Awesome

FG Falcon `FoA Orion`

<img src="https://github.com/jakka351/FG-Falcon/assets/57064943/375a219d-f307-462f-9301-911482dd206b" height="20%" width="20%" /> <a href="https://www.paypal.com/donate/?hosted_button_id=DK2C5T7HS3U5W">Donate to the FG Falcon Repository</a>

The Ford Falcon is a full-sized car that was produced by Ford Australia from 2008 to 2014. It was the first iteration of the seventh and last generation of the Falcon. To make a fresh start, Ford Australia decided to revolutionize the designation of all models within the range. In particular, the long-standing Futura, Fairmont, and Fairmont Ghia models were replaced by the more contemporary G6 and G6 E models, respectively. The FG moniker references the now discontinued Fairmont Ghia. The FG was superseded in December 2014, by the FG X series. https://en.wikipedia.org/wiki/Ford_Falcon_(FG)

</td> </tr> </table>

Orion CANBus

Controller Area Network (CAN) bus. This consists of two twisted wires and operates serially (data is transmitted sequentially). It is used for communication between the modules themselves and between the modules and the IDS. The modules are connected to the data bus in parallel. New modules can be incorporated easily, without modifying the other wiring or modules. The transmitted data is received by every module connected to the Controller Area Network (CAN). As each data packet has an identifier, in which the priority of the message is determined as well as the content identification, each module can detect whether or not the data is relevant for its own information processing. This enables several modules to be addressed with a particular data packet and supplied with data simultaneously. For this purpose, it is ensured that important data (for example from the Anti-lock Brake System (ABS)) is transmitted first. The other modules are only able to submit their data to the data bus after the high-priority messages have been received. In order to guarantee a high degree of error protection, two 120 Ohm terminating resistors are installed in the CAN. These are integrated in the first module connected to the CAN and in the last module connected to the CAN respectively and are used for suppression as well as the elimination of voltage peaks. In order to ensure correct functioning of the data bus system, the modules must always be connected with an integral terminating resistor.

Module Communications Network, 2008 Workshop Manual

Vehicle Network layout:

Protocol	Modules	Speed	[ - - - - Function - - - - - - ]
CAN	AIM, ACM, BEM, BPM, FDIM, IC, PAM	125kbps	ICC, Audio, Bluetooth, Ipod, Cluster, Body Electric
CAN	ABS, DSC, PCM, TCM, RCM, HIM	500kbps	Powertrain Comms, ABS, Instrumentation
CAN	ABS, DSC, SAS, YRS, RCM	500kbps	Private-HS-CAN, ABS,DSC,EBA,TCS, Steering Angle Sensor, LPI module to PCM
ISO9141	6 Speed Trans Manufacturer	-	Not directly accessible single wire bus
LIN	BEM to Alarm Link	20kbps	Not directly accessible single wire master slave
EOBD	PCM	500kbps	Emissions & Diagnostics
UART	AIM/Ipod	-	Apple Accessory Protool
Bluetooth	BPM	-	Serial Port Profile
RF Comm	BEM	-	Keyfob
Infrared	NAV	Lightspeed!	Navigation Remote mk1

Module	CPU	BUS	DiagSig_Rx	DiagSig_Tx	Supported Diagnostic Sessions	SecurityAcess Levels
AIM	V850	Midspeed	0x767	0x76F
ACM	-	Midspeed	0x727	0x72F
BEM	-	Midspeed	0x726	0x72E
BPM	V850	Midspeed	0x781	0x789
FDIM	V850	Midspeed	0x7A6	0x7AE
IPC	V850	Midspeed	0x720	0x728	0x1081, 0x1087, 0x10FA	Multiple Secure States, Up to Component Manufacturer State
ABS	-	High Speed	0x766	0x76E
PAM	-	Midspeed	0x736	0x73E	0x1081, 0x1087, 0x10FA	0x2701 UnSuppported, module not secured
PCM	-	High Speed	0x7E0	0x7E8
TCM	-	High Speed	0x7E1	0x7E9
HIM	-	High Speed	0x733	0x73A

CanBus Decoded:

Spreadsheet .PNG

Collection of FG-CAN Data from various sources

latest and greatest fg can sheet
fg_controller_area_network_latest.xlsx
- Contains a list of all process identifiers, start of decoding as built data, Mitchell H's CAN Docs, Jakka351's CAN spreadsheet

