Special column for MCU Decryption (Attack)
Update：2011-03-29

  Hot Line for MCU decryption：0086-21-61021969 0086-21-22816063 0086-13918348251
      MCU has penetrated into various areas of our lives at present, and almost appears in all the areas. Intelligent toy, burglar protection system, navigation device of missile, the control of various instruments in plane, network communication of computer all could not work without MCU. Generally speaking, the chips in MCU of actual products are all encrypted, and the direct application of programming unit could not read program. But sometimes for some reasons, clients need to get the program in the MCU for referencing, studying, learning, and finding the lost information or copying some chips, at this time, MCU decryption is required.
MCU decryption (attack) is to directly get encrypted programming document of MCU by certain equipment and method, which could provide for learning, reference and study after copying programming chip or disassembling. MCU decryption is called.
nd so on in Chinese, while its English name is MCU ATTACK、Remove lock bits from mcu、MCU break、MCU Code Extraction....

After decryption, we could guarantee that the chip sample we offered has the same function with the master chip offered by client, obtain programming document to offer for client. In addition, client could freely program, and disassembling could be provided for free for the program of PIC,AVR,51,HT,EMC,MDT. If you are interested in our MCU decryption, or care about our method of decryption, you could refer to:
Frequently Asked Questions for MCU Decryption、Schematic of MCU Decryption、Commonly-used mehtods and countermeasures， At present, we offer Provision of Knowledge Information for MCU Decryption and Transfer of some chip decryption schemes and MCU Decryptor

We cooperate with some domestic famous schools, research institutions and other units, and adopt advanced technology and equipment at home with all our hearts to provide the service of MCU decryption (attack) for all the big clients at home (limited in legal purposes of learning, study and others). We set spots for MCU decryption in Shanghai, Jiangsu, Beijing and Guangzhou. The models for MCU decryption we offered include various series of commonly-used MCU such as 51 series MCU, PIC series MCU and AVR series MCU, and some special models of MCU such as some unusual STC MCU （STC MCU could refer to the special colomn of STC MCU decryption）, INTEL MCU and others. Since December 1st 2005, we had been able to decrypt the chip of CPLD (PLD) and GAL, and also to analyze the model of IC whose LOGO has been worn off, please see the decryption part of CPLD and GAL in this page; at present, we have the advantages at price and time for AT89S, PIC MCU decryption, AVR MCU decryption, HOLTEK, PHILPS MCU decryption and MDT MCU decryption than the same industry at home, and some chips could be decrypted immediately.

We had been able to decrypt Motorola MCU since June 28th 2006!(see third part “scope of MCU decryption” or notification for specific model).
We have been able to decrypt Blew pin MCU since January 15th 2007! The AVR MCU we have done at present blew 14 pins at most (decryption successes on July 18th 2007).
We had been able to attack the encrypted MCU whose gold thread has been blew since June 2008, please see  Decyption of MCU with blew pin .
In the following we will separately introduce:
“一、The flow for the chip decryption of MCU/CPLD/PLD/GAL”
“二、Frequently asked question for MCU decryption”
“三、The scope for the chip decryption of MCU”
“四、Commonly-used methods and countermeasures for MCU decryption”
“五、Download for the commonly-used relevant software of MCU decryption”

一、The flow for the chip decryption of MCU/CPLD/PLD/GAL：
1. Confirm that the model of the MCU needed to be decrypted is in the scope of the MCU we can decrypt.
2. Express or send one to three master chips by yourself (Recommended to use SF-Express, by their national telephone number: 400811111, and adopt insurance service for important chips)
Shanghai HuSoon Electron
Address：Room 3101, Building 3, No.1303, North Xizang Road, Zhabei District, Shanghai, China
Telephone number: 021-61021969  021-22816063
Tax number: 021-51685697
Post code: 200070
Name：Jinsheng CAI
Enterprise QQ customer service: 800015035
(Please prefer to use enterprise QQ, there will be six customer services offering good service for you. If seek, please click “seek enterprise”. ）
QQ customer service 1: 879966505
QQ customer service 2:3027377
QQ technical support :563248441
（Recommended to refer to “Frequently Asked Questions” firstly, to understand the problems you will meet during our decryption so as to avoid the later trouble and misunderstanding. ）
3 Agree total price, sign a contract, and prepay deposit.
（download ofdecryption contract，for payment method, please refer to：Remittance Method，if you want to reduce your decryption price to the greatest extent, please refer to ：How to reduce the price for decryption）
4 Finish chip break within the stipulated time and offer two chip samples to client for testing
（If you offer N pieces of master chips, we will provide N+1 pieces of chip samples for you; if you require the minimum time for decryption, please refer to：How to shorten the period for decrytpion）
5 Client should pay the rest expenses for decryption after chip sample passes testing.
6 Provide the programming document BIN(HEX, JED, POF,SOF, OTP, S19, CDS, etc）(or named machine language, machine code) for client.
The possibility of successful decryption is above 99%, if decryption fails just in case, the deposit will be returned to client;

