H8/539F (2G DSM/3G/Evo 5,6)

[_Madman_]

Hello!

I have this plastic ECU and I want to help to find how you can flash it. I've found the specs:
Datasheet: http://www.xtreme3s.net/H8500/H8%20539F.pdf
Prog guide: http://other.ditcorp.com/legend/programming.pdf

I also learned about the 0 page restriction and vector table cloning to page 1, but I'm still having a lot of things I don't understand, and I'm trying to learn.

Is anyone else trying to find a way to flash this ECU. Does anyone know where I can find more information about this ECU?

[Gatecrasher]

I'm trying. I don't know about anyone else. I've got some more hardware on the way so I can run some experiments.

[_Madman_]

Have you managed to find where the entry functions should be, or why can't you flash a new ROM back, only the original ones?

AFAIK, if you duplicate the first 64KB twice, then you have a new image that should match the actual memory layout. And DWORD at offset 0 should point to actual location of the entry function.

Also, do you know which of the extended modes the ECU operates in - 3/4/5?

And which car are you trying to flash?

EDIT: is this link usefull? http://eu.renesas.com/media/products/so ... 401-02.pdf

[gteclass]

NICE! New information on this issue, i haven't seen that document before. In the download section of these forums there is a hardware manual, a programming manual, and a application note for the on board programming functions of the processor.

Also, there is this thread which has been around for a long time. People have been working on this for a few years now. I do think the j2534 is going to be the way to go.

http://forums.openecu.org/viewtopic.php?t=671