yashsingh1/xdaforums huggingface dataset:
[Windows Mobile Development and Hacking General] falcon503:
Junior member

That's correct :ACM 727-04-01.What I did:my friend has same Taurus as me(without Navigation).The Limited Taurus has three different issues with different options.Fortunately the friends Taurus has a heated seats as well as a HD radio.I had checked his data by VIN,next add to my ACM and Bingo: it's

works.I can send you tomorrow copy of my ACM(I'm out of city right now).
[Windows Mobile Development and Hacking General] Twonks:
Hi all from the UK. :D

Not sure if this has been covered before. I've searched and not found anything other than the few posts above of a similar nature.

I have a Focus ST mk3.5 2016 and am trying to disable the factory EQ on the Sync2 MFT, for use with aftermarket amp/dsp and speakers.

Managed to get the dealer to turn off the fake engine note through the stereo but now want the high level speakers turning into low level flat output, as opposed to the factory EQ on the system.

I've found on forums that the codes are in the ACM and I have Forscan and Focccus but as the few posts above nothing lets me into the ACM to input codes.

Please can anybody help and tell me if it is possible or do I have to wait for an update to give access. (On Forscan 3.8)
[Windows Mobile Development and Hacking General] fblasot:
Yes, the actual Forscan version cannot change ACM value for the Focus, but they are working on a version that will do (they sent me the alfa...).

In this moment ACM data for my focus mk3.5, sync2 mft sony premium 10 speaker, is

727-01-01 0030 (binary 00000000 00110000)

but I don't know each bit what means...
[Windows Mobile Development and Hacking General] thodoris1985:
Hello, I can see that you are an expert on these issues!

Just wanted to ask, in case I dont have the original connector in the right back luggage, is there anything that I could do (some part number of this harness) in order to run it myself to the front (or maybe just run a couple of single cable/wires to the front (and how many AWG)?

Where does it connect at the front? (I only have the wirring diagram of the FF3 and not FF3.5)

You also mention in some other post of yours, the need of "cable F1ET-14D466-BAE (Finis 1915488)". This is a cable for the camera to connect to the main harness, or is the harness that runs from the back of the car, to the front?

Thanks
[Windows Mobile Development and Hacking General] fblasot:
Hi thodoris1985,

If you don't have the original connector in the right back luggage (or you have it but unfortunately video signal is not connect up to the sync2...) then I think the best solution is to install a classic rear camera and bring connection up to the sync2; some Italian users used the cable for the LINE-IN and then change the position of the AWG LINE-IN to the correct pin for VIDEO IN directly in the plastic connector.

Of course, you loose LINE-IN function, if you need it then you have to wire a new cable and buy 2 AWG.

Pin position in the APIM connector

LINE-IN channel L (left)

L+ 10

L- 11

VIDEO-IN (for rear camera)

Video+ 14

Video- 15

Cable F1ET-14D466-BAE (Finis 1915488) is only for the wagon and is the one that connect the original rear camera to original connector in the right back luggage.
[Windows Mobile Development and Hacking General] thodoris1985:
fblasot thank you very much for your reply.

I have some more questions:

I already disassembled the luggage, and I think I don't have it :(

It should be somewhere in this picture, right? (I made the disassembly a few months ago, and back then I was looking for an IPM-B module so I didn't check for any connectors)

This picture is from my right side of the luggage: postimg.org/image/4c7m7jywj

Thanks to your posts, I realized that I dont need the IPM-B though (I am on FF3 facelift).

you mean the "camera F1ET-19G490-AC (Finis 1873024)"? (this is the part number for the 5-door FF3.5)

LINE-IN is for the white lines? where do I have to connect this?

Do I really need an AWG number 2? (I think this might be a typo?!)

Also, L+ and L-, what is this for? I connect them on 10 and 11 on the APIM?

APIM 14 and 15 are already connected from a scrap RCA cable I had, and I will be testing it in a couple of days with a home camera.

sorry for all these questions. I have read the whole thread, but there is so much info the different things that I don't need them right now and I got lost a bit.

Thanks again
[Windows Mobile Development and Hacking General] fblasot:
For FF3 facelift you mean focus mk3.5 ? If yes, then you are right and don't need IPM-B module.

For "classic rear camera" I mean a compatible camera...yes like the chinese...sorry for the misunderstanding...

From pictures you post, I think you don't have the wagon, so a good solution, since you don't find the original connector in the luggage, could be the "chinese" camera with the boot/luggage opener likes picture you posted.

