diff --git a/fwupd.py b/fwupd.py
index 4e728b8..e100924 100644
--- a/fwupd.py
+++ b/fwupd.py
@@ -79,7 +79,7 @@ def UpdateFirmware(link, tran, dev, fwfile):
 parser = argparse.ArgumentParser(formatter_class=argparse.RawDescriptionHelpFormatter,
 	description='Xiaomi/Ninebot firmware flasher',
 	epilog='Example 1:  %(prog)s ble ble_patched.bin  - flash ble_patched.bin to BLE using default communication parameters'
-	'\nExample 2:  %(prog)s -i tcp -a 192.168.1.10:6000 bms bms115.bin  - flash bms115.bin to BMS over TCP-BLE bridge at 192.168.1.10:6000'
+	'\nExample 2:  %(prog)s -i tcp -a 127.0.1.10:6000 bms bms115.bin  - flash bms115.bin to BMS over TCP-BLE bridge at 127.0.1.10:6000'
 	'\nExample 3:  %(prog)s -i serial -a COM2 esc CFW.bin  - flash CFW.bin to ESC via COM2'
 	'\nExample 4:  %(prog)s -i ble -a 12:34:56:78:9A:BC -p ninebot extbms bms107.bin  - flash bms107.bin to Ninebot\'s external BMS via BLE, use specified BLE address')
 
diff --git a/lock.py b/lock.py
new file mode 100644
index 0000000..3993146
--- /dev/null
+++ b/lock.py
@@ -0,0 +1,31 @@
+#!python2-32
+from py9b.link.base import LinkOpenException, LinkTimeoutException
+from py9b.link.tcp import TCPLink
+#from py9b.link.ble import BLELink
+from py9b.link.serial import SerialLink
+from py9b.transport.base import BaseTransport as BT
+from py9b.transport.packet import BasePacket as PKT
+#from py9b.transport.xiaomi import XiaomiTransport
+from py9b.transport.ninebot import NinebotTransport
+from py9b.command.regio import ReadRegs, WriteRegs
+
+#link = SerialLink(dump=True)
+link = TCPLink()
+#link = BLELink()
+
+with link:
+	print "Scanning..."
+	ports = link.scan()
+	print ports
+
+	#tran = XiaomiTransport(link)
+	tran = NinebotTransport(link)
+
+	link.open(("127.0.0.20:6000"))
+#	link.open(ports[0][1])
+	print "Connected"
+
+	print('Locking...')
+	tran.execute(WriteRegs(BT.ESC, 0x70, '<H', 0x0001)) 
+
+	link.close()
diff --git a/passwd.py b/passwd.py
new file mode 100644
index 0000000..ebfa47f
--- /dev/null
+++ b/passwd.py
@@ -0,0 +1,32 @@
+#!python2-32
+from py9b.link.base import LinkOpenException, LinkTimeoutException
+from py9b.link.tcp import TCPLink
+#from py9b.link.ble import BLELink
+from py9b.link.serial import SerialLink
+from py9b.transport.base import BaseTransport as BT
+from py9b.transport.packet import BasePacket as PKT
+#from py9b.transport.xiaomi import XiaomiTransport
+from py9b.transport.ninebot import NinebotTransport
+from py9b.command.regio import ReadRegs, WriteRegs
+
+#link = SerialLink(dump=True)
+link = TCPLink()
+#link = BLELink()
+
+with link:
+	print "Scanning..."
+	ports = link.scan()
+	print ports
+
+	#tran = XiaomiTransport(link)
+	tran = NinebotTransport(link)
+
+	link.open(("127.0.0.20:6000"))
+#	link.open(ports[0][1])
+	print "Connected"
+
+	print 'Reading passwd...'
+	pwd = tran.execute(ReadRegs(BT.ESC, 0x17, "6s")) 
+	print "Passwd:", pwd
+
+	link.close()
diff --git a/powerdown.py b/powerdown.py
index 509dea0..d599791 100644
--- a/powerdown.py
+++ b/powerdown.py
@@ -1,17 +1,17 @@
 #!python2-32
 from py9b.link.base import LinkOpenException, LinkTimeoutException
 from py9b.link.tcp import TCPLink
-from py9b.link.ble import BLELink
+#from py9b.link.ble import BLELink
 from py9b.link.serial import SerialLink
 from py9b.transport.base import BaseTransport as BT
 from py9b.transport.packet import BasePacket as PKT
-from py9b.transport.xiaomi import XiaomiTransport
+#from py9b.transport.xiaomi import XiaomiTransport
 from py9b.transport.ninebot import NinebotTransport
 from py9b.command.regio import ReadRegs, WriteRegs
 
