STM32F IC unlock

Posted by

STM32F030C8T6 microcontroller is a 32-bit M0 series LQFP-48 microcontroller, high cost-effective ARM microcontroller, in the electric vehicle and household appliances industry is more widely used, for the STM32F030C8T6 microcontroller, our company IC unlock center, has fully grasped the chip decryption algorithm, has completely broken through the technical difficulties can be successfully broken STM32F030C8T6 MCU solution, welcome customers who need to contact us.
The following are the main features and pin definition of STM32F030C8T6 microcontroller.

STM32F IC UNLOCK

stm32f

STM8L IC unlock

Posted by

STM8L051F3P6 TSSOP-20 package is a low-power 8-bit microcontroller, at present we can provide STM8L051F3P6 IC unlock welcome customers in need to contact us. For the STM8 series of chips, our company decryption center has many successful cases, in this series of IC unlock technology has made a breakthrough success, to ensure that it can be 100% cracked, and provide customers with soft encryption cracking, chip decompilation and other services, welcome to consult inspection.
The following are the main features of this chip:

stm8l ic unlock

IC unlock development and program modification

Posted by

IC unlock development and program modification
According to their hobbies and professional ability of SCM soft decryption, seek the cooperation of scientific research units and research institutes, study and analyze foreign advanced SCM programming experience and excellent logic algorithm, in order to enhance the domestic SCM application research strength, provide better performance, lower cost military and civil electronic products and struggle!
Professional quality, sincere service uuu SCM program disassembly; SCM program decompilation; SCM decryption; SCM HEX disassembly modification; program serial number modification; LCD, LED interface characters, graphics modification;
SCM disassembly, binary code modification, SCM assembly code analysis, SCM disassembly analysis, SCM reverse engineering, bin or hex SCM program restore to C code, SCM software encryption and decryption. MCU series: 51 series, AVR series, PIC series, MSP430 series. (if there are other series of singlechip needs analysis, please call the hotline first).
AVR MCU can analyze and decrypt software:
Tiny series:
ATtiny11, ATtiny12, ATtiny13, ATtiny 15L, ATtiny2313, ATtiny24, ATtiny25, ATtiny25 Automotive, ATtiny26, ATtiny261, ATtiny28L, ATtiny44, ATtiny45, ATtiny45 Automotive, ATtiny461, ATtiny84, ATtiny85, ATtiny85, ATtiny861, Q: 1239284072
Mega series:
ATmega 128, ATmega 1280, ATmega 1281, ATmega 128RZA, ATmega 128RZB, ATmega 16, ATmega 162, ATmega 164P, ATmega 165, ATmega 165P, ATmega 168, ATmega 168 Automotive, ATmega 169, ATmega 169P, ATmega 2560, ATmega 2561, ATmega 256RZA, ATmega 256RZB, ATmega 32, ATmega 324P, ATmega 325, ATmega 325, ATmegaga 3250 ATmega 3290, ATmega406, ATmega48, ATmega48 Automotive, ATmega64, ATmega640, ATmega644, ATmega644P, ATmega645, ATmega6450, ATmega649, ATmega6490, ATmega64RZA, ATmega8, ATmega8515, ATmega8535, ATmega88, ATmega88, ATmega88, ATmega88 Automotive, Q: 1239284072
Other special series:
AT90CAN128 Automotive, AT90PWM1, AT90PWM2, AT90PWM3
Note: Unlisted AVR microcontroller can be disassembled analysis, software can be modified, but the analysis cycle is longer.
PIC MCU can analyze and decrypt software:

N76E IC unlock

Posted by

In view of STM8S003F3P6 price rise and market shortage, Xintang withdraws from 8051 MCU N76E003 development board pin compatible with STM8S003. At present, for the N76E003AT20 IC unlock, our company decryption center has fully grasped the IC unlock scheme.
New Tang 8051 single chip microcomputer N76E003 development board pin compatible with STM8S003 original genuine IC, 18K flash, dual serial port, 6 PWM, 12 AD, quality assurance, original genuine, stable supply,
Compared with the N76E003AT20 of new Tang Dynasty, it has more classical advantages.
1T/8051:1T super value microcontroller, 8051 we are more familiar with the classic kernel;
* 18KB Flash ROM: better than 8KB Flash, and 18KB of flash memory space, all can be used as data storage space;
• 1024B SRAM;
• 17 +1 input ports: better than 16 GPIO at most.
• 2*UART, I2C, SPI: superior to SPI/I2C/UART (more than one UART);
8CH of 12bit ADC: better than 5 channel 10bit ADC;
6ch of individual duty PWM: better than 3 way PWM output;
• 10KHz LIRC for WDT reset / WKT;
• 16MHz HIRC + 1% Room temp. + 2% full condition;
The temperature range of -40~105 C is wider.
A wider supply voltage range from 2.4V to 5.5V;
TSSOP20 / QFN20;
• ed & E: MM/400V, Over 4KV, excellent ESD and EFT, anti-interference and ESD protection capabilities;
STM8S003F3P6: A total of 20 feet, up to 16 GPIOs, 16 external interrupts; 2 16-bit timers [TIM1/TIM2], up to three PWM outputs; 5 ADC channels, supporting SPI/I2C/UART; 8KBYTE FLASH, 1KRAM, 128BYTE EEPROM; and built-in 16M high-speed oscillator, WDG, etc.

