If it's JUST a micro-controller it will obviously be blank when supplied from the manufacturer, but if you buy it as a specifically pre-programmed device from a third party it would come ready programmed.
Assuming it's in a ready made device?, and it's faulty, then you would have to buy it as a spare part from whoever made the device.
Exactly the same as any micro-controller in a product.