RomRaider

I am afraid you should not try to write this image.
It seems to be SH7058\SH7058S 1024kB ROM.

If it is supposed to be a 1MB ROM then half of it is missing...

What's odd is there is a reference to both SH7055 & SH7058 in the ROM.

oh really? I'll try to get that fixed and redownloaded ASAP!

yeah these roms nissan roms are really strange hope we can get a working definition

Heres another rom I pulled today. I purchased a 2004 G35 5AT ecu because I am going to convert my ecu (first bin I posted) to the later year which can be flashed easier.

Any help disassembling this one and finding some addresses would be appreciated. It is a 512K rom.

I am going to dump the 1MB rom as soon as I get a chance to get back to my friends house because that other ecu is funny

anyhow here it is!

Jason

*EDIT* It looks like my JDM xml opens the file up and the addresses are CLOSE but still garbled on this bin.. anyone with a little more skills than me want to try to correct them for this bin?

Found ROM ID is at 30D0 and is: 3GIMBN06 as opposed to the JDM bin being at 3188 and is: 2WLGHD10
anyhow i reattached the JDM XML as it reads the rom you'll see half the maps line up so its close!

I'd be willing to send you some $ via paypal for your time!

Here is a 1024K rom taken from AC401 G35/Skyline ECU check it out let me know how different it is and if it will be difficult to make a definition.

This is THE ecu to use and plan on using it if we could figure out a definition. It supports dual bosch widebands for each bank and should be very easy to tune based off of that.

have a look and let me know what you think

-J

SH7055 is for the bootstrap loader version.
SH7058 is for the ecu code.

[quote="Sasha_A80"]SH7055 is for the bootstrap loader version.
SH7058 is for the ecu code.

So assuming I have the Keys to flash this, do you see any issues loading this Hybrid 7055 / 7058 ECU CODE rom?

Can you help me make a definition for it based off of the previous definition I posted? I believe I already have the key to flash which is 00000000EED9A107D6A9ED21 / EED9A107D6A9ED21 that code seems to allow rom to be flashed back.

Any help would be appreciated Sasha_A80 and would be compensated! trying to help the open source community!

thanks!

-J

There is no need in getting any password for writing.
The ecu is routinely reflashed in bootmode.
Alternatively Nissan bootstrap maybe substituted by your own code for future OBD reflash.

There is a check sum at 0x1400:0x1407 that should be calculated or skipped if code\calibrations is modified.

In order to correctly understand the code and calibrations you are to sniff Nissan logging protocol.

Hey guys.

Evo and STI tuner here. Just wondering if you guys are still plugging at this.
I have an 05 350z I'd love to be able to flash on the fly.

I'd love to help too. I have a tactrix 2.0. I tried to use ecuflash to pull the rom
from it but couldn't get anything.

So any pointers would be great.

Cheers!

Hey everyone,

I'm working on a similar project. Just bought another (identical) ECU for my car so that I can mess with it without too much worry (its from a 2006 350Z with SH7058). I was able to dump the ROM from my ECU with fenugrec's program/help. I tried loading my ROM into ECUFlash with the JDM 350Z ECU definitions but I am in the same boat, the addresses don't line up. I was able to find the ECU ID and Internal Address ID though.

I have Nissan Datascan which can log via the OBD2 port so I was planning on logging a bunch of data to try and match the trends with any kind of trend I can find in the ROM. That way I can find the addresses and match up the maps... Any help on this would be greatly appreciated.

The next step after that will be to reflash the ECU. I am currently building the "Subaru SH Boot Mode Adapter" to see if I can flash a ROM onto the ECU using shbootmode in ECUFlash. Do you think the sh boot mode will work the same for a Nissan as long as I have all the wires/timer/power sources hooked up right? Another hurdle I have is that I can't select the Renesas SH Bootloader option (its greyed out) and when I go to Options -> Flashing nothing appears. I am guessing this is a setting in the xml file?

Again, any help would be greatly appreciated. I've attached my ROM from a 2006 350Z VQ35DE UpRev (variable exhaust valve timing) SH7058.

Thanks

You are to use free Renesas Flash Development Tool software ( Windows10 is not supported ).

You need to locate Ground and Power switched by MainRelay in order to power up the ecu.
6-12V 0.3-0.5A power supply is aplicable.

You need to find Ground, SCI1_RX, SCI1_TX, MD1, FWE, WatchDog in order to connect SHbootmode programmer.

CheckSum is most probably 32bit words located at 0x240C and 0x2410 for this particular ROM.

Has anyone been able to read the ecu via OBD using the tactrix cable or only is it only possible in SHboot mode ?

SH bootmode erases all the ecu being connected.
You can't use this way for ROM reading.

you're correct , i meant read via k-line or via AUD

AUD is enabled for Nissan SH7055F\SH7055SF based ecu.
AUD is disabled for Nissan SH7058\SH7058S based ecu.