Hacking VE Colour LCD HVAC and Radio

[crackers01]

In that Dump its says 7L925309, that's the last part of the VIN. Mine is 7L890488. So if i re-flashed that eeprom with the correct VIN do you think it would work?.

[ZerOne]

Yep, definitely looks like VIM, as well as the screen colours, and startup screens, sat nav enable and some other options are on the primary EEPROM

[ZerOne]

Yep, thats the VIN Number, I havent put mine back to together to test yet, but thats the only location that I can find that has the VIN number.

There are other details in there that are used to match the face with the deck up...

I dunno where these are yet, but I am kinda working on it

[crackers01]

Where does the deck get the VIN information?. Would that be the BCM or HVAC?. Or are they one combined module?

[ZerOne]

To be honest I am not too sure.
If you mean the Dual Zone Climate HVAC module, I dont think there is any VIN info in there.
I know the BCM has an EEPROM that also stores VIN information.

I know very little about the GMLAN protocols, but from memory there are four or five devices that store the VIN locally.
I dont know what module is the master module (What module determines what the VIN should be for the vehicle).

To be honest am still very new to all this and still in the experimentation stage.

[ZerOne]

OK, just another bit of short info....
(I will put all this information together soon and write a doco).

To disassemble the radio/HVAC module you will need the following

A T20 Torx Screwdriver / Allen Key
A T6, Screwdriver / Allen Key

TO disassemble the Main Radio/HVAC module to get access to the EEPROM using a clip will take approximately 10 Minutes on the bench.
This requires the following steps,
1) Remove the 5 T20 Torx Screws holding the faceplate in place



2) Remove the Faceplate
3) Remove the 4 T6 Torx Screws holding the CD Stacker mechanism in place.
See the following Images for exact locations







4) Disconnect the CD Stacker Mechanism Cable (By carefully pulling the cable out of its socket on the Radio / HVAC main board).



5) Remove the CD Stacker Mechanism
6) Remove the 5 T6 screws holding the LCD Backlight inverter board in place.



7) Disconnect the Backllght inverter board electrical cable (By carefully pulling the cable out of its socket on the Radio / HVAC main board).



8) Remove the Backlight Inverter board.



9) Remove the four screws holding the front cabinet panel in place.
These are the screws highlighted in Blue in the following images..





10) Remove the metal front cabinet panel.
11) Clip the 3M SOP Clip on the EEPROM Chip

[ZerOne]

Wiring Connector Pin Out Information

Connector X1
Pin 1 : Light Blue : Speaker RR Door (-)
Pin 2 : Dark Green : Speaker RF Door (-)
Pin 3 : Grey : Speaker LF Door (-)
Pin 4 : Yellow/Red : Speaker LR Door (-)
Pin 5 : Dark Blue : Speaker RR Door (+)
Pin 6 : Light Green : Speaker RF (+)
Pin 7 : Brown : Speaker LF (+)
Pin 8 : Brown : Speaker LR (+)

Connector X2
Pin 9 : Light Blue : Front Center Speaker Output (+)
Pin 10 : Orange / Blue : Battery Positive Voltage (RHD)
Pin 10 : Red / White : Battery Positive Voltage (LHD)
Pin 11 : Not Used
Pin 12 : Black : Ground
Pin 13 : Orange : Front Center Speaker Output (+)
Pin 14 : Orange / Blue : Battery Positive Voltage (RHD)
Pin 14 : Red / White : Battery Positive Voltage (LHD)
Pin 15 : Not Used
Pin 16 : Black : Ground

Connector X3
Pin 1 : Not Used
Pin 2 : Dark Blue / White : Common Auxiliary Audio Signal (-)
Pin 3 : Red : Auxiliary Audio Left Signal (+)
Pin 4 : Orange / Black : Navigation Mono Audio Signal (-)
Pin 5 : Pink : Left Audio Signal (+)
Pin 6 : Green / White : Common Audio Signal (-)
Pin 7 : Not Used
Pin 8 : Not Used
Pin 9 : Dark Green : Auxiliary Audio Right Signal (+)
Pin 10 : Pink / Black : Navigation Mono Audio Signal (+)
Pin 11 : Dark Blue : Right Audio Signal (+)
Pin 12 : Not Used