If you adopt TaoBao Alipay Payment，please trade in accordance with the requirements described for the good in Tao Bao（Buyer must own above 20 credits, and obtain 100% good reputation, otherwise, we will not accept this method of trading, please understand.）

二、Frequently Asked Questions:
Due to the limitation of space, FAQ is listed independently，please click and enter into :Frequently Asked Questions(We strongly recommend the client to understand it, then, the client could have a basic understanding for the frequently asked questions met in decryption）
　

三、The scope for the chip decryption of MCU：
1. MCU break of MCS51 series
MCS51 is the generic terms of a series of MCU produced by American INTEL. This series of MCU include many varieties. For the programming of commonly-used MCU program, Cai Jinsheng, the engineer in our station compiles programming manual of SUPERPRO Programming Unit.
At present, the models of MCS51 series of MCU that have been decrypted successfully are listed as follows (one master chip is needed, of course, two master chips are better if it is possible) :
Model of chip decryption Specific MCU model

2.AVR系列单片机芯片解密
    　

AVR MCU decryption that our company has successfully decrypted is as follows:

：

AVR series:ATMEGA8，ATMEGA8L，ATMEGA16，ATEMGA16L，ATMEGA32，ATMEGA32L，ATMEGA48，ATEMGA48L，ATMEGA64，ATEMGA64L，ATMEGA88，ATMEGA88V，ATMEGA128，ATEMGA128L，ATMEGA162，ATMEGA162V，ATEMGA8515，ATMEGA8515L，ATMEGA8535，ATEMGA8535L，ATTINY2313，ATTINY2313V
AT90S series：AT90S1200，AT90S2313，AT90S4433，AT90S8515，AT90S8535，AT90S2343，AT90LS2343
ATTTINY series MCU attack：ATTINY10，ATITNY11，ATTINY11L，ATTINY12，ATTINY12V，ATTINY12L，ATTINY13，ATTINY13V，ATTINY15，ATTINY15L，ATTINY26，ATTINY26L，ATTINY2313，ATTINY2313V
AVR系列提供单片机软加密的程序修改

