yashsingh1/xdaforums huggingface dataset:
[Windows Mobile Development and Hacking General] wystewart:
According to the 2014 F150 manual, the ignition status is sent by the BCM on the MS-CAN bus to the ACM, and also to the IPC which then re-transmits the message on the ICAN bus to the APIM. Depending on how the APIM works, it may be enough to send to also on the MS-CAN bus, otherwise it should be possible to re-code the message for the APIM.

If the BCM is sending messages directly to the ACM, then it should be possible to find it by recording all traffic when the key is turned, then filtering on the destination address of the ACM. if the BCM is sending a broadcast message, then it will be more difficult to find amougst all the other traffic.

I am also thinking it would most likely be enough to capture all the canbus traffic at key turn on, then simply play it back to the a bench setup of the ACM+APIM. The ACM and APIM would ignore any traffic not addressed to it.

If someone could be so kind to capture some canbus traffic, I'd play it back against my bench setup once I complete setting it up.
[Windows Mobile Development and Hacking General] sheltonfilms:
Well this is a very interesting app. Wonder what causes the unit to display a null ESN?
[Windows Mobile Development and Hacking General] STL1te:
Whoops
[Windows Mobile Development and Hacking General] flsdiver:
What! Is this a tease?

I hope some details are forthcoming.
[Windows Mobile Development and Hacking General] wystewart:
The suspense is killing me ... STL1te great work, looking forward to details.
[Windows Mobile Development and Hacking General] STL1te:
Currently trying to integrate the new navigation app.

I want to test the functionality of the original gps-antenna.

I don't really want to disclose information about hacking. For a start i want to implement all my ideas.
[Windows Mobile Development and Hacking General] DanMc85:
iGo?
[Windows Mobile Development and Hacking General] STL1te:
Navitel.
[Windows Mobile Development and Hacking General] DanMc85:
Nice. Did you find a test mode file or make a modification to boot into CE? I used to do that and mess with custom igo versions back in the day on my pioneer nav that was CE based.
[Windows Mobile Development and Hacking General] STL1te:
Nope. Just found an exploit that allows me to run arbitrary code.
[Windows Mobile Development and Hacking General] DanMc85:
Nice. That's pretty cool. I swapped my system from Microsoft Sync 2 to a Ford Sync 3 Nav system from a crashed F-150, we just reprogrammed it to work in my Fusion, so I haven't tried anything with these "hacks" but watching the progress is great.
[Windows Mobile Development and Hacking General] DanMc85:
Wonder if this would run:

http://www.desnav.com/north-america...maps-for-android-windows-ce-wince-mobile.html
[Windows Mobile Development and Hacking General] akifyilmaz:
youtube.com/watch?v=kAg0yWiXfXI

This man must have gained access to sync II interface. He can't add all of these features simply by adding a module. Right?
[Windows Mobile Development and Hacking General] DanMc85:
Using this or similar... A middle man basically between the sync unit.

www.youtube.com/watch?v=kAg0yWiXfXI

There is one for sync 3 already too

https://youtu.be/cT1BumITVe8
[Windows Mobile Development and Hacking General] wystewart:
Looks like it is done with external hardware and not modification of the sync 2 software. See here.

http://www.sielectronic.com/index.php?m=Products&a=show&id=6

No other way to do the HDMI, external hardware is needed. In the video he says "press sync to switch back to the OEM system" at about 4:38. So it is simply an external box with the look & feel of myford touch for the add-on functions.

The sync 3 video definitely shows external hardware and the use of the add-on app function.
[Windows Mobile Development and Hacking General] rishidhar:
Can you PM me on what hardware was needed and where did you end up buying it from?

Thanks!
[Windows Mobile Development and Hacking General] jethoss:
Along the lines of adding/unlocking features, has anybody looked into what it would take to add Adaptive Cruise Control? I got as far as identifying the needed hardware, but haven't checked to see if there's existing wiring for the radar unit. It looks like there's a radar unit and associated bracket to add just under the front bumper, then replace the left switch assembly on the steering wheel. After that I assume there are changes to the ABD in a few of the modules. That's a feature I'd love to have, and it sounds like it could be done without a lot of difficulty as long as the component installation is reasonably straightforward.
[Windows Mobile Development and Hacking General] sheltonfilms:
There is also a calibration process.