Connector X4
Pin 1 : Light Blue : Telephone Audio Signal (-)
Pin 2 : Not Used
Pin 3 : Not Used
Pin 4 : Orange / Blue : Battery Positive Voltage (RHD)
Pin 4 : Red / White : Battery Positive Voltage (LHD)
Pin 5 : White : Telephone Audio Signal Mute
Pin 6 : Dark Green : Low Speed GMLAN Serial Data
Pin 7 : Orange / Black : Telephone Audio Signal (+)
Pin 8 : Not Used
Pin 9 : Not Used
Pin 10 : Orange : Amplifier Mute Control
Pin 11 : White : Amplifier Enable Signal
Pin 12 : Not Used

Connector X7
Pin 1 : White : Video Connector - Blue
Pin 2 : Not Used
Pin 3 : Red : Video Connector - Red
Pin 4 : Not Used
Pin 5 : Not Used
Pin 6 : Not Used
Pin 7 : Not Used
Pin 8 : Not Used
Pin 9 : Not Used
Pin 10 : Black : Ground
Pin 11 : Dark Green : Video Connector - Green
Pin 12 : Not Used
Pin 13 : Yellow : Video Connector - Sync
Pin 14 : Not Used
Pin 15 : Not Used
Pin 16 : Not Used
Pin 17 : Not Used
Pin 18 : Not Used

[ZerOne]

There are four Levels of Radio/HVAC Systems fitted to the VE Commodore Range of Vehicles. (Level A, B, C, and D)
These Include,

Level A - Fitted to Omega Models
Type A Infotainment Systems incorporate manual HVAC controls in the fascia and feature a 4.5" remote dot matrix display mounted above the radio/HVAC control. This system includes 4 X 20W power output, Dynamic Distortion Limiting (DDL), a single disc CD player with AM/FM radio and 2 X auxiliary audio inputs.

Level B - Fitted to SV6 and SS Models
Type B Infotainment Systems incorporate manual HVAC controls in the fascia and feature a wide red remote dot matrix display mounted above the radio/HVAC control. This system includes 4 X 20W power output, Dynamic Distortion Limiting (DDL), preset equaliser, a single disc CD player, or 6 disc CD player for SS vehicles, as well as AM/FM radio and 2 X auxiliary audio inputs.

Level C - Fitted to Berlina Models
Type C Infotainment Systems incorporate dual zone automatic HVAC controls and a 5.5" dot matrix reversible display in the fascia. This system includes 4 X 20W power output, Dynamic Distortion Limiting (DDL), preset equaliser, 6 disc CD player with AM/FM radio, MP3 compatible and 2 X auxiliary audio inputs.

Level D - Fitted to SSV, Calais and Calais V Models
Type D Infotainment Systems incorporate dual zone automatic HVAC controls and a 6.5" colour LCD screen in the fascia. This system includes 5 X 30W power output, Dynamic Distortion Limiting (DDL), pre-programmed 5 band equalisation / effects, 6 disc CD player with AM/FM radio and diversity antenna, MP3 compatible, 2 X auxiliary audio inputs, 1 X auxiliary video input (for optional rear seat entertainment display),1 X auxiliary video and audio inputs (for optional Navigation display and audio), and parking aid display.

Circuit Description
Radio/HVAC Control Power

The main radio/HVAC control power is supplied by a 15A fuse located in the rear fuse block. The infotainment system does not require a discrete ignition feed circuit for power moding. The power moding is accomplished using a structure of Virtual Networks (VN). The Power Mode Master (PMM) transmits the GMLAN power mode signals.

The radio/HVAC control supports the following signals:
• System Power Mode
• Infotainment Operation Allowed

The radio/HVAC control also supports the following GMLAN Vehicle Power Modes:
• OFF
• ACCESSORY
• RUN
• CRANK REQUEST

Radio/HVAC Control Ground
A wire in the main radio connector that is connected to battery negative at all times provides the main radio ground. Resistance between the ground pin and the vehicle battery negative terminal must not exceed 0.05 ohms.

