And......Fits. ![Cool 8)](https://www.eevblog.com/forum/Smileys/default/cool.gif)
Tried it today with the J-Link, nothing happens in either SWD or JTAG mode.
The signals themselves are static (measured with an oscilloscope).
Only the communication between the two controllers is given, but that was clear.
With a bit of bad luck, the inputs are "tight", which can be determined in advance.
I haven't quite given up on it yet.
The memory area, which must contain the model of the front, is not overwritten by the firmware, otherwise there could not be the same firmware for different types.
You just have to find out where.
![Wink ;)](https://www.eevblog.com/forum/Smileys/default/wink.gif)
I don't know how much time I'll put into it.