Welcome Anonymous !

Everything you need to modify your ride
 

Interior Modifications

BA Falcon Instrument Cluster EEPROM Programming

Specific interior modification information for Ford BA and BF Series Falcons, Fairmonts, Fairlanes, LTD's and FPV models.

Postby TazzI » Wed Jan 21, 2015 2:06 am

Rerouter wrote:The eeprom is spi type??? trace him out and see where he connects, that will be at least 1 set of your spi pins, in this arrangement i would imagine a few devices to be in parallel with the eeprom each with a chip select line, if so you could hijack the chip select line to use your own custom display, or at-least read-modify-write the content,

Nah nah, must of mis-read me. Im *assuming* the LCD's on the cluster are SPI. Could be I2C for all I know! Was hoping I could find a nice little set of "dev/factory" header pins. Or a jtag or something alike. Or, Like iv done on some holden stuff. Probe the mcu chip using the bus pirate and try identify what protocol is being used.. and decrypt some of the basic commands.

Although.. I had a datasheet for that to identify what pins did what so I could quickly see which were spi!
I could alternatively just hoop up to all the LCD pins to the bus pirate and enable the basic oscilloscope . It has protection for over 5v signals so if the LCD runs on 12v rail then doesnt even matter if I connect up to that.
Ill write down all the chips on board and see if there isnt an LCD driver or something that we can interface with. Will definitely be probing the BA/BF ICC's eventually since they have a perfect little SPI (its even written on pcb!) header to connect up to the LCD's.

Rerouter wrote:And for the love of... buy one of these already rather than risking tearing an eeprom in half,
http://www.ebay.com.au/itm/858D-Desolde ... 1609993734 , combine it with some pen flux and leave it set to 300 degrees,

Been looking for a desoldering hot air gun but wasnt sure how "reliable" those cheap units were. If its anything like buying a cheap hot glue gun.. the bastards will start melting them selfs (good one ozito!). But for $50.. why not?!

Rerouter wrote:If you must use an iron, then add excessive solder and lay the iron along the troubled side, its most likely the ground plane causing an issue on a ford, so you will need to get a ridiculous amount of heat into that piece of copper,

But since Iv only got the ion at the moment, Ill be sticking to it for this one read. Yeah, thats what I did for the easy access side. Little bit of solder then applied ion on all 4 pins and that side lifted without any force or issues. I still havent done the other side since I havent worked out how with that stupid component sitting pretty much directly on one pin. Cant get the ion on all 4 without clipping it.. soo as much as I dont want to, Ill have to slightly lift that one pin, then lift the other 3 together.


Rerouter wrote:you should be able to tell fairly easily from the mileage line whether or not the dump is read correctly, generally reading the wrong type will either result in doubled content, (every other byte, then repeated from half way down the dump) or doubled bytes, both of which should be eaily obvious,

Thats what I was hoping. But, I wont resolder the eeprom until Im 100% sure Iv gotten a clean read on it. Might pop over to jay car and pick up a dip8 socket. But, the eeprom legs are petty small and thin so I dont know how much of a beating it can take with constant pulling from the socket.

Cheers Matt Ill use that also as a check byte.
User avatar
TazzI
Moderator
 
Posts: 986
Images: 2
Joined: Thu Dec 22, 2011 8:02 pm
Has thanked: 16 times
Been thanked: 41 times

Postby TazzI » Wed Jan 21, 2015 1:18 pm

Toooooo easy.

Got it off by simply soldering all the pins together, apply heat and away she goes! ll of about 5secs to remove the eeprom. Then applied solder wick to remove excess solder from PCB pads and eeprom pins.

Attached is the eeprom read. Hows it looking? I got a clean read then did a second verification read to ensure it was correct. Havent checked the odo calc or ee version yet

(never mind.. uploading doesnt seem to be working!). Let me just chuck it up online so people can download it.

The info ontop of the cluster is as follows:
GHIA
3R23 10849-FE
SW = 0203251
HW = 05
EE = 1.02
CI = 08
14/03/03 10:16 2456

*Edit
Looks like everything matches up!

BA_BF_354113km_EEPROM .bin
User avatar
TazzI
Moderator
 
Posts: 986
Images: 2
Joined: Thu Dec 22, 2011 8:02 pm
Has thanked: 16 times
Been thanked: 41 times

Postby aumatt » Wed Jan 21, 2015 4:45 pm

The read looks good,

Seat Belt Reminder - ON
Traction - On
Police Mode - On
4 x DTC's
Autolights
High Series Cluster

There are two LCD drivers , PCF8576C that drive the LCDs. A few other chips that control the indicator drive etc.

Also can you explain a bit more your IDS setup, scantool and software etc. Wouldnt mind setting it up on my bench also.

Matt
aumatt
Starting Ignition
 
Posts: 55
Joined: Sun Jul 17, 2011 1:33 am
Has thanked: 0 time
Been thanked: 0 time

Postby TazzI » Wed Jan 21, 2015 5:00 pm

Easy as. 5min work with the correct technique and tools.
Image

Ill chuck up all the commands and cluster responses for this clunky IDS software next. Theres only like 6 things you can change. Bit disappointed in that!

There is something I do recall reading in in that ba/bf scantool fun thread. That certain models would get a "two byte" response whereas other models would get a "one byte" response for certain things. I recall it being something to do with the shift alert? or one of the led alerts?.
I think this is where that additional "ABS" parameter pops up between the different models.
User avatar
TazzI
Moderator
 
Posts: 986
Images: 2
Joined: Thu Dec 22, 2011 8:02 pm
Has thanked: 16 times
Been thanked: 41 times

Postby TazzI » Wed Jan 21, 2015 5:06 pm

aumatt wrote:The read looks good,

Seat Belt Reminder - ON
Traction - On
Police Mode - On
4 x DTC's
Autolights
High Series Cluster

Hmmm.. I cant get into the diagnostics menu to see the DTC's... need a stupid ecu for IDS to acknowledge Im in a car. I think the other info can be brought up in some other menus which also gives part numbers, production date ect.

