Mitsubishi Evo flashing

[Matz]

I've written my own SH reflashing kernel and am flashing Evo 7/8 right now. I'm waiting to hear back from a friend regarding success with the Evo 9.

Colby, would you be able to enlighten some of us on how you got started doing ECU flashing? I'd love to read about the thought process involved. Hopefully, that's not too stupid of a question.

[STirish]

I've written my own SH reflashing kernel and am flashing Evo 7/8 right now. I'm waiting to hear back from a friend regarding success with the Evo 9.

Colby, would you be able to enlighten some of us on how you got started doing ECU flashing? I'd love to read about the thought process involved. Hopefully, that's not too stupid of a question.

Yes, do tell.

[cboles]

I'm going to be changing the site soon to a Wiki+Forum format. I'm going to write a Wiki page on some of the reversing techniques I've used to get the initial ROM dumps.

Colby

[S54fan]

My UK Evo IX has already been Ecutek'd by the previous owner, but I want to start again with it.

1. When I get my cable, can I plug in another Evo IX ECU and read out the flash image even though it won't start the car because the immobiliser code won't match?
2. Can I read the immobiliser 4 digit code from a MUT tool?
3. If so can I then program this to the second ECU?

[S54fan]

I also have a five digit code that would fit into 16 bits that was attached to the original key ring. It is different to the VIN number. I wonder if this might match the required ECU immobiliser code or is it a key recutting code or the same thing?

[GTODesign]

I also have a five digit code that would fit into 16 bits that was attached to the original key ring. It is different to the VIN number. I wonder if this might match the required ECU immobiliser code or is it a key recutting code or the same thing?

YHPM

[evoman]

My UK Evo IX has already been Ecutek'd by the previous owner, but I want to start again with it.

FYI. Previously Ec**k't Evo ECUs are locked with changed enter boot init.
There is a little problem - you can't enter in flash mode with standard init procedure...

[S54fan]

Can I read and write the flash from an ECU from antoher car with mismatched immobiliser code even though it won't start the car, and then when I'm ready get the dealer to switch the immobiliser to the other ECU?

[evoman]

Can I read ?

Yes. You can read a standard ECU

and write the flash from an ECU from antoher car with mismatched immobiliser code even though it won't start the car, ?

You can write in standard ECU only.
You can't write any data in ecuteked ECU until it is locked..

and then when I'm ready get the dealer to switch the immobiliser to the other ECU?

I don't know what think a dealer about, but it's technically possible to sync immo.

[GTODesign]

My UK Evo IX has already been Ecutek'd by the previous owner, but I want to start again with it.

FYI. Previously Ec**k't Evo ECUs are locked with changed enter boot init.
There is a little problem - you can't enter in flash mode with standard init procedure...

Hmm that's bad news. Most un-sporting of them.

Has anyone done any work to overcome this yet? I presume they've just altered the bootloader to prevent the uploading of a kernel other than their own?

[S54fan]

When you use MUT II to sync the immobiliser to a new ECU, do you need any other information/equipment other than the new ECU?

[NeverLies]

Back with my MH7203 cpu

You said previously that this CPU may be used in EVO 8/9 ACD. Do u know the misubishi part number for this ECU ?

The ECU I have here (MCU of a jetski) has this reference (on the back of the plastic case):

22175-3727
F8T97671
4302

On the PCB board, the mistsu ref is : JF331B33604A.

As microcontroller is a MH7203 so should be from H8/500 familly, I think that Colby kernel should permit to dump memory content at first.
Colby, do u think it is feasable ? I think i may use your latest mitsu interface with the correct pin to pin interface for this pinout ecu and try to communicate.

Let me know your thoughts

[cboles]

I will be writing a H8/539F kernel soon. I imagine that the ACD reflash works the same way as the ECUs do. It probably just uses a different wire as the init line, or uses a different code in the init sequence.

Colby

[LOK11]

My UK Evo IX has already been Ecutek'd by the previous owner, but I want to start again with it.

FYI. Previously Ec**k't Evo ECUs are locked with changed enter boot init.
There is a little problem - you can't enter in flash mode with standard init procedure...

Hmm that's bad news. Most un-sporting of them.

Has anyone done any work to overcome this yet? I presume they've just altered the bootloader to prevent the uploading of a kernel other than their own?

Hello all,
Lachlan Riddel from ChipTorque in Australia
This is a situation that we are looking to overcome with our "XFlash" product. Provided that we can suitably secure any proprietary rights that another tuning provider might be due, we expect to be able to provide an original ROM load to do your tuning from with ECUflash tools.
Cheers
Lachlan

[S54fan]

Sounds excellent Lachlan.

Would this be a program you would contribute to the open source work on here, or would it be purchased, or would the ECU be sent to you for unlocking?

I have purchased an ECU off a JDM IX GSR which should arrive at a similar time to my cable, so then we can get cracking on the JDM/UK ROMs as long as it will read/write the flash with the mismatched immobiliser code. If I had a way of querying the immobiliser to work out the 2 byte immobiliser code that needs to go into the ECU, then I could have two ECUs to start my car with.