How to recover bricked Convers+ (SOLVED)

[Ursadon]

Let's clarify.
PBL_jmem.bin - dumped using j-mem. You can see vectors at 0x00000000 and 0x414 register mapped from 0xFC0F0014
PBL_UDS.bin - dumed over CAN using UDS ReadMemoryByAddress. There is some mapped data below 0x1000

What IDA options did you set to disassemble correctly? I choose ARM (no thumb) 32 Bit, Little Endian, but did not get those results.

ARM Big endian
ARMv4T with Thumb-1 instructions

[Go4IT]

"Thumb" was the missing part! Did not though they use the small instructionset, so i always disabled it. My fault
Now i can also disassemble...

[drobec.eu]

Here is full flash on MAC (on 2008)... :

[drobec.eu]

If you need copy,erase,program flash on MAC use J-tag you must have Jumper (Bridge) :

[Go4IT]

Do you also have a working MAC7116 project file for J-Flash?

[Go4IT]

HEY GUYS, MY CONVERS IS BACK ON THE TRACK NOW!

IMG_3755.JPG

After a bit researching, reading datasheets and specs i found a way to program the INIT sequence of the Segger J-Flash that it can connect to the MAC7116 (added the project-file here).

After that i first erased the DATA-Flash area (32KB, 0x0000-0x7FFF) while MODA-Jumper (green wire) is connected to Vcc

IMG_3752.JPG

Then i did the same with the PROGRAM-Flash are (1MB) and reprogrammed the chip using the MAC image file.

[tasicky]

To get MODA-Jumper (green wire), did you connect it to power supply, e.g. EPROM 24C16 or elsewhere? I'm not an electronics engineer but a programmer. I don't want to damage the processor.

[Go4IT]

I took Vcc for the MODA-Wire from the yellow-cable you see on the left.

[Go4IT]

Ups, the yellow cable is /RESET and internally connected to /TRST of JTAG-Connector. Usually it has HIGH (+5V) and so the trick worked, but it would be better to connect to the lower side of the capacitor, shown in picture of drobec.eu above!

[Go4IT]

Again, i have tried to resolder the MAC of another device, because of bad solder and simple reflow didn't healed it. But after soldering the chip back, the unit does not start anymore It's like this one, only drawing 15 mA. I could also not connect by JTAG... for shure i checked all solderings by microscope.