2.6. ABL function map and upstream-source correlation

This page is the completeness check for the ABL reverse engineering: an exhaustive inventory of every function in the decompressed ABL DXE (../artifacts/abl_a/abl_dxe_fv.bin), the reachability classification from ModuleEntryPoint, the method and limits of the upstream-source correlation, and the table of confirmed deviations from the matched upstream source. The behavioural deep-dives live on the other ABL pages (ABL entry point and top-level orchestration, Kernel/DTB/ramdisk load and the kernel hand-off, AVB enforcement code path (LoadImageAndAuth / libavb), Fastboot handler internals (FastbootLib)); this page is the index and the provenance record.

RVAs are LinuxLoader-relative (= DXE file offset − 0xb8); the LinuxLoader PE was carved at DXE offset 0xb8 so PE offset == RVA.

2.6.1. Upstream-source correlation

Matched tree. The binary is correlated against the Qualcomm QcomModulePkg EDK2 tree on CodeLinaro, product line LA (Android/HLOS, correct for a tablet — the LE tree is embedded/IoT and carries no matching tags), at tag LA.UM.9.12.1.r2-05100-SMxx50.QSSI12.0. The SMxx50 family tag covers the SM6350 lexically, and the embedded DEBUG build path (sm6350-15-REL/.../QcomModulePkg/Application/LinuxLoader) confirms the same package. The source is used only to generate hypotheses and accelerate naming; every claim on the ABL pages is anchored to binary evidence (a string, GUID, RVA or xref), with source cited as secondary.

Version gap (open question). This unit is Android 11 (release-keys, Secure boot and image signing); the matched tag is QSSI12 (Android 12). A search of the CodeLinaro LA and LE abl/tianocore/edk2 repositories and the older Codeaurora GitLab mirror found no QSSI11 / Android-11-era SMxx50 tag and no SM6350-named tag at all: the earliest published SMxx50 tags are already QSSI12/QSSI13 (build 14800``+), and the Codeaurora mirror only carries an unrelated ``8x09 IoT line. The device’s Android-11 ABL source therefore predates the earliest available published tree. Per method rule, this is recorded as an open question rather than treated as equivalent — see Open questions and limits of analysis. The working assumption is that the QSSI12 source is a newer branch than the binary; where strings/features differ, the binary is authoritative and the difference is logged below.

Diff method. Structural, not byte-for-byte: function boundaries, call order, referenced strings/GUIDs and descriptor sets are compared. Literal byte diffs are meaningless across the QSSI12/Android-11 gap and different toolchains (DEBUG_CLANG35).

2.6.2. Reachability classification

radare2 (base 0) analysis defines 890 functions in the DXE (including four cmd_list handlers that radare2 folds into neighbours but that the validated command table at RVA 0x4b8c0 proves are distinct entry points — ABL overview, key handling, fastboot). Each function is classified by how it is reached from ModuleEntryPoint (RVA 0x1000):

Class	Count	Meaning
A	797	Reachable by a chain of direct bl calls from ModuleEntryPoint.
B	17	Not directly called, but its address is stored as a function pointer in a dispatch table (e.g. cmd_list, protocol/callback tables) that reachable code consults — i.e. reached indirectly at run time.
C	76	No incoming call and address never stored: unreferenced by static analysis (candidate dead code, or reached only via a pointer this static pass did not resolve). Listed for completeness.

Classes A and B are the functions reachable from ModuleEntryPoint; class C is enumerated so the inventory is exhaustive. Indirect edges are recovered by scanning the image for stored 8-byte little-endian pointers equal to a function start (the same pointer-scan that validated cmd_list in ABL overview, key handling, fastboot).

Note

radare2 boundary artifacts (analysis, not binary). Auto-analysis merges some logically distinct functions where control flows between them by conditional branch with a shared tail: the entry function 0x12dc absorbs the key/boot-mode cluster (Physical keys: power, volume, and the boot-mode dispatcher), 0x12448 (BootLinux) absorbs its load/decompress helpers, 0x5398 absorbs the VB2 boot-state switch, and most of FastbootLib collapses into a few large functions. Four cmd_list handlers (0x31e38, 0x3228c, 0x3234c, 0x32a74) are folded into a neighbour by auto-analysis but are separately listed below. These are analyzer artifacts; the binary is unmodified.

2.6.3. Deviations from upstream SMxx50 source

Confirmed structural/content divergences between the binary and the matched QSSI12 source (each anchored to binary evidence):

#	Area	Divergence (binary vs QSSI12 source)	Basis
D1	FastbootLib flash/erase	QSSI12 guards flash/erase with "Flashing is not allowed in Lock State", "No data to flash", "Invalid Lun number passed" and implements fastboot flash avb_custom_key. None of these strings exist in the binary; its flash/erase message set predates them and there is no avb_custom_key feature. Flash/erase capability itself is present.	Absence of all listed strings in the full string table; presence of FLASH / erase / erase-block / InitMultiThreadEnv … thread to flash. See Fastboot handler internals (FastbootLib).
D2	Source availability	No QSSI11 / Android-11-era SMxx50 or SM6350 ABL source tag is published; the QSSI12 tag is the closest available and is assumed to be a newer branch than this binary.	CodeLinaro LA/LE + Codeaurora mirror tag enumeration (this page, Open questions and limits of analysis).
D3	oem select-display-panel	Hypothesised as an Onyx e-ink addition; not a deviation — the handler and all six oem verbs are stock in the QSSI12 source. E-ink specifics live in the display driver / DTB (demura regions), not the ABL fastboot oem layer.	grep of QSSI12 QcomModulePkg finds all six oem names; handler 0x31e38 present.

If future access narrows the source to an Android-11 tag, rows here should be re-evaluated against it.

2.6.4. Complete function inventory

All 890 functions, sorted by RVA. Cls is the reachability class above. Module is from the embedded ASSERT source path where present, else the owning cluster. Name / role is the recovered symbol (curated for boot-logic functions; <file> helper for source-attributed library code; sub_<rva> for unnamed leaf/compiler helpers). Evidence is the primary binary anchor.

