發(fā)布時(shí)間:2016-12-05 18:26:16
意法STM32系列芯片解密,STM32芯片破解
STM32系列32位微控制器,基于ARM? Cortex??M處理器。它能支持32位廣泛的應(yīng)用,支持包括高性能、實(shí)時(shí)功能、數(shù)字信號(hào)處理,和低功耗、低電壓操作,同時(shí)擁有一個(gè)完全集成和易用的開(kāi)發(fā)。
以STM32為應(yīng)用的產(chǎn)品線非常廣泛,是由于其基于工業(yè)標(biāo)準(zhǔn)的內(nèi)核、有大量的工具和軟件作支持,使該系列芯片成為眾多產(chǎn)品的理想選擇,不管是小終端,還是一個(gè)大型的平臺(tái)。
基于上述優(yōu)勢(shì)所在,STM32系列芯片也有很多破解需求,板朗科技專業(yè)破解高難度芯片,對(duì)STM系列芯片有深入的研究,以下是關(guān)于STM32系列芯片解密介紹
STM32芯片實(shí)物圖
STM32芯片官方參考文檔
STM32系統(tǒng)結(jié)構(gòu)
系統(tǒng)的主要部分包括:
四個(gè)驅(qū)動(dòng)單元:
- Cortex-M3 內(nèi)核指令總線 (I-bus)
數(shù)據(jù)總線 (D-bus)
以及系統(tǒng)總線 (S-bus)
- GP-DMA(通用DMA)
三個(gè)被動(dòng)單元:
- 內(nèi)部 SRAM
- 內(nèi)部閃存存儲(chǔ)器
- AHB 到 APB 橋 (AHB2APBx)該橋用來(lái)連接所有的APB 設(shè)備這些通過(guò)一個(gè)多級(jí)的AHB 總線構(gòu)架相互連接
ICode 總線
該總線將 Cortex-M3 內(nèi)核的指令總線與閃存存儲(chǔ)器指令接口相連接。指令預(yù)取操作在該總線上進(jìn)行。
DCode 總線
該總線將Cortex-M3內(nèi)核的DCode總線與閃存存儲(chǔ)器的數(shù)據(jù)接口相連接(常量加載和調(diào)試訪問(wèn))。
系統(tǒng)總線
該總線將 Cortex-M3 內(nèi)核的系統(tǒng)總線(外設(shè)總線)連接到一個(gè)總線矩陣,總線矩陣協(xié)調(diào)著內(nèi)核和DMA 間的訪問(wèn)。
DMA 總線
該總線將DMA的AHB主機(jī)接口連接到一個(gè)總線矩陣,總線矩陣協(xié)調(diào)著CPU的DCode和DMA到SRAM、閃存和外設(shè)的訪問(wèn)。
總線矩陣
此總線矩陣協(xié)調(diào)內(nèi)核系統(tǒng)總線和DMA主控總線之間的訪問(wèn)仲裁。此仲裁利用輪換算法。此總線矩陣由三個(gè)驅(qū)動(dòng)部件(CPU的DCode、系統(tǒng)總線和DMA總線)和三個(gè)被動(dòng)部件(閃存存儲(chǔ)器接口、SRAM和AHB2APB橋)構(gòu)成。
為了允許DMA 訪問(wèn),AHB 外設(shè)通過(guò)一個(gè)總線矩陣連接到系統(tǒng)總線。
AHB/APB 橋 (APB)
兩個(gè) AHB/APB 橋在AHB 和兩個(gè)APB 總線之間提供完全同步的連接。APB1 被限制在36 MHz, APB2 工作在全速狀態(tài) (根據(jù)設(shè)備的不同可以達(dá)到72 MHz)。
存儲(chǔ)器結(jié)構(gòu)
程序存儲(chǔ)器、數(shù)據(jù)存儲(chǔ)器、寄存器和 I/O 端口被組織到一個(gè)4G 字節(jié)的線性地址空間。
這些字節(jié)在存儲(chǔ)器小端格式編碼,在小端格式中,一個(gè)字中最低地址的字節(jié)為該字的最低位字節(jié),最高地址的字節(jié)為最高位字節(jié)。
可尋址的存儲(chǔ)器空間被分為8 個(gè)512MB 的主塊。
所有未分配給片上存儲(chǔ)器或外設(shè)的存儲(chǔ)區(qū)域被視為是保留的。
存儲(chǔ)器映射
邊界地址 外設(shè) 總線
0x4002 2400 - 0x4002 3FFF 保留
AHB
0x4002 2000 - 0x4002 23FF 閃存存儲(chǔ)器接口
0x4002 1400 - 0x4002 1FFF 保留
0x4002 1000 - 0x4002 13FF 復(fù)位和時(shí)鐘控制RCC