If you want to discuss this further I suggest you make a thread on the respective forum for your vehicle. I think the intent of this thread is just for MyFord Touch related modifications.

I'm more than willing to help you out if you PM where you are starting the thread.
[Windows Mobile Development and Hacking General] COMpulse:
Keep me in the loop as well please. I'm interested in blind-spot warning and lane-keeping as well as the adaptive cruise.
[Windows Mobile Development and Hacking General] Slivsy:
Please lay out CAN messages on Ford focus mk3, if possible.
[Windows Mobile Development and Hacking General] wystewart:
If you have the workshop manual DVD for your car usually the messages are listed there. But you won't find the hex codes there, just the name/purpose of the message.
[Windows Mobile Development and Hacking General] jafisher5:
Tire Pressure

Anyone know what needs changed in the Instrument Panel module to enable the Tire Pressure panel on a Fusion (2014)?
[Windows Mobile Development and Hacking General] DanMc85:
Not possible , only 2015+
[Windows Mobile Development and Hacking General] Weees:
Does anyone know of a way to enable Radio RDS ? This is really annoying me ! For whatever reason Ford decided that all cars shipped to my region should not have RDS enabled (Although RDS is enabled on just about every other car in the market and has been working for a very long time).

When I boot into the Diagnostics mode I can see that there is a flag saying RDS Disabled....... Cant for the life of me figure out a way to enable it (if that's even possible)!
[Windows Mobile Development and Hacking General] DanMc85:
Are you in USA or Europe? It's in 7d0-01-01. First line. Last hexadecimal box. First two hexadecimal digits next to the checksum and the end. Try E3 before the two checksum digits or you can mess with it.
[Windows Mobile Development and Hacking General] Pir8:
Rear view camera

Hi,

Any help regarding activating the rear view camera function would be greatly appreciated.

Already activated the Nav by modifying fist byte 7d0-01-02. Byte 1 to 04

Is there any specific byte I have to modify in order to activate the rear view camera?

Thanks
[Windows Mobile Development and Hacking General] COMpulse:
Not 100%, but I would be tempted to try this.

Feature: With Rear Parking Aid

7D0-03-01 bit 30

Edit:

Post your module data for 7D0-03-01 and we can walk through the change. I see a lot of talk about bytes in here, but in the end it's bits that we're changing.
[Windows Mobile Development and Hacking General] DanMc85:
Just enabled the camera today in my friends 2014 Focus ST.

Camera is in 7D0-01-01 and it is a different hex option depending on the vehicle

~
[Windows Mobile Development and Hacking General] COMpulse:
Does the cam display include the lines overlaid on the video to show where you are going?
[Windows Mobile Development and Hacking General] tent228:
I can receive the RDS text message, but can't use the TMC.

What I need to do to activate the TMC?
[Windows Mobile Development and Hacking General] Pir8:
Hmm. And how would I find out this info ? I have a Ford Escape 2013 with the following data:

7D0-01-01	212B	F002	4057

7D0-03-01	0354	5002	0084

Will try/error brick my APIM module? Can I go back in the event I place the wrong data?
[Windows Mobile Development and Hacking General] Pir8:
Excellent! Thanks I have the camera function active now after trying way too many suggestions. I don't have the actual camera installed yet but I'm now getting this error message a few seconds after putting the car in reverse "Camera is unavailable. Please contact your dealership." I'm waiting for the camera to arrive... :D
[Windows Mobile Development and Hacking General] ulao2:
Anyone know if the etis site is up? Getting 403's
[Windows Mobile Development and Hacking General] DanMc85:
Change the 1 in the first line to a 3.

---------- Post added at 01:41 PM ---------- Previous post was at 01:39 PM ----------

Not sure on TMC, don't have that here in the USA where I am...
[Windows Mobile Development and Hacking General] MarcinXDA:
Please delete url in your post as it was raquested before!

Yes, error 403 in all possible settings (working before).

Ford changed sth in etis and enabling navigation is no longer available.

I hope that server is still open for us, but for sure update changed sth. and now we have no access to the files.

Let's look at it again and find the way to activate.
[Windows Mobile Development and Hacking General] sheltonfilms:
Ford may have updated the ETIS JAVA program (FordEtis Diagnosis and Repair system) with a new URL format/address.

flsdiver decompiled it and found the URL (post 117) originally (if my memory is correct on this 22 page thread).
[Windows Mobile Development and Hacking General] kthejoker20:
What gets me is..... if i buy a carburetor and modify it and use it why doesn't ford lock that down for not using a genuine ford part?