#	RVA	Sz	Cls	Module	Name / role	Evidence
0	0x01000	168	A	App/LinuxLoader	entry0 / ModuleEntryPoint (AutoGen CRT stub)	reached by direct call; no string refs (leaf/helper)
1	0x010a8	484	A		sub_0x10a8	reached by direct call; no string refs (leaf/helper)
2	0x0128c	80	A		sub_0x128c	reached by direct call; no string refs (leaf/helper)
3	0x012dc	3700	A	App/LinuxLoader	LinuxLoaderEntry (+ merged key/boot-mode cluster)	str: PON Reason is 0x%x cold_boot[%d] PON1[%d] KPDPWR[%d] CBLPWR[%d] USB[%d
4	0x012e0	20	A		sub_0x12e0	str: ASSERT_EFI_ERROR (Status = %r)
5	0x012f4	16	A	App/LinuxLoader	AutoGen.c helper	src: QcomModulePkg/Application/LinuxLoader/LinuxLoader/DEBUG/AutoGen.c
6	0x01304	20	A		sub_0x1304	str: ASSERT_EFI_ERROR (Status = %r)
7	0x01318	8	A		sub_0x1318	reached by direct call; no string refs (leaf/helper)
8	0x01320	8	A		sub_0x1320	reached by direct call; no string refs (leaf/helper)
9	0x01328	8	A		sub_0x1328	reached by direct call; no string refs (leaf/helper)
10	0x01330	12	A		sub_0x1330	reached by direct call; no string refs (leaf/helper)
11	0x0133c	8	A		sub_0x133c	reached by direct call; no string refs (leaf/helper)
12	0x01344	152	A		sub_0x1344	reached by direct call; no string refs (leaf/helper)
13	0x02150	8	A		sub_0x2150	reached by direct call; no string refs (leaf/helper)
14	0x02158	12	A		sub_0x2158	reached by direct call; no string refs (leaf/helper)
15	0x02164	8	A		sub_0x2164	reached by direct call; no string refs (leaf/helper)
16	0x0216c	8	A		sub_0x216c	reached by direct call; no string refs (leaf/helper)
17	0x02174	8	A		sub_0x2174	reached by direct call; no string refs (leaf/helper)
18	0x0217c	16	A		sub_0x217c	reached by direct call; no string refs (leaf/helper)
19	0x0218c	8	A		sub_0x218c	reached by direct call; no string refs (leaf/helper)
20	0x02194	8	A		sub_0x2194	reached by direct call; no string refs (leaf/helper)
21	0x0219c	8	A		sub_0x219c	reached by direct call; no string refs (leaf/helper)
22	0x021a4	800	A	MdeModulePkg	DebugLib.c helper	src: MdeModulePkg/Library/PeiDxeDebugLibReportStatusCode/DebugLib.c
23	0x024c4	40	A		sub_0x24c4	reached by direct call; no string refs (leaf/helper)
24	0x024ec	300	A		sub_0x24ec	reached by direct call; no string refs (leaf/helper)
25	0x02618	40	A		sub_0x2618	reached by direct call; no string refs (leaf/helper)
26	0x02640	108	A		sub_0x2640	reached by direct call; no string refs (leaf/helper)
27	0x02684	32	A		sub_0x2684	reached by direct call; no string refs (leaf/helper)
28	0x026ac	3884	A	MdePkg	SafeString.c helper	src: MdePkg/Library/BaseLib/SafeString.c
29	0x027ac	140	A	MdePkg	SafeString.c helper	src: MdePkg/Library/BaseLib/SafeString.c
30	0x02838	508	A	MdePkg	SafeString.c helper	src: MdePkg/Library/BaseLib/SafeString.c
31	0x02a34	560	A	MdePkg	SafeString.c helper	src: MdePkg/Library/BaseLib/SafeString.c
32	0x02c64	92	A		sub_0x2c64	reached by direct call; no string refs (leaf/helper)
33	0x02cc0	392	A		sub_0x2cc0	reached by direct call; no string refs (leaf/helper)
34	0x02e48	460	A	MdePkg	SafeString.c helper	src: MdePkg/Library/BaseLib/SafeString.c
35	0x03014	456	A		sub_0x3014	reached by direct call; no string refs (leaf/helper)
36	0x031dc	524	A	MdePkg	SafeString.c helper	src: MdePkg/Library/BaseLib/SafeString.c
37	0x033e8	20	A		sub_0x33e8	reached by direct call; no string refs (leaf/helper)
38	0x033fc	12	A		sub_0x33fc	reached by direct call; no string refs (leaf/helper)
39	0x03408	16	A	MdePkg	SafeString.c helper	src: MdePkg/Library/BaseLib/SafeString.c
40	0x03418	16	A	MdePkg	SafeString.c helper	src: MdePkg/Library/BaseLib/SafeString.c
41	0x03428	16	A	MdePkg	SafeString.c helper	src: MdePkg/Library/BaseLib/SafeString.c
42	0x03438	12	A		sub_0x3438	reached by direct call; no string refs (leaf/helper)
43	0x03444	16	A		sub_0x3444	reached by direct call; no string refs (leaf/helper)
44	0x03454	16	A		sub_0x3454	reached by direct call; no string refs (leaf/helper)
45	0x03464	16	A	MdePkg	SafeString.c helper	src: MdePkg/Library/BaseLib/SafeString.c
46	0x03474	16	A	MdePkg	SafeString.c helper	src: MdePkg/Library/BaseLib/SafeString.c
47	0x03484	16	A	MdePkg	SafeString.c helper	src: MdePkg/Library/BaseLib/SafeString.c
48	0x03494	16	A	MdePkg	SafeString.c helper	src: MdePkg/Library/BaseLib/SafeString.c
49	0x034a4	16	A	MdePkg	SafeString.c helper	src: MdePkg/Library/BaseLib/SafeString.c
50	0x034b4	16	A	MdePkg	SafeString.c helper	src: MdePkg/Library/BaseLib/SafeString.c
51	0x034c4	16	A	MdePkg	SafeString.c helper	src: MdePkg/Library/BaseLib/SafeString.c
52	0x034d4	16	A	MdePkg	SafeString.c helper	src: MdePkg/Library/BaseLib/SafeString.c
53	0x034e4	16	A	MdePkg	SafeString.c helper	src: MdePkg/Library/BaseLib/SafeString.c
54	0x034f4	24	C		sub_0x34f4	no incoming call and address never stored (unreferenced)
55	0x0350c	20	A		sub_0x350c	reached by direct call; no string refs (leaf/helper)
56	0x03520	8	A		sub_0x3520	reached by direct call; no string refs (leaf/helper)
57	0x03528	20	C		sub_0x3528	no incoming call and address never stored (unreferenced)
58	0x0353c	28	A		sub_0x353c	reached by direct call; no string refs (leaf/helper)
59	0x03558	12	A		sub_0x3558	reached by direct call; no string refs (leaf/helper)
60	0x03564	8	A		sub_0x3564	reached by direct call; no string refs (leaf/helper)
61	0x0356c	8	A		sub_0x356c	reached by direct call; no string refs (leaf/helper)
62	0x03574	8	A		sub_0x3574	reached by direct call; no string refs (leaf/helper)
63	0x0357c	8	A		sub_0x357c	reached by direct call; no string refs (leaf/helper)
64	0x03584	12	A		sub_0x3584	reached by direct call; no string refs (leaf/helper)
65	0x03590	8	A		sub_0x3590	reached by direct call; no string refs (leaf/helper)
66	0x03598	8	A		sub_0x3598	reached by direct call; no string refs (leaf/helper)
67	0x035a0	8	A		sub_0x35a0	reached by direct call; no string refs (leaf/helper)
68	0x035a8	8	A		sub_0x35a8	reached by direct call; no string refs (leaf/helper)
69	0x035b0	8	A		sub_0x35b0	reached by direct call; no string refs (leaf/helper)
70	0x035b8	12	A		sub_0x35b8	reached by direct call; no string refs (leaf/helper)
71	0x035c4	12	A		sub_0x35c4	reached by direct call; no string refs (leaf/helper)
72	0x035d8	20	A		sub_0x35d8	reached by direct call; no string refs (leaf/helper)
73	0x035ec	8	A		sub_0x35ec	reached by direct call; no string refs (leaf/helper)
74	0x035f4	12	A		sub_0x35f4	reached by direct call; no string refs (leaf/helper)
75	0x03600	12	A		sub_0x3600	reached by direct call; no string refs (leaf/helper)
76	0x0360c	12	A		sub_0x360c	reached by direct call; no string refs (leaf/helper)
77	0x03618	200	A	MdePkg	String.c helper	src: MdePkg/Library/BaseLib/String.c
78	0x036e0	44	A		sub_0x36e0	reached by direct call; no string refs (leaf/helper)
79	0x0370c	3596	A	MdePkg	String.c helper	src: MdePkg/Library/BaseLib/String.c
80	0x037b8	244	A	MdePkg	String.c helper	src: MdePkg/Library/BaseLib/String.c
81	0x038ac	3144	A	MdePkg	String.c helper	src: MdePkg/Library/BaseLib/String.c
82	0x03984	104	C		sub_0x3984	no incoming call and address never stored (unreferenced)
83	0x039ec	2924	A	MdePkg	String.c helper	src: MdePkg/Library/BaseLib/String.c
84	0x03b48	276	A	MdePkg	String.c helper	src: MdePkg/Library/BaseLib/String.c
85	0x03c5c	160	A	MdePkg	String.c helper	src: MdePkg/Library/BaseLib/String.c
86	0x03cfc	40	A		sub_0x3cfc	reached by direct call; no string refs (leaf/helper)
87	0x03d24	148	A		sub_0x3d24	reached by direct call; no string refs (leaf/helper)
88	0x03db8	2176	C	MdePkg	String.c helper	src: MdePkg/Library/BaseLib/String.c
89	0x03e24	188	A		sub_0x3e24	reached by direct call; no string refs (leaf/helper)
90	0x03ee0	220	A	MdePkg	String.c helper	src: MdePkg/Library/BaseLib/String.c
91	0x03fbc	1364	C	MdePkg	String.c helper	src: MdePkg/Library/BaseLib/String.c
92	0x04040	216	A	MdePkg	String.c helper	src: MdePkg/Library/BaseLib/String.c
93	0x04118	1136	A	MdePkg	String.c helper	src: MdePkg/Library/BaseLib/String.c
94	0x041e8	832	C	MdePkg	String.c helper	src: MdePkg/Library/BaseLib/String.c
95	0x0430c	296	A	MdePkg	String.c helper	src: MdePkg/Library/BaseLib/String.c
96	0x04434	132	A		sub_0x4434	str: detected buffer overflow in %a, line %d
97	0x044b8	20	A		sub_0x44b8	reached by direct call; no string refs (leaf/helper)
98	0x044cc	12	A		sub_0x44cc	reached by direct call; no string refs (leaf/helper)
99	0x044d8	16	A		sub_0x44d8	reached by direct call; no string refs (leaf/helper)
100	0x044f4	16	A		sub_0x44f4	reached by direct call; no string refs (leaf/helper)
101	0x04518	8	A		sub_0x4518	reached by direct call; no string refs (leaf/helper)
102	0x04528	16	A	MdePkg	String.c helper	src: MdePkg/Library/BaseLib/String.c
103	0x04538	12	A		sub_0x4538	reached by direct call; no string refs (leaf/helper)
104	0x04558	8	A		sub_0x4558	reached by direct call; no string refs (leaf/helper)
105	0x04560	16	A	MdePkg	String.c helper	src: MdePkg/Library/BaseLib/String.c
106	0x04570	16	A	MdePkg	String.c helper	src: MdePkg/Library/BaseLib/String.c
107	0x04588	16	A		sub_0x4588	reached by direct call; no string refs (leaf/helper)
108	0x04598	32	C		sub_0x4598	no incoming call and address never stored (unreferenced)
109	0x045b8	8	A		sub_0x45b8	reached by direct call; no string refs (leaf/helper)
110	0x045c0	32	C		sub_0x45c0	no incoming call and address never stored (unreferenced)
111	0x045e0	20	A		sub_0x45e0	reached by direct call; no string refs (leaf/helper)
112	0x045f4	16	A		sub_0x45f4	reached by direct call; no string refs (leaf/helper)
113	0x04604	8	A		sub_0x4604	reached by direct call; no string refs (leaf/helper)
114	0x0460c	8	A		sub_0x460c	reached by direct call; no string refs (leaf/helper)
115	0x04614	8	A		sub_0x4614	reached by direct call; no string refs (leaf/helper)
116	0x0461c	8	A		sub_0x461c	reached by direct call; no string refs (leaf/helper)
117	0x04624	12	C		sub_0x4624	no incoming call and address never stored (unreferenced)
118	0x04638	24	A		sub_0x4638	reached by direct call; no string refs (leaf/helper)
119	0x04650	16	A		sub_0x4650	reached by direct call; no string refs (leaf/helper)
120	0x04660	16	A	MdePkg	String.c helper	src: MdePkg/Library/BaseLib/String.c
121	0x04670	16	A	MdePkg	String.c helper	src: MdePkg/Library/BaseLib/String.c
122	0x04680	12	C		sub_0x4680	no incoming call and address never stored (unreferenced)
123	0x0468c	12	A		sub_0x468c	reached by direct call; no string refs (leaf/helper)
124	0x04698	12	A		sub_0x4698	reached by direct call; no string refs (leaf/helper)
125	0x046a4	12	C		sub_0x46a4	no incoming call and address never stored (unreferenced)
126	0x046b0	8	A		sub_0x46b0	reached by direct call; no string refs (leaf/helper)
127	0x046b8	8	A		sub_0x46b8	reached by direct call; no string refs (leaf/helper)
128	0x046c0	12	C		sub_0x46c0	no incoming call and address never stored (unreferenced)
129	0x046cc	8	A		sub_0x46cc	reached by direct call; no string refs (leaf/helper)
130	0x046d4	8	A		sub_0x46d4	reached by direct call; no string refs (leaf/helper)