 3.PIC series of MCU decryption（Microchip）
   PIC series of MCU produced by American Microchip company has already widely used in the areas of industrial control, instrument, communication, home appliance and toy for its characteristics of subminiature size, low power consumption, rich variety. Currently, PIC MCU develops the most quickly in the world.
　　PIC series MCU decryption our company offered is as follows ：PIC12C508，PIC12C509，PIC12C508A，PIC12C509A，PIC12F629，PIC12F675，PIC12F508，PIC12F509，PIC12F510，PIC12F609，PIC12F615， PIC12F635，PIC12F683，PIC16C505，PIC16C52，PIC16C54A，PIC16C54B，PIC16C54C，PIC16C55A，PIC16C55B，PIC16C55C，PIC16C56A，PIC16C56B，PIC16C56C，PIC16C57A，PIC16C57B，PIC16C57C，PIC16C58A，PIC16C58B，PIC16C58C，PIC16C62B，PIC16C63A，PIC16C64A，PIC16C65B，PIC16C620A，PIC16C621A，PIC16C622A，PIC16C72，PIC16C72A，PIC16C73，PIC16C73B，PIC16C74，PIC16C74B，PIC16C710，PIC16C711，PIC16C712，PIC16C715，PIC16C716，PIC16C717，PIC16C76，PIC16C77，PIC16CE624，PIC16CE625，CF745，CF775，PIC16F54，PIC16F57，PIC16F59，PIC16F505，PIC16F506，PIC16F526，PIC16F610，PIC616，PIC16F688，PIC16F627，PIC16F627A，PIC16F628，PIC16F628A，PIC16F639，PIC16F630，PIC16F631，PIC16F636，PIC16F639，PIC16F683，PIC16F684，PIC16F676，PIC16F677，PIC16F684，PIC16F685，PIC16F687，PIC16F688，PIC16F689，PIC16F690，PIC16F648A，PIC16F72，PIC16F73，PIC16F74，PIC16F76，PIC16F77，PIC16F716，PIC16F737，PIC16F747.PIC16F777，PIC16F785，PIC16F84，PIC16F84A，PIC16F818，PIC16F819，PIC16F87，PIC16F88，PIC16F870，PIC16F873，PIC16F873A，PIC16F874，PIC16F874A，PIC16F876，PIC16F876A，PIC16F877，PIC16F877A，PIC16F872，PIC16F882，PIC16F883，PIC16F884，PIC16F886，PIC16F887，PIC16F913，PIC16F914，PIC16F916，PIC16F917，PIC16F946，PIC12LC508，PIC12LC509，PIC12LC508A，PIC12LC509A，PIC12LC671，PIC1C672，PIC12LF508，PIC12LF509，PIC16LF505，PIC16FLF506，PIC16LF526，PIC16LF54，PIC16LF57，PIC16LF59，PIC16LF627，PIC16LF627A，PIC16LF628，PIC16LF628A，PIC16LF631，PIC16LF639，PIC16LF648A，PIC16LF677，PIC16LF685，PIC16LF687，PIC16LF689，PIC16LF690，PIC16LF716，PIC16LF72，PIC16LF73，PIC16LF737，PIC16LF74，PIC16LF747，PIC16LF76，PIC16LF767，PIC16LF77，PIC16LF777，PIC16LF818，PIC16LF819，PIC16LF83，PIC16LF84，PIC16LF84A，PIC16LF87，PIC16LF88， PIC16LF870，PIC16LF872，，PIC16LF873 ，PIC16LF873A，PIC16LF874，PIC16LF874A，PIC16LF876，PIC16LF876A，PIC16LF877，PIC16LF877A，PIC16LF913，PIC16LF914，PIC16LF917，PIC16LF916，PIC16LF946，HA2089，HA3099， HA3089,PIC12F519
The models that has been checked by 18F:：PIC18F242,PIC18F252,18F258,PIC18F452,PIC18F442,PIC18F2523,PIC18LF2523,PIC18F2525,PIC18LF2525,PIC18F4520,PIC18F2520,18lf2520
18F2620,18F2420,PIC18F2423,18f2423,18f2685，18f4431,18F2331,18F2431,18F2480,18F2580,18F4620,18F2620,
PIC18LF2423,PIC18F2523,18F2680,18lf6622,18f6622,18f6720,18lf6720
PIC18F4580,PIC18F4620,PIC18F1330,PIC18F1320,PIC18F1220,PIC18F1332,PIC18F2220,PIC18LF2220,PIC18F8520......