CAN .dbc Database File written by Jakka351

FG CAN Spreadsheets & Documents by Mitchell H

FG Falcon High Speed, MidSpeed and Diagnostic CAN Logs taken from Ford FJDS software

FG Falcon CAN Logs

BA,BF CAN spreadsheet from Lukeyson

BA,BF CAN spreadsheet

Using Savvy can to talk to the Instrument Cluster: YouTube video

Module Configuration [As Built Data]

Diagnostic Services 0x21 readDataByLocalId, 0x3B writeDataByLocalId are generally what is used to read and write the As Built data. Ford's Diagnostic software IDS & FJDS have the capability to read and write to these memory locations, as does the FORScan software. The Vehicle Identification Number isgenerally at memory location 0x00 on each ECU, and can be read via readDataByLocalId with a can message ie $7A6#0221000000000000 will ask the FDIM for its coded VIN number. To write a VIN you generally need to have had securityAccess granted via a seed & key exchange.

AsBuilt Data Files & Candump Logs:

2009 FG Falcon FPV GS As Built Data
fg fpv 5.4 tr6060 candump log mscan
fg fpv 5.4 tr6060 candump log hscan

Module Configuration

Module Diagnostics

The module diagnostic's on the FGI Falcon are very much aligned to ISO 14230 - KWP2000, however they are Ford Specific and the designated specification that the FGI Falcon was designed to is Ford's CAN Generic Diagnostic Specification v2001/V2003. There are some differences between the ford global specification and the diagnostic services on the vehicle. Beyond the diagnostics of the Ford Motor Company lies the component manufacturer diagnostics. Unknown and not accessible via Ford Diagnostic software, there are unknowns to be found within the vehicleManufacturerSpecific and systemSupplierSpecific diagnostic sessions, accessible on some modules without security access, some with hidden seed & key exchanges - and possibly with CAN Calibration protocol. Some of the component manufacturers are no longer around with respect to this vehicle, (SWSA), some have been renamed (VDO) and some are still around (Bosch). If anyone wants to share their secret documents, feel free to get in touch on ford forums au.

ECU Rx/Tx Addressing

CAN Generic Diagnostic Specification - Down Under Version - Mk1 only

Service	Byte
diagnosticSessionControl	0x10
reportDiagnosticState	0x50
diagnosticSessionControl standardDiagnosticSession	0x81
diagnosticSessionControl ecuProgrammingSession	0x85
diagnosticSessionControl ecuAdjustmentSession	0x87
diagnosticSessionControl systemSupplierSpecific	0xFA
clearDiagnosticInformation	0x14
readDTCByStatus	0x18
readDataByLocalID(As Built)	0x21
readMemoryByCommonID(Data IDentifiers [DID])	0x22
readMemoryByAddress(Direct Memory Read[DMR])	0x23
requestSecurityAccess	0x27
reportSecurityAccess	0x67
writeDataByCommonID(Write DID Memory)	0x2E
inputOutputControlByLocalID (Routine Entry)	0x2F
startRoutineByLocalIdentifier(Ecu Self Test)	0x31
stopRoutineByLocalIetdentifier	0x32
requestRoutineResultsByLocalID	0x33
requestDownload	0x34
requestUpload	0x35
transferData	0x36
requestTransferExit	0x37
writeDataByLocalId(Write As Built)	0x3B
requestReadMemoryBlock	0x3C
writeMemoryByAddress	0x3D
testerPresent	0x3E
testerPresent RequestResponse	0x01
testerPresentSuppressResponse	0x02
controlDTCSetting	0x85
requestDiagnosticDataPacket	0xA0
dynamicallyDefineDataPacket	0xA1
noStoredCodesLoggingStateEntry	0xB0
diagnosticCommand	0xB1
inputIntegrityTestStateEntry	0xB2
requestManufacturerStateEntry	0xB4