131	0x046dc	12	A		sub_0x46dc	reached by direct call; no string refs (leaf/helper)
132	0x046e8	20	A		sub_0x46e8	reached by direct call; no string refs (leaf/helper)
133	0x046fc	8	A		sub_0x46fc	reached by direct call; no string refs (leaf/helper)
134	0x04704	748	A	MdePkg	LShiftU64.c helper	src: MdePkg/Library/BaseLib/LShiftU64.c
135	0x04780	124	A	MdePkg	LShiftU64.c helper	src: MdePkg/Library/BaseLib/LShiftU64.c
136	0x047fc	152	A	MdePkg	DivU64x32.c helper	src: MdePkg/Library/BaseLib/DivU64x32.c
137	0x049c8	32	A		sub_0x49c8	reached by direct call; no string refs (leaf/helper)
138	0x049f0	20	A		sub_0x49f0	reached by direct call; no string refs (leaf/helper)
139	0x04a04	152	A		sub_0x4a04	reached by direct call; no string refs (leaf/helper)
140	0x04a9c	232	A	MdePkg	UefiBootServicesTableLib.c helper	src: MdePkg/Library/UefiBootServicesTableLib/UefiBootServicesTableLib.
141	0x04b84	116	A	MdePkg	UefiRuntimeServicesTableLib.c helper	src: MdePkg/Library/UefiRuntimeServicesTableLib/UefiRuntimeServicesTab
142	0x04bf8	380	A	MdePkg	UefiLib.c helper	src: MdePkg/Library/UefiLib/UefiLib.c
143	0x04c18	324	A	MdePkg	UefiLib.c helper	src: MdePkg/Library/UefiLib/UefiLib.c
144	0x04d18	12	A		sub_0x4d18	reached by direct call; no string refs (leaf/helper)
145	0x04d24	32	A		sub_0x4d24	reached by direct call; no string refs (leaf/helper)
146	0x04d44	16	A		sub_0x4d44	reached by direct call; no string refs (leaf/helper)
147	0x04d5c	16	A		sub_0x4d5c	reached by direct call; no string refs (leaf/helper)
148	0x04d74	644	A	MdePkg	HobLib.c helper	src: MdePkg/Library/DxeHobLib/HobLib.c
149	0x04ea0	356	C	MdePkg	HobLib.c helper	src: MdePkg/Library/DxeHobLib/HobLib.c
150	0x04f8c	52	A		sub_0x4f8c	reached by direct call; no string refs (leaf/helper)
151	0x04fc0	20	A		sub_0x4fc0	reached by direct call; no string refs (leaf/helper)
152	0x04fd4	16	A		sub_0x4fd4	reached by direct call; no string refs (leaf/helper)
153	0x04fe4	12	A		sub_0x4fe4	reached by direct call; no string refs (leaf/helper)
154	0x05004	124	B		sub_0x5004	address-taken (stored fn-pointer / dispatch table)
155	0x05080	544	A		sub_0x5080	str: EFIDebug
156	0x050f0	296	A		sub_0x50f0	str: EFIDebug
157	0x05218	84	A		sub_0x5218	str: ZbC$Q$
158	0x0526c	20	A		sub_0x526c	reached by direct call; no string refs (leaf/helper)
159	0x05280	12	A		sub_0x5280	reached by direct call; no string refs (leaf/helper)
160	0x0528c	12	A		sub_0x528c	reached by direct call; no string refs (leaf/helper)
161	0x052a0	12	A		sub_0x52a0	reached by direct call; no string refs (leaf/helper)
162	0x052ac	220	A	MdePkg	DxeServicesTableLib.c helper	src: MdePkg/Library/DxeServicesTableLib/DxeServicesTableLib.c
163	0x05388	8	A		sub_0x5388	reached by direct call; no string refs (leaf/helper)
164	0x05390	8	A		sub_0x5390	reached by direct call; no string refs (leaf/helper)
165	0x05398	6808	A	Library/avb	LoadImageAndAuthVB2 (+ boot-state dispatch/menu)	str: Your device is corrupt. It can’t be trusted and will not boot. Your de
166	0x06e30	144	A		sub_0x6e30	str: FreeVerifiedBootResource
167	0x06ec0	356	A		sub_0x6ec0	str: GetCertFingerPrint: Invalid parameters
168	0x07024	160	A		sub_0x7024	str: Err: line:%d %a() status: %r
169	0x070c4	48	A		sub_0x70c4	reached by direct call; no string refs (leaf/helper)
170	0x070f4	8	A		sub_0x70f4	reached by direct call; no string refs (leaf/helper)
171	0x070fc	16	A		sub_0x70fc	str: AsciiStrLen
172	0x0710c	16	A		sub_0x710c	str: AsciiStrnCpyS
173	0x0711c	8	A		sub_0x711c	reached by direct call; no string refs (leaf/helper)
174	0x07124	8	A		sub_0x7124	reached by direct call; no string refs (leaf/helper)
175	0x0712c	8	A		sub_0x712c	reached by direct call; no string refs (leaf/helper)
176	0x07134	12	A		sub_0x7134	reached by direct call; no string refs (leaf/helper)
177	0x07140	16	A		sub_0x7140	str: AsciiStrnCatS
178	0x07150	8	A		sub_0x7150	reached by direct call; no string refs (leaf/helper)
179	0x07158	20	A		sub_0x7158	str: State: Unlocked, AvbSlotVerify returned %a, continue boot
180	0x0716c	12	A		sub_0x716c	reached by direct call; no string refs (leaf/helper)
181	0x07178	16	A	Library/BootLib	boot dispatch: Booting Into Recovery Mode	str: Booting Into Recovery Mode
182	0x07188	8	A		sub_0x7188	reached by direct call; no string refs (leaf/helper)
183	0x07190	8	A		sub_0x7190	reached by direct call; no string refs (leaf/helper)
184	0x07198	16	A		sub_0x7198	reached by direct call; no string refs (leaf/helper)
185	0x071a8	16	A		sub_0x71a8	str: vendor_boot
186	0x071b8	16	A	Library/BootLib	boot dispatch: Booting Into Mission Mode	str: Booting Into Mission Mode
187	0x071c8	16	A		sub_0x71c8	str: AsciiStrLen
188	0x071d8	8	A		sub_0x71d8	reached by direct call; no string refs (leaf/helper)
189	0x071e0	20	A		sub_0x71e0	reached by direct call; no string refs (leaf/helper)
190	0x071f4	20	A		sub_0x71f4	reached by direct call; no string refs (leaf/helper)
191	0x07208	8	A		sub_0x7208	reached by direct call; no string refs (leaf/helper)
192	0x07210	12	A		sub_0x7210	reached by direct call; no string refs (leaf/helper)
193	0x0721c	8	A		sub_0x721c	reached by direct call; no string refs (leaf/helper)
194	0x07224	492	A		sub_0x7224	str: KeyMasterStartApp: Get Version err, status: %d, response status: %d, M
195	0x07410	992	A		sub_0x7410	str: KeyMasterSendRotAndBootState: Set BootState err, Status: %r, response
196	0x077f0	420	A		sub_0x77f0	str: Set Vbh Error, Status: %r, response status: %d
197	0x07994	336	A		sub_0x7994	str: Keymaster: Get date support error, status: %d, response status: %d
198	0x07ae4	8	A		sub_0x7ae4	reached by direct call; no string refs (leaf/helper)
199	0x07aec	12	A		sub_0x7aec	reached by direct call; no string refs (leaf/helper)
200	0x07af8	28	A		sub_0x7af8	reached by direct call; no string refs (leaf/helper)
201	0x07b14	12	A		sub_0x7b14	reached by direct call; no string refs (leaf/helper)
202	0x07b20	8	A		sub_0x7b20	reached by direct call; no string refs (leaf/helper)
203	0x07b28	16	A		sub_0x7b28	reached by direct call; no string refs (leaf/helper)
204	0x07b38	16	A		sub_0x7b38	reached by direct call; no string refs (leaf/helper)
205	0x07b48	12	A		sub_0x7b48	reached by direct call; no string refs (leaf/helper)
206	0x07b54	16	A		sub_0x7b54	reached by direct call; no string refs (leaf/helper)
207	0x07b64	8	A		sub_0x7b64	reached by direct call; no string refs (leaf/helper)
208	0x07b6c	8	A		sub_0x7b6c	reached by direct call; no string refs (leaf/helper)
209	0x07b74	12	A		sub_0x7b74	reached by direct call; no string refs (leaf/helper)
210	0x07b80	12	A		sub_0x7b80	reached by direct call; no string refs (leaf/helper)
211	0x07b8c	256	A		sub_0x7b8c	str: Err: line:%d %a() status: %r
212	0x07c8c	156	A		sub_0x7c8c	str: avb_sha256_update failed, Ctx->user_data is NULL
213	0x07d28	264	A		sub_0x7d28	str: avb_sha256_final failed, Ctx->user_data is NULL
214	0x07e30	8	A		sub_0x7e30	reached by direct call; no string refs (leaf/helper)
215	0x07e38	8	A		sub_0x7e38	reached by direct call; no string refs (leaf/helper)
216	0x07e40	816	A		sub_0x7e40	str: Invalid tag for property descriptor.
217	0x08170	592	A		sub_0x8170	str: No terminating NUL byte in key.
218	0x083c0	12	A	Library/avb/libavb	avb_property_descriptor helper	src: QcomModulePkg/Library/avb/libavb/avb_property_descriptor.c
219	0x083cc	12	A		sub_0x83cc	reached by direct call; no string refs (leaf/helper)
220	0x083d8	40	A		sub_0x83d8	reached by direct call; no string refs (leaf/helper)
221	0x08400	32	A		sub_0x8400	reached by direct call; no string refs (leaf/helper)
222	0x08420	24	A		sub_0x8420	reached by direct call; no string refs (leaf/helper)
223	0x08438	12	A		sub_0x8438	reached by direct call; no string refs (leaf/helper)
224	0x08444	16	A		sub_0x8444	reached by direct call; no string refs (leaf/helper)
225	0x08454	16	A		sub_0x8454	reached by direct call; no string refs (leaf/helper)
226	0x08464	20	A		sub_0x8464	reached by direct call; no string refs (leaf/helper)
227	0x08478	9468	A	Library/avb/libavb	avb_slot_verify	str: AVB_SLOT_VERIFY_FLAGS_NO_VBMETA_PARTITION was passed but the validate
228	0x0a974	220	A		sub_0xa974	reached by direct call; no string refs (leaf/helper)
229	0x0aa50	88	A		sub_0xaa50	str: Unknown AvbSlotVerifyResult value.
230	0x0aaa8	236	A		sub_0xaaa8	reached by direct call; no string refs (leaf/helper)
231	0x0ac18	164	A		sub_0xac18	str: androidboot.vbmeta.digest
232	0x0acbc	184	A		sub_0xacbc	reached by direct call; no string refs (leaf/helper)
233	0x0ad74	12	A	Library/avb/libavb	avb_slot_verify (per-partition helper)	src: QcomModulePkg/Library/avb/libavb/avb_slot_verify.c
234	0x0ad80	12	A		sub_0xad80	reached by direct call; no string refs (leaf/helper)
235	0x0ad8c	12	A		sub_0xad8c	reached by direct call; no string refs (leaf/helper)
236	0x0ad98	8	A		sub_0xad98	reached by direct call; no string refs (leaf/helper)
237	0x0ada0	8	A		sub_0xada0	reached by direct call; no string refs (leaf/helper)
238	0x0ada8	16	A		sub_0xada8	reached by direct call; no string refs (leaf/helper)
239	0x0adb8	44	A		sub_0xadb8	reached by direct call; no string refs (leaf/helper)
240	0x0ade4	32	A		sub_0xade4	reached by direct call; no string refs (leaf/helper)
241	0x0ae04	40	A		sub_0xae04	reached by direct call; no string refs (leaf/helper)
242	0x0ae2c	12	A		sub_0xae2c	reached by direct call; no string refs (leaf/helper)
243	0x0ae38	32	A		sub_0xae38	reached by direct call; no string refs (leaf/helper)
244	0x0ae58	20	A		sub_0xae58	str: vendor_boot
245	0x0ae6c	12	A		sub_0xae6c	reached by direct call; no string refs (leaf/helper)
246	0x0ae78	28	A		sub_0xae78	reached by direct call; no string refs (leaf/helper)
247	0x0ae94	24	A		sub_0xae94	reached by direct call; no string refs (leaf/helper)
248	0x0aeac	16	A		sub_0xaeac	reached by direct call; no string refs (leaf/helper)
249	0x0aebc	24	A		sub_0xaebc	reached by direct call; no string refs (leaf/helper)
250	0x0aed4	12	A		sub_0xaed4	reached by direct call; no string refs (leaf/helper)
251	0x0aee0	20	A		sub_0xaee0	reached by direct call; no string refs (leaf/helper)
252	0x0aef4	8	A		sub_0xaef4	reached by direct call; no string refs (leaf/helper)
253	0x0aefc	8	A		sub_0xaefc	reached by direct call; no string refs (leaf/helper)
254	0x0af04	892	A		sub_0xaf04	str: Overflow when adding values.
255	0x0af10	20	A		sub_0xaf10	reached by direct call; no string refs (leaf/helper)
256	0x0af24	20	A		sub_0xaf24	reached by direct call; no string refs (leaf/helper)
257	0x0af38	16	A		sub_0xaf38	reached by direct call; no string refs (leaf/helper)
258	0x0af48	4	A		sub_0xaf48	reached by direct call; no string refs (leaf/helper)
259	0x0af4c	16	A		sub_0xaf4c	reached by direct call; no string refs (leaf/helper)
260	0x0af5c	16	A		sub_0xaf5c	reached by direct call; no string refs (leaf/helper)
261	0x0af6c	16	A		sub_0xaf6c	reached by direct call; no string refs (leaf/helper)
262	0x0af7c	4	A		sub_0xaf7c	reached by direct call; no string refs (leaf/helper)