Please note that original ford camera F1ET-19G490-CC is only for the wagon, for the hatchback should be F1ET-19G490-AC, and they are only the standalone camera (for the wagon with mount frame).

LINE-IN is the audio in, you can find jack near the SD Nav Card.

For the white active steering lines you need original ford camera that uses LIN canbus, no other solutions.

L+ and L- are audio-in Left channel (the jack is stero L and R).

If you wish to add a new cable instead of use the audio-in cable, then you need 2 pieces of AWG pin (I don't know size/dimensions) specific for the APIM connector.

If you have connected to APIM pin 14/15 an RCA cable then the chinese camera could be connected there !

But if you need both (video in for dvd player and rear camera) then for video dvd you should use pin 34 Video+/35 Video-/36 Shield, and change value in APIM configuration to get "VIDEO IN" button in sync2 screen.

Sorry for my english...
[Windows Mobile Development and Hacking General] thodoris1985:
Your english is just great (for me at least :) )

Original parts that I have listed so far (without any wiring loom) for the focus mk3.5 hatchback:

If I go on this solution I will try to find a second hand camera for sure.

I also found some wiring diagram that seems to be for the facelift model here: postimg.org/image/m4jk4zv2j

One last question about that... Any idea where is the pin 32 of the BCM located? (I am confident on opening plastic parts of the car, as I have made quite a few changes till now)

For the after market (chinese clones) I am not quite sure that they have audio, so I guess that I do not need that part. I guess that just power and pin 14 and 15 will do just fine.

Once again..... Thank you! :)
[Windows Mobile Development and Hacking General] fblasot:
That diagram is for model without sync2 mft (pins for rear camera and BCM are the same with sync2).

BCM module is under the feet of passenger, is the same box of fuse junction box inside car, and it has a lots of connector, don't remember C2280B which one is, but I didn't play with it since my original cable is

Generally rear camera, both original ford and chinese, don't have audio.
[Windows Mobile Development and Hacking General] Twonks:
Thanks for your comments, and it is great to know they are working on our cars !

Not sure if you have found the thread below, but it goes into some depth on the coding for ACM. Agreed it is not for our car but seems pretty close.

I also posted there to see the thoughts of others, but have not yet got a reply - not that I need it now as you have answered here ;)

edit. I can't post links due to being new. It is a thread on 2gfusions.net.
[Windows Mobile Development and Hacking General] thodoris1985:
You are right, I just realized that there are different pins for the APIM (or however is called on this version)

sorry for the confusion.

So LIN is on the BCM pin 32 for SYNC2?

update. I just pluged in an RCA camera that I have (not for car, but for personal use). and I got it working.

surprisingly I got the sensors working as well (zoom is not working, but no big deal). So, I will go for the after market solution (china version)

postimg.org/image/66ym9phe3

postimg.org/image/keoaycu2z

Where would you suggest connecting the power of the after market camera? constant power or backup lights?

Maybe backup lights will have some delay (camera power-up)?
[Windows Mobile Development and Hacking General] fblasot:
LIN is used with original ford rear camera to draw white active sterring lines, it not connected to APIM (sync2).

Compatible rear camera only draw coloured static lines.

Zoom not working maybe LIN not connected ?

I took power from +12v of the Park Assist Module.

I would suggest to don't use constant power, better backup lights; the delay I think will be 1 or 2 secs, just the time of sync screen to switch; if delay will be more, then you can always start from fuse F29 (that is for original camera...) and go to camera.

PS: Yes, I know 2gfusions.net.
[Windows Mobile Development and Hacking General] thodoris1985:
Thanks fblasot for all the heads-up,

I know about the zoom and white lines that are directed from LIN. I just thought that the sensor symbol would also be directed from LIN, but I was wrong!

Sensor symbol was my biggest "issue", but LIn is not needed for that! :)
[Windows Mobile Development and Hacking General] rioachim:
F29 in the Rear Junction Box would be best. Out of curiosity, did you try the active lines edit inside the BCM? (726-01-06, add 8 to whatever hex value is the first digit, or more exactly set leftmost bit 0 to 1)
[Windows Mobile Development and Hacking General] thodoris1985:
No, I was not aware of that change. but I doubt that this will work though, due to the fact that nothing will be connected to the BCM with an after market camera.

However, I will test it when I get the backup camera from China (haven't ordered yet).

If someone has an after market camera to suggest, please pm me (so that we will not mess-up this thread with irrelevant info)
[Windows Mobile Development and Hacking General] fblasot:
I can confirm that if you enable​ rear camera bit in BCM you will get DCM error if original camera is not present, and if I remember correctly the screen will goes to black.
[Windows Mobile Development and Hacking General] thodoris1985:
ok. I will not do it then.

