Welcome to the Australian Ford Forums forum.

You are currently viewing our boards as a guest which gives you limited access to view most discussions and inserts advertising. By joining our free community you will have access to post topics, communicate privately with other members, respond to polls, upload content and access many other special features without post based advertising banners. Registration is simple and absolutely free so please, join our community today!

If you have any problems with the registration process or your account login, please contact us.

Please Note: All new registrations go through a manual approval queue to keep spammers out. This is checked twice each day so there will be a delay before your registration is activated.

Go Back   Australian Ford Forums > General Topics > The Pub

The Pub For General Automotive Related Talk

Reply
 
Thread Tools Display Modes
Old 15-01-2022, 09:36 PM   #601
JasonACT
Away on leave
 
Join Date: Apr 2019
Location: ACT
Posts: 1,447
Tech Writer: Recognition for the technical writers of AFF - Issue reason: Outstanding work on the FG ICC issues. 
Default Re: FORD technical service bulletin : ICC touch screen display

Sheesh, some people! I'm sorry to hear that sad story Jakka, and for the record, there were no PMs in my inbox (for the best no doubt, it's almost full).



Being back at work this week, there's a lot less time to tinker... But today, without the GTF firmware file, I can say - all the IPC does is pass through 4 extra signals from HS CAN to MS CAN for the ICC to listen to. The details are in the picture.

I mean, how hard could it be to just edit that "Signal Configuration" to pass through 4 extra signals unmolested? Yeah, working on it... Damn firmware has hard coded address locations in that signal config - so whatever needs to be added can't change any other data's position... SOB.
JasonACT is online now   Reply With Quote Multi-Quote with this Post
3 users like this post:
Old 15-01-2022, 11:48 PM   #602
jakka351
6FPAAAJGSW6FC1788
 
jakka351's Avatar
 
Join Date: Oct 2015
Posts: 121
Lightbulb Re: FORD technical service bulletin : ICC touch screen display

0x397 new can id to me. I am still chasing the mk1 boot images. As I don't really understand what I'm looking for I'm going back to square one.

Starting here:
https://en.m.wikipedia.org/wiki/V850
__________________
https://github.com/jakka351/FG-Falcon

:yelrotf lm


Send me CANBUS stuff
jakka351 is online now   Reply With Quote Multi-Quote with this Post
Old 16-01-2022, 12:25 AM   #603
JasonACT
Away on leave
 
Join Date: Apr 2019
Location: ACT
Posts: 1,447
Tech Writer: Recognition for the technical writers of AFF - Issue reason: Outstanding work on the FG ICC issues. 
Default Re: FORD technical service bulletin : ICC touch screen display

I'm pretty sure I passed the Mk1 boot image details on to a mutual friend, but I decided not to progress anything on that because the ELM327 clone(s) wasn't really up to the task. I know you don't have to use those devices though - so ask around what's the missing bit(s) I guess... I was able to get the full Mk1 firmware (initial boot loader, firmware and RAM snapshot - more than I got with the Mk2).
JasonACT is online now   Reply With Quote Multi-Quote with this Post
This user likes this post:
Old 16-01-2022, 12:27 AM   #604
jakka351
6FPAAAJGSW6FC1788
 
jakka351's Avatar
 
Join Date: Oct 2015
Posts: 121
Default Re: FORD technical service bulletin : ICC touch screen display

And the search for the meaning of this:
Quote:
candump
enabling Logfile 'candump-0000-00-00_000000.log'
can0 RX - - 1D7 [7] remote request


cansniffer
93|ms | -- ID -- | data ... < can0 # l=20 h=100 t=0 slots=2 >
99999 | ---- 1D7 | FE 9D DF E6 63 F4 B6 ....c..
99999 | 0F745770 | 6B FB 3E B9 B9 DA DD DE k.>.....
[This is a socketcan read of the instrument cluster mk1 powering up in isolation of other modules. It was on the HS bus, not the MS]
Attached Files
File Type: txt 1d7.txt (302 Bytes, 4 views)
__________________
https://github.com/jakka351/FG-Falcon

:yelrotf lm


Send me CANBUS stuff

Last edited by jakka351; 16-01-2022 at 12:28 AM. Reason: Context
jakka351 is online now   Reply With Quote Multi-Quote with this Post
Old Yesterday, 06:39 PM   #605
JasonACT
Away on leave
 