Setting a precedent to not let mechanics customize there car unless a genuine ford part is used.
[Windows Mobile Development and Hacking General] ulao2:
I have IDS and a login for etis but I do not know how to get the new URL. If I go on the URL and click on the changes updates for a vehicle it says "not available at this time".

What is sth?

The server seems to be up but just not responding to the requests for the url string.
[Windows Mobile Development and Hacking General] rioachim:
I'm adding some info that I have investigated or gathered from various sources: Buttons in Climate Quadrant (confirmed) and Shape Rear Parking sensors car overlay (not tested)
[Windows Mobile Development and Hacking General] flsdiver:
They did lock the url down, presumably in response to this activity. Looking at changes to code now. 1st glance/impression, there won't be an open http get url just anybody on the net can call anymore. This was a hole that should never have been left open in the 1st place.
[Windows Mobile Development and Hacking General] sheltonfilms:
Well the F150 forum didn't help much with their 45k view 68 page thread showing how to do it.

More than one way to skin a cat though.
[Windows Mobile Development and Hacking General] MarcinXDA:
something
[Windows Mobile Development and Hacking General] COMpulse:
No 101 option for the climate?
[Windows Mobile Development and Hacking General] Pir8:
Thanks, I got the camera working by changing the first byte to 0x0B but changed it to your suggestion as I found it that way in another Ford Escape. Thanks.

Another thing I'm trying to accoumplish is getting the "Navigation Info" choice in "Settings>Display" on my IPC menu, some folks at fordescape forums managed to do it by using focccus instead of forscan

My only problem now is that I got the OBDLINK MX (Wifi) which apparently doesn't work with focccus as it ask for a com port in order to be able to make the connection. I was wondering if its possible to accomplish the same thing using forscan or any other software but focccus.
[Windows Mobile Development and Hacking General] COMpulse:
I thought FORScan had a CCC section, but it doesn't apply to my car so I'm not sure. Maybe you can modify the CCC data with FORScan.

Also, just a reminder -- I know we've talked about features like Nav, Climate, Parking Aids, Camera, etc....

There's also the AWD gauge and Engine Hours counters. I know the FORScan guys added both into the program for the Taurus but I don't know if they added them for other vehicles. If someone with a Fusion AWD or some other AWD wants to first try FORScan to see if the AWD gauge option is there, and if not test it by modifying the bits themselves, the info is here:

http://forscan.org/forum/viewtopic.php?f=5&t=2012&start=10#p8837

I don't know if the engine hours bits work on any car other than the Taurus / Interceptor. If anyone tries it, be sure you know where to look to see if it turned on:

On the IPC, it's under Information, System Check, scroll to the bottom.

That thread also some info on multi-contour seat settings.
[Windows Mobile Development and Hacking General] DanMc85:
The CCC is there for some cars. Some CCC vehicles such as the USA 2014 focus ST requires the devices booting into the bootloader to access CCC programming. However it is being worked on just not currently supported by FORScan. Already spoke to them about this.

Fusion 2013 and 2014 support AWD Gauge only

Fusion 2015 and 2016 support AWD gauge, TPMS Gauge, and Digital speedo (firmware dependant on speedo)

All 2013+ Fusions support Double Horn Honk disable when door closed while running.

None of these options are currently in forscan but are easy to enable manually.
[Windows Mobile Development and Hacking General] COMpulse:
The FORScan guys added it to the program after I confirmed it for the Taurus, but I told them I could only verify on a Taurus, and I think the option only comes up in FORScan if the vehicle is a Taurus. Anything else we can confirm they can add to the program so people don't need to modify bits themselves. I just only report to them the things I can verify on my Taurus.

So let's nail down the bits for more of these.

Edit:

And I just wanted to remind people that these features are available. I felt like maybe these features had been forgotten or overlooked, even though they are the features that got me playing with this stuff.
[Windows Mobile Development and Hacking General] DanMc85:
Not really anything to nail down. I know all the bits for them all. I have a 2014 fusion. And bought a used 2015 fusion IPC on ebay and messed with most of the bits on it.
[Windows Mobile Development and Hacking General] COMpulse:
By nail down, I mean publish them so they're easily available to everyone.
[Windows Mobile Development and Hacking General] MarcinXDA:
Direct Config is not connected to car but to each hardware, so

APIM settings are valid for all sync2/myford touch radios.