However, when I run the RCA for the camera I will also run an AWG to the BCM and I will not connect it to anything....Just in case I ever install an original camera.

Thank you all for the tips and all your help
[Windows Mobile Development and Hacking General] yoko89:
ok my car i can't find the nav application installed to unlock it can any body help?
[Windows Mobile Development and Hacking General] thodoris1985:
I might be slightly off topic and I would like to apologize about that.

However, I want to connect an auxiliary 12V outlet on the luggage compartment and I wanted to ask what is this the correct way of doing it?

Should the fuse box be removed and connect the cable from the back of the fuse (F25) on the fuse box?

Thanks

Not sure what you mean by that.

You want to enable navigation? What is your car equipped with (e.g. 8" touch display, gps antenna etc)?
[Windows Mobile Development and Hacking General] fblasot:
Yes, I would do it in that way...

Be sure to attach the new wire to the correct side of the fuse. or you will have +12v direct and not fuse protected.
[Windows Mobile Development and Hacking General] thodoris1985:
[MENTION=1116899]fblasot[/MENTION], you are the best!

Thank you
[Windows Mobile Development and Hacking General] mickrg123:
I know OBDGenie has hacked MyFord touch to add nav. Does anyone have hacked files to add to zip to upgrade to navigation?
[Windows Mobile Development and Hacking General] fblasot:
If you already have enabled navigation in apim, then you need real nav license or swf way. The navigation application can be found in previous post, look for update_af.zip.
[Windows Mobile Development and Hacking General] vincentka:
:good::good: no problem at this time :D:D
[Windows Mobile Development and Hacking General] Wannab007:
all i would like to do is rollback a sync update that screwed up my bluetooth connectivity, but i cant find any way to do it
[Windows Mobile Development and Hacking General] artumis111:
7d0-01-01 2221	9000	22ce
[Windows Mobile Development and Hacking General] lenko1:
See Post 408 here: https://xdaforums.com/windows-mobile/general/myford-touch-navigation-activation-t3368080/page97
[Windows Mobile Development and Hacking General] Vispen74:
I have searched the thread for video in motion, but haven't found any concrete about it.

Is it possible to get video in motion with the A/V input?

Skickat från min FRD-L09 via Tapatalk
[Windows Mobile Development and Hacking General] manniep3:
Nav in ipc

Has anyone found out how to enable nav in ipc of Taurus? I know compulse was working on it but can't find if it was ever figured out thanks.
[Windows Mobile Development and Hacking General] COMpulse:
Nav IPC taurus	- 720-01-02	bit 13 (starting at zero) should be off (* * * * * * * * * * * * * 0 * *)

( i take no credit for this )

(Edit: Subtracting 4 from the 4th hex character would probably be another way to say it)

---------- Post added at 08:08 PM ---------- Previous post was at 07:58 PM ----------

You could try:

2221 9001 22ce

If ce is your checksum, change to cf i think
[Windows Mobile Development and Hacking General] cavemanb:
Depending on the year of your car, you can try this
[Windows Mobile Development and Hacking General] vincentka:
Good IDEA :good::good:

vinc

ps. I can sell oryginal A6 cards (4 pieces) -
[Windows Mobile Development and Hacking General] syrusas:
Hi guys,

So, I have a 2012 Focus with MFT from US. Imported to EU.

Maybe you can provide me with some instructions, what digits I should change to get RDS and/or Euro frequencies?

ACM data

ACM	Data1	Data2	Data3
727-01-01	10A0	F400	00D4
727-01-02	0031
727-02-01	2E5F
727-03-01	1446
727-04-01	0001	0135
727-05-01	3007	2F18	5B0D
727-05-02	765B	572F	0793
727-06-01	3900	3400	3BDD
727-06-02	003D	003F	00B2
727-06-03	4100	5C00	3509
727-06-04	0033	000A	0075
727-07-01	0300	1A00	2376
727-07-02	0026	0028	0085
727-07-03	2F00	5C00	35F8
727-07-04	0033	000A	0076
727-08-01	090F	2902	1791
727-08-02	1F36	4655	7AA2
727-08-03	0217	1F36	40E7
727-08-04	0E27	4C7C	5B92
727-08-05	400E	274C	0905
727-08-06	0F29	7051	5D92