Join Date: Apr 2019
Location: ACT
Posts: 1,447
Tech Writer: Recognition for the technical writers of AFF - Issue reason: Outstanding work on the FG ICC issues. 
Default Re: FORD technical service bulletin : ICC touch screen display

While we wait for someone with a GTF Instrument Cluster who's willing to extract the special firmware... @Jakka - these are the "decoded" IDs that a Mk1 Cluster handles (reading the V850 document, the hardware register that deals with these is shifted 2 bits, and to be efficient, the programmers left the data that way - so you need to divide by 4 to work out the values):



1D7 does not appear there - I reckon it's a bogus signal when the chip is first configured, especially because it's only 7 bytes, and these things are configured to always generate 8 byte messages. Sorry mate.
JasonACT is online now   Reply With Quote Multi-Quote with this Post
Old Yesterday, 07:01 PM   #606
jakka351
6FPAAAJGSW6FC1788
 
jakka351's Avatar
 
Join Date: Oct 2015
Posts: 121
Default Re: FORD technical service bulletin : ICC touch screen display

Quote:
Originally Posted by JasonACT View Post
While we wait for someone with a GTF Instrument Cluster who's willing to extract the special firmware... @Jakka - these are the "decoded" IDs that a Mk1 Cluster handles (reading the V850 document, the hardware register that deals with these is shifted 2 bits, and to be efficient, the programmers left the data that way - so you need to divide by 4 to work out the values):

image

1D7 does not appear there - I reckon it's a bogus signal when the chip is first configured, especially because it's only 7 bytes, and these things are configured to always generate 8 byte messages. Sorry mate.
Hmmmm, I have the same remote frame request from the FDIM in the same conditions. That is also a V850 too. Maybe is just how socketcan reacts
__________________
https://github.com/jakka351/FG-Falcon

:yelrotf lm


Send me CANBUS stuff
jakka351 is online now   Reply With Quote Multi-Quote with this Post
Old Yesterday, 07:33 PM   #607
Superb
Regular Member
 
Join Date: Nov 2019
Posts: 32
Default Re: FORD technical service bulletin : ICC touch screen display

New ELM arrived today, but still having the same issues..

Though I've got it working though by flipping the high and mid wires around and running full speed.

Doing a dump on my FGX dash currently, when its done i'll go pull the GT-F dash out of the car
Superb is online now   Reply With Quote Multi-Quote with this Post
This user likes this post:
Old Yesterday, 07:37 PM   #608
JasonACT
Away on leave
 
Join Date: Apr 2019
Location: ACT
Posts: 1,447
Tech Writer: Recognition for the technical writers of AFF - Issue reason: Outstanding work on the FG ICC issues. 
Default Re: FORD technical service bulletin : ICC touch screen display

Whatever works, I say!
JasonACT is online now   Reply With Quote Multi-Quote with this Post
Old Yesterday, 07:39 PM   #609
Superb
Regular Member
 
Join Date: Nov 2019
Posts: 32
Default Re: FORD technical service bulletin : ICC touch screen display

Quote:
Originally Posted by JasonACT View Post
Whatever works, I say!
100%

I'm guessing it takes a while? I'd pressed read all 5
Superb is online now   Reply With Quote Multi-Quote with this Post
Old Yesterday, 07:41 PM   #610
JasonACT
Away on leave
 
Join Date: Apr 2019
Location: ACT
Posts: 1,447
Tech Writer: Recognition for the technical writers of AFF - Issue reason: Outstanding work on the FG ICC issues. 
Default Re: FORD technical service bulletin : ICC touch screen display

Oh, I guess we will talk again in a few hours! (ha ha)
JasonACT is online now   Reply With Quote Multi-Quote with this Post
Old Yesterday, 07:42 PM   #611
Whiteford
Starter Motor
 
Join Date: Jul 2021
Posts: 8
Default Re: FORD technical service bulletin : ICC touch screen display

Did someone say J2534 support?
Whiteford is online now   Reply With Quote Multi-Quote with this Post
This user likes this post:
Old Yesterday, 07:44 PM   #612
Superb
Regular Member
 
Join Date: Nov 2019
Posts: 32
Default Re: FORD technical service bulletin : ICC touch screen display