 #link = SerialLink(dump=True)
-#link = TCPLink()
-link = BLELink()
+link = TCPLink()
+#link = BLELink()
 
 with link:
 	print "Scanning..."
@@ -21,8 +21,8 @@ with link:
 	#tran = XiaomiTransport(link)
 	tran = NinebotTransport(link)
 
-	#link.open(("192.168.1.45", 6000))
-	link.open(ports[0][1])
+	link.open(("127.0.0.20:6000"))
+#	link.open(ports[0][1])
 	print "Connected"
 
 	print('Power off...')
diff --git a/read_bms.py b/read_bms.py
index 5e08e20..38f738d 100644
--- a/read_bms.py
+++ b/read_bms.py
@@ -23,7 +23,7 @@ with link:
 	#tran = XiaomiTransport(link)
 	tran = NinebotTransport(link)
 
-	#link.open(("192.168.1.45", 6000))
+	#link.open(("127.0.0.1", 6000))
 	link.open(ports[0][1])
 	print "Connected"
 
diff --git a/read_bms_ll.py b/read_bms_ll.py
index 1ac6c86..fd90349 100644
--- a/read_bms_ll.py
+++ b/read_bms_ll.py
@@ -20,7 +20,7 @@ with link:
 
 	tran = XiaomiTransport(link)
 
-	#link.open(("192.168.1.45", 6000))
+	#link.open(("127.0.0.1", 6000))
 	link.open(ports[0][1])
 	print "Connected"
 
diff --git a/read_bms_mem.py b/read_bms_mem.py
index c6b08b3..3429635 100644
--- a/read_bms_mem.py
+++ b/read_bms_mem.py
@@ -23,7 +23,7 @@ with link:
 
 	tran = XiaomiTransport(link)
 
-	#link.open(("192.168.1.45", 6000))
+	#link.open(("127.0.0.1", 6000))
 	link.open(ports[0][1])
 	print "Connected"
 
diff --git a/read_esc.py b/read_esc.py
index fe2b2cc..f6f7ec4 100644
--- a/read_esc.py
+++ b/read_esc.py
@@ -23,7 +23,7 @@ with link:
 	#tran = XiaomiTransport(link)
 	tran = NinebotTransport(link)
 
-	#link.open(("192.168.1.45", 6000))
+	#link.open(("127.0.0.1", 6000))
 	link.open(ports[0][1])
 	print "Connected"
 
diff --git a/read_esc_ll.py b/read_esc_ll.py
index b28a58e..8759273 100644
--- a/read_esc_ll.py
+++ b/read_esc_ll.py
@@ -20,7 +20,7 @@ with link:
 
 	tran = XiaomiTransport(link)
 
-	#link.open(("192.168.1.45", 6000))
+	#link.open(("127.0.0.1", 6000))
 	link.open(ports[0][1])
 	print "Connected"
 
diff --git a/readregs.py b/readregs.py
index 25e09f2..f69ce2e 100644
--- a/readregs.py
+++ b/readregs.py
@@ -42,7 +42,7 @@ def ReadAllRegs(link, tran, dev, hfo):
 parser = argparse.ArgumentParser(formatter_class=argparse.RawDescriptionHelpFormatter,
 	description='Xiaomi/Ninebot register reader',
 	epilog='Example 1:  %(prog)s esc esc_regs.bin  - read ESC regs to esc_regs.bin using default communication parameters' 
-	'\nExample 2:  %(prog)s -i tcp -a 192.168.1.10:6000 bms bms_regs.bin  - flash BMS regs over TCP-BLE bridge at 192.168.1.10:6000'
+	'\nExample 2:  %(prog)s -i tcp -a 127.0.1.10:6000 bms bms_regs.bin  - flash BMS regs over TCP-BLE bridge at 127.0.1.10:6000'
 	'\nExample 3:  %(prog)s -i serial -a COM2 esc esc_regs.bin  - read ESC regs via COM2'
 	'\nExample 4:  %(prog)s -i ble -a 12:34:56:78:9A:BC esc esc_regs.bin  - read ESC regs via BLE, use specified BLE address')
 	