Infotainment Speaker Outputs
At low volume, the plus (+) and minus (-) speaker outputs circuits measure approximately 5-6 volts. If a plus or minus circuit for any speaker output is shorted to ground or voltage, the radio/HVAC control disables the circuit for component protection and sets a diagnostic trouble code (DTC). The radio sets the speaker circuit DTC on non-amplified systems only. As the radio volume increases the voltage on the plus and minus circuits change to create a voltage difference between each other. The difference in voltage is what drives the voice coil of the speaker producing sound.

Radio/HVAC Control Dimming
GMLAN signal data received by the radio/HVAC control determines the fascias dimming and backlighting levels. The radio/HVAC control sets the backlight and VF display dimming to the value indicated by the interior dimming level and interior dimming display level signals in the GMLAN dimming information frame. The radio/HVAC control provides fascia and control/graphics backlighting in the OFF (RAP inactive) when the exterior lighting virtual network (VN) is activated. The radio/HVAC control display is consistent then with the surrounding devices that use PWM dimming to backlight their control/graphics when the power mode is OFF and the park lights are ON.

Sub Woofer Amplifier Speaker Inputs
The low-level audio signals (LR, and RR) from the radio/HVAC control are the inputs to the amplifier. The amplifier boosts these inputs and outputs them to the rear sub woofer speakers. If one speaker plus or minus low level audio signal circuit is open between the radio and the amplifier, the input to the amplifier is approximately half. The speakers for that channel then operate at approximately half the normal volume or in some cases no volume.

The low level audio signals from the radio to the amplifier typically measure in the 4-5 volts range.

Amplifier Speaker Outputs
At a low volume, the plus (+) and minus (-) speaker outputs circuits measure approximately 2-7 V AC or 7-8 V DC at the speaker connector when testing a normal working system. If a plus (+) or minus (-) for any speaker output is shorted to ground or voltage, the amplifier circuitry will turn OFF the front outputs or rear outputs for component protection.

Repeat speaker malfunction can be caused by a damaged amplifier. Test for a damaged quad bridge output in the amplifier if the wiring between the amplifier and speaker test negative for a short to voltage. Prolonged exposure to DC voltage can cause a speaker coil to short. An early indication of a shorted speaker coil is distortion/noise and eventual malfunction.

Cellular Telephone Mute
The telematics communications module uses the cellular telephone mute signal circuit to over-ride the radio/HVAC control for telematics communication. When cellular telephone mute is not active, this circuit is held at 1-volt by the radio. When the cellular telephone mute signal is pulled to ground, the radio over-rides any other audio signal and uses the remote audio signals as the source for output to the speakers. If the radio/HVAC control was OFF when this circuit is pulled low, the radio/HVAC control will turn ON. Additionally, the radio fades the speakers to full front, adjusts the volume to an initial audible level, and sets an Auto Tone designed for optimal use with telematics. When the mute signal is no longer pulled to ground, the radio returns to the mode it was in previously.

Component Description
Antenna System
The antenna system receives broadcast AM or FM stereo signals from free space and sends the signals to the radio receiver for processing via a coaxial antenna cable. Good antenna grounding is important for good radio reception.

Radio/HVAC Control
The operator interfaces with the radio/HVAC control through the radio/HVAC control and steering wheel controls. Through these controls the operator is able to control system power, volume, fade, balance, bass, and treble equalisations. Control on the integrated CD, MP3, or DVD (where fitted). Either a remote display or fascia equipped screen provides system feedback to the operator.

The radio/HVAC control processes the AM and FM signals from the antenna system or the information from the CD media, amplifies that information and sends the output to the speaker system.

The radio/HVAC control is located in the instrument panel centre stack area and is fastened to the instrument panel by four screws. The unit features a detachable fascia. Three rear bullet type guide pins are provided to aid in aligning the radio/HVAC control to the unit. An electrical connection to the radio/HVAC control is a 40-way connector that is part of the I/P harness, antenna lead connector, auxiliary audio and video inputs for optional RSE DVD video input, and an additional 8-way harness connector is present on navigation equipped vehicles.