263	0x0af80	56	A		sub_0xaf80	str: avb_abort!
264	0x0afb8	76	A		sub_0xafb8	reached by direct call; no string refs (leaf/helper)
265	0x0b004	252	A		sub_0xb004	reached by direct call; no string refs (leaf/helper)
266	0x0b100	4	A		sub_0xb100	reached by direct call; no string refs (leaf/helper)
267	0x0b104	4	A		sub_0xb104	reached by direct call; no string refs (leaf/helper)
268	0x0b108	8	A		sub_0xb108	reached by direct call; no string refs (leaf/helper)
269	0x0b110	8	A		sub_0xb110	reached by direct call; no string refs (leaf/helper)
270	0x0b118	56	A		sub_0xb118	reached by direct call; no string refs (leaf/helper)
271	0x0b150	144	A		sub_0xb150	str: Overflow when adding values.
272	0x0b1e0	64	A		sub_0xb1e0	reached by direct call; no string refs (leaf/helper)
273	0x0b220	104	A		sub_0xb220	reached by direct call; no string refs (leaf/helper)
274	0x0b288	136	A		sub_0xb288	reached by direct call; no string refs (leaf/helper)
275	0x0b310	268	A		sub_0xb310	str: Overflow when adding string sizes.
276	0x0b41c	68	A		sub_0xb41c	str: Failed to allocate memory.
277	0x0b460	56	A		sub_0xb460	reached by direct call; no string refs (leaf/helper)
278	0x0b498	72	A		sub_0xb498	reached by direct call; no string refs (leaf/helper)
279	0x0b4e0	88	A		sub_0xb4e0	reached by direct call; no string refs (leaf/helper)
280	0x0b538	84	A		sub_0xb538	reached by direct call; no string refs (leaf/helper)
281	0x0b58c	344	A		sub_0xb58c	reached by direct call; no string refs (leaf/helper)
282	0x0b6e4	280	A		sub_0xb6e4	str: ReadSecurityState: ScmSysCall failed: Status = (0x%x)r
283	0x0b7fc	220	A		sub_0xb7fc	str: Invalid parameter is_secure
284	0x0b8d8	200	A		sub_0xb8d8	str: LocateProtocol failed for SetFuse!
285	0x0b9a0	244	A		sub_0xb9a0	str: TZ didn’t support this feature! Version: major = %d, minor = %d, patch
286	0x0ba94	344	A		sub_0xba94	str: TZ_INFO_GET_FEATURE_VERSION_ID failed, Status = (0x%x)r
287	0x0bbec	88	A		sub_0xbbec	str: Not updating rollbackindex as current slot is unbootable
288	0x0bc44	484	A		sub_0xbc44	str: TZ_UPDATE_ROLLBACK_VERSION_ID failed, Status = (0x%x)r
289	0x0be28	8	A		sub_0xbe28	reached by direct call; no string refs (leaf/helper)
290	0x0be30	12	A	Library/avb/libavb	avb_util (byteswap/safe-add)	src: QcomModulePkg/Library/avb/libavb/avb_util.c
291	0x0be3c	12	A		sub_0xbe3c	reached by direct call; no string refs (leaf/helper)
292	0x0be48	24	A		sub_0xbe48	reached by direct call; no string refs (leaf/helper)
293	0x0be60	16	A		sub_0xbe60	reached by direct call; no string refs (leaf/helper)
294	0x0be70	16	A		sub_0xbe70	reached by direct call; no string refs (leaf/helper)
295	0x0be80	40	A		sub_0xbe80	str: battery-soc-ok
296	0x0bea8	24	A		sub_0xbea8	reached by direct call; no string refs (leaf/helper)
297	0x0bec0	16	A		sub_0xbec0	reached by direct call; no string refs (leaf/helper)
298	0x0bed0	12	A		sub_0xbed0	reached by direct call; no string refs (leaf/helper)
299	0x0bedc	20	A		sub_0xbedc	reached by direct call; no string refs (leaf/helper)
300	0x0bef0	28	A		sub_0xbef0	reached by direct call; no string refs (leaf/helper)
301	0x0bf0c	8	A		sub_0xbf0c	reached by direct call; no string refs (leaf/helper)
302	0x0bf14	24	A		sub_0xbf14	reached by direct call; no string refs (leaf/helper)
303	0x0bf2c	8	A		sub_0xbf2c	reached by direct call; no string refs (leaf/helper)
304	0x0bf34	12	A		sub_0xbf34	reached by direct call; no string refs (leaf/helper)
305	0x0bf40	20	A		sub_0xbf40	reached by direct call; no string refs (leaf/helper)
306	0x0bf54	2972	A		sub_0xbf54	str: Mismatch between image version and libavb version.
307	0x0caf0	888	A		sub_0xcaf0	reached by direct call; no string refs (leaf/helper)
308	0x0ce68	88	A		sub_0xce68	str: Unknown AvbVBMetaVerifyResult value.
309	0x0cec0	140	A		sub_0xcec0	reached by direct call; no string refs (leaf/helper)
310	0x0cf4c	60	A		sub_0xcf4c	reached by direct call; no string refs (leaf/helper)
311	0x0cf88	12	A	Library/avb/libavb	avb_vbmeta_image_verify	src: QcomModulePkg/Library/avb/libavb/avb_vbmeta_image.c
312	0x0cf94	76	A		sub_0xcf94	reached by direct call; no string refs (leaf/helper)
313	0x0cfe0	76	A		sub_0xcfe0	reached by direct call; no string refs (leaf/helper)
314	0x0d02c	12	A		sub_0xd02c	reached by direct call; no string refs (leaf/helper)
315	0x0d038	12	A		sub_0xd038	reached by direct call; no string refs (leaf/helper)
316	0x0d044	40	A		sub_0xd044	reached by direct call; no string refs (leaf/helper)
317	0x0d06c	12	A		sub_0xd06c	reached by direct call; no string refs (leaf/helper)
318	0x0d078	16	A		sub_0xd078	reached by direct call; no string refs (leaf/helper)
319	0x0d088	32	A		sub_0xd088	reached by direct call; no string refs (leaf/helper)
320	0x0d0a8	12	A		sub_0xd0a8	reached by direct call; no string refs (leaf/helper)
321	0x0d0b4	28	A		sub_0xd0b4	reached by direct call; no string refs (leaf/helper)
322	0x0d0d0	1580	C		sub_0xd0d0	str: LastBlock 0x%llx, ReadOffset 0x%llx, read_size 0x%x outside range.
323	0x0d6fc	392	C		sub_0xd6fc	str: GetHandleInfo: Partition %a, name too large
324	0x0d884	500	C		sub_0xd884	str: ValidateVbmetaPublicKey PublicKeyLength %d, PublicKeyMetadataLength %d
325	0x0da78	688	C		sub_0xda78	str: ValidatePartitionPublicKey PublicKeyLength %d, PublicKeyMetadataLength
326	0x0dd28	224	C		sub_0xdd28	str: WriteRollbackIndex Location %d, RollbackIndex %d
327	0x0de08	72	C		sub_0xde08	no incoming call and address never stored (unreferenced)
328	0x0de50	1148	C		sub_0xde50	str: AvbGetUniqueGuidForPartition: Partition %a, name too large
329	0x0e2cc	184	A		sub_0xe2cc	str: Error allocating memory for AvbOps.
330	0x0e384	12	A		sub_0xe384	reached by direct call; no string refs (leaf/helper)
331	0x0e390	8	A		sub_0xe390	reached by direct call; no string refs (leaf/helper)
332	0x0e398	12	C		sub_0xe398	no incoming call and address never stored (unreferenced)
333	0x0e3a4	8	C		sub_0xe3a4	no incoming call and address never stored (unreferenced)
334	0x0e3ac	12	C		sub_0xe3ac	no incoming call and address never stored (unreferenced)
335	0x0e3b8	16	C		sub_0xe3b8	str: AvbGetSizeOfPartition: GetHandleInfo failed
336	0x0e3c8	12	C		sub_0xe3c8	no incoming call and address never stored (unreferenced)
337	0x0e3d4	16	C		sub_0xe3d4	str: GetCertFingerPrint: Invalid parameters
338	0x0e3e4	16	C		sub_0xe3e4	str: ReadBlocks failed %d
339	0x0e3f4	16	C		sub_0xe3f4	str: bad input paramaters
340	0x0e404	16	C		sub_0xe404	no incoming call and address never stored (unreferenced)
341	0x0e414	8	C		sub_0xe414	no incoming call and address never stored (unreferenced)
342	0x0e41c	20	C		sub_0xe41c	no incoming call and address never stored (unreferenced)
343	0x0e430	12	C		sub_0xe430	no incoming call and address never stored (unreferenced)
344	0x0e43c	8	C		sub_0xe43c	no incoming call and address never stored (unreferenced)
345	0x0e444	20	C		sub_0xe444	no incoming call and address never stored (unreferenced)
346	0x0e458	8	C		sub_0xe458	no incoming call and address never stored (unreferenced)
347	0x0e460	20	C		sub_0xe460	no incoming call and address never stored (unreferenced)
348	0x0e474	12	C		sub_0xe474	no incoming call and address never stored (unreferenced)
349	0x0e480	12	C		sub_0xe480	no incoming call and address never stored (unreferenced)
350	0x0e48c	796	A	Library/avb/libavb	avb_chain_partition_descriptor validate/byteswap	str: ~/data/jenkins-agent/workspace/sm6350-15-REL/vendor/bootable/bootloade
351	0x0e7a8	12	A		sub_0xe7a8	reached by direct call; no string refs (leaf/helper)
352	0x0e7b4	12	A		sub_0xe7b4	reached by direct call; no string refs (leaf/helper)
353	0x0e7c0	28	A		sub_0xe7c0	reached by direct call; no string refs (leaf/helper)
354	0x0e7dc	172	A		sub_0xe7dc	reached by direct call; no string refs (leaf/helper)
355	0x0e888	348	A		sub_0xe888	str: Descriptor size is not divisible by 8.
356	0x0e9e4	812	A	Library/avb/libavb	avb_descriptor foreach/validate	str: @/data/jenkins-agent/workspace/sm6350-15-REL/vendor/bootable/bootloade
357	0x0ed10	272	A		sub_0xed10	str: assert fail: data.descriptor_number == num_descriptors
358	0x0ee3c	12	A	Library/avb/libavb	avb_descriptor helper	str: @/data/jenkins-agent/workspace/sm6350-15-REL/vendor/bootable/bootloade
359	0x0ee48	36	A		sub_0xee48	reached by direct call; no string refs (leaf/helper)
360	0x0ee6c	12	A		sub_0xee6c	reached by direct call; no string refs (leaf/helper)
361	0x0ee78	12	A		sub_0xee78	reached by direct call; no string refs (leaf/helper)
362	0x0ee84	20	A		sub_0xee84	reached by direct call; no string refs (leaf/helper)
363	0x0ee98	580	A		sub_0xee98	str: No support for footer version.
364	0x0f0dc	60	A		sub_0xf0dc	reached by direct call; no string refs (leaf/helper)
365	0x0f118	40	A		sub_0xf118	reached by direct call; no string refs (leaf/helper)
366	0x0f140	12	A	Library/avb/libavb	avb_footer validate/byteswap	src: QcomModulePkg/Library/avb/libavb/avb_footer.c
367	0x0f14c	12	A		sub_0xf14c	reached by direct call; no string refs (leaf/helper)
368	0x0f158	900	A		sub_0xf158	str: Descriptor payload size overflow.
369	0x0f4dc	12	A	Library/avb/libavb	avb_hash_descriptor validate/byteswap	src: QcomModulePkg/Library/avb/libavb/avb_hash_descriptor.c
370	0x0f4e8	12	A		sub_0xf4e8	reached by direct call; no string refs (leaf/helper)
371	0x0f4f4	608	A	Library/avb/libavb	avb_kernel_cmdline_descriptor validate/byteswap	str: Invalid tag for kernel cmdline descriptor.
372	0x0f754	428	A		sub_0xf754	str: Key does not match expected length.
373	0x0f900	912	A		sub_0xf900	str: Padding length does not match hash and signature lengths.
374	0x0fc90	252	A		sub_0xfc90	reached by direct call; no string refs (leaf/helper)
375	0x0fd8c	60	A		sub_0xfd8c	reached by direct call; no string refs (leaf/helper)
376	0x0fdc8	12	A	Library/avb/libavb	avb_rsa (RSA signature verify)	src: QcomModulePkg/Library/avb/libavb/avb_rsa.c
377	0x0fdd4	12	A		sub_0xfdd4	reached by direct call; no string refs (leaf/helper)
378	0x0fde0	12	A		sub_0xfde0	reached by direct call; no string refs (leaf/helper)
379	0x0fdec	8	A		sub_0xfdec	reached by direct call; no string refs (leaf/helper)
380	0x0fdf4	44	A		sub_0xfdf4	reached by direct call; no string refs (leaf/helper)
381	0x0fe20	192	A		sub_0xfe20	reached by direct call; no string refs (leaf/helper)
382	0x0fee0	592	A		sub_0xfee0	reached by direct call; no string refs (leaf/helper)
383	0x10130	236	A		sub_0x10130	reached by direct call; no string refs (leaf/helper)
384	0x1021c	204	A		sub_0x1021c	str: Error getting PRNG random number, using default canary: %r
385	0x102e8	68	A		sub_0x102e8	str: Error: Stack Smashing Detected. Halting…
386	0x1032c	8	A		sub_0x1032c	reached by direct call; no string refs (leaf/helper)
387	0x10334	240	A	ArmPkg	ArmArchTimerLib.c helper	src: ArmPkg/Library/ArmArchTimerLib/ArmArchTimerLib.c
388	0x10424	120	A		sub_0x10424	reached by direct call; no string refs (leaf/helper)
389	0x1049c	56	A		sub_0x1049c	reached by direct call; no string refs (leaf/helper)
