forked from arti/vt1200
SDD
01923ecb69
The firmware's tftp_open hangs in its resolver from the rdebug process, so the payload speaks RFC 783 over the firmware socket API: socket(2,2,0), sendto(RRQ), recvfrom(DATA)/ACK into a malloc'd buffer, close. Verified live: 600 B fetched from 192.168.99.1 into the malloc buffer, server RRQ logged, and rdebug peek matches probe.bin byte-for-byte. Notes: dwt/notes/TCPIP.md (function table, ABI, limits) and the loader/transport hand-off in dwt/notes/LOADER_CROSS.md.
219 lines
8.3 KiB
Plaintext
219 lines
8.3 KiB
Plaintext
GSP COFF Assembler, Version 2.00, 87.300 Sun Oct 18 15:19:40 2026
|
|
(c) Copyright 1985, 1987, Texas Instruments Inc.
|
|
|
|
PAGE 1
|
|
|
|
0001 ; copytest.asm -- isolate the byte-copy loop used by tf
|
|
0002 ;
|
|
0003 ; malloc(01000h), then copy 256 bytes from SRC (values
|
|
0004 ; dint/movb/addk/dsjs/eint loop. A peek of the destina
|
|
0005 ;
|
|
0006 ; 0187A800 stage (1 entered, 2 copied)
|
|
0007 ; 0187A820 destination pointer
|
|
0008 ; 0187A840 entry SP
|
|
0009 ; 0187A860 entry A14
|
|
0010
|
|
0011 00000000 .text
|
|
0012 00000000 _start:
|
|
0013 00000000 0550 setf 16, 0, 0
|
|
0014 00000010 0740 setf 32, 0, 1
|
|
0015 00000020 098F mmtm sp, a0,a1,a2,a3,a4,a5,a6,a7
|
|
00000030 FF00
|
|
0016 00000040 078F move sp, @0187A840h, 1
|
|
00000050 0187A840
|
|
0017 00000070 078E move a14, @0187A860h, 1
|
|
00000080 0187A860
|
|
0018 000000A0 09E0 movi 1, a0, L
|
|
000000B0 00000001
|
|
0019 000000D0 0780 move a0, @0187A800h, 1
|
|
000000E0 0187A800
|
|
0020
|
|
0021 00000100 A3CF move a14, -*sp, 1
|
|
0022 00000110 09EE movi 0187B800h, a14, L
|
|
00000120 0187B800
|
|
0023 00000140 09E0 movi 01000h, a0, L
|
|
00000150 00001000
|
|
0024 00000170 920E move a0, *a14+, 1
|
|
0025 00000180 0D5F calla 3F701230h
|
|
00000190 3F701230
|
|
0026 000001B0 07AF move @0187A840h, sp, 1
|
|
000001C0 0187A840
|
|
0027 000001E0 07AE move @0187A860h, a14, 1
|
|
000001F0 0187A860
|
|
0028 00000210 0550 setf 16, 0, 0
|
|
0029 00000220 0740 setf 32, 0, 1
|
|
0030 00000230 0788 move a8, @0187A820h, 1
|
|
00000240 0187A820
|
|
0031 00000260 4D06 move a8, a6
|
|
0032
|
|
0033 00000270 0360 dint
|
|
0034 00000280 09E5 movi SRC, a5, L
|
|
00000290 00000400'
|
|
0035 000002B0 09E2 movi 256, a2, L
|
|
000002C0 00000100
|
|
0036 000002E0 copy_bytes:
|
|
0037 000002E0 8EA0 movb *a5, a0
|
|
0038 000002F0 8C06 movb a0, *a6
|
|
0039 00000300 1105 addk 8, a5
|
|
0040 00000310 1106 addk 8, a6
|
|
0041 00000320 3CA2 dsjs a2, copy_bytes
|
|
0042 00000330 0D60 eint
|
|
0043
|
|
GSP COFF Assembler, Version 2.00, 87.300 Sun Oct 18 15:19:40 2026
|
|
(c) Copyright 1985, 1987, Texas Instruments Inc.