Radio amplifier outputs to the speakers are protected from damage should speaker leads become shorted to ground or shorted to vehicle power. The radio will sense these conditions and shut down the amplifier outputs in a non-destructive manner. After the short condition is removed, the radio will return to normal operation.

Speakers
The Type A speaker system consists of six speakers. Two 6.5" speakers are mounted in each of the front doors. Two 5 1/4" speakers are mounted in each of the rear doors. Two 1" tweeter speakers are mounted in the instrument panel (I/P). Type B and C speaker system adds a 3" speaker mounted in the top centre of the I/P. Type D speaker systems can include two 8" subwoofers mounted to the rear parcel shelf and include a 2 channel 80W amplifier.

Auxiliary Jack Socket
The AM/FM Stereo CD radio shall provide a 3.5 mm Auxiliary stereo jack that will allow playback of audio signals from remote devices (e.g. portable tape player, portable CD player or MP3 playback device, etc.).

Theft Deterrent
The infotainment theft deterrent system is intended to disable infotainment functionality if incorrect vehicle information is received by the radio/HVAC control. The radio/HVAC control disables functionality if the VIN information received by the radio/HVAC control does not match the VIN information that has been learned by the radio/HVAC control. A VIN sequence is the last 6 digits of the VIN. The radio/HVAC control receives this information in a GMLAN frame form.

The radio/HVAC control shall provide the following theft operating modes as part of the infotainment theft deterrent system:
• No VIN Mode - A radio/HVAC control that has not received or learned a VIN. In this mode the radio/HVAC control has limited functionality.
• Normal Mode - A radio/HVAC control has received a VIN sequence. The radio/HVAC control only learns the VIN sequence if the VIN sequence contained all 6 digits. In this mode the radio/HVAC control has full functionality.
• Theft Detected Mode - A audio/HVAC control that had previously learned a VIN sequence and subsequently received a VIN sequence not matching the learned sequence. In this mode the radio/HVAC control has limited functionality.

AM/FM Reception
Radio Signal
The radio signal is sent from a broadcast station and is then received by an antenna. The strength of the signal received depends on the following:
• The power output, or wattage, of the broadcasting station
• The location of the vehicle, or receiver, relative to the broadcast tower.
• Obstacles between the tower and the receiver
• Atmospheric conditions
• Which band, AM or FM, the station is broadcasting
• Type of antenna and the ground plane

AM Reception
The AM band has a lower frequency range than the FM band. These longer wavelengths:
• Bend around obstacles
• Follow the curvature of the earth
• May reflect, or skip, off of the ionosphere

The AM frequencies have longer range due to the ground wave. The ground wave follows the curvature of the earth and is affected by its conductivity. Greater conductivity equates to less signal loss, thus transmission over water is better than over land. The AM band has a range of 80-320 km (50-200 mi).

FM Reception
The shorter wavelengths of the higher frequency FM band:
• Reflect off obstacles
• Are absorbed by the ground
• Penetrate the ionosphere

Broadcasts in the FM band are limited to "line of sight" reception which is typically 40 km (25 mi). Even when out of a direct line of sight, the signal may be reflected into areas that would be in a "shadow" otherwise. Factors which affect the line of sight include:
• Height of the broadcast antenna
• Height of the receiving antenna
• Terrain and buildings in the broadcast path

Customer Tips
Radio Reception FM
• The Best FM fidelity will be obtained from stations within 16-64 km (10-40 mile) range. Noise or distortion may become apparent when attempting to receive stations at distances greater than this range. Suggestion: Reduce treble response when attempting to receive fringe stations.
• Tall buildings or hills may cause a degraded or lost signal. FM signals tend to travel "line of sight". Suggestion: Reduce treble response around tall buildings.
• Although receiver circuits are among the most advanced type available, there are instances where one radio station can interfere with another station. Suggestion: Select another station or switch to a CD.

Radio Reception AM
AM reception is sensitive to storm disturbances such as lightning. Suggestion: Reduce treble response or switch to FM.