diff --git a/reboot.py b/reboot.py
index 20d5607..612b77f 100644
--- a/reboot.py
+++ b/reboot.py
@@ -1,17 +1,17 @@
 #!python2-32
 from py9b.link.base import LinkOpenException, LinkTimeoutException
 from py9b.link.tcp import TCPLink
-from py9b.link.ble import BLELink
+#from py9b.link.ble import BLELink
 from py9b.link.serial import SerialLink
 from py9b.transport.base import BaseTransport as BT
 from py9b.transport.packet import BasePacket as PKT
-from py9b.transport.xiaomi import XiaomiTransport
+#from py9b.transport.xiaomi import XiaomiTransport
 from py9b.transport.ninebot import NinebotTransport
 from py9b.command.regio import ReadRegs, WriteRegs
 
 #link = SerialLink(dump=True)
-#link = TCPLink()
-link = BLELink()
+link = TCPLink()
+#link = BLELink()
 
 with link:
 	print "Scanning..."
@@ -21,11 +21,11 @@ with link:
 	#tran = XiaomiTransport(link)
 	tran = NinebotTransport(link)
 
-	#link.open(("192.168.1.45", 6000))
-	link.open(ports[0][1])
+	link.open(("127.0.0.20:6000"))
+#	link.open(ports[0][1])
 	print "Connected"
 
 	print('Reboot...')
-	tran.execute(WriteRegs(BT.ESC, 0x78, '<H', 0x0001)) 
+	tran.execute(WriteRegs(BT.ESC, 0x78, '<H', 0x0001))
 
 	link.close()
diff --git a/sniffer.py b/sniffer.py
index 949df89..fb517e1 100644
--- a/sniffer.py
+++ b/sniffer.py
@@ -21,7 +21,7 @@ with link:
 	#tran = XiaomiTransport(link)
 	tran = NinebotTransport(link)
 
-	#link.open(("192.168.1.45", 6000))
+	#link.open(("127.0.0.1", 6000))
 	link.open(ports[0][1])
 	print "Connected"
 
diff --git a/tcp_test.py b/tcp_test.py
index 9151678..5c28717 100644
--- a/tcp_test.py
+++ b/tcp_test.py
@@ -11,7 +11,7 @@ with TCPLink() as link:
 	
 	tran = XiaomiTransport(link)
 
-	#link.open(("192.168.1.45", 6000))
+	#link.open(("127.0.0.1", 6000))
 	link.open(ports[0][1])
 
 	#req = PKT(src=BT.HOST, dst=BT.ESC, cmd=0x01, arg=0x10, data="\x10")
diff --git a/unlock.py b/unlock.py
new file mode 100644
index 0000000..4fd4969
--- /dev/null
+++ b/unlock.py
@@ -0,0 +1,31 @@
+#!python2-32
+from py9b.link.base import LinkOpenException, LinkTimeoutException
+from py9b.link.tcp import TCPLink
+#from py9b.link.ble import BLELink
+from py9b.link.serial import SerialLink
+from py9b.transport.base import BaseTransport as BT
+from py9b.transport.packet import BasePacket as PKT
+#from py9b.transport.xiaomi import XiaomiTransport
+from py9b.transport.ninebot import NinebotTransport
+from py9b.command.regio import ReadRegs, WriteRegs
+
+#link = SerialLink(dump=True)
+link = TCPLink()
+#link = BLELink()
+
+with link:
+	print "Scanning..."
+	ports = link.scan()
+	print ports
+
+	#tran = XiaomiTransport(link)
+	tran = NinebotTransport(link)
+
+	link.open(("127.0.0.20:6000"))
+#	link.open(ports[0][1])
+	print "Connected"
+
+	print('Unlocking...')
+	tran.execute(WriteRegs(BT.ESC, 0x71, '<H', 0x0001)) 
+
+	link.close()
diff --git a/wr_esc.py b/wr_esc.py
index aa0a02e..a1b2eec 100644
--- a/wr_esc.py
+++ b/wr_esc.py
@@ -17,7 +17,7 @@ with link:
 
 	tran = XiaomiTransport(link)
 
-	link.open(("192.168.1.45", 6000))
+	link.open(("127.0.0.1", 6000))
 	#link.open(ports[0][1])
 	print "Connected"