0x4002 0400 - 0x4002 0FFF 保留
0x4002 0000 - 0x4002 03FF DMA
0x4001 3C00 - 0x4001 3FFF 保留
APB2
0x4001 3800 - 0x4001 3BFF USART1
0x4001 3400 - 0x4001 37FF 保留
0x4001 3000 - 0x4001 33FF SPI 1
0x4001 2C00 - 0x4001 2FFF TIM1 定時(shí)器
0x4001 2800 - 0x4001 2BFF ADC2
0x4001 2400 - 0x4001 27FF ADC1
0x4001 2000 - 0x4001 1FFF 保留
0x4001 1800 - 0x4001 1BFF GPIO 端口 E
0x4001 1400 - 0x4001 17FF GPIO 端口 D
0x4001 1000 - 0x4001 13FF GPIO 端口 C
0x4001 0C00 - 0x4001 0FFF GPIO 端口 B
0x4001 0800 - 0x4001 0BFF GPIO 端口 A
0x4001 0400 - 0x4001 07FF EXIT
0x4001 0000 - 0x4001 03FF AFIO
0x4000 8000 - 0x4000 77FF 保留
APB1
0x4000 7000 - 0x4000 73FF 電源控制(PWR)
0x4000 6C00 - 0x4000 6FFF 備份寄存器(BKP)
0x4000 6800 - 0x4000 6BFF 保留
0x4000 6400 - 0x4000 67FF bxCAN
0x4000 6000 - 0x4000 63FF 共享的USB/CAN SRAM
512 字節(jié)
0x4000 5C00 - 0x4000 5FFF USB 寄存器
0x4000 5800 - 0x4000 5BFF I2C2
0x4000 5400 - 0x4000 57FF I2C1
0x4000 5000 - 0x4000 4FFF 保留
0x4000 4800 - 0x4000 4BFF USART3
0x4000 4400 - 0x4000 47FF USART2
0x4000 4000 - 0x4000 3FFF 保留
0x4000 3800 - 0x4000 3BFF SPI2
0x4000 3400 - 0x4000 37FF 保留
0x4000 3000 - 0x4000 33FF 獨(dú)立的看門(mén)狗(IWDG)
0x4000 2C00 - 0x4000 2FFF 窗口看門(mén)狗(WWDG)
0x4000 2800 - 0x4000 2BFF RTC
0x4000 2400 - 0x4000 0FFF 保留
0x4000 0800 - 0x4000 0BFF TIM4 定時(shí)器
0x4000 0400 - 0x4000 07FF TIM3 定時(shí)器
0x4000 0000 - 0x4000 03FF TIM2 定時(shí)器
嵌入式SRAM
STM32F10x 內(nèi)置20K 字節(jié)的靜態(tài)SRAM,可以以字節(jié)、半字(16 位)、字(32 位)的方式訪問(wèn),SRAM 的起始地址為0x2000 0000。
位段
TM32F10x 里,外設(shè)寄存器和SRAM 都被映射到一個(gè)位段區(qū)里,這允許執(zhí)行單一的位段的寫(xiě)和讀操作。
下面的映射公式給出了別名區(qū)中的每個(gè)字是如何對(duì)應(yīng)位帶區(qū)的相應(yīng)位的:
bit_word_addr = bit_band_base + (byte_offset x 32) + (bit_number × 4)
其中:
− bit_word_addr 是別名存儲(chǔ)器區(qū)中字的地址,它映射到某個(gè)目標(biāo)位。
− bit_band_base 是別名區(qū)的起始地址。
− byte_offset 是包含目標(biāo)位的字節(jié)在位段里的序號(hào)
− bit_number 是目標(biāo)位所在位置(0-31)
下面的例子說(shuō)明如何映射別名區(qū)中SRAM 地址為0x20000300 的字節(jié)中的位2:
0x22006008 = 0x22000000 + (0x300*32) + (2*4).
