mitsubishi has been pretty generous in keeping debugging hooks in production hardware... servos, encoders you name it - most of them have a way to read the cpu address space. i have the mr-j2s-a flash image. pm me if you need one