Oh boy, Model2 reverse engineering? Well, it's possible, but I don't have any info on the security key stuff. That'd be in the programming guide I'm sure, but it's never been made public. I can check against MAME's keys to see if I can find offsets, but I'd also have to compile a special version...