390	0x104d4	56	A		sub_0x104d4	reached by direct call; no string refs (leaf/helper)
391	0x1050c	20	A		sub_0x1050c	reached by direct call; no string refs (leaf/helper)
392	0x10520	16	A		sub_0x10520	reached by direct call; no string refs (leaf/helper)
393	0x10530	416	A		sub_0x10530	str: Failed to allocate pages for memory map
394	0x106d0	52	A		sub_0x106d0	reached by direct call; no string refs (leaf/helper)
395	0x10708	280	A		sub_0x10708	str: RESET_PARAM
396	0x10820	92	A	Library/BootLib	ShutdownServices.c helper	src: QcomModulePkg/Library/BootLib/ShutdownServices.c
397	0x10880	616	A		sub_0x10880	str: Locate EFI_RAMPARTITION_Protocol failed, Status = (0x%x)r
398	0x10ae8	328	A		sub_0x10ae8	str: Locate EFI_RAMPARTITION_Protocol failed, Status = %r
399	0x10c30	424	A		sub_0x10c30	str: Error returned from ReadRamPartitions %r
400	0x10dd8	784	A		sub_0x10dd8	str: Get BlkIohandles failed
401	0x110e8	60	A		sub_0x110e8	str: Device unlocked: %a
402	0x11128	152	A		sub_0x11128	reached by direct call; no string refs (leaf/helper)
403	0x111c0	320	A		sub_0x111c0	str: Get BlkIohandles failed
404	0x11300	256	A	Library/BootLib	Board.c helper	src: QcomModulePkg/Library/BootLib/Board.c
405	0x11400	280	A		sub_0x11400	str: Error locating pmic protocol: %r
406	0x11518	552	A	Library/BootLib	Board.c helper	src: QcomModulePkg/Library/BootLib/Board.c
407	0x11740	1344	A	Library/BootLib	BoardInit / GetPlatformInfo (dynamic protocol query)	str: Error: Failed to locate PlatformInfo protocol.
408	0x11c80	416	A		sub_0x11c80	str: Locate EFI_SOFTSKU_Protocol failed, Status = (0x%x)r
409	0x11e20	496	A		sub_0x11e20	str: This API not supported in Revision =%u
410	0x12010	432	A		sub_0x12010	str: Error calculating Crc of the unicode serial number: %x
411	0x121c0	16	A		sub_0x121c0	str: qcom,cam-jpeg
412	0x121d0	16	A		sub_0x121d0	reached by direct call; no string refs (leaf/helper)
413	0x121e0	16	A		sub_0x121e0	str: serialno
414	0x121f0	16	A		sub_0x121f0	reached by direct call; no string refs (leaf/helper)
415	0x12200	12	A		sub_0x12200	reached by direct call; no string refs (leaf/helper)
416	0x12210	16	A		sub_0x12210	reached by direct call; no string refs (leaf/helper)
417	0x12220	36	A		sub_0x12220	reached by direct call; no string refs (leaf/helper)
418	0x12248	320	A	Library/BootLib	GetChipInfo / ChipIdString helper	str: Locate Protocol failed for gEfiChipInfoProtocolGuid
419	0x12388	16	A		sub_0x12388	reached by direct call; no string refs (leaf/helper)
420	0x12398	16	A		sub_0x12398	reached by direct call; no string refs (leaf/helper)
421	0x123a8	160	A		sub_0x123a8	str: Invalid Type to GetLoadAddr():%d
422	0x12448	6584	A	Library/BootLib	BootLinux (+ merged load/decompress helpers)	str: HypInfo: Not overlaying hyp dtboDtbo :%d is null or Bad DT header
423	0x13e00	232	A		sub_0x13e00	str: GetImage: invalid parameters
424	0x13ee8	8	A		sub_0x13ee8	reached by direct call; no string refs (leaf/helper)
425	0x13ef0	8	A		sub_0x13ef0	reached by direct call; no string refs (leaf/helper)
426	0x13ef8	2520	A		sub_0x13ef8	str: Invalid vendor-img pagesize. MAX: %u. PageSize: %u and VendorImageHdrS
427	0x148d0	27904	A	Library/BootLib	UpdateDeviceTree	str: Device tree’s msm_id doesn’t match the board: <0x%x 0x%x 0x%x 0x%x> !=
428	0x14970	8	A		sub_0x14970	reached by direct call; no string refs (leaf/helper)
429	0x14978	8	A		sub_0x14978	reached by direct call; no string refs (leaf/helper)
430	0x14980	8	A		sub_0x14980	reached by direct call; no string refs (leaf/helper)
431	0x14988	12	A		sub_0x14988	reached by direct call; no string refs (leaf/helper)
432	0x14998	8	A		sub_0x14998	reached by direct call; no string refs (leaf/helper)
433	0x149a0	8	A		sub_0x149a0	reached by direct call; no string refs (leaf/helper)
434	0x149a8	8	A		sub_0x149a8	reached by direct call; no string refs (leaf/helper)
435	0x149b0	8	A		sub_0x149b0	reached by direct call; no string refs (leaf/helper)
436	0x149b8	668	A		sub_0x149b8	str: Error in decompression: Something went wrong while decompression
437	0x14c68	60	A		sub_0x14c68	reached by direct call; no string refs (leaf/helper)
438	0x14ca8	296	A		sub_0x14ca8	str: Unable to get PcbVersion, Status=%r. set PcbVersion [%d] default.
439	0x14dd0	12	A		sub_0x14dd0	reached by direct call; no string refs (leaf/helper)
440	0x14de0	12	A		sub_0x14de0	reached by direct call; no string refs (leaf/helper)
441	0x14df0	20	A		sub_0x14df0	reached by direct call; no string refs (leaf/helper)
442	0x14e08	5704	A		sub_0x14e08	str: Device tree’s msm_id doesn’t match the board: <0x%x 0x%x 0x%x 0x%x> !=
443	0x16450	672	A		sub_0x16450	str: Error while DTB parsing RTIC prop continue with next DTB
444	0x166f0	3832	A	Library/BootLib	DTB PMIC/board best-match selection	str: BestPmicInfo.DtMatchVal : 0x%llx CurPmicInfo[%u]->DtMatchVal : 0x%llx
445	0x175e8	656	A		sub_0x175e8	str: Integer overflow detected with Dtbo address
446	0x17878	1008	A		sub_0x17878	str: Delete don’t fit DTB entry %u/%08x/0x%08x/%x/%x/%x/%x/%x/%x/%x
447	0x17c68	1400	A		sub_0x17c68	str: Delete don’t fit DTB entry %u/%08x/0x%08x/%x/%x/%x/%x/%x/%x/%x
448	0x181e0	172	A		sub_0x181e0	str: DTs list: NULL
449	0x18290	52	A		sub_0x18290	reached by direct call; no string refs (leaf/helper)
450	0x182c8	288	A		sub_0x182c8	reached by direct call; no string refs (leaf/helper)
451	0x183e8	608	A		sub_0x183e8	str: Failed to add the memory information addr: %d
452	0x18648	608	A		sub_0x18648	str: Failed to add the memory information addr: %d
453	0x188a8	6168	A		sub_0x188a8	str: ERROR: splash mem reservation node size. Expected: %d, Actual: %d
454	0x1a0c0	280	A		sub_0x1a0c0	str: Error getting PRNG random number. Fail to generate Kaslr seed:%r
455	0x1a1d8	1336	A		sub_0x1a1d8	str: String length mismatch b/w DT Bootdevice string (%d) and expected Boot
456	0x1a710	232	A		sub_0x1a710	str: reg = <0x%08x 0x%08x 0x%08x 0x%08x>
457	0x1a7f8	432	A		sub_0x1a7f8	str: Could not find the demura reg property
458	0x1a9a8	376	A		sub_0x1a9a8	str: Could not find the panel id property
459	0x1ab20	2104	A		sub_0x1ab20	str: Unable to get Filesystem Handle buffer %r
460	0x1b358	68	A		sub_0x1b358	reached by direct call; no string refs (leaf/helper)
461	0x1b5d0	240	A		sub_0x1b5d0	str: Error getting counter property
462	0x1b6c0	272	A		sub_0x1b6c0	str: Unable to locate VB protocol: %r
463	0x1b7d0	328	A		sub_0x1b7d0	str: Unable to locate NandPartiGuid protocol: %r
464	0x1b918	968	A		sub_0x1b918	str: Unable to locate Erase block protocol handle:%r
465	0x1bce0	400	A		sub_0x1bce0	str: %s: multiple partitions found.r
466	0x1be70	256	A		sub_0x1be70	str: Error Reading the secure state: %r
467	0x1bf70	272	A		sub_0x1bf70	str: Unable to locate VB protocol: %r
468	0x1c080	552	A		sub_0x1c080	str: Failed to get Boot Device Base address, %r
469	0x1c2a8	736	A		sub_0x1c2a8	str: PON Reason is %d cold_boot:%d charger path: %d
470	0x1c588	920	A		sub_0x1c588	str: Error battery voltage: %d Requireed voltage: %d, can flash: %d
471	0x1c920	4232	A	Library/BootLib	UpdateCmdLine	str: Locate EFI_RAMPARTITION_Protocol failed, Status = (0x%x)r
472	0x1d9a8	536	A		sub_0x1d9a8	str: Error resetting the input key status: %x
473	0x1dbc0	488	C		sub_0x1dbc0	str: Write the VirtualAbMsg failed :%r
474	0x1dda8	472	A		sub_0x1dda8	str: Error read virtualab msg version:%u magic:%u not valid
475	0x1df80	576	A		sub_0x1df80	str: Error offset:%u passed is not multiple of blocksz:%u
476	0x1e1c0	8	A		sub_0x1e1c0	reached by direct call; no string refs (leaf/helper)
477	0x1e1c8	416	C		sub_0x1e1c8	str: Error in loading Data from misc partition
478	0x1e368	600	A		sub_0x1e368	str: failed to allocate memory for DTB blob with overlays
479	0x1e5c0	592	A		sub_0x1e5c0	str: Error Reading FFBM info from misc: %r
480	0x1e810	712	A		sub_0x1e810	str: Failed to get MPM Sleep counter base, %r
481	0x1ead8	380	A		sub_0x1ead8	str: BufferSize sizeof (EFI_GRAPHICS_OUTPUT_BLT_PIXEL) overflow
482	0x1ec58	268	A		sub_0x1ec58	str: Failed to get the handle for the active console input device.
483	0x1ed68	268	A		sub_0x1ed68	str: Failed to get the handle for the active console input device.
484	0x1ef78	32	A		sub_0x1ef78	reached by direct call; no string refs (leaf/helper)
485	0x1ef98	1392	A		sub_0x1ef98	str: Error: Check the CHAR_NUM_PERROW: Y-axis(%d) is larger than Y-max(%d)
486	0x1f508	136	A		sub_0x1f508	str: qcom,mdss_rotator
487	0x1f590	232	C		sub_0x1f590	str: Failed to allocate zero pool for message info.
488	0x1f678	88	A		sub_0x1f678	str: Backup the boot logo blt buffer failed: %r
489	0x1f6d0	408	A		sub_0x1f6d0	str: ЀQjuG
490	0x1f868	408	A		sub_0x1f868	str: Failed to allocate zero pool for StrSourceTemp.
491	0x1fa00	3116	A	Library/BootLib	unlock keys-detect / update unlock status	str: Press volume key to select, and press power key to select
492	0x1faa8	64	A		sub_0x1faa8	reached by direct call; no string refs (leaf/helper)
493	0x1fae8	308	A		sub_0x1fae8	str: ERROR: Failed to set keys detection Timer: %r
494	0x1fc20	592	C		sub_0x1fc20	str: ERROR: Failed to set keys detection Timer: %r
495	0x1fe70	680	B		sub_0x1fe70	str: Failed to update fastboot option item
496	0x20118	128	B		sub_0x20118	str: Failed to update fastboot option item
497	0x20198	140	C		sub_0x20198	str: Failed to update option item’s background
498	0x20228	252	C	Library/BootLib	unlock keys-detect event handler	str: Failed to allocate zero pool for device info.
499	0x20328	368	A		sub_0x20328	str: H]Failed to allocate zero pool.
500	0x20498	1304	A	MdePkg	UefiRuntimeServicesTableLib.c helper	src: MdePkg/Library/UefiRuntimeServicesTableLib/UefiRuntimeServicesTab
501	0x209b0	264	C		sub_0x209b0	str: H]Failed to allocate zero pool.
502	0x20ab8	1368	A	Library/BootLib	DisplayVerifiedBootMenu draw (ID: %a)	str: %08x-%04x-%04x-%02x%02x-%02x%02x%02x%02x%02x%02x
503	0x21010	208	A		sub_0x21010	str: Unable to show verified menu on screen: %r
504	0x210e0	144	A		sub_0x210e0	str: vendor_boot
505	0x21170	180	A		sub_0x21170	reached by direct call; no string refs (leaf/helper)
506	0x21228	1184	A		sub_0x21228	str: GetActiveSlot: Slot attr: Priority %ld, Retry %ld, Active %ld, Success
507	0x216c8	12	A		sub_0x216c8	reached by direct call; no string refs (leaf/helper)
508	0x216d8	24	A		sub_0x216d8	reached by direct call; no string refs (leaf/helper)
509	0x216f0	16	A		sub_0x216f0	reached by direct call; no string refs (leaf/helper)
510	0x21700	172	A		sub_0x21700	reached by direct call; no string refs (leaf/helper)
511	0x217b0	528	A		sub_0x217b0	str: Selected Lun : %d, handle: %d does not have partition record, ignore
512	0x219c0	680	A		sub_0x219c0	str: GetActiveSlot: No boot partition entry for slot %s
513	0x21c68	136	A		sub_0x21c68	reached by direct call; no string refs (leaf/helper)
514	0x21cf0	188	A		sub_0x21cf0	str: Integer overflow while multiplying LastBlock and BlockSize
515	0x21db0	3280	A	Library/BootLib	partition/LUN flash layer	str: Invalid GPT header fields MaxPtnCount = %x, PtnEntrySz = %x