Quote:
Originally Posted by JasonACT View Post
Oh, I guess we will talk again in a few hours! (ha ha)
LOL what , that should be in the disclaimer
Superb is online now   Reply With Quote Multi-Quote with this Post
Old Yesterday, 07:47 PM   #613
jakka351
6FPAAAJGSW6FC1788
 
jakka351's Avatar
 
Join Date: Oct 2015
Posts: 121
Thumbs up Re: FORD technical service bulletin : ICC touch screen display

Quote:
Originally Posted by JasonACT View Post
While we wait for someone with a GTF Instrument Cluster who's willing to extract the special firmware... @Jakka - these are the "decoded" IDs that a Mk1 Cluster handles (reading the V850 document, the hardware register that deals with these is shifted 2 bits, and to be efficient, the programmers left the data that way - so you need to divide by 4 to work out the values):

image

1D7 does not appear there - I reckon it's a bogus signal when the chip is first configured, especially because it's only 7 bytes, and these things are configured to always generate 8 byte messages. Sorry mate.
Interesting, CAN id 408 are.you sure that's.correct, I get it as 409 in what I've done. Also interesting that ID 313 (cabin temp sensor byte 0) from.the fdim - this can id also contains all the "switches" you can change in the various radio, rds, program types filter options in the FDIM. All the radio, cd, MP3 stuff is in there too, as that can be displayed on the MFD.

How tall a step it is from here to adding stuff here and there, eg display a small engine diagnostics menu like many newer cars have, and successfully flashing that modified firmware back into it successfully?
Steering Wheel Controls could be implemented to control the menu as well.....the list goes on.
__________________
https://github.com/jakka351/FG-Falcon

:yelrotf lm


Send me CANBUS stuff
jakka351 is online now   Reply With Quote Multi-Quote with this Post
Old Yesterday, 07:48 PM   #614
JasonACT
Away on leave
 
Join Date: Apr 2019
Location: ACT
Posts: 1,447
Tech Writer: Recognition for the technical writers of AFF - Issue reason: Outstanding work on the FG ICC issues. 
Default Re: FORD technical service bulletin : ICC touch screen display

Yeah, I know, it's slow, sorry...

For the cool things my software attempts, it doesn't need a great deal of speed... And for the limited use stuff (like getting 'that' part of the firmware) once it's done, we never have to do it again. I know though, it's a bit annoying.
JasonACT is online now   Reply With Quote Multi-Quote with this Post
Old Yesterday, 07:50 PM   #615
jakka351
6FPAAAJGSW6FC1788
 
jakka351's Avatar
 
Join Date: Oct 2015
Posts: 121
Default Re: FORD technical service bulletin : ICC touch screen display

Quote:
Originally Posted by Whiteford View Post
Did someone say J2534 support?
I think it.will work.already without modification.
__________________
https://github.com/jakka351/FG-Falcon

:yelrotf lm


Send me CANBUS stuff
jakka351 is online now   Reply With Quote Multi-Quote with this Post
Old Yesterday, 07:52 PM   #616
Superb
Regular Member
 
Join Date: Nov 2019
Posts: 32
Default Re: FORD technical service bulletin : ICC touch screen display

Quote:
Originally Posted by JasonACT View Post
Yeah, I know, it's slow, sorry...

For the cool things my software attempts, it doesn't need a great deal of speed... And for the limited use stuff (like getting 'that' part of the firmware) once it's done, we never have to do it again. I know though, it's a bit annoying.
Honestly its fine, though if its going to take awhile I may as well just start again with the GT-F dash.

This first run, was just going to be a test
Superb is online now   Reply With Quote Multi-Quote with this Post
This user likes this post:
Old Yesterday, 07:53 PM   #617
JasonACT
Away on leave
 
Join Date: Apr 2019
Location: ACT
Posts: 1,447
Tech Writer: Recognition for the technical writers of AFF - Issue reason: Outstanding work on the FG ICC issues. 
Default Re: FORD technical service bulletin : ICC touch screen display

Ha ha, Jakka... I get it as 406! That's what you get when you're using Window Calculator with a mouse! And the Mk1 firmware is using all of the 256KB of flash it has available, so there's no "adding" to it - only small patches are realistic.
JasonACT is online now   Reply With Quote Multi-Quote with this Post
Old Yesterday, 07:59 PM   #618
jakka351
6FPAAAJGSW6FC1788
 
jakka351's Avatar
 
Join Date: Oct 2015
Posts: 121
Default Re: FORD technical service bulletin : ICC touch screen display