APIM DATA

APIM	Data1	Data2	Data3
7D0-01-01	A32B	E103	C04B
7D0-01-02	0408	6300	0049
7D0-02-01	5553	0001	0083
7D0-02-02	0000	0000	00DB
7D0-02-03	0000	DC
7D0-03-01	024D	4700	0071
7D0-04-01	0103	0200	00E2
7D0-04-02	0003	E0

What should I change to get RDS and / or Euro frequencies?
[Windows Mobile Development and Hacking General] rioachim:
Try:

ACM	Data1	Data2	Data3
727-04-01	0303	0235	(35 can be recalculated by Forscan)

APIM	Data1	Data2	Data3
7D0-01-01	A32B	E003	304B	(4B can be recalculated by Forscan)
7D0-02-01	4C54	0001	0083	(83 can be recalculated by Forscan)

you should also install European 3.10 version that I posted: https://xdaforums.com/showpost.php?p=72196212&postcount=937
[Windows Mobile Development and Hacking General] syrusas:
Downloaded European 3.10, will try to update it.

Also will try to change APIM and ACM values after the update in an hour or two.

EDIT: So, everything updated successfully.

Changed values to those above.

Radio works, all bands are accessible using 0.25 increments. So 101,0; 101,25; 101,50 and etc.

But, no RDS.

Station and song names are shown in a few places, but not in a main screen. Well look at the picture attached.
[Windows Mobile Development and Hacking General] MarcinXDA:
What update number you mean? The latest is 3.08.15128
[Windows Mobile Development and Hacking General] flsdiver:
Over the last week, and many compares of as build data, i had come to the same conclusions on my truck.

7d0-01-02. Byte 1 = 00 No Nav. Byte 1 = 04 with Nav.

Finally got APIM written with 04 data. Turn key off, turn on, sync black screen for a bit, then performing routine system maintenance.... for about 2 mins.

I thought...cool. Sync comes back on, no nav in top right corner... :(

Also did a master reset after this, no luck.

This is still important, because now my truck throws a DTC on the APIM for B1215 External memory card.

Seems to do it anytime i remove the NAV card now. I had never seen that DTC before today.

I am going to clear the DTC and leave the new NAV card in...see if DTC re-appears or not.

So, this may well be part of the story, but not yet the whole picture.
[Windows Mobile Development and Hacking General] COMpulse:
I may have read somewhere that the maps stay on the SD card. Not sure. I'm still new to the Nav stuff so I may be full of crap.
[Windows Mobile Development and Hacking General] seadiel:
I have a copy of this .cab and compared the digital signatures to a file that does work and it is exact/serial/date/ numbers everything. I think there is more to the file that we cannot see in the strings that cant be extracted. The system also may use this error message as a general error message in addition to signature verification error.

I have tried installing the nav files then used this file did not work. I have placed the unit in safe mode then tried this file did not work. I am going to try next changing the ABD then go into safe mode install the navigation files and try this file while in safe mode.

My guess is we need the SERVICE PROVISIONING(BT4T-14D546-DA) file ran first before applying the " BT4T-14F500-BE" file and have the ABD changed.

I compared my 2013 Ford Fusion Energi ABD with one with NAV and one without and my hex values are much different to everyone that notes the 04.

In my case 7D0-01-02 = 0409 0080 80E7 is with NAV.

Also note none of these two ABD I compared have backup camera
[Windows Mobile Development and Hacking General] COMpulse:
I will be anxious to see your progress and discoveries. You're far deeper into the sync/windows parts of this than I am.

It looks like you've got the 04 byte that everyone is talking about. For Nav, I wouldn't worry about the other bits or bytes at this point.

(Also, at some point it should be mentioned that the 04 byte as a whole isn't the focus here. It's just one bit within that byte that seems to indicate Nav). 00000100
[Windows Mobile Development and Hacking General] seadiel:
Ah yea you are right I do have the 04 byte..:o
[Windows Mobile Development and Hacking General] asmblur:
2016 Fusion SE w/o Nav here. Can confirm that bit 2(i.e. 0x04) is 0 for 7D0-01-02 in my ABD.

I'm thinking that the Nav software provisioning/registry setting is likely done as part of the SYNC update process based on ABD at time of installation so your changes may not fully be reflected until you run an update. I assume you're running 3.8 already and I'm don't know if SYNC will allow you to re-install the same version of "update" via USB or if you'd have to go the OASIS route(WSM section "SYNC Module [APIM] Standard Programming")..

You could also try doing a "Hard Reset" followed by a Master Reset.
[Windows Mobile Development and Hacking General] wystewart:
How did you modify the APIM as-built? With Forscan?

