
- •1 About this document
- •1.1 Typographical conventions
- •1.2 List of abbreviations for registers
- •1.3.1 System level interface
- •1.3.2 Integrated configurable debug
- •2 The Cortex-M4 processor
- •2.1 Programmers model
- •2.1.1 Processor mode and privilege levels for software execution
- •2.1.2 Stacks
- •2.1.3 Core registers
- •2.1.4 Exceptions and interrupts
- •2.1.5 Data types
- •2.1.6 The Cortex microcontroller software interface standard (CMSIS)
- •2.2 Memory model
- •2.2.1 Memory regions, types and attributes
- •2.2.2 Memory system ordering of memory accesses
- •2.2.3 Behavior of memory accesses
- •2.2.4 Software ordering of memory accesses
- •2.2.5 Bit-banding
- •2.2.6 Memory endianness
- •2.2.7 Synchronization primitives
- •2.2.8 Programming hints for the synchronization primitives
- •2.3 Exception model
- •2.3.1 Exception states
- •2.3.2 Exception types
- •2.3.3 Exception handlers
- •2.3.4 Vector table
- •2.3.5 Exception priorities
- •2.3.6 Interrupt priority grouping
- •2.3.7 Exception entry and return
- •2.4 Fault handling
- •2.4.1 Fault types
- •2.4.2 Fault escalation and hard faults
- •2.4.3 Fault status registers and fault address registers
- •2.4.4 Lockup
- •2.5 Power management
- •2.5.1 Entering sleep mode
- •2.5.2 Wakeup from sleep mode
- •2.5.3 External event input / extended interrupt and event input
- •2.5.4 Power management programming hints
- •3 The STM32 Cortex-M4 instruction set
- •3.1 Instruction set summary
- •3.2 CMSIS intrinsic functions
- •3.3 About the instruction descriptions
- •3.3.1 Operands
- •3.3.2 Restrictions when using PC or SP
- •3.3.3 Flexible second operand
- •3.3.4 Shift operations
- •3.3.5 Address alignment
- •3.3.7 Conditional execution
- •3.3.8 Instruction width selection
- •3.4 Memory access instructions
- •3.4.2 LDR and STR, immediate offset
- •3.4.3 LDR and STR, register offset
- •3.4.4 LDR and STR, unprivileged
- •3.4.7 PUSH and POP
- •3.4.8 LDREX and STREX
- •3.4.9 CLREX
- •3.5 General data processing instructions
- •3.5.7 MOVT
- •3.5.8 REV, REV16, REVSH, and RBIT
- •3.5.9 SADD16 and SADD8
- •3.5.10 SHADD16 and SHADD8
- •3.5.11 SHASX and SHSAX
- •3.5.12 SHSUB16 and SHSUB8
- •3.5.13 SSUB16 and SSUB8
- •3.5.14 SASX and SSAX
- •3.5.16 UADD16 and UADD8
- •3.5.17 UASX and USAX
- •3.5.18 UHADD16 and UHADD8
- •3.5.19 UHASX and UHSAX
- •3.5.20 UHSUB16 and UHSUB8
- •3.5.22 USAD8
- •3.5.23 USADA8
- •3.5.24 USUB16 and USUB8
- •3.6 Multiply and divide instructions
- •3.6.2 UMULL, UMAAL and UMLAL
- •3.6.3 SMLA and SMLAW
- •3.6.4 SMLAD
- •3.6.5 SMLAL and SMLALD
- •3.6.6 SMLSD and SMLSLD
- •3.6.7 SMMLA and SMMLS
- •3.6.8 SMMUL
- •3.6.9 SMUAD and SMUSD
- •3.6.10 SMUL and SMULW
- •3.6.11 UMULL, UMLAL, SMULL, and SMLAL
- •3.6.12 SDIV and UDIV
- •3.7 Saturating instructions
- •3.7.1 SSAT and USAT
- •3.7.2 SSAT16 and USAT16
- •3.7.3 QADD and QSUB
- •3.7.4 QASX and QSAX
- •3.7.5 QDADD and QDSUB
- •3.7.6 UQASX and UQSAX
- •3.7.7 UQADD and UQSUB
- •3.8 Packing and unpacking instructions
- •3.8.1 PKHBT and PKHTB
- •3.8.3 SXTA and UXTA
- •3.9 Bitfield instructions
- •3.9.2 SBFX and UBFX
- •3.9.4 Branch and control instructions
- •3.9.6 CBZ and CBNZ
- •3.10.1 VABS
- •3.10.2 VADD
- •3.10.3 VCMP, VCMPE
- •3.10.6 VCVTB, VCVTT
- •3.10.7 VDIV
- •3.10.8 VFMA, VFMS
- •3.10.9 VFNMA, VFNMS
- •3.10.10 VLDM
- •3.10.11 VLDR
- •3.10.12 VLMA, VLMS
- •3.10.13 VMOV immediate
- •3.10.14 VMOV register