M306 IC unlock

Posted by

M30620FCAGP IC unlock
Product outline
The M16C/26A group is based on the M16C/60 CPU kernel. When using the PLL synthesizer, the maximum working frequency is 24MHz. Provide mask ROM version and flash edition.
The internal flash memory can be programmed under a single power supply.
Key characteristics
16 bit multifunction timer (including timer A, B, three phase converter motor control function): 8 channel
Clock asynchronous / synchronous serial interface: 3 channel *
10 bit A/D converter: 12 channels *
DMAC:2 channel
CRC arithmetic circuit
Watchdog timer
Clock generation circuit: main clock generation circuit, sub clock generation circuit, internal oscillator, PLL synthesizer.
Oscillation stop detection function
Voltage detection circuit (except for T and V)
Input / output port: 39 *
External interrupt pins: 11
Data flash: 2KB x 2 block (flash only)
Specification of *:48 pin version.
Key applications
Audio, Camera, Office Equipment, Communication Equipment / Portable Equipment, Household Appliances (Converter Household Appliances), Automobile, Motor Control

LATTICE series IC unlock

Posted by

Professional provide a series of IC unlock  services, customers are welcome to contact us.
Recently, we successfully cracked the LATTICE series ispLSI 1048E chips at the request of customers. We can provide IC unlock  services for all series of Lattiec chips, such as ISP2032VE ispLSI 2064VE.
The following are the main parameters of the ispLSI1048E chip:

 

IC decryption request source

Posted by

IC decryption request source: that is, external interrupt 0 and 1, introduced through the external pin, there are two pins on the microcontroller, named INT0, INT1, namely P3.2, P3.3 these two pins. In the internal TCON, four bits are related to external interruption. IT0: INT0 trigger mode control bit, can be programmed and reset by software, IT0 = 0, INT0 for low level trigger mode, IT0 = 1, INT0 for negative jump trigger mode. The differences between the two methods will be discussed later. IE0:INT0 interrupt request flag bit. When there is an external interrupt request, this is set to 1 (which is done by the hardware), which clears IE0 by the hardware after the CPU responds to the interrupt. The use of IT1 and IE1 is the same as that of IT0 and IE0. (2) Internal interrupt request source TF0: Overflow interrupt flag of timer T0. When T0 count overflows, TF0 is set by hardware. When the CPU response is interrupted, the TF0 is cleared by the hardware 0. TF1: similar to TF0. TI, RI: serial port sending and receiving interruption, and then explained in serial port. In MCS-51 interrupt system, interrupt allowance register IE is controlled by 8-bit interrupt allowance register IE which can be bit-addressable in chip. Where EA is the master switch, if it is equal to 0, all interrupts are not allowed. The interruption of the e serial port allows the interrupt of the timer 1 1, allowing EX1 interrupt 1 interrupt. ET0 timer 0 interrupt allows EX0 – out interrupt 0 interrupt allowed. If we set the allowable external interrupt 1, timer 1 interrupt allowable, other not allowed, then IE can be EAX, that is, 8CH, of course, we can also use the bit operation instruction SETB EA SETB ET1SETB EX1 to achieve it. Natural Priority of Five Interrupt Sources and Outside Interrupt Service Entry Address 0:0003H Timer 0:000BH Outside Interrupt 1:0013H Timer 1:001BH Serial Port: 0023H Their Natural Priority Ranges from High to Low. Write here, you should understand why there are some programs before we start to write this way: ORG 0000HLJMP START ORG 0030H START:. The purpose of this is to make the vector address occupied by the interrupt source. Of course, when there is no interruption in the program, it is not wrong in principle to write the program directly from 0000H, but it is better not to do so in practice. Priority: SCM adopts the strategy of natural priority and manual setting of high and low priority, that is, programmers can set which interrupts are high priority and which interrupts are low priority, because there are only two levels, there must be some interrupts at the same level, at the same level, determined by natural priority. When starting, every interrupt is low priority, and we can set the priority with instructions. Look at Table 2 where the interrupt priority is set high by the interrupt priority register IP, and one bit in the IP is set to 1. The corresponding interrupt is high priority, otherwise it is low priority. XX X PS PT1 PX1 PT0 PX0

