Daluv

uhm

2463: S:[06][23][01][80][40][B0][03][00]
2473: R:[04][63][01][4D][81][00][00][00]

on 5268 :/

Mart

wmcdonal

I am new to this forum but I know the Renesas processor like the back of my hand.
I just bought a 2014 EVO X MR (8 days ago) and I plan to do some playing with the code in the ECU.
I also purchased a brand new ECU that I plan to open up.
I have the Renesas JTAG tool and debug software that I can connect to the JTAG pins on the spare ECU. This will allow me to read the flash and RAM contents without having to start a programming session with the ECU.

Once I have a clean copy of the memory from the ECU I will try reading the ECU using the K-Line back door and see if this changes any of the values in the EEProm.
I expect that this will not change anything as it uses the boot code in the MCU rather than the user code that is included in the flash.

After this I will try reading the flash using the programming mode and see what changes.

I have not opened the ECU yet.
I was going to mill a rectangle out of the top and see if I can get access to everything I need without major surgery.

Does anyone have a photo of an ECU that has been opened up.

If I could get inside the ECU on the car without damaging the case I would also do this.
Looking at the case I assume some cutting is involved.

Thanks

ZZZ

Drop me your email to PM. Most of the parts you are talking about are on top side.

wmcdonal

Here are a couple of photos of my debug setup.
I cut open the brand new ECU and connected a 10 pin header for the JTag interface.



This next image is the debug software on my PC



This allows me to view registers, set breakpoints and single step through the code.

I have read the RAM and Flash from the ECU.

I have disassembled the flash so I can work a few things out before I reflash the ECU