Anyone interested in working with OPENECU group to develop G35 compatible version? - Page 2 - G35Driver

#16

06-19-2011, 08:45 AM

NFSP G35

? = 2B || !2B

iTrader: (22)

Join Date: Apr 2009

Location: Tallahassee, FL (or thereabout)

Posts: 22,160

Likes: 201

Received 851 Likes on 639 Posts

Little more searching (didn't take much at all...)

And here's the datasheet for the processor. Instruction set and all: http://pdf1.alldatasheet.com/datashe...D64F7055S.html

I'm not fantastic at low-level assembly/disassembly, but someone that is should have a heyday with this and the ROM dump.

Reply Like

#17

06-21-2011, 01:15 AM

NFSP G35

? = 2B || !2B

iTrader: (22)

Join Date: Apr 2009

Location: Tallahassee, FL (or thereabout)

Posts: 22,160

Likes: 201

Received 851 Likes on 639 Posts

Stupid UpRev

They have a method of doing a rom dump, but (from what I've read) the software immediately encrypts it, and they're the only ones that can un-encrypt it

Reply Like

#18

06-30-2011, 03:39 AM

propho

Registered User

Join Date: Feb 2011

Posts: 14

Likes: 0

Received 0 Likes on 0 Posts

Would a USB Data sniffer such as http://sourceforge.net/projects/usbsnoop/ help?

Reply Like

#19

06-30-2011, 10:28 AM

NFSP G35

? = 2B || !2B

iTrader: (22)

Join Date: Apr 2009

Location: Tallahassee, FL (or thereabout)

Posts: 22,160

Likes: 201

Received 851 Likes on 639 Posts

USB sniffer, no... CAN sniffer maybe. Depends on if the ECU dumps data through the CAN system or what. (I'm fairly sure it does though)

Appreciate the attempt though

Reply Like

#20

06-30-2011, 10:59 AM

propho

Registered User

Join Date: Feb 2011

Posts: 14

Likes: 0

Received 0 Likes on 0 Posts

Oh sorry, I don't know anything about how the dump's are made. I was assuming the dump was made through the tuning cable..

Reply Like

#21

06-30-2011, 11:07 AM

NFSP G35

? = 2B || !2B

iTrader: (22)

Join Date: Apr 2009

Location: Tallahassee, FL (or thereabout)

Posts: 22,160

Likes: 201

Received 851 Likes on 639 Posts

^It is, but I'm not sure where the encryption takes place.

If it's hardware based, then USB sniffer won't do anything (and it still might be a bit of a pain)

If the encryption is only in the Osiris software though, I guess a USB sniffer might help

Reply Like

#22

01-25-2016, 04:22 PM

Qwertin

Registered User

Join Date: Jan 2016

Posts: 2

Likes: 1

Received 0 Likes on 0 Posts

Help please identify the elements!

Hello!
Sorry that animate the subject.

But do not tell anyone component values. I had to pay, but already there places without indicated in the figure. As long as found by the photo from the Internet that:
1. R = 10 kOhm (mark 103)
2. R = ??? (mark ???)
3. C = ???
4. C = ???

Maybe someone has a fragment of the scheme or access to the unit.
In advance thank you very much, I hope you can help !!!

Quote:

Originally Posted by NFSP G35

So, a little more info from this thread: https://g35driver.com/forums/tuner-d...technical.html

I have a newer ECU in hopes that I'll be able to go from the older "Maxima style" grey connector ecu to the newer black connector ecu.

I took apart the ECU to get ANY information that might possibly help out:

The info off the ECU is as follows:
It's from a 04 G35Sedan with AT
Outside label on the ECU reads:
Nissan
Hitachi, Ltc. Tokyo Japan

WA
MEC31-980 B1 3141

There's a QR code printed on the label that contains this information:
WAMEC31-980B10000WA341423710 AC0100155 (thank's QRDriod

)
If you notice, the bold part is the "ECU number" that you can lookup on infiniti-techinfo.com except this particular one isn't in there for some reason

Inside the ECU, printed on the circuit board is:
31-980 in gold letters,
ge223471-a in white letters.

The chips, from left to right, top to bottom are labeled:

Motorola
mc38186dh
1
kkcz0246

l9302 - ad
b995c0312

l9302 - ad
b995c0312

789101a
a03(a1)
0310k323

The big one in the middle:

64f7055f40
rl 0306
bb02800

Then the last one:

l9762 - bc
b99140303

Hope this does some good