IPC is different for each IPC panel I suppose.
[Windows Mobile Development and Hacking General] fordson04:
Any luck or progress with finding the mirror tilt on reverse, or is that still elusive and hiding...
[Windows Mobile Development and Hacking General] Vadimus_ca:
TMC transmission is being broadcasted, some makes do rely on it instead of SiriusXM Traffic.

In Europe there is no Sirius so TMC is used for Sync 2.
[Windows Mobile Development and Hacking General] tent228:
So which bits are related to sirius？
[Windows Mobile Development and Hacking General] kthejoker20:
I hope this guy puts out the code. This is gonna open the door to android auto, or some type of wifi screen mirroring from our phone to the radio.
[Windows Mobile Development and Hacking General] fric90:
What byte is responsible for inclusion of reception of TMC?
[Windows Mobile Development and Hacking General] ten3or:
Someone please tell me what bit enables HD Radio button in the APIM?
[Windows Mobile Development and Hacking General] oemap:
7D0-1-1 -(forth byte)-0x01

or first set of data, 4th byte, first bit.

HD Radio

0 – Not Available

1 – Available
[Windows Mobile Development and Hacking General] fblasot:
For HD radio don't you need specific hardware also ?

In Europe the "radio with tmc" and the "radio with tmc+Dab digital radio" have different product numbers
[Windows Mobile Development and Hacking General] ten3or:
on Explorers for Russia ACM module has HD radio. I want to enable for other purposes.
[Windows Mobile Development and Hacking General] TScott69:
I think only the SONY audio system has the ability to do HD radio.
[Windows Mobile Development and Hacking General] ten3or:
On all Ru Explorers ltd/ltd+/sport - SONY audio system
[Windows Mobile Development and Hacking General] rioachim:
if anyone can translate these findings, that would be great: http://fordexplorernew.ru/index.php/topic,2780.msg64333.html#msg64333
[Windows Mobile Development and Hacking General] tent228:
Hi, can you give me the as built data of APIM and ACM about the car with "radio with tmc+Dab digital radio"
[Windows Mobile Development and Hacking General] fblasot:
Sorry but I don't have it, my focus has only radio+tmc
[Windows Mobile Development and Hacking General] tent228:
please give me your data! I have the traffic page, and also find the station with TMC. But it is not work
[Windows Mobile Development and Hacking General] SchimiEX:
i´m interessted in TMC, too....

Explorer 2013 Sync2
[Windows Mobile Development and Hacking General] fblasot:
Attached you can find asbuild data (downloaded from FORD, just VIN masked) for my focus 2015 sw 1.5 150hp titanium x, mft 8" with navi enabled from factory, radio 10 speakers w/sub + TMC (no DAB), no rear view camera.
[Windows Mobile Development and Hacking General] tent228:
Thank you so much！I will check it later
[Windows Mobile Development and Hacking General] Weees:
Just wondering if entering a wrong bit somewhere could brick my APIM ? I want to try to follow some instructions posted here to enable RDS, but want to know the risks involved if the changes dont work ?
[Windows Mobile Development and Hacking General] tent228:
The RDS is related to the first number of third group of bits in 7d0-01-01，you can try 0 or E.

And I have try to modify a lot of bits of APIM，it is no problem
[Windows Mobile Development and Hacking General] Weees:
Thanks ,but when I do, then FORSCan keeps saying Checksum is not correct. I have tried several calculators for checksum but It still doesnt work.....I think im doing something wrong with the checksum. Can you please help with calculating the checksum ? :)
[Windows Mobile Development and Hacking General] MarcinXDA:
Don't care about checksum in newest FORSCAN. Just click ok and you will see that checksum is automatically calculated.
[Windows Mobile Development and Hacking General] Weees:
I'm afraid to click yes with the warning sign ! :|

So this is what it looks like for me :

A0B2

How should it look like for RDS to work ?
[Windows Mobile Development and Hacking General] Weees:
Ok, so I managed to change that first bit in the 3rd group to 0 and E and pretty much everything else in between. the result is always one of two things:

Either : it changes to a radio with NO HD and NO RDS (instead I see options for Radio text , which simply either adds or removes the letters Mhz after the frequency, and an option called TA - Dont know what it does and anyway I cant turn it On)

Or no change to my current setup, I see the RDS Option, but cant turn it on. I'm assuming there is something else that needs to be adjusted for this to work ?
[Windows Mobile Development and Hacking General] tent228:
Maybe it related to the ACM?
[Windows Mobile Development and Hacking General] Weees:
Maybe, but I dont know where to look for it in the ACM . Do you have any idea ?

