MicroHacker Forum

So I have worked out how to dump and flash the MAC7116 now how do we go about flashing the flash 2mb I know this one is probably not a simple job

To write to external flash by JTAG you need to write some instructions that initialize the external communication with that ext. flash into MAC7116 RAM and then execute them.. just like SBL is uploaded and then executed.

One approach I did was to load original SBL by CAN then try to access external flash by reading with JTAG commands what was stored at the addresses starting with 0x300000... and I could find parts of what was written in ext. flash, but I they were duplicated and couldn't find everything.

I absolutely agree with you DGalexandru. A SBL is loaded through a UDS session via CAN, usually into SRAM and then get's executed. So it needs to be small (RAM is a limited ressource on the IPC). Somewhere in the main firmware there must be a support for this.

m0trals new PBL vs STOCK password protected if want inbox me