RomRaider

Hi,
Here are a few Nissan / Infiniti ROM dumps I have collected. Feel free to submit new ROMs, corrections or additional info !
ENG : engine code
ECUID : 5-character code , typically the last part of the part number which is almost always "23710-XXXXX". Pro tip : the QR code on the ECU contains the part #, including ECUID - see here. Thanks Alex-Angarsk !
HWID : Some kind of hardware-related ID but not unique and not necessarily related to ECUID. See notes after tables
CKS : checksum algo. See below.
(Thanks to dschultz for his nice table markup !)

For quick reference, here's a list of ROMs documented by UpRev http://www.romraider.com/forum/download ... p?id=33094

Model	Year	Engine	ECUID	HWID	FID IC	LOADER	Checksum	IVT2	DL link	Notes
Z34	09	VQ37VHR	1A30D	8FZ35PXE71	705927	80, 705927	alt,alt2,RM160	0x2 0004		NISMO 6MT SYNC 2WD
Juke	10?	YF15	1KA6A	1XHK14CDG	705828	80, 705828	alt,alt2,RM160	0x2 0004	link
Juke	10?	YF15	1KE9C	2XHK19BDF1	705828	80, 705828	alt,alt2,RM160	0x2 0004	link	Bad altcks ?
Juke	10?	YF15	1KN0B	0KHD95DZ3	705828	80, 705828	alt,alt2,RM160	0x2 0004	link	Bad altcks ?
M56	11	VK56VK	1MX6D	0Z5DYPNR1	705927	80, 705927	alt,alt2,RM160	0x2 0004
Murano?	14?	?	3JV9B	3TRK2CUGNG	7253332	00, 7253332	alt,alt2,RM160	0x7 0004
Sentra B15	01	SR20DE	4M860	1CBM2ZN3	705507	N/A	std	N/A		weird iso9141 OBD support
I30?	01	?	5Y006	1ZVMAT0NH	705507	N/A	std	N/A	link	AT
Maxima			5Y701	1TKE8Z5N51	705507	N/A	std,alt	N/A
Maxima	02-03	VQ35	5Y702	1TKE8Z5N53	705507	N/A	std,alt	N/A	link	MT
Maxima	02-03	VQ35	5Y703	1TKE8Z5N59	705507	N/A	std,alt	N/A	link	6MT, Part# A56-T08, immo
Maxima	02		5Y712	1TKE8Z5N51	705507	N/A	std,alt	N/A		AT, no TCS
Maxima C/A33	02	VQ35	5Y724	1TKE8Z5N53	705507	N/A	std,alt	N/A	link	AT, TCS, ECUID6Y324 Replaces 5Y724, 6Y320-6Y323, also used in MY03-04 Infiniti I35
Maxima A33	02-03	VQ35	6Y300	1TKE8Z5N56	705507	N/A	std,alt	N/A	link	MT
Maxima A33	02-03	VQ35DE	6Y303	1TKE8Z5N59	705507	N/A	std,alt	N/A	link	6MT, MY02-03. “Unisia Jecs”
Maxima A33	02		6Y314	1TKE8Z5N59	705507	N/A	std,alt	N/A	link	AT, USDM
Sentra B15	05	QG18DE	6Z68A	5X6E58STZNM	705821	50, 705521	std,alt	0x1000	link	MT
Maxima	05	VQ35DE	7Y210	5ZVTDNK	705821	50, 705521	std,alt	0x1000		Type A pcb with silkscreen !. Maxima SE, ATX. Model BLJALVN-EU5
Altima L31	02-03	VQ35DE	8J160	1TKE8Z5N5	705507	N/A	std,alt	N/A		MT
sentra N16		QG16DE	8N878	8MC4Q9DW	705101	N/A	std, ?	N/A		AT, Asia
		QG16DE	8N881	8MC4Q9DW	705101	N/A	std, ?	N/A	link	JDM AT
Sentra B15	02	QR25DE	8U023	3TREE21N14	705507	N/A	std,alt	N/A		MT
Sentra B15	02	QR25DE	8U07A	3TREE21N15	705507	N/A	std,alt	N/A		MT, NDS forums. 02 Spec V USDM Fed emission + NATS
Sentra B15	03	QG18DE	8U320	3QGEEL7N7	705513	10, 705513	std,alt	0x1000		AT
Sentra B15	03	QG18DE	8U42D	3QGEZEJCNC8	705513	10, 705513	std,alt	0x1000		AT
Sentra B15	02	QR25DE	8U51B	3TREE21N19	705507	N/A	std,alt	N/A		5MT
