Page 4 of 5
Re: How to recover bricked Convers+
Posted: 21 Jul 2019, 06:00
by Ursadon
Let's clarify.
PBL_jmem.bin - dumped using j-mem. You can see vectors at 0x00000000 and 0x414 register mapped from 0xFC0F0014
PBL_UDS.bin - dumed over CAN using UDS ReadMemoryByAddress. There is some mapped data below 0x1000
What IDA options did you set to disassemble correctly? I choose ARM (no thumb) 32 Bit, Little Endian, but did not get those results.
ARM
Big endian
ARMv4T with Thumb-1 instructions
Re: How to recover bricked Convers+
Posted: 23 Jul 2019, 19:47
by Go4IT
"Thumb" was the missing part! Did not though they use the small instructionset, so i always disabled it. My fault
Now i can also disassemble...
Re: How to recover bricked Convers+
Posted: 20 Oct 2019, 13:11
by drobec.eu
Here is full flash on MAC (on 2008)... :
Re: How to recover bricked Convers+
Posted: 20 Oct 2019, 13:22
by drobec.eu
If you need copy,erase,program flash on MAC use J-tag you must have Jumper (Bridge) :
Re: How to recover bricked Convers+
Posted: 23 Oct 2019, 17:57
by Go4IT
Do you also have a working MAC7116 project file for J-Flash?
Re: How to recover bricked Convers+ (SUCCESSFULLY)
Posted: 24 Oct 2019, 20:45
by Go4IT
HEY GUYS, MY CONVERS IS BACK ON THE TRACK NOW! 
IMG_3755.JPG
After a bit researching, reading datasheets and specs i found a way to program the INIT sequence of the Segger J-Flash that it can connect to the MAC7116 (added the project-file here).
After that i first erased the DATA-Flash area (32KB, 0x0000-0x7FFF) while MODA-Jumper (green wire) is connected to Vcc
IMG_3752.JPG
Then i did the same with the PROGRAM-Flash are (1MB) and reprogrammed the chip using the MAC image file.
Re: How to recover bricked Convers+ (SOLVED)
Posted: 19 Feb 2020, 19:34
by tasicky
To get MODA-Jumper (green wire), did you connect it to power supply, e.g. EPROM 24C16 or elsewhere? I'm not an electronics engineer but a programmer. I don't want to damage the processor.
Re: How to recover bricked Convers+ (SOLVED)
Posted: 20 Feb 2020, 07:27
by Go4IT
I took Vcc for the MODA-Wire from the yellow-cable you see on the left.
Re: How to recover bricked Convers+ (SOLVED)
Posted: 19 Jan 2021, 21:57
by Go4IT
Ups, the yellow cable is /RESET and internally connected to /TRST of JTAG-Connector. Usually it has HIGH (+5V) and so the trick worked, but it would be better to connect to the lower side of the capacitor, shown in picture of drobec.eu above!
Re: How to recover bricked Convers+ (SOLVED)
Posted: 19 Jan 2021, 21:59
by Go4IT
Again, i have tried to resolder the MAC of another device, because of bad solder and simple reflow didn't healed it. But after soldering the chip back, the unit does not start anymore
It's like this one, only drawing 15 mA. I could also not connect by JTAG... for shure i checked all solderings by microscope.