對(duì)0x22006008 地址的寫(xiě)操作和對(duì)SRAM 中地址0x20000300 字節(jié)的位2 執(zhí)行讀-改-寫(xiě)操作有著相同的效果。
讀0x22006008 地址返回SRAM 中地址0x20000300 字節(jié)的位2 的值(0x01 or 0x00)。
STM32解密芯片種類
STM32F030C6
STM32F030C8
STM32F030CC
STM32F030F4
STM32F030K6
STM32F030R8
STM32F030RC
STM32F031C4
STM32F031C6
STM32F031E6
STM32F031F4
STM32F031F6
STM32F031G4
STM32F031G6
STM32F031K4
STM32F031K6
STM32F038C6
STM32F038E6
STM32F038F6
STM32F038G6
STM32F038K6
STM32F042C4
STM32F042C6
STM32F042F4
STM32F042F6
STM32F042G4
STM32F042G6
STM32F042K4
STM32F042K6
STM32F042T6
STM32F048C6
STM32F048G6
STM32F048T6
STM32F051C4
STM32F051C6
STM32F051C8
STM32F051K4
STM32F051K6
STM32F051K8
STM32F051R4
STM32F051R6
STM32F051R8
STM32F051T8
STM32F058C8
STM32F058R8
STM32F058T8
STM32F070C6
STM32F070CB
STM32F070F6
STM32F070RB
STM32F071C8
STM32F071CB
STM32F071RB
STM32F071V8
STM32F071VB
STM32F072C8
STM32F072CB
STM32F072R8
STM32F072RB
STM32F072V8
STM32F072VB
STM32F078CB
STM32F078RB
STM32F078VB
STM32F091CB
STM32F091CC
STM32F091RB
STM32F091RC
STM32F091VB
STM32F091VC
STM32F098CC
STM32F098RC
STM32F098VC
STM32F100C4
STM32F100C6
STM32F100C8
STM32F100CB
STM32F100R4
STM32F100R6
STM32F100R8
STM32F100RB
STM32F100RC
STM32F100RD
STM32F100RE
STM32F100V8
STM32F100VB
STM32F100VC
STM32F100VD
STM32F100VE
STM32F100ZC
STM32F100ZD
STM32F100ZE
STM32F101C4
STM32F101C6
STM32F101C8
STM32F101CB
STM32F101R4
STM32F101R6
STM32F101R8
STM32F101RB
STM32F101RC
STM32F101RD
STM32F101RE
STM32F101RF
STM32F101RG
STM32F101T4
STM32F101T6
STM32F101T8
STM32F101TB
STM32F101V8
STM32F101VB
STM32F101VC
STM32F101VD
STM32F101VE
STM32F101VF
STM32F101VG
STM32F101ZC
STM32F101ZD
STM32F101ZE
STM32F101ZF
STM32F101ZG
STM32F102C4
STM32F102C6
STM32F102C8
STM32F102CB
STM32F102R4
STM32F102R6
STM32F102R8
STM32F102RB
STM32F103C4
STM32F103C6
STM32F103C8
STM32F103CB
STM32F103R4
STM32F103R6
STM32F103R8
STM32F103RB
STM32F103RC
STM32F103RD
STM32F103RE
STM32F103RF
STM32F103RG
STM32F103T4
STM32F103T6
STM32F103T8
STM32F103TB
STM32F103V8
STM32F103VB
STM32F103VC
STM32F103VD
STM32F103VE
STM32F103VF
STM32F103VG
STM32F103ZC
STM32F103ZD
STM32F103ZE
STM32F103ZF
STM32F103ZG
STM32F105R8
STM32F105RB
STM32F105RC
STM32F105V8
STM32F105VB
STM32F105VC
STM32F107RB
STM32F107RC
STM32F107VB
STM32F107VC
STM32F205RB
STM32F205RC
STM32F205RE