0x27 requestSecurityAccess - Parking Aid Module

    	//////////////////////////////////////////////////////////////////
        // / 0x736 Parking Aid Module
        // / Seed & Key Procedure
        // / must be in diagnostic mode 85 to get seed
        // /
        // /   Send >> 736$0210850000000000
        // /   Recv << 73E$0250850000000000
        // /   Send >> 736$0227010000000000
        // /   Recv << 73E$0567021122330000
        // /   Send >> 736$0227021122330000
        // /   Recv << 73E$0267020000000000
        // /
        // / 0.000000  736  02 27 01 00 00 00 00 00 .'.......
        // / 0.000000  73E  05 67 01 11 22 33 00 00 .g.."
        // /
        // / Took me one guess to crack the pam seed key procedure.
        // /
        // /  can0  RX - -  73E   [8]  05 67 01 11 22 33 00 00   '.g.."3..'
        // /  can0  TX - -  736   [8]  05 27 02 11 22 33 00 00   '.'.."3..'
        // /  can0  RX - -  73E   [8]  02 67 02 00 00 00 00 00   '.g......'
        //////////////////////////////////////////////////////////////////
        // / Also interesting to note: entering into a systemSupplierSpecific diagnostic session is possible without security access:
        // /  can0  TX - -  736   [8]  02 10 FA 00 00 00 00 00   
        // /  can0  RX - -  73E   [8]  02 50 FA 00 00 00 00 00   
        //////////////////////////////////////////////////////////////////

Firmware

Falcon ECU Firmware related softwares and posts.

PHF2BIN - Converts a Ford PCM .phf file to a binary image by rollsch
FG2ICCComms - JasonACT's software tool to re-core the MK2 FDIM
FG2IPCComms - JasonACT's software tool for flashing firmware and eeprom of the IPC - not available here due to odometer fraud
Barra in a Beamer
ABS Config Tool made with python for ELM327
Ford FG Diagnostics Big Python Script
PCMtec development blog
BA Falcon Body Module EEPROM
Barra-BEM python-can script
FG Falcon Instrument Cluster Boot Mode & Firmware Download
FG Falcon Restraints Control Module
FG Falcon Restraints Control Module Repo
RPM Alarm Hack
Fermec's 6HP26 Flasher
Fermec's EEC-VI Flasher

Software

Software Written by owners and enthusiasts.

Description	Platform	Model	Author
`ICC Can Interface`		FG	Mitchell H
`ECU HSCAN Interface`		FG	Mitchell H
`HVAC CAN Reader`		FG	Kyle May
`HVAC Python GUI`		FG	Kyle May
`Ford FG ICC Repo`		FG	Kyle May
`FG ICC Fork`		FG	Bulletime
`FG ICC Fork`		FG	Jakka351
`can0swc`		FG	Jakka351
`ICC Emulator`		FG	Jakka351
`Android Climate App`		BA	Goochy12
`Arduino Climate Code`		AU/FG	Nathaniel
`SWC Adapter for Pioneer`		BA/BF	bigevtaylor
`SWC Adapter for JVC`		BA/BF	MarkSmithAU
`FDIM Controller project`		Ford	P1ne
`CD emulato AUX audio`		Ford	Anson Liu
`CD detailed instruction`		Ford	Anson Liu
`MitchellH's C source code`	-	FG	Mitchell H
`cansend can0 swc commands`	Can-Utils	FG	Jakka351
`cansend can0 icc commands`	Can-Utils	FG	Jakka351
`Python-OBDII Ford Reader`	OBDII	Ford
`Ford Mustang CAN2CLUSTER Project`		Mustang	https://github.com/thomastech/
`FORD EEC-IV diagnostic scanner`		Ford	https://github.com/babroval/
`Display HVAC info can0hvac.py`
`Police Mode Enabler`	Windows	BA-FG	Cluster Mods
`AsBuiltExplorer.exe`	Windows	Ford	Jesse Yeager www.compulsivecode.com
`PodEmu Android Ipod Interface`	Android + AIM	FGI	`Forum Post` `Youtube` Classic

# FoA Orion Comms Mobile Application

FoA Orion Comms

FoA Orion Comms is a Diagnostic & Firmware Tool for the FG Falcon. It is capable of reading and clearing DTCs, conducting module on demand self tests, and diagnostic tool functions. It can read out the Instrument Cluster EEPROM via the OBD port and it can read, write and edit the firmware of the Powertrain Control Module. Available for purchase from https://facebook.com/testerPresent.

Features

Workshop Manual Browser
ECU Reboot (Diagnostic Service 0x11 ecuReset)
Module On Demand Self Test & Factory End of Line Tests
Security Access Menu (Diagnostic Service 0x27 securityAccess)
Read and Write Instrument Cluster EEPROM via OBD Port, clone instrument clusters for replacements without having to do PATS
Read and Write Powertrain Control Module Flash Memory, Edit Vehicle Identification Number, PCM Cloning for replacement modules
VID Block Editor for PCM Firmware, Tyre Size, Diff Ratio, etc etc
Return Powertrain Control Module to stock tune, with OEM strategies available for download
Read & Clear Diagnostic Trouble Codes, with troubleshooting steps and online DTC look up tool, dictiionary of 15,000 Ford Fault Codes
Module VIN Programming done in plain text or hexadecimal input
Module Configuration Options
Clear Audio Code Error
Set the HVAC Display Zone of the Front Display Interface Module
Bruteforce Module Security Access Tool
Pair Key Fob
Reset PCM Learnt Adaptions
Fusebox Reference Chart
Wheel & tyre reference Chart
Globe reference chart
J2534 Interface Compatible