What's confusing me though is that, if it wasnt in the APIM, then would RDS still come up in the diagnostics screen and be flagged as Off ?
[Windows Mobile Development and Hacking General] ten3or:
You can write your ACM config ?
[Windows Mobile Development and Hacking General] DanMc85:
I would compare some ACM data to vehicles that have what your looking for. Ignore the extra ACM data lines that forscan shows. I believe those are radio presets and possibly sat radio serial number if in your area. As it will show more than an as built file has.

---------- Post added at 07:48 AM ---------- Previous post was at 07:48 AM ----------

Yea if you use a OBDLINK MX or similar.
[Windows Mobile Development and Hacking General] rioachim:
Here you go: TMC, some unknown ECALL option and the possibility to turn off that annoying blue screen with time/date, all tested on European Focus

edit: in APIM configuration there is a "Audio Visualizer: Off" setting, does anybody know what that might be?
[Windows Mobile Development and Hacking General] fric90:
do I need to change audio output module to make the TMC?
[Windows Mobile Development and Hacking General] SchimiEX:
tried the TMC byte (bit?) on my Ford Explorer 2013 Sport.... (US import in Germany)

the nav shows a new option with traffic list....

check out if it works later or maybe tomorrow.....

Thx :)
[Windows Mobile Development and Hacking General] COMpulse:
Sounds like something to enable!
[Windows Mobile Development and Hacking General] fblasot:
ECALL = emergency call

In case of car accident the sync calls 112 (Europe) or 911 (America)
[Windows Mobile Development and Hacking General] mrclean64:
What app does the info in the screenshot come from? Looks extremely useful!
[Windows Mobile Development and Hacking General] COMpulse:
http://www.compulsivecode.com/Project_AsBuiltCompare.aspx
[Windows Mobile Development and Hacking General] seadiel:
The explore forum has a good thread going on changing as built data/software.

http://www.explorerforum.com/forums/showthread.php?t=442848
[Windows Mobile Development and Hacking General] ptodic:
Did anybody try to upload to Sync the EA5T-14D544-AD.zip (.SEC file)? I see that it is the same file for NA and Europe. It is a complete basic operating system image of the Sync which includes the english language. During normal Sync upgrade it is not used. I suspect that it is used when the ford dealer replaces the unit with a new empty one and this is the first thing they have to upload (maybe even with etis-pc connection not through usb)
[Windows Mobile Development and Hacking General] sheltonfilms:
Can you link to the original thread?

It's funny because I found this thread while trying to figure out more information for my thread.
[Windows Mobile Development and Hacking General] seadiel:
Sheltonfilms,

I been playing with the forscan software, looking at your pictures from the explorer forum under the microchip section (programming) you have many more options compared to my 2013 Fusion. The only modules I see for me are the BdyCM & PSCM available in the programming/configuration section. I am assuming you have the extended license? does that then allow more modules to appear in this area for configuration or maybe its my ELM327?

Also found a website that lists the SYNC update files and a description:

http://www.2gfusions.net/showthread.php?tid=346

I am thinking the BT4T-14D546-DA and/or BT4T-14F500-BE has something to do with the NAV license, but can't seem to find these two files to look at them.

Part Number BT4T-14F500-BE

Description ...

Part Number BT4T-14D546-DA

Description SERVICE PROVISIONING. ONLY SELECT WHEN A NEW MODULE IS INSTALLED.
[Windows Mobile Development and Hacking General] sheltonfilms:
Most ELM327 adapters only read HS-CAN lines. You need to add a DPDT switch to switch pins over so you can read the MS-CAN modules as well.

I can't post links yet (post count below 10), but if you google "How to access MS CAN bus using FORScanV2 and modified ELM327" you will find a Forscan forum post on how to add the switch to see the other modules.

BTW shoot me your VIN (pm me) and I should be able to tell you all the modules that should pull up.