STM32F205RF
STM32F205RG
STM32F205VB
STM32F205VC
STM32F205VE
STM32F205VF
STM32F205VG
STM32F205ZC
STM32F205ZE
STM32F205ZF
STM32F205ZG
STM32F207IC
STM32F207IE
STM32F207IF
STM32F207IG
STM32F207VC
STM32F207VE
STM32F207VF
STM32F207VG
STM32F207ZC
STM32F207ZE
STM32F207ZF
STM32F207ZG
STM32F215RE
STM32F215RG
STM32F215VE
STM32F215VG
STM32F215ZE
STM32F215ZG
STM32F217IE
STM32F217IG
STM32F217VE
STM32F217VG
STM32F217ZE
STM32F217ZG
STM32F301C6
STM32F301C8
STM32F301K6
STM32F301K8
STM32F301R6
STM32F301R8
STM32F302C6
STM32F302C8
STM32F302CB
STM32F302CC
STM32F302K6
STM32F302K8
STM32F302R6
STM32F302R8
STM32F302RB
STM32F302RC
STM32F302RD
STM32F302RE
STM32F302VB
STM32F302VC
STM32F302VD
STM32F302VE
STM32F302ZD
STM32F302ZE
STM32F303C6
STM32F303C8
STM32F303CB
STM32F303CC
STM32F303K6
STM32F303K8
STM32F303R6
STM32F303R8
STM32F303RB
STM32F303RC
STM32F303RD
STM32F303RE
STM32F303VB
STM32F303VC
STM32F303VD
STM32F303VE
STM32F303ZD
STM32F303ZE
STM32F318C8
STM32F318K8
STM32F328C8
STM32F334C4
STM32F334C6
STM32F334C8
STM32F334K4
STM32F334K6
STM32F334K8
STM32F334R6
STM32F334R8
STM32F358CC
STM32F358RC
STM32F358VC
STM32F373C8
STM32F373CB
STM32F373CC
STM32F373R8
STM32F373RB
STM32F373RC
STM32F373V8
STM32F373VB
STM32F373VC
STM32F378CC
STM32F378RC
STM32F378VC
STM32F398VE
STM32F401CB
STM32F401CC
STM32F401CD
STM32F401CE
STM32F401RB
STM32F401RC
STM32F401RD
STM32F401RE
STM32F401VB
STM32F401VC
STM32F401VD
STM32F401VE
STM32F405OE
STM32F405OG
STM32F405RG
STM32F405VG
STM32F405ZG
STM32F407IE
STM32F407IG
STM32F407VE
STM32F407VG
STM32F407ZE
STM32F407ZG
STM32F410C8
STM32F410CB
STM32F410R8
STM32F410RB
STM32F410T8
STM32F410TB
STM32F411CC
STM32F411CE
STM32F411RC
STM32F411RE
STM32F411VC
STM32F411VE
STM32F412CE
STM32F412CG
STM32F412RE
STM32F412RG
STM32F412VE
STM32F412VG
STM32F412ZE
STM32F412ZG
STM32F413CG
STM32F413CH
STM32F413RG
STM32F413RH
STM32F413VG
STM32F413VH
STM32F413ZG
STM32F413ZH
STM32F415OG
STM32F415RG
STM32F415VG
STM32F415ZG
STM32F417IE
STM32F417IG
STM32F417VE
STM32F417VG
STM32F417ZE
STM32F417ZG
STM32F423CH
STM32F423RH
STM32F423VH
STM32F423ZH
STM32F427AG
STM32F427AI
STM32F427IG
STM32F427II
STM32F427VG
STM32F427VI
STM32F427ZG
STM32F427ZI
STM32F429AG
STM32F429AI
STM32F429BE
STM32F429BG
STM32F429BI
STM32F429IE
STM32F429IG