Does anyone know if the camera can be enabled by only changing the as-built?
[Windows Mobile Development and Hacking General] rioachim:
I was looking for BT4T-14D546-GA.ZIP file, but instead I stumbled upon this reboot file (the system will reboot the next time you start the car). I am attaching it here, you never know when it might come in handy

update: it might not run on v3+
[Windows Mobile Development and Hacking General] flsdiver:
I had same thoughts, especially after it went into 'performing routine maint mode'.

I am latest build and when plug usb in, already installed blah, blah.

So, i reset the apim to original and back to 04 (yes i know only 1 bit) with the usb in, thinking it may load what it needed at that time, no luck on that.

Was trying to add individual cabs with single entry autoinstall.lst. Failed last night on the EA5T-14F497-AD.zip too big, that is biggest, so only 2nd one i tried. So i will play more with that tonight, going in order this time.

"hard reset" means what? Pull battery for 5 minutes?
[Windows Mobile Development and Hacking General] asmblur:
"Hard Reset":

1. Remove any devices connected to the USB port(s), audio input jack/socket (if equipped), Secure

Digital (SD) slot (if equipped), or RCA jacks (if equipped).

2. If your phone is paired to SYNC, on your phone you should delete the Bluetooth pairing entry for "SYNC" and on SYNC should delete the entry for your phone. Not sure that this is important or if it is just suggested to avoid pairing issues later, just what I've read in the workshop manual.

3. Disconnect the negative battery cable for 1 minute, then reconnect it. More than 1 minute won't hurt but my WSM says 1 minute and I doubt there is need for more than this.

4. Turn on vehicle and do a SYNC "Master Reset".

Also, are you sure your Nav card is good? Have you any other SYNC vehicle with Nav to try it in to verify the card is not bad?

---------- Post added at 01:18 PM ---------- Previous post was at 01:10 PM ----------

also, when you cleared bit 3 of 7D0-01-02, did the DTC stop occuring?
[Windows Mobile Development and Hacking General] sheltonfilms:
While you guys are still trying to figure out the secret ingredient to the cake recipe, I think I figured out the recipe for the frosting.

All navigation cars have the 7D0-01-02 bit 5 changed in the APIM.

But also the the IPC (720) and ACM (727) have bits changed:

720-01-01 bit 14 (IPC)

727-04-01 bit 23 (ACM)

The IPC is probably to enable the navigation section on the RH side of the IC. I think the ACM may have to do with cutting the volume with the navigation voice comes on.

Figured these out using 2013 Explorer ABD and using COMpulse's program.

Mmmmmm.......cream cheese.
[Windows Mobile Development and Hacking General] seadiel:
Comparing the 2013 Fusion ABD with non nav/ nav the 720-01-01 are the same between the two for me.

For the 720 block the only one's different for me when comparing a nav vs non nav.

720-02-02

(1000 F833 ) NO NAV

(0000 F823 ) With NAV

720-05-01

(D0E8 0100 00E6) NO NAV

(D0F8 0000 00F5) With NAV

727-04-01 (ACM)

(0001 0255 53DE) NO NAV

(0001 0155 53DD) With Nav
[Windows Mobile Development and Hacking General] COMpulse:
Just to clarify, these bit numbers are left-to-right, starting at zero, across the entire module data.

So data1 is bits 0 thru 15, data2 is bits 16-31, and data3 is bits 32 to 47.
[Windows Mobile Development and Hacking General] sheltonfilms:
Here is what I got for 2013 Fusion NAV/Non NAV:

720-05-01 bit 11 (3rd Hex)

727-04-01 bit 23 (6th Hex)

7D0-01-02 bit 5 (2nd Hex)

This is using 20 cars (4 with nav, 16 without)
[Windows Mobile Development and Hacking General] COMpulse:
So it seems like what we're seeing here is that the Fusion IPC uses a different module address in the IPC to indicate Nav is enabled. This may explain why the Fusion can also have additional gauges enabled (like Tire Pressure). I assume the fusion IPC is a newer version of the IPC in the Taurus. However, this would also mean that comparing across different vehicles (or different years) won't work unless you are sure that the modules are the same.

My Taurus research jives with these so far:

727-04-01 bit 23

7D0-01-02 bit 5
[Windows Mobile Development and Hacking General] flsdiver:
Found the same bit last week, and already tried with 7d0-01-02 bit set as per above discussion...this one didn't do anything that i could tell, at least until NAV is on, then maybe.