Files

Siggi 29dc1f1bd2 Update all docs and test generator to match verified assembler opcodes

- README.md: Complete project overview with plugin status
- ARCHITECTURE.md: Fixed register tables (CNTR in REG1, not REG2)
- GETTING_STARTED.md: r2-native workflow, removed Python disasm refs
- PRACTICAL_EXAMPLE.md: Uses verified open21xx opcodes with bit layouts
- ROM_ANALYSIS_WALKTHROUGH.md: Updated format detection and r2 commands
- r2plugin/README.md: Simplified, points to assembler test ROM
- gen_isa_test.py: All opcodes from open21xx assembler with labels

2026-04-22 18:46:54 +00:00

1.7 KiB

Raw Blame History

Getting Started (Air-Gapped Deployment)

Prerequisites

Radare2 5.8.0+ (built from source on the target machine)
GCC (to compile the plugin)
Python 3 (optional, for test ROM generation)

Setup

Copy the entire adsp219x-re/ directory to the air-gapped machine.
Build and install the radare2 plugin:
```
 cd r2plugin
 make
 make install
```
Verify installation:
```
 r2 -a adsp219x -b 24 -q -c "pd 10" examples/isa_test.bin
```
You should see decoded instructions (NOP, AX0 = 0x1234, etc.).

Loading a ROM Dump

For a raw 24-bit packed binary (3 bytes per instruction, big-endian):

r2 -a adsp219x -b 24 firmware.bin

For a padded 32-bit dump (4 bytes per instruction with leading 0x00), strip the padding first or adjust the base offset manually.

Useful r2 Commands

pd 100          # Disassemble 100 instructions
s 0x200         # Seek to PM address 0x200 (byte offset 0x600)
/x 1c           # Search for JUMP opcodes (Type 10a prefix)
axt @@ sym.*    # Cross-references (after analysis)

Validation

Compare your disassembly against the reference examples in examples/. The isa_test.bin was assembled with the open21xx toolchain and contains verified opcodes for all major instruction types.

Reference Documentation

The docs/ directory contains the original Analog Devices instruction set reference chapters (PDF and text extracts):

9x_opcodes.* - Opcode definitions and mnemonics
9x_ALUops.* - ALU operations
9x_mltops.* - Multiplier/MAC operations
9x_shftops.* - Shifter operations
9x_flowops.* - Flow control (jumps, loops, returns)
9x_moveops.* - Data move operations
9x_multiops.* - Multifunction operations

1.7 KiB Raw Blame History