Description Notes
F4 Frame Start 0xF4 indicates the start of a message
56 Length of Packet 0x56 (0x52 + Length of Packet)
00 Request Mode 0 0x00
B6 Checksum Packet added together then MOD 255 = 00