- •3.10.15 VMOV scalar to Arm core register
- •3.10.16 VMOV Arm core register to single precision
- •3.10.17 VMOV two Arm core registers to two single precision
- •3.10.18 VMOV Arm Core register to scalar
- •3.10.19 VMRS
- •3.10.20 VMSR
- •3.10.21 VMUL
- •3.10.22 VNEG
- •3.10.23 VNMLA, VNMLS, VNMUL
- •3.10.24 VPOP
- •3.10.25 VPUSH
- •3.10.26 VSQRT
- •3.10.27 VSTM
- •3.10.28 VSTR
- •3.10.29 VSUB
- •3.11 Miscellaneous instructions
- •3.11.1 BKPT
- •4 Core peripherals
- •4.2 Memory protection unit (MPU)
- •4.2.1 MPU access permission attributes
- •4.2.2 MPU mismatch
- •4.2.3 Updating an MPU region
- •4.2.4 MPU design hints and tips
- •4.2.5 MPU type register (MPU_TYPER)
- •4.2.6 MPU control register (MPU_CTRL)
- •4.2.7 MPU region number register (MPU_RNR)
- •4.2.8 MPU region base address register (MPU_RBAR)
- •4.2.9 MPU region attribute and size register (MPU_RASR)
- •4.2.10 MPU register map
- •4.3 Nested vectored interrupt controller (NVIC)
- •4.3.6 Interrupt active bit register x (NVIC_IABRx)
- •4.3.7 Interrupt priority register x (NVIC_IPRx)
- •4.3.8 Software trigger interrupt register (NVIC_STIR)
- •4.3.10 NVIC design hints and tips
- •4.3.11 NVIC register map
- •4.4 System control block (SCB)
- •4.4.1 Auxiliary control register (ACTLR)
- •4.4.2 CPUID base register (CPUID)
- •4.4.3 Interrupt control and state register (ICSR)
- •4.4.4 Vector table offset register (VTOR)
- •4.4.5 Application interrupt and reset control register (AIRCR)
- •4.4.6 System control register (SCR)
- •4.4.7 Configuration and control register (CCR)
- •4.4.8 System handler priority registers (SHPRx)
- •4.4.9 System handler control and state register (SHCSR)
- •4.4.10 Configurable fault status register (CFSR; UFSR+BFSR+MMFSR)
- •4.4.11 Usage fault status register (UFSR)
- •4.4.12 Bus fault status register (BFSR)
- •4.4.13 Memory management fault address register (MMFSR)
- •4.4.14 Hard fault status register (HFSR)
- •4.4.15 Memory management fault address register (MMFAR)
- •4.4.16 Bus fault address register (BFAR)
- •4.4.17 Auxiliary fault status register (AFSR)
- •4.4.18 System control block design hints and tips
- •4.4.19 SCB register map
- •4.5 SysTick timer (STK)
- •4.5.1 SysTick control and status register (STK_CTRL)
- •4.5.2 SysTick reload value register (STK_LOAD)
- •4.5.3 SysTick current value register (STK_VAL)
- •4.5.4 SysTick calibration value register (STK_CALIB)
- •4.5.5 SysTick design hints and tips
- •4.5.6 SysTick register map
- •4.6 Floating point unit (FPU)
- •4.6.1 Coprocessor access control register (CPACR)
- •4.6.6 Enabling the FPU
- •4.6.7 Enabling and clearing FPU exception interrupts
- •5 Revision history

The STM32 Cortex-M4 instruction set |
PM0214 |
|
|
3.3About the instruction descriptions
The following sections give more information about using the instructions:
•Operands on page 60
•Restrictions when using PC or SP on page 60
•Flexible second operand on page 60
•Shift operations on page 62
•Address alignment on page 65
•PC-relative expressions on page 65
•Conditional execution on page 65
•Instruction width selection on page 68
3.3.1Operands
An instruction operand can be an Arm register, a constant, or another instruction-specific parameter. Instructions act on the operands and often store the result in a destination register. When there is a destination register in the instruction, it is usually specified before the operands.
Operands in some instructions are flexible in that they can either be a register or a constant (see Flexible second operand).
3.3.2Restrictions when using PC or SP
Many instructions have restrictions on whether you can use the program counter (PC) or stack pointer (SP) for the operands or destination register. See instruction descriptions for more information.
Bit[0] of any address written to the PC with a BX, BLX, LDM, LDR, or POP instruction must be 1 for correct execution, because this bit indicates the required instruction set, and the Cortex-M4 processor only supports thumb instructions.
3.3.3Flexible second operand
Many general data processing instructions have a flexible second operand. This is shown as operand2 in the description of the syntax of each instruction.
Operand2 can be a:
•Constant
•Register with optional shift
60/262 |
PM0214 Rev 10 |

PM0214 |
The STM32 Cortex-M4 instruction set |
|
|
Constant
You specify an operand2 constant in the form #constant, where constant can be:
•Any constant that can be produced by shifting an 8-bit value left by any number of bits within a 32-bit word.
•Any constant of the form 0x00XY00XY
•Any constant of the form 0xXY00XY00
•Any constant of the form 0xXYXYXYXY
In the constants shown above, X and Y are hexadecimal digits.
In addition, in a small number of instructions, constant can include a wider range of values. These are described in the individual instruction descriptions.
When an operand2 constant is used with the instructions MOVS, MVNS, ANDS, ORRS, ORNS, EORS, BICS, TEQ or TST, the carry flag is updated to bit[31] of the constant, if the constant is greater than 255 and can be produced by shifting an 8-bit value. These instructions do not affect the carry flag if operand2 is any other constant.
Instruction substitution
The assembler might be able to produce an equivalent instruction if a not permitted constant is specified. For example, the instruction CMP Rd, #0xFFFFFFFE might be assembled as the equivalent of instruction CMN Rd, #0x2.
Register with optional shift
An operand2 register is specified in the form Rm {, shift}, where:
•Rm is the register holding the data for the second operand
•Shift is an optional shift to be applied to Rm. It can be one of the following: ASR #n: Arithmetic shift right n bits, 1 ≤ n ≤ 32
LSL #n: Logical shift left n bits, 1 ≤ n ≤ 31 LSR #n: Logical shift right n bits, 1 ≤ n ≤ 32 ROR #n: Rotate right n bits, 1 ≤ n ≤ 31 RRX: Rotate right one bit, with extend
—: If omitted, no shift occurs, equivalent to LSL #0
If you omit the shift, or specify LSL #0, the instruction uses the value in Rm.
If you specify a shift, the shift is applied to the value in Rm, and the resulting 32-bit value is used by the instruction. However, the contents in the Rm register remain unchanged. Specifying a register with shift also updates the carry flag when used with certain instructions. For information on the shift operations and how they affect the carry flag, see
Shift operations.
PM0214 Rev 10 |
61/262 |

The STM32 Cortex-M4 instruction set |
PM0214 |
|
|
3.3.4Shift operations
Register shift operations move the bits in a register left or right by a specified number of bits, the shift length. Register shift can be performed:
•Directly by the instructions ASR, LSR, LSL, ROR, and RRX. The result is written to a destination register.
•During the calculation of operand2 by the instructions that specify the second operand as a register with shift (see Flexible second operand on page 60). The result is used by the instruction.
The permitted shift lengths depend on the shift type and the instruction (see the individual instruction description or Flexible second operand). If the shift length is 0, no shift occurs. Register shift operations update the carry flag except when the specified shift length is 0. The following sub-sections describe the various shift operations and how they affect the carry flag. In these descriptions, Rm is the register containing the value to be shifted, and n is the shift length.
ASR
Arithmetic shift right by n bits moves the left-hand 32-n bits of the Rm register to the right by n places, into the right-hand 32-n bits of the result. And it copies the original bit[31] of the register into the left-hand n bits of the result (see Figure 13: ASR #3 on page 62).
You can use the ASR #n operation to divide the value in the Rm register by 2n, with the result being rounded towards negative-infinity.
When the instruction is ASRS or when ASR #n is used in operand2 with the instructions MOVS, MVNS, ANDS, ORRS, ORNS, EORS, BICS, TEQ or TST, the carry flag is updated to the last bit shifted out, bit[n-1], of the Rm register.