STM32F429II
STM32F429NE
STM32F429NG
STM32F429NI
STM32F429VE
STM32F429VG
STM32F429VI
STM32F429ZE
STM32F429ZG
STM32F429ZI
STM32F437AI
STM32F437IG
STM32F437II
STM32F437VG
STM32F437VI
STM32F437ZG
STM32F437ZI
STM32F439AI
STM32F439BG
STM32F439BI
STM32F439IG
STM32F439II
STM32F439NG
STM32F439NI
STM32F439VG
STM32F439VI
STM32F439ZG
STM32F439ZI
STM32F446MC
STM32F446ME
STM32F446RC
STM32F446RE
STM32F446VC
STM32F446VE
STM32F446ZC
STM32F446ZE
STM32F469AE
STM32F469AG
STM32F469AI
STM32F469BE
STM32F469BG
STM32F469BI
STM32F469IE
STM32F469IG
STM32F469II
STM32F469NE
STM32F469NG
STM32F469NI
STM32F469VE
STM32F469VG
STM32F469VI
STM32F469ZE
STM32F469ZG
STM32F469ZI
STM32F479AG
STM32F479AI
STM32F479BG
STM32F479BI
STM32F479IG
STM32F479II
STM32F479NG
STM32F479NI
STM32F479VG
STM32F479VI
STM32F479ZG
STM32F479ZI
STM32F722IE
STM32F722RE
STM32F722VE
STM32F722ZE
STM32F745IE
STM32F745IG
STM32F745VE
STM32F745VG
STM32F745ZE
STM32F745ZG
STM32F746BE
STM32F746BG
STM32F746IE
STM32F746IG
STM32F746NE
STM32F746NG
STM32F746VE
STM32F746VG
STM32F746ZE
STM32F746ZG
STM32F756BG
STM32F756IG
STM32F756NG
STM32F756VG
STM32F756ZG
STM32F765BG
STM32F765BI
STM32F765IG
STM32F765II
STM32F765NG
STM32F765NI
STM32F765VG
STM32F765VI
STM32F765ZG
STM32F765ZI
STM32F767BG
STM32F767BI
STM32F767IG
STM32F767II
STM32F767NG
STM32F767NI
STM32F767VG
STM32F767VI
STM32F767ZG
STM32F767ZI
STM32F769AI
STM32F769BG
STM32F769BI
STM32F769IG
STM32F769II
STM32F769NG
STM32F769NI
STM32F777BI
STM32F777II
STM32F777NI
STM32F777VI
STM32F777ZI
STM32F778AI
STM32F779AI
STM32F779BI
STM32F779II
STM32F779NI
STM32L011D3
STM32L011D4
STM32L011E3
STM32L011E4
STM32L011F3
STM32L011F4
STM32L011G3
STM32L011G4
STM32L011K3
STM32L011K4
STM32L021D4
STM32L021F4
STM32L021G4
STM32L021K4
STM32L031C4
STM32L031C6
STM32L031E4
STM32L031E6
STM32L031F4
STM32L031F6
STM32L031G4
STM32L031G6
STM32L031K4
STM32L031K6
STM32L041C6
STM32L041F6
STM32L041G6
STM32L041K6
STM32L051C6
STM32L051C8
STM32L051K6
STM32L051K8
STM32L051R6
STM32L051R8
STM32L051T6
STM32L051T8
STM32L052C6
STM32L052C8
STM32L052K6
STM32L052K8
STM32L052R6
STM32L052R8
STM32L052T6
STM32L052T8
STM32L053C6
STM32L053C8
STM32L053R6
STM32L053R8
STM32L062K8
STM32L063C8
STM32L063R8
STM32L071C8
STM32L071CB
STM32L071CZ
STM32L071K8
STM32L071KB
STM32L071KZ
