RomRaider

what tools/ method are you guys currently using to read/write to the ecu?

i'm surprised aud is disabled

is anyone still working on definition files for these ecu??

swami - i just started on finding maps/definitions for my car (06' 350Z, CF43D ROM can be found on these forums). I'm using IDA and wols to find them, I'll also need to use a RAM address watch tool to try and figure out what they are. There is some more info on the NDS forum too. FYI, map locations seem to be in different locations for every different Nissan ECU ID so its not super straight forward from one to the next.

thanks for the reply. ill have to look up that forum and see what is there.
the nissan diesels also have the maps in different locations from one ecu# to the next

im struggling to get IDA set up. so I have abandoned that temporarily & focused on traditional methods
so far ive been going through the hex in my spare time & finding mostly 8 bit maps.

Are you guys still working on this quest?

Thanks

Yup, always. It dropped on my priority list a little but still working on it

I recently started working with the 02/03 maxima ecu, which is similar to the early g35. It is a sh7055 512K unisa/jecs ecu.

I have successfully read and written the roms, but need to work on getting the definitions. I'm not sure if this is within my skillset or not, but I'm working to see if I can make anything happen.

Any one else have any progress on the early nissan ecus?

See attached 'tab-separated value' text file. It should give some very good insight into finding maps.

Background:
06' G35 RevUp and 06' 350Z RevUp ROM's were found to be almost identical (I assume all the code in the firmware is the same and just the maps were changed for different Nissan tunes between the different cars)

The text file shows that 930 Bytes are different between the ROM's (and gives % change, address, etc.) and many of the Bytes are adjacent to each other or at least show up in the same map.

I suspect the more useful maps for tuning are in the 0x8000 to 0xDD90 range (rough estimate) but I haven't had a chance to go through it in IDA/wols and find the specific address's for each map yet.

I've decoded a good portion of my g35 revup rom now. When I get a chance I'll take a stab at finding the relevant tables in this rom and posting it up.

EDIT:

I don't think its going to matter as i believe this is the guy who was posting about being an uprev protuner, and he may have went to jail for scamming people. See below:

https://www.google.com/#q=jason+diekman

??? who was posting about being an "uprev protuner"?

anyway, UpRev is not the same thing as RevUp. UpRev is a tuning company, RevUp is a VQ35DE motor made in 2006 by Nissan. I assume the 06' G35 ROM is a Nissan RevUp motor ROM as is the 06' 350Z ROM.

Yes I very well understand the difference. The op(nosajton) is who I was referencing. He posted ads and threads everywhere stating he could tune ecus and was an uprev(yes the tuning software) "pro" tuner, but merely scammed people. I'm 99% sure he's he same guy.

That being said he may be in jail right now.

On another note, I can probably help with your rom if you need it akeyes. I have timing, fuel target, maf, intake and exhaust cam timing, and fuel compensation all lined out on my 06 g35ru ecu.

Ooo ok, thanks for the clarification. That's crazy

Anyway, I would love some help finding maps and figuring out what they do! Sounds like you have found a lot of the most useful ones! Nice work

Since I think the addresses will be the same, can you either post or PM me what you have found?? Maybe something like "Fuel Target - 8 bit 16x16 map @ 0x1234 - Axis @ 0x1234 & 0xABCD - RAM Address = FFFF8XXX". Idk, that's how I have been keeping track of what I find. Really any info would be greatly appreciated! Thanks!

Here's the majority of what you need to do a base tune:

Thanks murphys_law!! Great stuff. How do you determine what the maps are used for? Is it just tuning experience or do you have a way of figuring this out in disassembly?