516	0x22a80	680	A		sub_0x22a80	str: Error getting block IO handle for %d lun, Lun may be unused
517	0x22d28	88	A		sub_0x22d28	reached by direct call; no string refs (leaf/helper)
518	0x22d80	408	A		sub_0x22d80	str: IsCurrentSlotBootable: No boot partition entry for slot %s
519	0x22f18	388	A		sub_0x22f18	str: GetBootPartitionEntry: No boot partition entry for slot %s, invalid in
520	0x230a0	36	A		sub_0x230a0	reached by direct call; no string refs (leaf/helper)
521	0x230c8	3064	A	Library/BootLib	partition/LUN block-IO helper	str: Unable to Allocate Memory for MultiSlot Partition list
522	0x23cc0	736	A		sub_0x23cc0	str: HandleActiveSlotUnbootable: No boot partition entry for slot %s
523	0x23fa0	1952	A		sub_0x23fa0	str: ValidateSlotGuids: BootableSlot %s does not have valid guids
524	0x24740	1560	A		sub_0x24740	str: DTB header is corrupted, DtEntryOffset %x, DtEntryCount %x,DtEntrySize
525	0x24d58	16	A		sub_0x24d58	reached by direct call; no string refs (leaf/helper)
526	0x24d68	16	C		sub_0x24d68	no incoming call and address never stored (unreferenced)
527	0x24d78	16	C		sub_0x24d78	no incoming call and address never stored (unreferenced)
528	0x24d88	16	A		sub_0x24d88	reached by direct call; no string refs (leaf/helper)
529	0x24d98	16	A		sub_0x24d98	reached by direct call; no string refs (leaf/helper)
530	0x24da8	28	A		sub_0x24da8	str: Device unlocked: %a
531	0x24dc8	28	A		sub_0x24dc8	str: Device unlocked: %a
532	0x24de8	152	C		sub_0x24de8	str: Error %a charger screen: %r
533	0x24e80	240	C		sub_0x24e80	str: Unable to store display cmdline: %r
534	0x24f70	140	A		sub_0x24f70	str: Unable to read display cmdline: %r
535	0x25000	116	A		sub_0x25000	str: VBRwDeviceState Returned error: %r
536	0x25078	768	C		sub_0x25078	str: DTB header is corrupted, DtEntryCount %x, DtEntrySize %x, DtboImgSize
537	0x25378	480	A		sub_0x25378	str: Unable to Write Device Info: %r
538	0x25558	208	C		sub_0x25558	str: ReadRollbackIndex Loc out of range, index: %d, array len: %d
539	0x25628	272	C		sub_0x25628	str: WriteRollbackIndex Loc out of range, index: %d, array len: %d
540	0x25738	112	A		sub_0x25738	str: GetUserKey DeviceInfo not initalized
541	0x257a8	1248	A		sub_0x257a8	str: qcom, rtic-id does not exist (or) is (%d) not a multiple of (%d)
542	0x25c88	536	A		sub_0x25c88	str: Kernel mode check 32/64: KernelLoadAddr->magic_64 (%x) KERNEL64_HDR_MA
543	0x25ea0	12	A		sub_0x25ea0	reached by direct call; no string refs (leaf/helper)
544	0x25eb0	1344	A		sub_0x25eb0	str: Subnode: %a is not present, breaking loop
545	0x263f0	648	A		sub_0x263f0	str: Partial goods (%a) status property updated
546	0x26678	8	A		sub_0x26678	reached by direct call; no string refs (leaf/helper)
547	0x26680	3576	A		sub_0x26680	str: %a dm=’%a none ro,0 %a %a 1 %a %a %a %a %a %d %a %a %a %d %a %a %a %a
548	0x27478	12	A		sub_0x27478	reached by direct call; no string refs (leaf/helper)
549	0x27488	456	A		sub_0x27488	str: GetVmData: Locate SCM Protocol failed, Status: (0x%x)
550	0x27650	152	A		sub_0x27650	str: returned Smc call to disable Uart logging from Hyp: 0x%x
551	0x276e8	456	A		sub_0x276e8	str: HypInfo: Invalid number of dtbos: %d max supported : %d
552	0x278b0	48	A		sub_0x278b0	reached by direct call; no string refs (leaf/helper)
553	0x278e0	1136	A		sub_0x278e0	reached by direct call; no string refs (leaf/helper)
554	0x27d50	160	A		sub_0x27d50	reached by direct call; no string refs (leaf/helper)
555	0x27df0	352	A		sub_0x27df0	reached by direct call; no string refs (leaf/helper)
556	0x27f50	188	A		sub_0x27f50	str: getStackTableByThread ThreadStackNode notcreated
557	0x28010	652	A		sub_0x28010	str: AllocateUnSafeStackPtr CurrentThread = 0x%x,UnSafeStackPtr = 0x%x with
558	0x282a0	292	A		sub_0x282a0	str: Failed to Allocate memory for ThreadStackNodeTmp->ThreadStackEntry->St
559	0x283c8	24	A		sub_0x283c8	reached by direct call; no string refs (leaf/helper)
560	0x283e0	236	A		sub_0x283e0	reached by direct call; no string refs (leaf/helper)
561	0x284d0	648	A		sub_0x284d0	str: multi stack is not supported, using global single stack.
562	0x28758	44	A		sub_0x28758	reached by direct call; no string refs (leaf/helper)
563	0x28788	232	A		sub_0x28788	str: Blob_size %zu smaller than the header size %zu
564	0x28870	2192	A		sub_0x28870	str: Overlay_length %zu smaller than header size %zu
565	0x29100	656	A		sub_0x29100	str: failed to allocate memory for DTB blob with overlays
566	0x29390	568	A		sub_0x29390	reached by direct call; no string refs (leaf/helper)
567	0x295c8	96	A		sub_0x295c8	reached by direct call; no string refs (leaf/helper)
568	0x2d120	15152	A	Library/FastbootLib	FastbootLib command setup / register (cluster)	str: ERROR: integer Overflow while adding additionalmemory to MemMapSize
569	0x2d158	72	A		sub_0x2d158	reached by direct call; no string refs (leaf/helper)
570	0x2d1a0	104	A		sub_0x2d1a0	reached by direct call; no string refs (leaf/helper)
571	0x2d208	112	A		sub_0x2d208	reached by direct call; no string refs (leaf/helper)
572	0x2d278	56	A		sub_0x2d278	reached by direct call; no string refs (leaf/helper)
573	0x2d2b0	176	A		sub_0x2d2b0	reached by direct call; no string refs (leaf/helper)
574	0x2d360	72	A		sub_0x2d360	reached by direct call; no string refs (leaf/helper)
575	0x2d3a8	480	A		sub_0x2d3a8	reached by direct call; no string refs (leaf/helper)
576	0x2d588	56	A		sub_0x2d588	reached by direct call; no string refs (leaf/helper)
577	0x2d5c0	56	A		sub_0x2d5c0	reached by direct call; no string refs (leaf/helper)
578	0x2d5f8	64	A		sub_0x2d5f8	reached by direct call; no string refs (leaf/helper)
579	0x2d638	72	A		sub_0x2d638	reached by direct call; no string refs (leaf/helper)
580	0x2d680	72	A		sub_0x2d680	reached by direct call; no string refs (leaf/helper)
581	0x2d6c8	72	A		sub_0x2d6c8	reached by direct call; no string refs (leaf/helper)
582	0x2d830	384	A		sub_0x2d830	reached by direct call; no string refs (leaf/helper)
583	0x2d890	184	A		sub_0x2d890	reached by direct call; no string refs (leaf/helper)
584	0x2d948	320	A		sub_0x2d948	reached by direct call; no string refs (leaf/helper)
585	0x2da88	208	A		sub_0x2da88	reached by direct call; no string refs (leaf/helper)
586	0x2db58	152	A		sub_0x2db58	reached by direct call; no string refs (leaf/helper)
587	0x2dbf0	168	A		sub_0x2dbf0	reached by direct call; no string refs (leaf/helper)
588	0x2dc98	232	A		sub_0x2dc98	reached by direct call; no string refs (leaf/helper)
589	0x2dd80	1224	A		sub_0x2dd80	str: Locate EFI_RAMPARTITION_Protocol failed, Status = (0x%x)r
590	0x2df80	264	A		sub_0x2df80	reached by direct call; no string refs (leaf/helper)
591	0x2e088	200	A		sub_0x2e088	reached by direct call; no string refs (leaf/helper)
592	0x2e248	136	A		sub_0x2e248	reached by direct call; no string refs (leaf/helper)
593	0x2e2d0	192	A		sub_0x2e2d0	str: invalid children tag type
594	0x2e390	304	A		sub_0x2e390	reached by direct call; no string refs (leaf/helper)
595	0x2e4c0	96	A		sub_0x2e4c0	reached by direct call; no string refs (leaf/helper)
596	0x2e520	304	A		sub_0x2e520	reached by direct call; no string refs (leaf/helper)
597	0x2e650	96	A		sub_0x2e650	reached by direct call; no string refs (leaf/helper)
598	0x2e6b0	128	A		sub_0x2e6b0	reached by direct call; no string refs (leaf/helper)
599	0x2e730	160	A		sub_0x2e730	reached by direct call; no string refs (leaf/helper)
600	0x2e7d0	296	A		sub_0x2e7d0	str: linux,phandle
601	0x2e8f8	184	A		sub_0x2e8f8	reached by direct call; no string refs (leaf/helper)
602	0x2e9b0	192	A		sub_0x2e9b0	reached by direct call; no string refs (leaf/helper)
603	0x2ed58	1168	A		sub_0x2ed58	str: failed to find new index in ufdt_node_dict resize for entry :%s:
604	0x2ef00	96	A		sub_0x2ef00	reached by direct call; no string refs (leaf/helper)
605	0x2ef60	80	A		sub_0x2ef60	reached by direct call; no string refs (leaf/helper)
606	0x2efb0	456	A		sub_0x2efb0	str: failed to find new index in ufdt_node_dict resize for entry :%s:
607	0x2f178	312	A		sub_0x2f178	reached by direct call; no string refs (leaf/helper)
608	0x2f2b0	284	A		sub_0x2f2b0	reached by direct call; no string refs (leaf/helper)
609	0x2f3cc	12	A		sub_0x2f3cc	reached by direct call; no string refs (leaf/helper)
610	0x2f3d8	148	A		sub_0x2f3d8	str: Fastboot USB: Unable to free Rx Buffer
611	0x2f46c	680	A		sub_0x2f46c	str: Error, should not happen! Check your USB connection
612	0x2f714	1124	A		sub_0x2f714	str: Error start the usb device, cannot enter fastboot mode
613	0x2fb78	8	A		sub_0x2fb78	reached by direct call; no string refs (leaf/helper)
614	0x2fb80	8	A		sub_0x2fb80	reached by direct call; no string refs (leaf/helper)
615	0x2fb88	8	A		sub_0x2fb88	reached by direct call; no string refs (leaf/helper)
616	0x2fb90	8	A		sub_0x2fb90	reached by direct call; no string refs (leaf/helper)
617	0x2fb98	8	A		sub_0x2fb98	reached by direct call; no string refs (leaf/helper)
618	0x2fba0	660	A		sub_0x2fba0	str: Error Allocating memory for HS config descriptors
619	0x2fe34	8	A		sub_0x2fe34	reached by direct call; no string refs (leaf/helper)
620	0x2fe3c	12748	A	Library/FastbootLib	FastbootInitialize / getvar publish (cluster)	str: ERROR: integer Overflow while adding additionalmemory to MemMapSize
621	0x2fe40	48	A		sub_0x2fe40	reached by direct call; no string refs (leaf/helper)
622	0x2fe70	16	A		sub_0x2fe70	reached by direct call; no string refs (leaf/helper)
623	0x2ff3c	16	C		sub_0x2ff3c	no incoming call and address never stored (unreferenced)
624	0x2ff4c	220	C		sub_0x2ff4c	str: Download Finished
625	0x2ff5c	1040	A		sub_0x2ff5c	str: failed to allocate memory for DTB blob with overlays
626	0x3036c	12	A		sub_0x3036c	reached by direct call; no string refs (leaf/helper)
627	0x30378	192	A		sub_0x30378	str: Failed to free up fastboot buffer
628	0x30438	4	A		sub_0x30438	reached by direct call; no string refs (leaf/helper)
629	0x3043c	220	A		sub_0x3043c	str: InitMultiThreadEnv successfully, will use thread to flash
630	0x30518	5696	A	Library/FastbootLib	FastbootInitialize buffer alloc / getvar publish	str: ERROR: integer Overflow while adding additionalmemory to MemMapSize
631	0x31b58	128	A		sub_0x31b58	str: Failed to allocate memory to cmd
632	0x31bd8	16	A		sub_0x31bd8	reached by direct call; no string refs (leaf/helper)
633	0x31be8	12	A		sub_0x31be8	reached by direct call; no string refs (leaf/helper)
634	0x31bf4	36	C		sub_0x31bf4	str: qcom,ipe1
635	0x31c18	88	B	Library/FastbootLib	cmd: oem enable-charger-screen	str: Locate EFI_RAMPARTITION_Protocol failed, Status = (0x%x)r
636	0x31c70	88	B	Library/FastbootLib	cmd: oem disable-charger-screen	str: Locate EFI_RAMPARTITION_Protocol failed, Status = (0x%x)r
637	0x31cc8	40	B	Library/FastbootLib	cmd: oem off-mode-charge	str: Set off mode charger:
638	0x31cf0	1228	C		sub_0x31cf0	str: Display get variable failed with status(%d)!
639	0x31e38	0	B	Library/FastbootLib	cmd: oem select-display-panel	str: Selecting Panel:
640	0x321bc	460	B	Library/FastbootLib	cmd: oem device-info	str: Failed to load image from partition: %r