IC18F242，PIC18F248，PIC18F258，PIC18F252，PIC18F258，PIC18F442， PIC18F448，PIC18F452，PIC18F458，PIC18LF242，PIC18LF248，PIC18LF252，PIC18LF258，PIC18LF458，PIC18LF448，PIC18LF452，PIC18F1220，PIC18F1230，PIC18F1320，PIC18F1330，PIC18F2220，PIC18F2221，PIC18F2320，PIC18F2321，PIC18F2331，PIC18F2410，PIC18F2420，PIC18F2423，PIC18F2431，PIC18F2439，PIC18F2450，PIC18F2455，PIC18F2458，PIC18F2480，PIC18F2510，PIC18F2515，PIC18F2480，PIC18F2510，PIC18F2515，PIC18F2520，PIC18F2523，PIC18F2525，PIC18F2550，PIC18F2539，，PIC18F2553，PIC18F2580，PIC18F2610，PIC18F2620，PIC18F2680，PIC18F2682，PIC18F2685，PIC18F2585，PIC18F4220，PIC18F4221，PIC18F4320，PIC18F4321，PIC18F4331，PIC18F4220，PIC18F4221，PIC18F4320，PIC18F4321，PIC18F4331，PIC18F4410，PIC18F4420， PIC18F4423，PIC18F4431，PIC18F4439，PIC18F4450，PIC18F4455，PIC18F4458，PIC18F4480，PIC18F4510，PIC18F4515， PIC18F4520，PIC18F4523，PIC18F4525，PIC18F4539，PIC18F4550，PIC18F4553， PIC18F4580，PIC18F4585，PIC18F4610，PIC18F4620，PIC18F4680，PIC18F4682，PIC18F4685，PIC18LF1220，PIC18LF1320，PIC18LF2220，PIC18LF2221，PIC18LF2320，PIC18LF2321，PIC18LF2331，PIC18LF2341， PIC18LF2420，PIC18LF2431，PIC18LF2439，PIC18LF2450，PIC18LF2455， PIC18LF2480，PIC18LF2510，PIC18LF2515， PIC18LF2520，PIC18LF2525，18LF2539，PIC18LF2550， PIC18LF2580，PIC18LF2585， PIC18LF2610，PIC18LF2620，PIC18LF2680，PIC18LF2682，PIC18LF2685，PIC18LF4220，PIC18LF4221，PIC18LF4320，PIC18LF4321，PIC18LF4331，PIC18LF4410，PIC18LF442，PIC18LF4420，PIC18LF4431，PIC18LF4439，PIC18LF4450，PIC18LF4455， PIC18LF4480，PIC18LF4510，PIC18LF4515， PIC18LF4520，PIC18LF4525，PIC18LF4539，PIC18LF4550， PIC18LF4580，PIC18LF4585，PIC18LF4610，PIC18LF4620，PIC18LF4680，PIC18LF4682，PIC18LF4685，PIC18F6310，PIC18F6390，PIC18F6410，PIC18F6490，PIC18F6493，PIC18F6520，PIC18F6525，PIC18F6527，PIC18F6585，PIC18F6620，PIC18F6621，PIC18F6622，PIC18F6627，PIC18F6680，PIC18F6720，PIC18F6722，PIC18F8310，PIC18F8390，PIC18F8393，PIC18F8410，PIC18F8490，PIC18F8493，PIC18F8520，PIC18F8525，PIC18F8585，PIC18F8527，PIC18F8620，PIC18F8621，PIC18F8622，PIC18F8627，PIC18F8680，PIC18F8680，PIC18F8720，pic18f8722，PIC18LF6310，PIC18LF6390，PIC1L8F6410，PIC18LF6490，PIC18LF6493，PIC18LF6520，PIC18LF6525，PIC18LF6527，PIC18LF6585，PIC18LF6620，PIC18LF6621，PIC18LF6622，PIC18LF6627，PIC18LF6680，PIC18LF6720，PIC1L8F6722，PIC18LF8310，PIC18LF8390，PIC18LF8393，PIC18LF8410，PIC18LF8490，PIC18LF8493，PIC18LF8520，PIC18LF8525，PIC18LF8585，PIC18LF8527，PIC18LF8620，PIC18LF8621，PIC18LF8622，PIC18LF8627，PIC18LF8680，PIC18LF8680，PIC18LF8720，pic18Lf8722
PIC10F series of chip break：
PIC10F200，PIC10F202，PIC10F204，PIC10F206，PIC10F220，PIC10F222，dsPIC30F2010，dsPIC30F2011，dsPIC30F2012，dsPIC30F3010
PIC30F series of MCU decryption：
dsPIC30F3011，dsPIC30F3012，dsPIC30F3013，dsPIC30F3014，dsPIC30F4011，dsPIC30F4012，dsPIC30F4013，dsPIC30F5011，dsPIC30F5013，dsPIC30F5015，dsPIC30F5016，dsPIC30F6010，dsPIC30F6010A，dsPIC30F6011，dsPIC30F6012，dsPIC30F6012A，dsPIC30F6013，dsPIC30F6013A，dsPIC30F6014，dsPIC30F6014A，dsPIC30F6015