`FoA Orion - Front Display Interface Module HVAC Zone Tool`

Set the Display of HVAC Data on the FDIM
- Modifies a location in EEPROM memory within the FDIM allowing the HVAC zone display to be changed
- https://www.facebook.com/testerPresent%2Fposts%2Fpfbid02DTRSjXhtuYDz3cnkcUnqvWpgyeUGt2Rt2wX6n3gY2gAe9JTxoSXrYJdUDpinJfs4l

`FoA Orion - Police Mode Enabler`

Enable/Disable Police Mode
- Modifies a location in As Built Data

`can0swc`

FG Steering Wheel Controls for Raspberry Pi
- Uses python-can library and SPI-CAN interface
- Emit keypresses which are picked up by Android Auto

`Forscan`

Forscan is community built and tested Diagnostic Software for Ford, Lincoln, Mazda Vehicles. It is primarily used by the DIYer and in the modification scene. <a href="https://forscan.org">https://forscan.org</a> for more information. Forums at <a href="https://forscan.org/forum/">https://forscan.org/forum/</a>. Forscan is compatible with basic cheap ELM327 OBDII Readers, but a genuine <a href="https://www.boschdiagnostics.com/j2534-faq">J2534</a> interface is the <a href="https://forscan.org/forum/viewtopic.php?f=4&t=867">preferred option.</a>

`FoMoCo Open Source`

PCMTec is Australian Developed PCM Tuning software specifically for FG,FG-X Falcons. Other Ford Models are actively supported. Forums located here

Workshops that use PCMTec
Software Demo Download
Falcon How-To Guides
PCMtec MKII Falcon Dash Emulator
PCMtec development blog
Functionality that can be added includes:
- Launch Control
- Flat Foot Shifting in Manual Transmissions - clutch position switch triggers torque reduction while throttle stays open
- Boost by Gear/Speed
- Selectable Multi-tune via Cruise Control paddle
- PCM CustomOS

`CANBarra`

Australian CanBus Products

CANBarra CANBUS Translator
Converts the CANBUS signals from BA BF FG PCMs for Barra Swapped vehicle Outputs :

   Tach Output – Programmable from 2-12 cylinder to suit your Application  
   Tach Correction – to fix those minor errors from the Factory  
   Vehicle Speed – programmable to suit most OEM Speedometers  
   Check Engine Lamp Output  
   Engine Over Temperature Lamp Output  
   Oil Pressure Lamp Output (BF Onwards)  
   Alternator Lamp Output (FG Onward)

Nigel!

`Whiteford Tech`

Ford Falcon BA-FGX and Territory SX-SZII Diagnostics and Module Programming Specialist.
FPV Engine Calibrations
Custom Insrument Cluster Start Up Logos AKA Bootsplashes
MKII Custom ICC Gauges and Graphix, GT-F 351 Gauges
Module Configuration & Programming - Feature Enablers - RPM Shift Alarm
ZF 6HP26 Programming and Calibrations
Firmware updates, upgrades, troubleshooting
Barra Conversion Programming Services
ICC Programming
Passive Anti Theft System pairing and key pairing
Odometer Correction for Replacement or Repaired Instrument Clusters BA, BF, FGI, FGII, FG-X

Contact Jack at WhitefordTech@outlook.com, or message Jack Whiteford on facebook.

Engineer

ICC Splash Graphics

Thanks to <a href="http://www.fordforums.com.au/showthread.php?t=11479908&page=9">JasonACT</a>

FGX FoA Backgrounds, found hiding on Ford.com.au

No.	FGX FoA Backgrounds
Sprint	`cars-falconxr6sprint-gallery-trigger-large-1.jpeg`
Dashboard	`cars-falconxr6sprint-gallery-trigger-large-2.jpeg`
Engine	`cars-falconxr6sprint-gallery-trigger-large-3.jpeg`
Headlights	`cars-falconxr6sprint-gallery-trigger-large-4.jpeg`
Sprint	`cars-falconxr6sprint-gallery-trigger-large-5.jpeg`
XR6 Front Grill	`cars-falconxr6sprint-gallery-trigger-large-6.jpeg`
Sprint	`cars-falconxr6sprint-gallery-trigger-large-7.jpeg`