But its that Low Series/High series thing I saw mentioned in that thread. Only high series clusters responded back with two byte responses for one of the tables requested?! (I think!).

aumatt wrote:There are two LCD drivers , PCF8576C that drive the LCDs. A few other chips that control the indicator drive etc.


Oh.. thanks. I really need to get a high res camera to see these things better.
Straight from a fact sheet...
"The PCF8576C is compatible with most microcontrollers and communicates via the two-line bidirectional I2C-bus"
Ohhhh custom lcd integration here we come!!!!!


aumatt wrote:Also can you explain a bit more your IDS setup, scantool and software etc. Wouldnt mind setting it up on my bench also.

Ill send a PM matt. Alot of f'ing around to get it working originally due to lack of documentation. If anyone else is interested in picking up a VCM, let me know and Ill help out where possible. ;)
User avatar
TazzI
Moderator
 
Posts: 986
Images: 2
Joined: Thu Dec 22, 2011 8:02 pm
Has thanked: 16 times
Been thanked: 41 times

Postby TazzI » Wed Jan 21, 2015 5:43 pm

SDA,SCL and ground.. out comes the bus pirate for some tinkering 8-)
User avatar
TazzI
Moderator
 
Posts: 986
Images: 2
Joined: Thu Dec 22, 2011 8:02 pm
Has thanked: 16 times
Been thanked: 41 times

Postby aumatt » Wed Jan 21, 2015 5:58 pm

Tazzi, feature set on BA is one byte for low and two bytes for high. BA2 and above return two bytes as there are additional bits required for the newer revision of ABS.

Matt
aumatt
Starting Ignition
 
Posts: 55
Joined: Sun Jul 17, 2011 1:33 am
Has thanked: 0 time
Been thanked: 0 time

Postby TazzI » Wed Jan 21, 2015 6:22 pm

aumatt wrote:Tazzi, feature set on BA is one byte for low and two bytes for high. BA2 and above return two bytes as there are additional bits required for the newer revision of ABS.

Matt

Ah so thats whats going on with that additional ABS parameter IDS shows on the newer Tear codes I enter. Fair enough.

Well Im hooked onto up to the I2C bus and logging away...

Image
User avatar
TazzI
Moderator
 
Posts: 986
Images: 2
Joined: Thu Dec 22, 2011 8:02 pm
Has thanked: 16 times
Been thanked: 41 times

Postby TazzI » Wed Jan 21, 2015 6:38 pm

So lets break down whats going on here:
Code: Select all
[0x70+0x03+0x87-0x00+0x00+0x00+0x00+0x00-0xF0+0x00+0x00+0x00+0x00+0x00+0x00+0x00+0x00+0x00+0xC5+]
[0x70+0x03+0x87-0x00+0x00+0x00+0x00+0x00+0xF8+0x00+0x00+0x00+0x00+0x00+0x00+0x00+0x00+0x00+0x62-]
[0x70+0xC0-0x21-0x80+0x00+0x00+0x00+0x00+0xFC+0x00+0x00+0x00+0x00+0x00+0x00+0x00+0x00+0x00+0x18-]
[0x70+0xE0-0x21-0x80+0x00+0x00+0x00+0x00+0x7E+0x00+0x00+0x00+0x00+0x00+0x00+0x00+0x00+0x00+0x0C+]
[0x70+0x02+0x3C+0x00+0x00+0x00+0x00+0x07-0x80+0x00+0x00+0x00+0x00+0x00+0x00+0x00+0x00+0x00-0x15+]
[0x60-0x03+0x87-0x00+0x00+0x00+0x00+0x00+0xF8+0x00+0x00+0x00+0x00+0x00+0x00+0x00+0x00+0x00+0x62-]
[0x70+0xC0-0x21-0x80+0x00+0x00+0x00+0x00+0x7E+0x00+0x00+0x00+0x00+0x00+0x00+0x00+0x00+0x00+0x06+0xA8+]


So first off.. the PCF8576CT omits the LSB when addressing a component.. so all these captures first byte (address) need to be converted appropriately.. by omitting the LSB.. so it should be:
0x70 = binary 0111 0000 thus = 0111 000 = 0x38

Cool! Based on the datasheet, 0x38 is one of the PCF8576CT Two I2C-bus slave addresses.
User avatar
TazzI
Moderator
 
Posts: 986
Images: 2
Joined: Thu Dec 22, 2011 8:02 pm
Has thanked: 16 times
Been thanked: 41 times

Postby Rerouter » Wed Jan 21, 2015 6:51 pm

Ok, after looking over your dump, and doing a little analysis,

0x10-0x13 looks to be the serial number in some manner,

Places to look for autolight, and high/low series, switch
0x19
0x1D-1F
0x55-57
0xA8
0xD6

The 4 error codes i think are at
0xBA-BB + BD
0xC2-C3 + C5
0xCA-CB + CD
0xD2-D3 + D5

Lets see what we can dig up,
Rerouter
Starting Ignition
 
Posts: 32
Images: 6
Joined: Wed Oct 08, 2014 7:35 pm
Location: Sydney Australia
Has thanked: 0 time
Been thanked: 2 times

PreviousNext

Return to Interior Modifications

cron
  • View new posts
  • View unanswered posts
  • Who is online
  • In total there are 2 users online :: 0 registered, 0 hidden and 2 guests (based on users active over the past 5 minutes)
  • Most users ever online was 405 on Sat Mar 30, 2024 1:42 am
  • Users browsing this forum: No registered users and 2 guests