  

 Since November in 2005, our company has introduced new software and hardware, and could provide decryption service for the following models of MCU:

HOLTEK MCU decryption (HOLTEK）（Due to the limitation of space, please directly click here to enter.）

Motorola(Motorola, Freescale) is the biggest MCU manufacturer in the world. It develops rich variety from M6800, and could produce 4-bit, 8-bit, 16-bit and 32-bit MCU. At present the models of Motorola MCU that could be decrypted are as follows:
08（908）series of Motorola chip decryption：


MC68HC908AZ60，MC68HC908AZ60A，MC68HC908AS60，MC68HC908AS60A ，MC68HC908AB32，68HC08AZ60，C68HC08AZ32，MC68HC08AZ32，MC68HC08AS20 ，MC68HC08AZ32A，MC68HC05H12，68HC08AB16A，68HC908AB32，68HC908AP8 ，68HC908AP16，68HC908AP32，68HC908AP64，68HC08AS32，68HC08AZ32，68HC08AZ60，68HC908AS32，68HC908AS60，68HC908AZ32，68HC908AZ60，68HC08AZ60，68HC08BD24，68HC908BD48，68HC908EY8，68HC908EY16，68HC08GP16，68HC08GP32，68HC08GR16，68HC08GT16，68HC908GP32，68HC908GR4，68HC908GR16，68HC908GR32，68HC908GR48，68HC908GR60，68HC908GR8，68HC908GT8，HC908GT16，68HC908GZ8，68HC908GZ16，68HC908GZ32，68HC908GZ48，68HC908GZ60，68HC08JT8，68HC908JB8，68HC08JK3，68HC08JK8，68HC08JL3，68HC08JL8，68HC908JK1，68HC908JK3，68HC908JK8，68HC908JL16，68HC908JL3，68HC908JL8，68HC08KH12，68HC908KX12，68HC908KX8，68HC908LB8，68HC908LD60，68HC908LD64，68HC908LJ12，68HC908LJ24，68HC908LK24，68HC08LT8，68HC908LV8，68HC908MR16，68HC908MR32，68HC908MR8，68HC908QF4，68HC908RF2，68HC908SR12，MC68HC908QY1，MC68HC908QY2，MC68HC908QY4，MC68HC908QY8，MC68HC908QT2， MC68HC908RF2，MC68HC908RK2,MC68HC908GT8，MC68HC908GT16,NOTE：MC68HC908JB16， MC68HC908JB8，MC68HC908AP8CFB，MC68HC908BDcould not be decrypted.
11 series of Motorola MCU attackMC68HC11A8，MC68HC11A8，MC68HC11A8，MC68HC11E20，MC68HC11E9，MC68HC11E9，MC68HC11E9，MC68HC11E9，MC68HC11EA9，MC68HC11F1，MC68HC11F1，MC68HC11K1 ，MC68HC11K4，MC68HC11K4，MC68HC11KA4，MC68HC11KS2，MC68HC11KS4，MC68HC11KS4，C68HC711E20，MC68HC711E9，MC68HC711E9，MC68HC711EA9，MC68HC711K4，MC68HC711PH8，MC68S711E9，MC68HC711KS8 ，MC68HC11P2，MC68HC711P2，MC68HC711D3，MC68HC711CFNE,all the other 11 series could be studied.


05 series of Motorola MCU decryption：MC68HC705B16、MC68HC705B32，MC68HC705C8A，MC68HC705J1，MC68HC705X16、 MC68HC705X32，MC68HC05B6、 MC68HC05B8，MC68HC05B16、MC68HC05B32，MC68HC05X16、MC68HC05X32，MC68HC705P6A

9s12（912）of MCU attack：
MC68HC912DC128A (3K91D),MC68HC912DC128 (0K50E),MC68HC912DG128 (5H55W),MC68HC912DG128A (3K91D),MC68HC912DG128 (0K50E), MC68HC912D60A (2K38K),MC68HC912D60 (0K75F), MC68HC912D60 (0K13J),MC68HC912D60 (4F73K), MC68HC912B32 (4J54E),
MC68HC912B32 (9H91F), MC9S12DG128B (0L85D),MC9S12DT128B (0L85D), MC9S12A128B (0L85D),MC9S12DB128B (0L85D), MC9S12DT128B (1L85D),MC9S12DG256C (2K79X), MC9S12DT256C(2K79X),MC9S12H128 (1K78X), MC9S12H256 (1K78X),MC9S12DP256C(2K79X), MC9S12DT128B (3L40K),
MC9S12DP512 (1L00M)
9s08 series of MCU decryption：MC9S08AW32，MC9S08A316，MC9S08AW48，MC9S08AW60，MC9S08ASXX，MC9S08AC

SAMSUNG MCU decryption：
S3F9454，S3F9444 ，S3F94A5,S3F9474，S3P9228 ，S3F9488 ，S3F9498，S3F80L4，S3F8245，S3F825A，S3F8285, S3F82E5，S3F848A, S3F84DB，S3F84I9，S3F84I8，S3F84K4，S3F84P4，S3F865B，S3F84MB，S3F84NB，S3F84Q5，S3F848A，S3F84H5, S3P830A, S3F831B, S3F833B

　

Since January 15^th 2006, we had been able to decrypt blew pin MCU (OTP encrypted MCU). At present, we have already successfully decrypted blew pin MCU such as AT89C51 3 blew pins, AT892051 2 blew pins, ATMEGA8535 4 blew pins. And in 2008, we have been able to decrypt AVR MCU whose gold thread has been blew, please consult by telephone for specific price.

五、Download for the commonly-used relevant software of MCU decryption（These software tested by us is rather comprehensive in the disassembler in various websites.）：

Considering the space and opening speed of webpage, please independently visit：Download for the commonly-used relevant software of MCU decryption

Latest news of other chip decryption: