参考资料:27fK9s2c8@1M7s2y4Q4x3@1q4Q4x3V1k6Q4x3V1k6J5k6r3!0E0j5h3&6K6K9$3W2Q4x3X3g2Y4K9i4c8Z5N6h3u0Q4x3X3g2A6L8#2)9J5c8W2u0W2N6X3g2J5M7$3g2Q4x3X3c8W2L8X3N6A6L8X3g2W2M7X3W2F1k6#2)9J5k6r3!0X3i4K6u0V1b7g2u0y4i4K6u0V1e0h3W2U0M7X3!0U0L8$3&6@1M7X3!0D9L8r3g2J5M7#2)9J5c8R3`.`.
芯片手册53aK9s2c8@1M7s2y4Q4x3@1q4Q4x3V1k6Q4x3V1k6Y4k6h3g2Z5P5g2)9J5k6h3y4G2L8g2)9J5c8Y4g2H3L8r3!0S2k6s2y4Q4x3V1k6@1L8$3!0D9i4K6u0r3b7g2m8y4x3K6u0r3x3e0l9K6P5p5u0Q4x3U0g2o6x3W2)9J5y4f1p5H3c8r3q4@1j5i4y4Z5k6h3g2@1i4K6t1#2b7K6u0Q4x3U0g2m8x3q4j5I4i4K6u0W2x3#2)9J5k6i4m8V1k6R3`.`.efaK9s2c8@1M7s2y4Q4x3@1q4Q4x3V1k6Q4x3V1k6%4N6%4N6Q4x3X3g2Y4k6h3g2Z5P5g2)9J5k6h3y4G2L8g2)9J5c8Y4g2H3L8r3!0S2k6s2y4Q4x3V1k6@1L8$3!0D9i4K6u0r3b7g2m8y4x3K6u0r3x3e0l9K6P5o6c8^5y4Y4R3^5P5p5u0Q4x3U0f1J5x3q4g2K6k6i4u0Q4x3U0f1J5x3p5#2S2L8Y4g2S2L8q4)9J5y4f1x3J5i4K6t1#2b7e0m8h3x3g2)9J5k6e0y4Q4x3X3g2H3k6r3j5`.
已知: 芯片手册获取 rom 地址、大小、ram地址大小
vector table:
按照上面老外给出的,直接跳转到向量表第二个地址alt+g 选择thumb,然后C一下,就批量出函数了,但是我的结果不太对。我手工分析过STM32的固件,确实能实现,APM32不知道为什么不行,求指导
[培训]科锐逆向工程师培训第53期2025年7月8日开班!
LOVEZ 给你一个思路,去分析一下固件编译链