|
|
|
|
PAGE 2
|
|
|
|
0044 00000340 09E0 movi 2, a0, L
|
|
00000350 00000002
|
|
0045 00000370 0780 move a0, @0187A800h, 1
|
|
00000380 0187A800
|
|
0046 000003A0 09AF mmfm sp, a0,a1,a2,a3,a4,a5,a6,a7
|
|
000003B0 00FF
|
|
0047 000003C0 09E8 movi 0, a8, L
|
|
000003D0 00000000
|
|
0048 000003F0 0960 rets
|
|
0049
|
|
0050 00000400 SRC:
|
|
0051 00000400 0100 .word 00100h
|
|
0052 00000410 0302 .word 00302h
|
|
0053 00000420 0504 .word 00504h
|
|
0054 00000430 0706 .word 00706h
|
|
0055 00000440 0908 .word 00908h
|
|
0056 00000450 0B0A .word 00B0Ah
|
|
0057 00000460 0D0C .word 00D0Ch
|
|
0058 00000470 0F0E .word 00F0Eh
|
|
0059 00000480 1110 .word 01110h
|
|
0060 00000490 1312 .word 01312h
|
|
0061 000004A0 1514 .word 01514h
|
|
0062 000004B0 1716 .word 01716h
|
|
0063 000004C0 1918 .word 01918h
|
|
0064 000004D0 1B1A .word 01B1Ah
|
|
0065 000004E0 1D1C .word 01D1Ch
|
|
0066 000004F0 1F1E .word 01F1Eh
|
|
0067 00000500 2120 .word 02120h
|
|
0068 00000510 2322 .word 02322h
|
|
0069 00000520 2524 .word 02524h
|
|
0070 00000530 2726 .word 02726h
|
|
0071 00000540 2928 .word 02928h
|
|
0072 00000550 2B2A .word 02B2Ah
|
|
0073 00000560 2D2C .word 02D2Ch
|
|
0074 00000570 2F2E .word 02F2Eh
|
|
0075 00000580 3130 .word 03130h
|
|
0076 00000590 3332 .word 03332h
|
|
0077 000005A0 3534 .word 03534h
|
|
0078 000005B0 3736 .word 03736h
|
|
0079 000005C0 3938 .word 03938h
|
|
0080 000005D0 3B3A .word 03B3Ah
|
|
0081 000005E0 3D3C .word 03D3Ch
|
|
0082 000005F0 3F3E .word 03F3Eh
|
|
0083 00000600 4140 .word 04140h
|
|
0084 00000610 4342 .word 04342h
|
|
0085 00000620 4544 .word 04544h
|
|
0086 00000630 4746 .word 04746h
|
|
0087 00000640 4948 .word 04948h
|
|
0088 00000650 4B4A .word 04B4Ah
|
|
0089 00000660 4D4C .word 04D4Ch
|
|
0090 00000670 4F4E .word 04F4Eh
|
|
0091 00000680 5150 .word 05150h
|
|
0092 00000690 5352 .word 05352h
|
|
0093 000006A0 5554 .word 05554h
|
|
0094 000006B0 5756 .word 05756h
|
|
0095 000006C0 5958 .word 05958h
|
|
GSP COFF Assembler, Version 2.00, 87.300 Sun Oct 18 15:19:40 2026
|
|
(c) Copyright 1985, 1987, Texas Instruments Inc.