Care of Compact Discs
• Handle compact discs (CDs) carefully. Touch only the outer edges of the CD or the edge of the hole in the center of the CD. Never touch the glossy side of the CD. Fingerprints and scratches will interrupt the "reading" of the information on the disc.
• Store CDs in their protective cases. Store CDs away from sunlight, dirt, dust, and debris.
• Do not attach a label or tape to a CD.
• Always check for scratches and signs of wear on both sides of the CD.
• Never place any marks on the CD with a marker.
• If a CD becomes contaminated, clean it with a clean, damp, soft, lint-free cloth and mild detergent. Wipe the CD in a straight line from the center hole outward. Do not use cleaning solutions which may damage the CD, such as chemically treated cleaning cloths, benzene, or paint thinners.

Compact Discs Not Appropriate to Use
These CD players were designed to be compatible with round digital audio CDs with the "Compact Disc Digital Audio" label. Other CDs may be incompatible, causing a no-play condition, skips more than the customer would desire, and "ERR" shown on the radio display or a jam in the loading mechanism. Some incompatible CD types are:
• Special-shaped CDs (any that are not round).
• Re-Writeable CDs (CD-RW type are incompatible).
• Recordable CDs (CD-R type are incompatible, except with Type C or D radio/HVAC controls).
• Library CDs (with thick bar code labels).
• CD with User-applied labels.

Technical Information for the MP3/CD Radios (Type B, C or D Radio/HVAC Controls)
The Types B, C or D radio/HVAC controls will play both standard audio CDs and CD-Rs. The CD-Rs may contain either standard audio (*.cda) or compressed audio (*.mp3). Customers who record their own music CD-Rs should be aware of the following:
• The files can be recorded on a CD-R disc with a maximum capacity of 700 MB.
• The radio/HVAC control will play only compressed audio files recorded in the *.mp3 format. It also supports playlists that can be made and saved with popular MP3 software (in the *.m3u format). A playlist name must be no more than 32 characters in length. If the name of a playlist is longer than 32 characters, the radio will ignore the playlist.
• The radio/HVAC control will only play audio from a CD-R, it cannot record audio.
• The radio/HVAC control will play a mixed mode CD-R/RW (one recorded with both *.cda and *.mp3 files). If a mixed mode CD is inserted in the radio, the radio will assign the standard CD audio to a directory which is listed as ROM audio directory.
• The radio/HVAC control supports multi-session discs, but only the files from the last session will be played.
• There are a total of 20 directories (folders) allowed on a disc. The file structure can be 0-4 directories deep (a folder within a folder, within a folder, etc). Anything more than 20 directories will be ignored. Each directory may have up to 99 files contained within it. Files not having the *.mp3 extension will not be played, but still count toward the maximum. Anything more than the first 99 files within a directory will be ignored. A single disc may have up to 254 files and directories. Anything beyond the 254 limit will be ignored.
• MP3 files must be written to a CD-R/RW in one of the following industry-standard formats:
• ISO 9660 Level 1
• ISO 9660 Level 2
• Joliet
• Romeo

• ID3 tag information is displayed by the radio/HVAC control, if available. The ID3 tag information can either be version 1 or 2. The radio will display the filename, song name, artist name, album name, directory name, and playlist name, etc.

If the customer does not follow these guidelines when recording a CD-R/RW, the disc may not play in the MP3 compatible radio/HVAC controls.

[crackers01]

Excellent work mate, any progress with the eeprom flash?

[ZerOne]

I wrote the new VIN to the Main board EEPROM, and have put the Radio/HVAC module back together.
But I havent had time to pull my existing radio out, and try to swap it over.
(Also, I removed the EEPROM on the fascia, as you cannot read that EEPROM whilst it is on the board)..

My plan is to solder a lead and socket to it, so as I can quickly test EEPROM bins on the thing, but again I haven't had any time to do that yet....
I was hoping to do the same with the main EEPROM, but it looks like it is glued and soldered to the board, so I have had no luck removing the chip.... (Im also a bit worried, as these modules go for around $400 to $500.... A bit too much $$$ for me to brick the thing)...