Going to take a huge fuck-off shot in the dark here: Is there anyone who follows me who is, or knows someone who is, a former Agilent/Broadcom chip-head, and who has any internal or provisional documentation on the AAEC-2000 ARM SoC?
Tentatively disregard. The Timer 1 and Interrupt registers are mapped identically between the Linux header I found and the registers in @_Ninji's Wind-Emu, including a notable gap for UART regs, but the Timer 2 & 3 regs are mapped differently. Perhaps a second gen of the SoC?