641	0x3228c	0	B	Library/FastbootLib	cmd: continue	address-taken (stored fn-pointer / dispatch table)
642	0x3234c	0	B	Library/FastbootLib	cmd: reboot	str: rebooting the device
643	0x32388	88	B	Library/FastbootLib	cmd: reboot-recovery	str: rebooting the device to recovery
644	0x323e0	88	B	Library/FastbootLib	cmd: reboot-fastboot	str: rebooting the device to fastbootd
645	0x32438	352	B	Library/FastbootLib	cmd: snapshot-update	str: Locate EFI_RAMPARTITION_Protocol failed, Status = (0x%x)r
646	0x32598	68	B	Library/FastbootLib	cmd: reboot-bootloader	str: Rebooting the device into bootloader mode
647	0x325dc	684	B	Library/FastbootLib	getvar: dispatcher	str: incompatible blob version: %d, should be: %d
648	0x32888	552	B	Library/FastbootLib	CmdDownload (download: handler)	str: Locate EFI_RAMPARTITION_Protocol failed, Status = (0x%x)r
649	0x32a74	0	B	Library/FastbootLib	cmd: oem display-cmdline	str: Locate EFI_RAMPARTITION_Protocol failed, Status = (0x%x)r
650	0x32ab0	116	A		sub_0x32ab0	str: Failed to publish a variable readable(%a): malloc error!
651	0x32d28	16	A		sub_0x32d28	str: AsciiStrLen
652	0x32d38	8	A		sub_0x32d38	reached by direct call; no string refs (leaf/helper)
653	0x32d40	8	A		sub_0x32d40	reached by direct call; no string refs (leaf/helper)
654	0x32d48	16	A		sub_0x32d48	str: AsciiStrnCpyS
655	0x32d58	8	A		sub_0x32d58	reached by direct call; no string refs (leaf/helper)
656	0x32d60	16	A		sub_0x32d60	str: AsciiStrnCatS
657	0x32d70	8	A		sub_0x32d70	reached by direct call; no string refs (leaf/helper)
658	0x32d78	12	A		sub_0x32d78	str: Locate EFI_RAMPARTITION_Protocol failed, Status = (0x%x)r
659	0x32d84	20	A		sub_0x32d84	reached by direct call; no string refs (leaf/helper)
660	0x32d98	12	C		sub_0x32d98	no incoming call and address never stored (unreferenced)
661	0x32da4	24	C		sub_0x32da4	no incoming call and address never stored (unreferenced)
662	0x32dbc	8	A		sub_0x32dbc	reached by direct call; no string refs (leaf/helper)
663	0x32dc4	24	C		sub_0x32dc4	no incoming call and address never stored (unreferenced)
664	0x32ddc	28	C		sub_0x32ddc	str: Locate EFI_RAMPARTITION_Protocol failed, Status = (0x%x)r
665	0x32df8	12	C		sub_0x32df8	no incoming call and address never stored (unreferenced)
666	0x32e04	756	C		sub_0x32e04	str: snapshot-update-status
667	0x32e18	16	A		sub_0x32e18	reached by direct call; no string refs (leaf/helper)
668	0x32e28	16	A		sub_0x32e28	reached by direct call; no string refs (leaf/helper)
669	0x32e38	16	A		sub_0x32e38	reached by direct call; no string refs (leaf/helper)
670	0x32e48	32	A		sub_0x32e48	str: serialno
671	0x32e68	8	A		sub_0x32e68	reached by direct call; no string refs (leaf/helper)
672	0x32e70	20	A		sub_0x32e70	reached by direct call; no string refs (leaf/helper)
673	0x32e84	20	A		sub_0x32e84	reached by direct call; no string refs (leaf/helper)
674	0x32e98	20	A		sub_0x32e98	reached by direct call; no string refs (leaf/helper)
675	0x32eac	772	A		sub_0x32eac	str: snapshot-update-status
676	0x32eb8	12	C		sub_0x32eb8	no incoming call and address never stored (unreferenced)
677	0x32ec4	8	A		sub_0x32ec4	reached by direct call; no string refs (leaf/helper)
678	0x32ecc	24	C		sub_0x32ecc	str: DisplayPanelOverride
679	0x32ee4	8	A		sub_0x32ee4	reached by direct call; no string refs (leaf/helper)
680	0x32eec	12	C		sub_0x32eec	no incoming call and address never stored (unreferenced)
681	0x32ef8	16	A		sub_0x32ef8	reached by direct call; no string refs (leaf/helper)
682	0x32f08	8	A		sub_0x32f08	reached by direct call; no string refs (leaf/helper)
683	0x32f10	24	A		sub_0x32f10	reached by direct call; no string refs (leaf/helper)
684	0x32f28	16	A		sub_0x32f28	reached by direct call; no string refs (leaf/helper)
685	0x32f38	8	A		sub_0x32f38	reached by direct call; no string refs (leaf/helper)
686	0x32f40	8	A		sub_0x32f40	reached by direct call; no string refs (leaf/helper)
687	0x32f48	8	A		sub_0x32f48	reached by direct call; no string refs (leaf/helper)
688	0x32f50	8	A		sub_0x32f50	reached by direct call; no string refs (leaf/helper)
689	0x32f58	12	C		sub_0x32f58	str: Failed to reboot
690	0x32f64	8	A		sub_0x32f64	reached by direct call; no string refs (leaf/helper)
691	0x32f6c	12	C		sub_0x32f6c	str: : done
692	0x32f78	12	A		sub_0x32f78	reached by direct call; no string refs (leaf/helper)
693	0x32f84	8	A		sub_0x32f84	reached by direct call; no string refs (leaf/helper)
694	0x32f8c	8	A		sub_0x32f8c	reached by direct call; no string refs (leaf/helper)
695	0x32f94	12	C		sub_0x32f94	str: : failed
696	0x32fa0	8	A		sub_0x32fa0	reached by direct call; no string refs (leaf/helper)
697	0x32fa8	12	A		sub_0x32fa8	reached by direct call; no string refs (leaf/helper)
698	0x32fb4	8	A		sub_0x32fb4	reached by direct call; no string refs (leaf/helper)
699	0x32fbc	12	C		sub_0x32fbc	no incoming call and address never stored (unreferenced)
700	0x32fc8	12	A		sub_0x32fc8	reached by direct call; no string refs (leaf/helper)
701	0x32fd4	8	A		sub_0x32fd4	reached by direct call; no string refs (leaf/helper)
702	0x32fdc	8	A		sub_0x32fdc	reached by direct call; no string refs (leaf/helper)
703	0x32fe4	8	A		sub_0x32fe4	reached by direct call; no string refs (leaf/helper)
704	0x32fec	12	A		sub_0x32fec	reached by direct call; no string refs (leaf/helper)
705	0x32ff8	8	C		sub_0x32ff8	no incoming call and address never stored (unreferenced)
706	0x33008	180	A		sub_0x33008	reached by direct call; no string refs (leaf/helper)
707	0x330bc	84	A		sub_0x330bc	reached by direct call; no string refs (leaf/helper)
708	0x33110	148	A		sub_0x33110	str: battery-soc-ok
709	0x331a4	220	A		sub_0x331a4	reached by direct call; no string refs (leaf/helper)
710	0x33280	40	A		sub_0x33280	reached by direct call; no string refs (leaf/helper)
711	0x332a8	40	A		sub_0x332a8	reached by direct call; no string refs (leaf/helper)
712	0x332d0	632	A	IntelFwModulePkg	ReportStatusCodeLib.c helper	src: IntelFrameworkModulePkg/Library/DxeReportStatusCodeLibFramework/R
713	0x332f8	532	A	IntelFwModulePkg	ReportStatusCodeLib.c helper	src: IntelFrameworkModulePkg/Library/DxeReportStatusCodeLibFramework/R
714	0x3350c	20	A		sub_0x3350c	reached by direct call; no string refs (leaf/helper)
715	0x33520	32	A		sub_0x33520	reached by direct call; no string refs (leaf/helper)
716	0x33548	148	C		sub_0x33548	no incoming call and address never stored (unreferenced)
717	0x335dc	44	C		sub_0x335dc	no incoming call and address never stored (unreferenced)
718	0x33608	400	A		sub_0x33608	reached by direct call; no string refs (leaf/helper)
719	0x33680	84	A		sub_0x33680	reached by direct call; no string refs (leaf/helper)
720	0x336d4	260	A	MdePkg	PrintLib.c helper	src: MdePkg/Library/BasePrintLib/PrintLib.c
721	0x33700	96	A		sub_0x33700	reached by direct call; no string refs (leaf/helper)
722	0x33760	20	A		sub_0x33760	reached by direct call; no string refs (leaf/helper)
723	0x33774	12	A		sub_0x33774	reached by direct call; no string refs (leaf/helper)
724	0x33780	12	A		sub_0x33780	reached by direct call; no string refs (leaf/helper)
725	0x33798	12	A		sub_0x33798	reached by direct call; no string refs (leaf/helper)
726	0x337a4	16	C	MdePkg	PrintLib.c helper	src: MdePkg/Library/BasePrintLib/PrintLib.c
727	0x337b4	16	A	MdePkg	PrintLib.c helper	src: MdePkg/Library/BasePrintLib/PrintLib.c
728	0x337c4	12	A		sub_0x337c4	reached by direct call; no string refs (leaf/helper)
729	0x337d8	8	C		sub_0x337d8	no incoming call and address never stored (unreferenced)
730	0x337e0	8	A		sub_0x337e0	reached by direct call; no string refs (leaf/helper)
731	0x337e8	100	A		sub_0x337e8	reached by direct call; no string refs (leaf/helper)
732	0x3384c	120	A		sub_0x3384c	str: ‘0123456789ABCDEFSuccess
733	0x338c4	3812	A	MdePkg	PrintLibInternal.c helper	src: MdePkg/Library/BasePrintLib/PrintLibInternal.c
734	0x347a8	16	A	MdePkg	PrintLibInternal.c helper	src: MdePkg/Library/BasePrintLib/PrintLibInternal.c
735	0x347b8	12	A		sub_0x347b8	reached by direct call; no string refs (leaf/helper)
736	0x347c4	20	A		sub_0x347c4	reached by direct call; no string refs (leaf/helper)
737	0x347d8	8	A		sub_0x347d8	reached by direct call; no string refs (leaf/helper)
738	0x34838	852	A	MdePkg	MemoryAllocationLib.c helper	src: MdePkg/Library/UefiMemoryAllocationLib/MemoryAllocationLib.c
739	0x3485c	696	A	MdePkg	MemoryAllocationLib.c helper	src: MdePkg/Library/UefiMemoryAllocationLib/MemoryAllocationLib.c
740	0x3490c	80	A		sub_0x3490c	reached by direct call; no string refs (leaf/helper)
741	0x3495c	464	A	MdePkg	MemoryAllocationLib.c helper	src: MdePkg/Library/UefiMemoryAllocationLib/MemoryAllocationLib.c
742	0x349d0	340	A	MdePkg	MemoryAllocationLib.c helper	src: MdePkg/Library/UefiMemoryAllocationLib/MemoryAllocationLib.c
743	0x349f4	144	A	MdePkg	MemoryAllocationLib.c helper	src: MdePkg/Library/UefiMemoryAllocationLib/MemoryAllocationLib.c
744	0x34a84	32	A		sub_0x34a84	reached by direct call; no string refs (leaf/helper)
745	0x34aa4	20	A		sub_0x34aa4	reached by direct call; no string refs (leaf/helper)
746	0x34ab8	20	A		sub_0x34ab8	str: ASSERT_EFI_ERROR (Status = %r)
747	0x34acc	12	A		sub_0x34acc	reached by direct call; no string refs (leaf/helper)
748	0x34ad8	24	A		sub_0x34ad8	reached by direct call; no string refs (leaf/helper)
749	0x34af0	8	A		sub_0x34af0	reached by direct call; no string refs (leaf/helper)
750	0x34af8	8	A		sub_0x34af8	reached by direct call; no string refs (leaf/helper)
751	0x34b00	8	A		sub_0x34b00	reached by direct call; no string refs (leaf/helper)
752	0x34b34	220	A	ArmPkg	ScanMem8Wrapper.c helper	src: ArmPkg/Library/BaseMemoryLibStm/ScanMem8Wrapper.c
753	0x34c10	972	A	ArmPkg	CopyMemWrapper.c helper	src: ArmPkg/Library/BaseMemoryLibStm/CopyMemWrapper.c
754	0x34cbc	1004	A	MdePkg	PrintLibInternal.c helper	src: MdePkg/Library/BasePrintLib/PrintLibInternal.c
755	0x34dfc	1612	A	MdePkg	PrintLibInternal.c helper	src: MdePkg/Library/BasePrintLib/PrintLibInternal.c
756	0x34eb0	1184	A	MdePkg	PrintLibInternal.c helper	src: MdePkg/Library/BasePrintLib/PrintLibInternal.c
757	0x350a8	16	A		sub_0x350a8	reached by direct call; no string refs (leaf/helper)
758	0x350b8	108	A		sub_0x350b8	reached by direct call; no string refs (leaf/helper)
759	0x35124	72	A		sub_0x35124	reached by direct call; no string refs (leaf/helper)
760	0x3516c	20	A		sub_0x3516c	reached by direct call; no string refs (leaf/helper)
761	0x35448	100	A		sub_0x35448	reached by direct call; no string refs (leaf/helper)
762	0x354ac	448	A	MdePkg	DevicePathUtilities.c helper	src: MdePkg/Library/UefiDevicePathLib/DevicePathUtilities.c
763	0x354f0	68	A		sub_0x354f0	reached by direct call; no string refs (leaf/helper)
764	0x35534	304	A	MdePkg	DevicePathUtilities.c helper	src: MdePkg/Library/UefiDevicePathLib/DevicePathUtilities.c
765	0x3557c	72	A		sub_0x3557c	reached by direct call; no string refs (leaf/helper)
