Using JTAG to read/write the flash MMI3G

**eprst** · 7th October, 2016, 09:01 AM

Hi
I used it to connect
power to regular connector
Regards

**simaservis1108** · 7th October, 2016, 01:58 PM

V850 chip in my navigation is locked.

**congobg** · 7th October, 2016, 03:07 PM

It seems that the MMI3GEmergencyApp should be able to flash the V850.
If you look at it you can find "ForceIocUpdateFromEmergency".
Now i wonder if i put ForceIocUpdateFromEmergency = "true" in the metainfo2.txt and force the unit in Emergency mode will it be able to fix my issue.
Because i have somehow different problem ... wrong firmware, 3GP firmware in 3G High unit.
That's why i'm not sure that even if that parameter is correct and it's places is in the metainfo2.txt that the MMI3GEmergencyApp will be able to do it because of the wrong firmware

Cheers.

**eprst** · 7th October, 2016, 04:28 PM

V850 chip is locked. this does not prevent him to write down

**congobg** · 7th October, 2016, 05:14 PM

It shouldn't be hardware locked as the update process is able to write to it, it's just needs to be in bootloader mode in order to write.
I know for sure that MMI3GEmergencyApp can put it in that mode. I also know that it's possible to recover it from that mode just don't know the exact steps .... yet.
If we sniff one unit during update procedure maybe we can see what is happening behind the curtains.
Keldo and some others can do that w/o even touching the chip so it's possible. The updater can do it to.
Harman/Becker for sure know that there is a chance that during the update the power might goes down and the unit should be able to recover from that.....
After all this is not some fancy satellite ... it's just a multimedia unit

If you find something i will write

**eprst** · 7th October, 2016, 08:32 PM

It is easy, just write chip

**congobg** · 7th October, 2016, 08:51 PM

Getting there

Using the parameter from above the MMI went in bolo mode after the emergency flash finished but i had an error in the metainfo somewhere ... will try again tomorrow.
If i got you right, i will give the V850 power on pin 9 and 11 and should not power the MMI right?

**congobg** · 8th October, 2016, 12:10 PM

The main CPU cannot see the V850

Will have to try with direct connection

KR.

Sent from my iPhone using Tapatalk

**Crash-100** · 9th October, 2016, 07:38 PM

I can restore MMI 3G, 3GP and RNS850 from any state. I can make from 3G - 3GP, have V850 working dump, write 2 flash by JTAG and other many year i lost for it.

**congobg** · 9th October, 2016, 07:46 PM

We all know about you

I admire your work and even asked you once about converting 3G high to 3G plus but you never answered me.
If you can help here with some guidelines or something then you are welcome. If you just want to make an advertisement... then we got your point. The fact is that with trial and error I was able to get the IPL back and then flashed the unit. If I succeed with V850 then good if I don't ... well that's life.
You can post your prices so that we know.
Cheers.

Sent from my iPad using Tapatalk

**Crash-100** · 9th October, 2016, 08:03 PM

Where are you from ?
Can you sen divece for me ?

**congobg** · 10th October, 2016, 02:28 PM

You have PM

Sent from my iPhone using Tapatalk

**congobg** · 11th October, 2016, 09:53 AM

Originally Posted by Crash-100

Where are you from ?
Can you sen divece for me ?

I'm from Bulgaria.
I do prefer to fix it locally just because it's interesting to me. I've tried many ways in order to fix it w/o removing the chip or trying to reprogram it on board. Even disassembled part of the code, that's how I found the way to try and force the IOC update

It seems that we will need to try wit direct connection to the chip

Cheers.