Sentra B15	03?	QR25DE	8U523	3TREE21N14	705507	N/A	std,alt	N/A
Sentra B15	04	QR25DE	8U901	5X61BENHN6	705513	10, 705513	std,alt	0x1000		6M/T 50 STATE ASCD
Sentra B15	04	QR25DE	8U92A	5X61BECCNA	705513	10, 705513	std,alt	0x1000	link	MT, no ABS, cruise ctl; OBD K line only, ASCD + NATS immo
Maxima A34	04	VQ35	8Y106	4XXES9NP	705513	10, 705513	std,alt	0x1000	link	4AT ASCD
Altima L32	11-12	?	9HA7D	2TRKH4SN05	705828	80, 705828	alt,alt2,RM160	0x2 0004		CVT. Bad altcks ?
Altima L31	02-03	QR25DE	9J003	3TREE21N14	705507	N/A	std,alt	N/A		AT, ASCD NATS
Altima L31	02-03	QR25DE	9J00B	3TREE21N19	705507	N/A	std,alt	N/A		AT, ASCD NATS
Altima	02-03	VQ35DE	9J074	1TKE8Z5N57	705507	N/A	std,alt	N/A	link	AT, Part # Ja56U03, very similar to 6Y300 etc
Teana J31	04	VQ23DE	9Y412	3ZVNSD3	705513	10, 705513	std,alt	0x1000	link	auto
G35	04	?	AC011	3GIMBN06	705513	10, 705513	std,alt	0x1000	link	5AT
G35	03		AC200	3GIJ7N04	705513	10, 705513	std,alt	0x1000		6MT USDM
G35	04	?	AC400	5ZVP8N00	705821	50, 705521	std,alt	0x1000		5AT
G35/V35	04	VQ35DE	AC401	5ZVS8N02	705821	50, 705521	std,alt	0x1000	link	Skyline/G35 Coupe 5AT "dual bosch wideband ctl", 2WD
G35/V35	04	VQ35DE	AC405	5ZVP8N00	705821	50, 705521	std,alt	0x1000	link	USDM 6MT Coupe. 512k file but sh7058 is reported => bad cks
Gloria Y34	?	VQ30	AG920	9QE4V3DQ	705101	N/A	std, ?	N/A	link	Y34 Gloria; no alt checksum ? didn’t check thoroughly. Dual 7051
Skyline V35	01	VQ25DD	AL500	M1ZVDABDQ	705507	N/A	std,alt	N/A		ROM fortune
G35	03	VQ35	AM604	3MFED18N8	705507	N/A	std,alt	N/A	link	AT
Skyline V35	04	VQ35DE	AM900	2WLJ6D11	705513	10, 705513	std,alt	0x1000		6MT jp import
Stagea M35	01-04?	VQ25DET	AQ806	1MATBH6D6	705507	N/A	std,alt	N/A
Stagea M35	02		AQ860	1MATBHDK	705507	N/A	std,alt	N/A		AUS, AT
Primera P12	02	QR20DE	AU40B	0TRE6Z8D8	705507	N/A	std,alt	N/A	link
?	?	?	AV722	1MC3QMEP0	705513	10, 705513	std,alt	0x1000		Probably corrupt (std checksum fails)
Almera?	?	N16E?	BN915	1MC3FVEM	705513	10, 705513	std,alt	0x1000	link
350Z Z33	03	VQ35DE	CD002	3GILXN05	705513	10, 705513	std,alt	0x1000	link	Decrypted from repro file; MT ASCD TCS
350Z Z33	03	VQ35DE	CD007	3GILXN05	705513	10, 705513	std,alt	0x1000		MT
350Z	?	VQ35DE?	CD405	2WLGHD10	705513	10, 705513	std,alt	0x1000	link
350Z	03	VQ35DE	CD415	2WLGHD10	705513	10, 705513	std,alt	0x1000	link	JDM AT, 7055F40 topcode
350Z	?	?	CD416	2WLM1D13	705513	10, 705513	std,alt	0x1000	link	Non-OBD II Hitachi MEC31-571
350Z	03		CD700	4TTZVEM41N1	705513	10, 705513	std,alt	0x1000	link
350Z	04		CE860	4TTZVEM43N3	705513	10, 705513	std,alt	0x1000	link	5AT
350Z	05	VQ35DE	CF000	5ZVSUNH	705821	50, 705521	std,alt	0x1000	link	Touring Model, Non-RevUp motor (redline 6500), MT, Cruise, ABS
350Z	05		CF065	5ZVSVNJ	705821	50, 705521	std,alt	0x1000	link	JDM. Posted a corrupt ROM, fixing IVT1 first entries solves it
350Z	06		CF40E	6GI3BN5	705823	60, 705823	std,alt	0x2000		MT