Fpv1

Antilock Braking System

ABS Background & Guides

ABS Software

ABS Configuration Options [As Built Data]

The ABS has a variety of configuration options - these much match up with the vehicle type & the PCM Strategy & Calibration.
ABS As Built Config Options:

                               XTSportIRS                =  0x100501,
                               G6Turbo                   =  0x100601,
                               G6SedanDLPGXTG6G6ESport   =  0x110401,
                               PoliceSedanDLPGXTSport    =  0x110501,
                               UteDLPGREBXR612t          =  0x120402,
                               F6PursultUTE12t4pot       =  0x140102,
                               F6PursultUTE12t6pot       =  0x140202,
                               XT                        =  0x160401,
                               G6SedanDLPGXTStd          =  0x170401,
                               UteI6RDLPGXL34t           =  0x180402,
                               F6Force64potBrakes        =  0x190101,
                               F6Force66potBrakes        =  0x190201,
                               XR6                       =  0x190401,
                               XR6Turbo                  =  0x190601,
                               XR6TurboPolice            =  0x190701,
                               GTForce4pOtBrakes         =  0x200101,
                               GTGTPForces6potBrakes     =  0x200201,
                               XR8                       =  0x200601,
                               XR8Police                 =  0x200701,
                               UteI67DLPG1t              =  0x210402,
                               UteI6                     =  0x220402,
                               G6SedanDLPGXTHDSus        =  0x230401,
                               XTPoliceHDFrontSusandIRS  =  0x230501,
                               XTHDFrontSusandIRS        =  0x230401

Resources

A lot of stuff that is not listed is contained within the Resources folder.

resources/
└── software/
|    ├── /
|    │   ├── file1
|    │   └── file2
|    └── folder4
|        ├── file3
|        └── file4
|____
     |

Troubleshooting Tips

Whiteford saves the day again...

Body Elec Module differences MKI/MKII
F6 Miss
Ford Territory CanBus Issue - YouTube Video
Ford Mods Technical Document Archive
Ford Mods Forum List
Diagnostics & Maintenance FORScan Forum
PCMTec Vehicle Diagnostics Forum
Perfomance tech CANBus 101
CAN Bus communication explained in 5 minutes
Understandinng CANBUS faults
Common CAN faults
Hint: You can test the entire CANbus system in an Fg falcon without any tool by checking if the FDIM buttons are functioning correctly.

Workshop Manuals

Utility to download from ford after purchasing subscription

Wiring Diagrams & Pinouts

Diagnostic Port Pinout

Engine Bay Fuse

eng_bay_fuse

Audio Interface Module Plug

Schematic

Wiki

Articles

Bullet Performance Racing's Technical Archive
Ford Spanish & Silver Oak PCM Processor Info from BPR
SocketCAN Setup for Raspberry Pi
JasonACT's Ford Forums Thread on the failing mkII ICC Recommended Reading
FG Github Wiki
Benny Ryan's Aussie Tech Blog - https://benryanau.wordpress.com/
Playing with Socketcan
Infrared Communication Introduction - sbprojects.net
iDoka's Awesome CANBUS - A curated list of awesome tools, hardware and resources for CAN bus.
iDoka's Awesome LINBUS
iDoka's Awesome CAN ID
SocketCAN Demo Programs
Socketcan C example software
CANBus Gist - CAN Tools and Software List
MCP2515 data sheet
Raspberry Pi PiCAN2 hat
Arduino CAN-Bus shield
Generic MCP2515 SPI board
CANBUSv1 - training module

Credit & License

Note: The license referenced at the top only covers this readme file, persons listed below may have other applicable licenses in their works that are linked from here.

Contributors

For queries, concerns, submissions, etc please message on fordforums.com.au.
Jakka351
GokhanDeveloper

Feel free to Donate if you want the repository to keep expanding.

pew. pewpew.

Twilight

As these cars age and slowly fade away, hopefully this archive allows people to keep them alive for as long as possible...

Disclaimer & Legal Notice

Modifying any system on a vehicle may have unforseen consequences. All of the information contained here has been collated from various sources and may not be accurate, this is a permanent work in progress and common sense should be used. This github is not affiliated with Ford Australia in any way. All information has been sourced from publically available documents, or created by the listed persons.