Note: 1 If n is 32 or more, all the bits in the result are set to the value of bit[31] of Rm.
2 If n is 32 or more and the carry flag is updated, it is updated to the value of bit[31] of Rm.
Figure 13. ASR #3
Carry
Flag
31 |
|
|
|
|
|
|
|
|
|
|
|
5 |
4 |
3 |
2 |
1 |
0 |
|||||||
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
MSv39652V1
62/262 |
PM0214 Rev 10 |

PM0214 |
The STM32 Cortex-M4 instruction set |
|
|
LSR
Logical shift right by n bits moves the left-hand 32-n bits of the Rm register to the right by n places, into the right-hand 32-n bits of the result. And it sets the left-hand n bits of the result to 0 (see Figure 14).
You can use the LSR #n operation to divide the value in the Rm register by 2n, if the value is regarded as an unsigned integer.
When the instruction is LSRS or when LSR #n is used in operand2 with the instructions MOVS, MVNS, ANDS, ORRS, ORNS, EORS, BICS, TEQ or TST, the carry flag is updated to the last bit shifted out, bit[n-1], of the Rm register.
Note: 1 If n is 32 or more, then all the bits in the result are cleared to 0. 2 If n is 33 or more and the carry flag is updated, it is updated to 0.
Figure 14. LSR #3
|
|
|
|
|
|
|
0 0 |
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
Carry |
||
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
||||
|
|
|
|
|
0 |
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
Flag |
||||||
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
31 |
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
5 |
4 |
3 |
2 |
1 |
0 |
|
|
|||||||||
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
MSv39679V1
LSL
Logical shift left by n bits moves the right-hand 32-n bits of the Rm register to the left by n places, into the left-hand 32-n bits of the result. And it sets the right-hand n bits of the result to 0 (see Figure 15: LSL #3).
The LSL #n operation can be used to multiply the value in the Rm register by 2n, if the value is regarded as an unsigned integer or a two’s complement signed integer. Overflow can occur without warning.
When the instruction is LSLS or when LSL #n, with non-zero n, is used in operand2 with the instructions MOVS, MVNS, ANDS, ORRS, ORNS, EORS, BICS, TEQ or TST, the carry flag is updated to the last bit shifted out, bit[32-n], of the Rm register. These instructions do not affect the carry flag when used with LSL #0.
Note: 1 If n is 32 or more, then all the bits in the result are cleared to 0. 2 If n is 33 or more and the carry flag is updated, it is updated to 0.
Figure 15. LSL #3
0 0 0
31 |
|
|
|
|
|
|
5 |
4 |
3 |
2 |
1 |
0 |
|
|
|
|
|
|
|
|
|
|
|
|
|
Carry
Flag
MSv39678V1
PM0214 Rev 10 |
63/262 |

The STM32 Cortex-M4 instruction set |
PM0214 |
|
|
ROR
Rotate right by n bits moves the left-hand 32-n bits of the Rm register to the right by n places, into the right-hand 32-n bits of the result. It also moves the right-hand n bits of the register into the left-hand n bits of the result (see Figure 16).
When the instruction is RORS or when ROR #n is used in operand2 with the instructions MOVS, MVNS, ANDS, ORRS, ORNS, EORS, BICS, TEQ or TST, the carry flag is updated to the last bit rotation, bit[n-1], of the Rm register.
Note: 1 If n is 32, then the value of the result is same as the value in Rm, and if the carry flag is updated, it is updated to bit[31] of Rm.
2 ROR with shift length, n, more than 32 is the same as ROR with shift length n-32.
Figure 16. ROR #3
|
|
|
|
|
|
Carry |
|
|
|
|
|
|
Flag |
31 |
5 |
4 |
3 |
2 |
1 |
0 |
|
|
|
|
|
|
MSv39685V1 |
RRX |
|
|
|
|
|
|
Rotate right with extend moves the bits of the Rm register to the right by one bit. And it copies the carry flag into bit[31] of the result (see Figure 17).
When the instruction is RRXS or when RRX is used in operand2 with the instructions MOVS, MVNS, ANDS, ORRS, ORNS, EORS, BICS, TEQ or TST, the carry flag is updated to bit[0] of the Rm register.
Figure 17. RRX #3
Carry
Flag
31 |
30 |
|
|
|
|
|
|
|
|
1 |
0 |
|
|
|
||||
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
MSv39686V1
64/262 |
PM0214 Rev 10 |