OBD data
OBD data · our own work, not from GAC's manuals

OBD data: module map

The 22 modules that answer on the normal OBD port, with the address to send to and the one they answer from. Names come from each module's own system-name item where it has one; the rest are our reading of what its items do (a "?" means not confirmed). Items is how many data items we have found in it; searched is the share of its 65,536 possible item numbers tried so far.

Request → replyModulePart number (F187)ItemsSearched
7E2 → 7EABattery management (BMS)
System name A12_UAES_BMS; cell voltages, charge, energy counters
2520105CVN120113425 %
7E3 → 7EBVehicle control unit (VCU)
System name VCU-UAES; wheel speeds, gear, power limits
1110003CVN021112525 %
7E4 → 7ECMotor controller
Motor speed and torque items; no system name
1510046CVN42003625 %
7E6 → 7EECharger and DC-DC converter (CCU)
System name EVT_6D6_CCU_B; 12 V output
2730003CVN06014525 %
710 → 790Brakes and stability system (IPB, Bosch)
Steering angle, g-forces, yaw rate, hydraulic brake pressure, brake-held flag
8085004ERD0002116 %
711 → 791Parking brake (EPB)
System name WBTLEPB-20
8080003CVN010045 %
718 → 798Door module, left
Front-left and rear-left windows, lock copy (guided tests)
8065004 / 8065005 pair86 %
719 → 799Door module, right (driver on RHD)
Front-right and rear-right windows, lock (guided tests)
8065004 / 8065005 pair86 %
720 → 7A0Body control (IBCM, Continental)
Doors, boot, brake lights, indicator, tyres (guided tests)
8045025CVN05019225 %
724 → 7A4Power liftgate
Its own system-name item
8045014CVN00033started
72B → 7ABHead unit / instrument cluster
Software name AY5G_IC2254…; cluster clock
8545003CVN04031617 %
72D → 7ADT-box (telematics)
Its fault list names a microphone, eCall / bCall buttons, a backup battery, a motion sensor (IMU) and a crypto chip; holds the maker's telematics server address
8550003CVN19034started
734 → 7B4Airbag / seatbelt?
Not confirmed; a few items change now and then
8265010CVN000147started
73E → 7BEFront radar (Bosch)
System name GAC-AY2.5-Bosch-FR
8087003CVN0700–identity only
73F → 7BFRear blind-spot radar (Bosch)
System name Bosch-BSD
8535009CVN0500–identity only
74A → 7CARear blind-spot radar (Bosch)
System name Bosch-BSD
8535009CVN0500–identity only
740 → 7C0Front camera (Bosch)
System name GAC-AY2.5-Bosch-IFC
8540009CVN0400–identity only
748 → 7C8Wireless phone charger?
System name …INVISPOWER
8245028ERD0002–identity only
74F → 7CFGateway
Field +GWM30; passes diagnostic requests to the others
8045196ERD0303810 %
765 → 76DSteering-wheel switches (MFS)
System name GAC-AY5-MFS
8220005CVN00003started
760 → 768Unknown
System name begins A29-EOP
1322005CVN0000–identity only
705 → 785Unknown, slow
Answers "busy" to nearly everything; no VIN stored
2610003ERD0100–identity only

The radars, the front camera and module 705 haven't been explored beyond their identity items yet. The logger keeps working through the rest whenever the car is on and parked.

Identity items

Every module answers a standard set of identity items. Two of them are unique to one car, so we never publish them in full.

ItemHoldsExample
F187GAC part number2520105CVN1201 (battery module)
F18ASupplier codeGAEI (T-box)
F18CSerial number of the module: uniqueK47Z… (rest hidden)
F190VIN, stored in ten modules: uniqueLNA… (17 characters, rest hidden)
F193Hardware versionF-C5 (T-box)
F194 / F195Software versionAY5.01.0S.C9.V1.62.R (T-box)
F197System nameA12_UAES_BMS (battery module)

Circuit diagrams for the networks behind the gateway: gateway, OBD diagnostic system, OBD-TEST diagnostic system.