|
|
|
|
PAGE 3
|
|
|
|
0096 000006D0 5B5A .word 05B5Ah
|
|
0097 000006E0 5D5C .word 05D5Ch
|
|
0098 000006F0 5F5E .word 05F5Eh
|
|
0099 00000700 6160 .word 06160h
|
|
0100 00000710 6362 .word 06362h
|
|
0101 00000720 6564 .word 06564h
|
|
0102 00000730 6766 .word 06766h
|
|
0103 00000740 6968 .word 06968h
|
|
0104 00000750 6B6A .word 06B6Ah
|
|
0105 00000760 6D6C .word 06D6Ch
|
|
0106 00000770 6F6E .word 06F6Eh
|
|
0107 00000780 7170 .word 07170h
|
|
0108 00000790 7372 .word 07372h
|
|
0109 000007A0 7574 .word 07574h
|
|
0110 000007B0 7776 .word 07776h
|
|
0111 000007C0 7978 .word 07978h
|
|
0112 000007D0 7B7A .word 07B7Ah
|
|
0113 000007E0 7D7C .word 07D7Ch
|
|
0114 000007F0 7F7E .word 07F7Eh
|
|
0115 00000800 8180 .word 08180h
|
|
0116 00000810 8382 .word 08382h
|
|
0117 00000820 8584 .word 08584h
|
|
0118 00000830 8786 .word 08786h
|
|
0119 00000840 8988 .word 08988h
|
|
0120 00000850 8B8A .word 08B8Ah
|
|
0121 00000860 8D8C .word 08D8Ch
|
|
0122 00000870 8F8E .word 08F8Eh
|
|
0123 00000880 9190 .word 09190h
|
|
0124 00000890 9392 .word 09392h
|
|
0125 000008A0 9594 .word 09594h
|
|
0126 000008B0 9796 .word 09796h
|
|
0127 000008C0 9998 .word 09998h
|
|
0128 000008D0 9B9A .word 09B9Ah
|
|
0129 000008E0 9D9C .word 09D9Ch
|
|
0130 000008F0 9F9E .word 09F9Eh
|
|
0131 00000900 A1A0 .word 0A1A0h
|
|
0132 00000910 A3A2 .word 0A3A2h
|
|
0133 00000920 A5A4 .word 0A5A4h
|
|
0134 00000930 A7A6 .word 0A7A6h
|
|
0135 00000940 A9A8 .word 0A9A8h
|
|
0136 00000950 ABAA .word 0ABAAh
|
|
0137 00000960 ADAC .word 0ADACh
|
|
0138 00000970 AFAE .word 0AFAEh
|
|
0139 00000980 B1B0 .word 0B1B0h
|
|
0140 00000990 B3B2 .word 0B3B2h
|
|
0141 000009A0 B5B4 .word 0B5B4h
|
|
0142 000009B0 B7B6 .word 0B7B6h
|
|
0143 000009C0 B9B8 .word 0B9B8h
|
|
0144 000009D0 BBBA .word 0BBBAh
|
|
0145 000009E0 BDBC .word 0BDBCh
|
|
0146 000009F0 BFBE .word 0BFBEh
|
|
0147 00000A00 C1C0 .word 0C1C0h
|
|
0148 00000A10 C3C2 .word 0C3C2h
|
|
0149 00000A20 C5C4 .word 0C5C4h
|
|
0150 00000A30 C7C6 .word 0C7C6h
|
|
0151 00000A40 C9C8 .word 0C9C8h
|
|
GSP COFF Assembler, Version 2.00, 87.300 Sun Oct 18 15:19:40 2026
|
|
(c) Copyright 1985, 1987, Texas Instruments Inc.
|
|
|
|
PAGE 4
|
|
|
|
0152 00000A50 CBCA .word 0CBCAh
|
|
0153 00000A60 CDCC .word 0CDCCh
|
|
0154 00000A70 CFCE .word 0CFCEh
|
|
0155 00000A80 D1D0 .word 0D1D0h
|
|
0156 00000A90 D3D2 .word 0D3D2h
|
|
0157 00000AA0 D5D4 .word 0D5D4h
|
|
0158 00000AB0 D7D6 .word 0D7D6h
|
|
0159 00000AC0 D9D8 .word 0D9D8h
|
|
0160 00000AD0 DBDA .word 0DBDAh
|
|
0161 00000AE0 DDDC .word 0DDDCh
|
|
0162 00000AF0 DFDE .word 0DFDEh
|
|
0163 00000B00 E1E0 .word 0E1E0h
|
|
0164 00000B10 E3E2 .word 0E3E2h
|
|
0165 00000B20 E5E4 .word 0E5E4h
|
|
0166 00000B30 E7E6 .word 0E7E6h
|
|
0167 00000B40 E9E8 .word 0E9E8h
|
|
0168 00000B50 EBEA .word 0EBEAh
|
|
0169 00000B60 EDEC .word 0EDECh
|
|
0170 00000B70 EFEE .word 0EFEEh
|
|
0171 00000B80 F1F0 .word 0F1F0h
|
|
0172 00000B90 F3F2 .word 0F3F2h
|
|
0173 00000BA0 F5F4 .word 0F5F4h
|
|
0174 00000BB0 F7F6 .word 0F7F6h
|
|
0175 00000BC0 F9F8 .word 0F9F8h
|
|
0176 00000BD0 FBFA .word 0FBFAh
|
|
0177 00000BE0 FDFC .word 0FDFCh
|
|
0178 00000BF0 FFFE .word 0FFFEh
|
|
0179 .end
|
|
|
|
No Errors, No Warnings
|