350Z Z33	06	VQ35DE	CF42A	6GIZ7N4	705823	60, 705823	std,alt	0x2000	link	MT, RevUp + VVT
350Z	06	VQ35DE	CF43D	6GI5VN6	705823	60, 705823	std,alt	0x2000	link	MT, base, no cruise, with RevUp (variable exh valve timing)
G35	06		CM31C	6GI5VN6	705823	60, 705823	std,alt	0x2000	link	6 MT Rev up Sport
Q45	04	VK45	CS500	M4ZHEPEN3	705507	N/A	std, ?	N/A	link
Note/Tiida?	04-07?	HR16DE	EC80A	5CMCE3E6	705520	40, 705520	std,alt	0x1000	link	Probable corruption @ 0x76,77,300,301. Almost identical to EC82A
Note/Tiida?	04-07?	HR16DE	EC82A	5CMCE3E6	705520	40, 705520	std,alt	0x1000	link
Note/Tiida?	04-07?	HR16DE	EC87A	5CMC9EE5	705520	40, 705520	std,alt	0x1000	link
Tiida Latio	06	HR15DE	ED09B	5CMC1WD5	705520	40, 705520	std,alt	0x1000		CVT 2WD
Fuga Y50?	04-09?	VQ35DE	EG03E	5ZVPCN116	705821	50, 705521	std,alt	0x1000	link	JDM, dual WB O2
Tiida	04-12?	HR16DE	EM62B	1CMC7QPD401	705519	80, 705519	alt,alt2,RM160	0x10004	link	special loader80; bad altcks ?, CAN only
Note/Tiida?	04-07?	HR16DE	EM63A	9CMCS5E0	705520	40, 705520	std,alt	0x1000	link
X-trail	05	QR25DE	EQ910	3TRTTE6	705513	10, 705513	std,alt	0x1000	link	MT
?	?		ET81A	7TRKEWBTN6	705822	80, 705822	alt,alt2,RM160	0x2 0004
350Z		VQ35HR	EV13B	7MFKAWNE	705822	80, 705822	alt,alt2,RM160	0x2 0004	link	AT
350Z	?	VQ35HR	EV15A	7MFKAWNE	705822	80, 705822	alt,alt2,RM160	N/A		Hacked / tuned 350Z ROM, IVT2 @ 0x1FF2C
Titan A61	17	VK56VD	EZ11D	7Z2DDALN42	7254332	00, 7253332	alt,alt2,RM160	0x7 0004		NAM AT 2WD 2WD ASCD W/ ASCD Disp in Meter
Altima L32	08?	QR25DE	JA90C	8TRKEJJN8	705822	80, 705822	alt,alt2,RM160	0x2 0004		CVT 2WD ABS ASCD
GTR?	?	?	JF30C	8SMF9TDB2	705822	80, 705822	alt,alt2,RM160	0x2 0004
Stagea M35	02		M5113	N1MATBH5D5	705507	N/A	std,alt	N/A		JP AT
Patrol	04	TB48DE	VC264	1APM99P4	705507	N/A	std	N/A	link	GUIII MT early with two O2 sensors
Patrol	02	TB48	VC266	M1APEA8E5	705507	N/A	std	N/A	link	Patrol GU3 Jan 02, Australian, AT, twin O2S
Patrol	02?	TB48	VC85A	M1APEGSE9	705507	N/A	std	N/A	link	throttle by wire; 2x knock sensor + VCT
Patrol	09	TB48	VD70A	M4APE3RE3	705507	N/A	std	N/A	link	A/T;7055 + 7051 combo. M/T model would lack the secondary 7051 ?
AD Y11?	03?	QG18DE	WE85C	3ZRE43D7	705415	20, 705415	std,alt	0x1000	link	AT, case A56-V62 A6Q
Laguna X91?	?		ZB060	7V4YHZEB2	705822		alt,alt2,RM160	0x2 0004		A2L data ! Renault “TK_X91” , config only (missing 0-0x1FFFF)
Altima	05		ZB075	5TTTDN4	705821	50, 705521	std,alt	0x1000		SER 6MT
Altima L31	06	QR25DE	ZD89A	6X6E58SYMN36	705823	60, 705823	std,alt	0x2000	link	AT, ASCD 50 State ULEV
Titan A60	07	VK56DE	ZJ05B	7ZW91N7	705823	60, 705823	std,alt	0x2000	link	4WD TW (big tow) ASCD VDC
Maxima	06		ZK01B	6ZVYXN00	705823	60, 705823	std,alt	0x2000		AT, part # A56-A14
Altima L31	06	VQ35DE	ZH99A	6ZVYXN00	705823	60, 705823	std,alt	0x2000		6MT , SER, no tcs
Maxima A35	10-11		ZX71C	0ZVKTSN3	705828	?	?	0x2 0004		.dat repro file (missing lower 0x8200) . USDM