STM32L071RB
STM32L071RZ
STM32L071V8
STM32L071VB
STM32L071VZ
STM32L072CB
STM32L072CZ
STM32L072KB
STM32L072KZ
STM32L072RB
STM32L072RZ
STM32L072V8
STM32L072VB
STM32L072VZ
STM32L073CB
STM32L073CZ
STM32L073RB
STM32L073RZ
STM32L073V8
STM32L073VB
STM32L073VZ
STM32L081CZ
STM32L081KZ
STM32L082CZ
STM32L082KZ
STM32L083CB
STM32L083CZ
STM32L083RB
STM32L083RZ
STM32L083V8
STM32L083VB
STM32L083VZ
STM32L100C6-A
STM32L100R8-A
STM32L100RB-A
STM32L100RC
STM32L151C6-A
STM32L151C8-A
STM32L151CB-A
STM32L151CC
STM32L151QC
STM32L151QD
STM32L151QE
STM32L151R6-A
STM32L151R8-A
STM32L151RB-A
STM32L151RC
STM32L151RD
STM32L151RE
STM32L151UC
STM32L151V8-A
STM32L151VB-A
STM32L151VC
STM32L151VD
STM32L151VD-X
STM32L151VE
STM32L151ZC
STM32L151ZD
STM32L151ZE
STM32L152C6-A
STM32L152C8-A
STM32L152CB-A
STM32L152CC
STM32L152QC
STM32L152QD
STM32L152QE
STM32L152R6-A
STM32L152R8-A
STM32L152RB-A
STM32L152RC
STM32L152RD
STM32L152RE
STM32L152V8-A
STM32L152VB-A
STM32L152VC
STM32L152VD
STM32L152VD-X
STM32L152VE
STM32L152ZC
STM32L152ZD
STM32L152ZE
STM32L162QD
STM32L162RC
STM32L162RD
STM32L162RE
STM32L162VC
STM32L162VD
STM32L162VE
STM32L162ZD
STM32L162ZE
STM32L431CB
STM32L431CC
STM32L431KB
STM32L431KC
STM32L431RB
STM32L431RC
STM32L431VC
STM32L432KB
STM32L432KC
STM32L433CB
STM32L433CC
STM32L433RB
STM32L433RC
STM32L433VC
STM32L442KC
STM32L443CC
STM32L443RC
STM32L443VC
STM32L471QE
STM32L471QG
STM32L471RE
STM32L471RG
STM32L471VE
STM32L471VG
STM32L471ZE
STM32L471ZG
STM32L475RC
STM32L475RE
STM32L475RG
STM32L475VC
STM32L475VE
STM32L475VG
STM32L476JE
STM32L476JG
STM32L476ME
STM32L476MG
STM32L476QE
STM32L476QG
STM32L476RC
STM32L476RE
STM32L476RG
STM32L476VC
STM32L476VE
STM32L476VG
STM32L476ZE
STM32L476ZG
STM32L486JG
STM32L486QG
STM32L486RG
STM32L486VG
STM32L486ZG
STM32H743BI
STM32H743II
STM32H743VI
STM32H743XI
STM32H743ZI
STM32L100C6
STM32L100R8
STM32L100RB
STM32L151C6
STM32L151C8
STM32L151CB
STM32L151R6
STM32L151R8
STM32L151RB
STM32L151RC-A
STM32L151V8
STM32L151VB
STM32L151VC-A
STM32L152C6
STM32L152C8
STM32L152CB
STM32L152R6
STM32L152R8
STM32L152RB
STM32L152RC-A
STM32L152V8
STM32L152VB
STM32L152VC-A
STM32L162RC-A
STM32L162VC-A
STM32L162VD-X
STM32F413MG
STM32F413MH
STM32F723IE
STM32F723ZE
轉(zhuǎn)載請(qǐng)注明來(lái)源:m.victorwan.cn
關(guān)注微信