Quote:
Originally Posted by JasonACT View Post
Ha ha, Jakka... I get it as 406! That's what you get when you're using Window Calculator with a mouse! And the Mk1 firmware is using all of the 256KB of flash it has available, so there's no "adding" to it - only small patches are realistic.
Well there is 0x403, 0x406, 0x409.....according to.my.CAN butt sniffing. All BEM related.
__________________
https://github.com/jakka351/FG-Falcon

:yelrotf lm


Send me CANBUS stuff
jakka351 is online now   Reply With Quote Multi-Quote with this Post
Old Yesterday, 08:05 PM   #619
JasonACT
Away on leave
 
Join Date: Apr 2019
Location: ACT
Posts: 1,447
Tech Writer: Recognition for the technical writers of AFF - Issue reason: Outstanding work on the FG ICC issues. 
Default Re: FORD technical service bulletin : ICC touch screen display

The biggest problem with the Mk1 (other than the ELM not being up to the task, due to the high speed of the data extraction's routine) is that it's not designed to be "updated" while it's in the car. You need to get into the programming mode by powering up the unit (from OFF, totally OFF) while sending in a "denial of service" type attack on it! Your car will not like it, unlike the EEPROM (and RAM) stuff I got working on it.
JasonACT is online now   Reply With Quote Multi-Quote with this Post
Old Yesterday, 08:24 PM   #620
jakka351
6FPAAAJGSW6FC1788
 
jakka351's Avatar
 
Join Date: Oct 2015
Posts: 121
Default Re: FORD technical service bulletin : ICC touch screen display

Quote:
Originally Posted by JasonACT View Post
The biggest problem with the Mk1 (other than the ELM not being up to the task, due to the high speed of the data extraction's routine) is that it's not designed to be "updated" while it's in the car. You need to get into the programming mode by powering up the unit (from OFF, totally OFF) while sending in a "denial of service" type attack on it! Your car will not like it, unlike the EEPROM (and RAM) stuff I got working on it.
I am (slowly) piecing together a python script to do it, via socketcan so the ELM won't be a problem. Currently it is not very dynamic, so it will generate the key from an error message if that's what it receives instead of a seed. But have successfully gotten seed and generated key within the script..

After I get a handle on reading the EEPROM with socketcan I will try for the deeper stuff.
__________________
https://github.com/jakka351/FG-Falcon

:yelrotf lm


Send me CANBUS stuff
jakka351 is online now   Reply With Quote Multi-Quote with this Post
This user likes this post:
Old Yesterday, 09:07 PM   #621
Superb
Regular Member
 
Join Date: Nov 2019
Posts: 32
Default Re: FORD technical service bulletin : ICC touch screen display

Laptop went to sleep, starting the dump again.
Sorry
Superb is online now   Reply With Quote Multi-Quote with this Post
Old Yesterday, 09:15 PM   #622
JasonACT
Away on leave
 
Join Date: Apr 2019
Location: ACT
Posts: 1,447
Tech Writer: Recognition for the technical writers of AFF - Issue reason: Outstanding work on the FG ICC issues. 
Default Re: FORD technical service bulletin : ICC touch screen display

Lol!
JasonACT is online now   Reply With Quote Multi-Quote with this Post
Old Yesterday, 09:34 PM   #623
Superb
Regular Member
 
Join Date: Nov 2019
Posts: 32
Default Re: FORD technical service bulletin : ICC touch screen display

Quote:
Originally Posted by JasonACT View Post
Lol!
Silly me.

Now got an error, will start again :(

Quote:
ATZ
ELM327 v1.5
ATM0
OK
Increasing the Security Level
065001003201F400
065002001901F400
056701ED43AA0000
0267020000000000
OK
Uploading SBL
04742000CA000000
0276010000000000
0377550200000000
04742000CA000000
0276010000000000
03779BAC00000000
04742000CA000000
0276010000000000
037732AE00000000
04742000CA000000
0276010000000000
0276020000000000
0276030000000000
0276040000000000
0276050000000000
0276060000000000
0276070000000000
0276080000000000
0276090000000000
02760A0000000000
02760B0000000000
02760C0000000000
02760D0000000000
02760E0000000000
02760F0000000000
0276100000000000
0276110000000000
0276120000000000
0276130000000000
0276140000000000
0276150000000000
0276160000000000
0276170000000000
0276180000000000
0276190000000000
02761A0000000000
02761B0000000000
02761C0000000000
02761D0000000000
02761E0000000000
02761F0000000000
0276200000000000
0276210000000000
0276220000000000
0276230000000000
0276240000000000
0276250000000000
0276260000000000
0276270000000000
0276280000000000
0276290000000000
02762A0000000000
02762B0000000000
02762C0000000000
037F377800000000
037791DF00000000
04742000CA000000
0276010000000000
0377D6F700000000
OK
Running SBL
0571010301100000
OK
Reading FLASH: 00000000, 00005000
OK
Reading FLASH: 00005000, 00010000
OK
Reading FLASH: 00015000, 0006A000
Failed to initiate read mode / complete the read
Superb is online now   Reply With Quote Multi-Quote with this Post
Old Yesterday, 09:36 PM   #624
JasonACT
Away on leave
 
