RomRaider

Just an update, changing the RXE value to 200 allowed me to dump the ECU using the kernel . Thanks for your help

Hi,

I tried running the kernel on my friends 2005 Altima SE-R. I get the following error.

[color=#BF0000]ECUID: ZB070
Key candidate dist (smaller is better)
0: 0x3C24EB50 2
1: 0x8CF9387E 7
2: 0x968148AD 10

Using best choice, SID27 key=3C24EB50, SID36 key1=21F3386B
Use "setkeys" to change keyset.
nisprog: Settings loaded from nisprog.ini

nisprog> setdev 2
now using 7058.
nisprog> runkernel npk_7058.bin
Using 3908 byte payload, padding with garbage to 3936 (0x0F60) bytes.
SID 27: seed = 0xEA 0x40 0xDB 0x81 ; using NPT_DDL algo (scode=0x3C24EB50),
got bad 27 02 response : General_Error, Requested_SID_securityAccess Error_invalidKey
sid27 problem

Any help is appreciated.

I hope this is already seen ...

Thanks. Yes, those ECUID-key pairs are already in the built-in list.

sid27 problem for CE811

setkeys command will do the trick...

ecuid_list.c need to add a line

{"CD800", 0x7B472BD1},
{"CE400", 0x705A2287},
{"CE405", 0x705A2287},
{"CE81.", 0xEED9A107},
{"CE860", 0x7B472BD1},
{"CE865", 0x7B472BD1},
{"CE8..", 0xEED9A107},
{"CF0..", 0xEED9A107},

Yes, it works manually ... But it should work automatically, in the program where there is an error and it needs to be fixed. Please do it.

Hello guys, I have tried to dump first my 350z 05 ECUID CF170

The program runs but the fans don't turn on. However I am able to start dumping the ecu. I just don't want to rush anything...

Here are some screenshots of my setup and the cmd.

Any help would be appreciated.

fenugrek, waiting for a response from you.

In you second picture the last line should be "runkernel C:\nisprog\npk_SH7055_35.bin" not just "C:\nisprog\npk_SH7055_35.bin"

also rodfeel here is a file that works for me everytime, just change you COM port to your proper one.

Oops haha thanks did not see it. I successfully dumped it !!
here is a copy of it.
Stirkak advised me to use CD700 to flash my ecu since mine is still not defined (cf170)

Thanks again this forum is awesome !!

Hey rodfeel, you asked me in a different thread to help you with the popping on decel with light throttle input. I have modified a CD700 map for you to do that in a range of 2000-6400rpm.

Just use the same utility you used to dump the ROM.

Once you hear the fans, type "flrom rodfeel.bin" and in the next screen choose option "y".

When it's done DO NOT get all excited, you have to stop the kernel so type "stopkernel" and then "npdisc" and finally "quit", and you're done.

Note: You have to REALLY SLIGHTLY push the throttle while you are decelerating, just sort of push it with your toes until you hear the popping and then hold it there. Takes some practice.

Correct, and since in your case the second candidate was the right one, you only needed



It's already planned for the next release. In the meantime, nothing prevents you from compiling it yourself.