CHECKSUMS
See wiki checksum page; there are at least 3 types of checksums. std, alt, and alt2 work with the same basic algo (composed of a 32-bit addition, and a 32-bit XOR of all 32-bit dwords of the ROM). See the QR25DE thread, and my obsolete checksum finder code and wiki page.
std, alt, and alt2 differ by the the area on which they are computed, and which locations are skipped.

There may also be a RIPEMD-160 hash (I wrongly assumed it was SHA-1 at first), but I haven't investigated that one.

FID / CAL ID
I only know how to find these in non-Diesel ROMs. In the gasoline SH7055 and SH7058 ROMs, there are a usually 2 structures containing "DATABASE" in plain text. One of them is part of a "loader struct" , which start with the strings "LOADER10", "LOADER50", "LOADER80" etc (absent from earlier ROMs). The other is the "FID struct".

here are all files i have so far: http://www.mxmotard.se/Denso%20D40.rar
so you can add them to the list, EB310 is mine, from a 2006 EURO3, noDPF. 6-Manual.
all are from nissan navara, let me know if you need help to extract firmware ID from the files.
engine model for 2.5DCi - YD25DDTi

Yes please ! I've found that all your diesel ROMs have a similar text block at 0x6000. EB310 has

" E20KU4C_T2F2H61B ", then 0x05 0x04 0x15
and " 58003601J23710EB3102758003602 "
which is interesting if it's read as '58003601J','23710EB310','27','58003602'

So, would the firmware ID / Cal ID be E20KU4C_T2F2H61B ?


Also if you know what checksum algo they use, I would add that info to the table.

Here you go!

CPU 7058
ROM 1MB
Mdl 350Z
YY 06
ENG VQ35DE "RevUp"
ECUID CF43D
FID 6GI5VN6
CKS - ? Gunna need some help with this one...
Notes - MT, Base Model, No Cruise, "RevUp" (in 06 Nissan added variable exhaust valve timing)

With the latency timer at 1 ms and dumbopts = 0x08 I got 813 kb of info at an average of 66 B/s

Awesome! Thanks!

Hi there, below are some Nissan stock ROMs for HR16DE engine, all of them are seems to be for the same HW based on SH7055 CPU
Unfortunately I don't know the year and exact model of the car, but according to Nissan FAST catalog ECUs with respective ECUIDs are suitable for Nissan Note/Tiida made in 2004-2007 years.

All of them seems to have exactly the same checksum algo as described in other related topic here.

Some more 1024 kb ROMs.
Not sure for what engine are they, but ECUIDs are pointing to Nissan Juke 1.6 2010 (petrol ones, not sure if diesel Jukes even exist).

One more ROM with LOADER10 for comparsion.

Here's a new one:

CPU 7058
ROM 1MB
Mdl Altima
YY 06
ENG QR25DE
ECUID ZD89A
FID 6X6E58SYMN36
CKS std
LOADER 60, SH705823
Notes - This info comes from a Nissan TSB: MY06, A/T ASCD, QR25DE

Here's another one to add to the list:

MCU - 7058
Model - 350Z
Year - 2005
Engine - VQ35DE
ECUID - CF000
FID - 5ZVSUNH
FIDIC - 705821
LOADER - 50, 705521
PCB Type - Unknown (enclosed in car)
Notes - Touring Model, Non-RevUp motor (rpm redline at 6500 rather than 7000 on MY 06'), MT, Cruise, ABS

Tiida MY 2004-2012
Engine probably HR16DE
MCU SH7055

2002/2003 Nissan Maxima 6MT
SH70557N Unisia Jecs 512K
Software:16Y303

2006 Infiniti g35 6 MT Rev up Sport
SH7058
SH705823N
Software: 1CM31C

Interesting, it has a lot in common with CF43D. Same FID, and a few differences sprinkled through the ROM. At least a few modified maps + axis, but the code itself seems to be mostly identical. I surmise that the maps are probably in the same locations inside the ROM, too.

Damn, that means the "FID" isn't as unique as I thought... But maybe if we're lucky, every ROM with the same FID will have the same maps in the same locations (with possibly different contents).

So I compared those two ROM's (CF43D and CM31C) with wols and it said they are a 94% match! I think you are right about the only differences being in the maps. The first (and only) map I looked at to compare looks like this:

CF43D

CM31C


Moderator: Image removed, please read posting rules.

Primera P12 (type F https://nissanecu.miraheze.org/wiki/Ecu_hw#type_F )