Join Date: Apr 2019
Location: ACT
Posts: 1,447
Tech Writer: Recognition for the technical writers of AFF - Issue reason: Outstanding work on the FG ICC issues. 
Default Re: FORD technical service bulletin : ICC touch screen display

Hmmm, maybe it's best not to do all 5 at once... You did get the one part we need (5000-10000)...
JasonACT is online now   Reply With Quote Multi-Quote with this Post
Old Yesterday, 09:42 PM   #625
Superb
Regular Member
 
Join Date: Nov 2019
Posts: 32
Default Re: FORD technical service bulletin : ICC touch screen display

Quote:
Originally Posted by JasonACT View Post
Hmmm, maybe it's best not to do all 5 at once... You did get the one part we need (5000-10000)...
I pressed reset unfortunately.
So part 5000-10000 is that the exe?
Superb is online now   Reply With Quote Multi-Quote with this Post
Old Yesterday, 09:44 PM   #626
JasonACT
Away on leave
 
Join Date: Apr 2019
Location: ACT
Posts: 1,447
Tech Writer: Recognition for the technical writers of AFF - Issue reason: Outstanding work on the FG ICC issues. 
Default Re: FORD technical service bulletin : ICC touch screen display

From what I understand (latest) EXE is the same in the GTF as it is in the normal FG2.

It's the SIGCFG that's different (5000-10000).
JasonACT is online now   Reply With Quote Multi-Quote with this Post
Old Yesterday, 10:00 PM   #627
Superb
Regular Member
 
Join Date: Nov 2019
Posts: 32
Default Re: FORD technical service bulletin : ICC touch screen display

Ahh I understand the naming of your buttons now.
I'll just dump the signal config then for you now, that one doesn't take long.
Just so you know, last time I had it connected to forscan
AR79-14C025-AB was the 2nd boot loader
AR79-14C026-AH was the strategy
BR29-14C318-AA was the signal config
Superb is online now   Reply With Quote Multi-Quote with this Post
This user likes this post:
Old Yesterday, 10:04 PM   #628
JasonACT
Away on leave
 
Join Date: Apr 2019
Location: ACT
Posts: 1,447
Tech Writer: Recognition for the technical writers of AFF - Issue reason: Outstanding work on the FG ICC issues. 
Default Re: FORD technical service bulletin : ICC touch screen display

Ha ha! I know, right - that BR one is new... 2011, where everything else is Terry SZ numbers 2010.
JasonACT is online now   Reply With Quote Multi-Quote with this Post
Old Yesterday, 10:28 PM   #629
JasonACT
Away on leave
 
Join Date: Apr 2019
Location: ACT
Posts: 1,447
Tech Writer: Recognition for the technical writers of AFF - Issue reason: Outstanding work on the FG ICC issues. 
Default Re: FORD technical service bulletin : ICC touch screen display

Thank you Superb! That's awesome!

https://github.com/Jasoroony/Ford-Fa...n/extracted_fw

The firmware converted over perfectly - and I can see the magic number (at the end) is correct - so I've uploaded it to github. I'll be checking out the differences soon!
JasonACT is online now   Reply With Quote Multi-Quote with this Post
This user likes this post:
Reply

Thread Tools
Display Modes

Forum Jump


All times are GMT +11. The time now is 12:07 AM.


Powered by vBulletin® Version 3.8.5
Copyright ©2000 - 2022, Jelsoft Enterprises Ltd.
Other than what is legally copyrighted by the respective owners, this site is copyright www.fordforums.com.au
Positive SSL