DSP MCU crack

Posted by

EEPROM programming algorithm for DSP MCU crack technology
Source: On the basis of IC decryption characteristics, we can choose the most secure and reasonable decryption scheme for MCU crack. (Note: DSPIC30F series chip decryption for example) 1. Data EEPROM programming is similar to program memory, EEPROM storage block is accessed by reading and writing table operations. Because EEPROM memory has only 16 bit width, its operation does not require TBLWTH and TBLRDH instructions. The programming and erasing steps of data EEPROM are similar to those of flash memory, but the difference is that data EEPROM is optimized for fast data access. On data EEPROM, you can perform the following programming operations: erase a word erase a line (16 words) program a word program a line (16 words) in normal operation (the entire VDD range of work), data EEPROM readable and writable. Unlike flash memory, normal program execution does not stop when EEPROM is programmed or erased. EEPROM erasure and programming operations are performed through NVMCON and NVMKEY registers. The programming software is responsible for waiting for the operation to complete. Software can detect the completion time of an EEPROM erasure or programming operation by one of three methods: querying the WR bit with software (NVMCON < 15 >). When the operation is completed, the WR bit will be cleared. Query NVMIF bit (IFS0<12>) with software. When the operation is completed, the NVMIF bit will be set to 1. NVM interrupt is allowed. When the operation is completed, the CPU will be interrupted. ISR can handle more programming operations. Two, EEPROM single word programming algorithm 1. erase a EEPROM word. Set the NVMCON register to erase a EEPROM word. The addresses of the erased characters are written to the TBLPAG and NVMADR registers. Clear the NVMIF status bit and allow NVM interrupt (optional). Write the key sequence to NVMKEY. The WR position is 1. This will start the erase cycle. Query WR bit or wait for NVM interrupt. 2. write the data word to the data EEPROM to write the latch. 3. programming data words into EEPROM. Set the NVMCON register to program a EEPROM word. Clear the NVMIF status bit and allow NVM interrupt (optional). Write the key sequence to NVMKEY. The WR position is 1. This will start the programming cycle. Query WR bit or wait for NVM interrupt. 3. EEPROM line programming algorithm, if you need to program more than one word into EEPROM, each erase and program 16 words (1 line) will be faster. The process of programming 16 words to EEPROM is as follows: 1. Read a row of data EEPROM (16 words) and save it to data RAM in the way of data “mirror”. The EEPROM part to be modified must be in the even 16 word address boundary. 2. update data mirroring with new data. 3. erase EEPROM rows. Set the NVMCON register to erase one row of EEPROM. Clear the NVMIF status bit and allow NVM interrupt (optional). Write the key sequence to NVMKEY. The WR position is 1. This will start the erase cycle. Query WR bit or wait for NVM interrupt. 4. write 16 data words to the data EEPROM to write the latch. 5. programming a row of data to data EEPROM. Set the NVMCON register to program a line of EEPROM. Clear the NVMIF status bit and allow NVM interrupt (optional). Write the key sequence to NVMKEY. The WR position is 1. This will start the programming cycle. Query WR bit or wait for NVM interrupt.

74A series IC unlock

Posted by

74AC11245 series IC unlock is our latest popular chip model. The specific models of 74AC11245 series chips that we can provide decryption services are:
74AC11245DW
74AC11245DWR
74AC11245NT
74AC11253N
74AC11257DW
74AC11257DWR
74AC11257N
74AC112P
74AC11373NT
74AC11M
74AC11245
74AC11244PWR
74AC11244NT
74AC11244DWR
74AC11244DW
74AC11244DBR
74AC11244D
74AC11244
74AC11240NT
74AC11240DWR

SST27 MCU decryption

Posted by

SST27SF010 overview
SST27SF010 is a 128K X8 MTP low-cost flash, manufactured by SST’s patented, high-performance CMOS SuperFlash technology. The split gate cell design and thick oxide tunneling injector achieve better reliability and manufacturability than other methods. These MTP devices are electrically erasable and programmable at least 1000 times, using an external programmer powered by a 12-volt power supply. They must be erased before programming. These devices comply with JEDEC standard pins with byte wide memory.
SST27SF010 characteristics
The organizational structure is 128K X8.
4.5-5.5V read operation
Excellent reliability
Endurance: at least 1000 times.
– more than 100 years of data retention period
Low power consumption
– working current: 20 mA (typical value)
Standby current: 10 A (typical value)
Fast read access time
– 70 nanosecond
– 90 nanosecond
Fast Byte programming operation
Byte programming time: 20 s (typical value)
– chip programming time: 2.8 seconds (typical value)
Electrical erasure programming
– no UV light source is needed.
– chip erase time: 100 ms (typical value)
Compatibility of TTL I / O
JEDEC standard byte width EPROM pin
Packaging options
– 32 pin PLCC
– 32 pin TSOP (8mm x 14mm)
– 32 pin PDIP
In the research of MCU decryption technology, our company has long been focusing on high-difficulty IC decryption research, DSP SST27 MCU decryption research, CPLD MCU decryption research, FPGA MCU decryption  research and other fields. At present, we have obtained the typical project achievement in the SST series microcontroller decryption, STC series microcontroller decryption, ST series MCU decryption, NEC series microcontroller decryption and so on. Specialized decryption equipment and detection instruments can provide high-efficiency, high-quality and reliable SST27 series SST27SF010 MCU microcomputer decryption service for customers at home and abroad.