766	0x355c4	88	A		sub_0x355c4	reached by direct call; no string refs (leaf/helper)
767	0x3561c	20	A		sub_0x3561c	reached by direct call; no string refs (leaf/helper)
768	0x35630	20	A		sub_0x35630	reached by direct call; no string refs (leaf/helper)
769	0x35644	16	A	MdePkg	DevicePathUtilities.c helper	src: MdePkg/Library/UefiDevicePathLib/DevicePathUtilities.c
770	0x35654	8	A		sub_0x35654	reached by direct call; no string refs (leaf/helper)
771	0x3566c	56	A		sub_0x3566c	reached by direct call; no string refs (leaf/helper)
772	0x356a4	56	A		sub_0x356a4	reached by direct call; no string refs (leaf/helper)
773	0x356dc	128	A	MdePkg	DivU64x64Remainder.c helper	src: MdePkg/Library/BaseLib/DivU64x64Remainder.c
774	0x3575c	128	A	MdePkg	DivU64x32Remainder.c helper	src: MdePkg/Library/BaseLib/DivU64x32Remainder.c
775	0x357dc	108	A		sub_0x357dc	reached by direct call; no string refs (leaf/helper)
776	0x35848	92	A		sub_0x35848	reached by direct call; no string refs (leaf/helper)
777	0x358a4	108	A		sub_0x358a4	reached by direct call; no string refs (leaf/helper)
778	0x35910	408	A	MdePkg	Unaligned.c helper	src: MdePkg/Library/BaseLib/Arm/Unaligned.c
779	0x35970	120	A		sub_0x35970	reached by direct call; no string refs (leaf/helper)
780	0x359e8	128	A		sub_0x359e8	reached by direct call; no string refs (leaf/helper)
781	0x35a68	12	A		sub_0x35a68	reached by direct call; no string refs (leaf/helper)
782	0x35a74	16	A	MdePkg	Unaligned.c helper	src: MdePkg/Library/BaseLib/Arm/Unaligned.c
783	0x35a84	16	A		sub_0x35a84	reached by direct call; no string refs (leaf/helper)
784	0x35a94	8	A		sub_0x35a94	reached by direct call; no string refs (leaf/helper)
785	0x35aa8	12	A		sub_0x35aa8	reached by direct call; no string refs (leaf/helper)
786	0x35b7c	380	A	MdePkg	UefiLibPrint.c helper	src: MdePkg/Library/UefiLib/UefiLibPrint.c
787	0x35bfc	56	A		sub_0x35bfc	reached by direct call; no string refs (leaf/helper)
788	0x35c34	20	A		sub_0x35c34	reached by direct call; no string refs (leaf/helper)
789	0x35c48	12	A		sub_0x35c48	reached by direct call; no string refs (leaf/helper)
790	0x35c54	16	A	MdePkg	UefiLibPrint.c helper	src: MdePkg/Library/UefiLib/UefiLibPrint.c
791	0x35c64	36	A		sub_0x35c64	reached by direct call; no string refs (leaf/helper)
792	0x35c88	28	A		sub_0x35c88	reached by direct call; no string refs (leaf/helper)
793	0x35ca4	24	A		sub_0x35ca4	reached by direct call; no string refs (leaf/helper)
794	0x35cbc	16	A	MdePkg	UefiLibPrint.c helper	src: MdePkg/Library/UefiLib/UefiLibPrint.c
795	0x35ccc	8	A		sub_0x35ccc	reached by direct call; no string refs (leaf/helper)
796	0x35cd4	16	A		sub_0x35cd4	reached by direct call; no string refs (leaf/helper)
797	0x35ce4	8	A		sub_0x35ce4	reached by direct call; no string refs (leaf/helper)
798	0x35cf8	592	A		sub_0x35cf8	reached by direct call; no string refs (leaf/helper)
799	0x35d28	12	A		sub_0x35d28	reached by direct call; no string refs (leaf/helper)
800	0x35d70	12	A		sub_0x35d70	reached by direct call; no string refs (leaf/helper)
801	0x35e98	124	A		sub_0x35e98	reached by direct call; no string refs (leaf/helper)
802	0x36030	112	A		sub_0x36030	reached by direct call; no string refs (leaf/helper)
803	0x36110	112	A		sub_0x36110	reached by direct call; no string refs (leaf/helper)
804	0x36244	4	A		sub_0x36244	reached by direct call; no string refs (leaf/helper)
805	0x36248	196	A		sub_0x36248	reached by direct call; no string refs (leaf/helper)
806	0x36268	28	C		sub_0x36268	no incoming call and address never stored (unreferenced)
807	0x36314	8	A		sub_0x36314	reached by direct call; no string refs (leaf/helper)
808	0x36418	8	A		sub_0x36418	reached by direct call; no string refs (leaf/helper)
809	0x36420	8	C		sub_0x36420	no incoming call and address never stored (unreferenced)
810	0x36738	60	A		sub_0x36738	reached by direct call; no string refs (leaf/helper)
811	0x367b8	88	A		sub_0x367b8	reached by direct call; no string refs (leaf/helper)
812	0x36810	160	A		sub_0x36810	reached by direct call; no string refs (leaf/helper)
813	0x368b0	112	A		sub_0x368b0	reached by direct call; no string refs (leaf/helper)
814	0x36920	264	A		sub_0x36920	reached by direct call; no string refs (leaf/helper)
815	0x36a28	104	A		sub_0x36a28	reached by direct call; no string refs (leaf/helper)
816	0x36a90	344	A		sub_0x36a90	str: /aliases
817	0x36be8	136	A		sub_0x36be8	str: /aliases
818	0x36c70	176	A		sub_0x36c70	reached by direct call; no string refs (leaf/helper)
819	0x36d20	608	A		sub_0x36d20	reached by direct call; no string refs (leaf/helper)
820	0x36f80	120	A		sub_0x36f80	reached by direct call; no string refs (leaf/helper)
821	0x36ff8	136	A		sub_0x36ff8	reached by direct call; no string refs (leaf/helper)
822	0x37080	176	A		sub_0x37080	reached by direct call; no string refs (leaf/helper)
823	0x37130	448	A		sub_0x37130	reached by direct call; no string refs (leaf/helper)
824	0x372f0	616	A		sub_0x372f0	reached by direct call; no string refs (leaf/helper)
825	0x37558	448	A		sub_0x37558	reached by direct call; no string refs (leaf/helper)
826	0x37718	464	A		sub_0x37718	reached by direct call; no string refs (leaf/helper)
827	0x378e8	528	A		sub_0x378e8	reached by direct call; no string refs (leaf/helper)
828	0x37af8	232	A		sub_0x37af8	reached by direct call; no string refs (leaf/helper)
829	0x37be0	272	A		sub_0x37be0	reached by direct call; no string refs (leaf/helper)
830	0x37cf0	168	A		sub_0x37cf0	reached by direct call; no string refs (leaf/helper)
831	0x37d98	152	A		sub_0x37d98	str: <valid offset/length>
832	0x37e30	200	A		sub_0x37e30	reached by direct call; no string refs (leaf/helper)
833	0x37ef8	232	A		sub_0x37ef8	reached by direct call; no string refs (leaf/helper)
834	0x37fe0	64	A		sub_0x37fe0	reached by direct call; no string refs (leaf/helper)
835	0x38020	192	A		sub_0x38020	reached by direct call; no string refs (leaf/helper)
836	0x380e0	208	A		sub_0x380e0	reached by direct call; no string refs (leaf/helper)
837	0x381b0	144	A		sub_0x381b0	reached by direct call; no string refs (leaf/helper)
838	0x38240	416	A		sub_0x38240	reached by direct call; no string refs (leaf/helper)
839	0x383e0	128	A		sub_0x383e0	reached by direct call; no string refs (leaf/helper)
840	0x38460	368	A		sub_0x38460	reached by direct call; no string refs (leaf/helper)
841	0x385d0	144	A		sub_0x385d0	reached by direct call; no string refs (leaf/helper)
842	0x38660	456	A		sub_0x38660	reached by direct call; no string refs (leaf/helper)
843	0x38828	120	A		sub_0x38828	reached by direct call; no string refs (leaf/helper)
844	0x388a0	120	A		sub_0x388a0	reached by direct call; no string refs (leaf/helper)
845	0x38918	320	A		sub_0x38918	reached by direct call; no string refs (leaf/helper)
846	0x38a58	248	A		sub_0x38a58	reached by direct call; no string refs (leaf/helper)
847	0x38b50	304	A		sub_0x38b50	reached by direct call; no string refs (leaf/helper)
848	0x38c80	160	A		sub_0x38c80	reached by direct call; no string refs (leaf/helper)
849	0x38d20	136	A		sub_0x38d20	reached by direct call; no string refs (leaf/helper)
850	0x38da8	60	A		sub_0x38da8	reached by direct call; no string refs (leaf/helper)
851	0x38de4	84	A		sub_0x38de4	reached by direct call; no string refs (leaf/helper)
852	0x38e14	16	A		sub_0x38e14	reached by direct call; no string refs (leaf/helper)
853	0x38e24	12	A		sub_0x38e24	reached by direct call; no string refs (leaf/helper)
854	0x38e38	12	A		sub_0x38e38	reached by direct call; no string refs (leaf/helper)
855	0x38e48	244	A		sub_0x38e48	reached by direct call; no string refs (leaf/helper)
856	0x38f40	176	A		sub_0x38f40	reached by direct call; no string refs (leaf/helper)
857	0x38ff0	4908	A	MdePkg	PrintLibInternal.c helper	src: MdePkg/Library/BasePrintLib/PrintLibInternal.c
858	0x3a320	280	A		sub_0x3a320	reached by direct call; no string refs (leaf/helper)
859	0x3a438	92	A		sub_0x3a438	reached by direct call; no string refs (leaf/helper)
860	0x3a498	4688	A		sub_0x3a498	str: invalid distance too far back
861	0x3b6e8	540	A		sub_0x3b6e8	reached by direct call; no string refs (leaf/helper)
862	0x3b908	2052	A		sub_0x3b908	reached by direct call; no string refs (leaf/helper)
863	0x3c110	1804	A		sub_0x3c110	reached by direct call; no string refs (leaf/helper)
864	0x3c81c	27212	A	ArmPkg	AArch64ArchTimer.c helper	src: ArmPkg/Library/ArmLib/AArch64/AArch64ArchTimer.c
865	0x3c84c	32	A		sub_0x3c84c	reached by direct call; no string refs (leaf/helper)
866	0x3c86c	124	A		sub_0x3c86c	str: ~v՟?
867	0x3c89c	20	A		sub_0x3c89c	reached by direct call; no string refs (leaf/helper)
868	0x3c8b0	32	A		sub_0x3c8b0	reached by direct call; no string refs (leaf/helper)
869	0x3c8d0	16	A		sub_0x3c8d0	reached by direct call; no string refs (leaf/helper)
870	0x3c8e8	280	A		sub_0x3c8e8	str: @zb՟?
871	0x3c9a0	27832	A	ArmPkg	AArch64ArchTimer.c helper	src: ArmPkg/Library/ArmLib/AArch64/AArch64ArchTimer.c
872	0x3c9c8	20	A		sub_0x3c9c8	reached by direct call; no string refs (leaf/helper)
873	0x3c9dc	27744	A	ArmPkg	AArch64ArchTimer.c helper	src: ArmPkg/Library/ArmLib/AArch64/AArch64ArchTimer.c
874	0x3c9e8	16	A		sub_0x3c9e8	reached by direct call; no string refs (leaf/helper)
875	0x3ca00	25860	A	ArmPkg	AArch64ArchTimer.c helper	src: ArmPkg/Library/ArmLib/AArch64/AArch64ArchTimer.c
876	0x3ca1c	464	A	ArmPkg	AArch64ArchTimer.c helper	src: ArmPkg/Library/ArmLib/AArch64/AArch64ArchTimer.c
877	0x3cbb4	8	A		sub_0x3cbb4	reached by direct call; no string refs (leaf/helper)
878	0x3cbd4	12	A		sub_0x3cbd4	reached by direct call; no string refs (leaf/helper)
879	0x3cbec	8	A		sub_0x3cbec	reached by direct call; no string refs (leaf/helper)
880	0x3cbfc	8	A		sub_0x3cbfc	reached by direct call; no string refs (leaf/helper)
881	0x3cc04	8	A		sub_0x3cc04	reached by direct call; no string refs (leaf/helper)
882	0x3cc14	8	A		sub_0x3cc14	reached by direct call; no string refs (leaf/helper)
883	0x3cc24	8	A		sub_0x3cc24	reached by direct call; no string refs (leaf/helper)
884	0x3cc34	8	A		sub_0x3cc34	reached by direct call; no string refs (leaf/helper)
885	0x3cc44	8	A		sub_0x3cc44	reached by direct call; no string refs (leaf/helper)
886	0x3cc54	8	A		sub_0x3cc54	reached by direct call; no string refs (leaf/helper)
887	0x3cc5c	8	A		sub_0x3cc5c	reached by direct call; no string refs (leaf/helper)
888	0x3cc6c	8	A		sub_0x3cc6c	reached by direct call; no string refs (leaf/helper)
889	0x3cc7c	8	A		sub_0x3cc7c	reached by direct call; no string refs (leaf/helper)

2.6.5. Functions outside the generated map

The table above is the radare2 function set (890 functions, last RVA 0x3cc7c). The region after that last entry, at true RVA range 0x3cbec–0x3cc8b (Capstone, AArch64), holds the same set of ARM generic-timer register accessors — the assembly get/set leaves behind the already-mapped ArmArchTimerLib.c C wrapper (row 387, 0x10334) — each 8 bytes (one mrs/msr + ret):

True RVA	Sz	Dir	Register	In main table?
0x3cbec	8	read	CNTFRQ_EL0	yes — row 879
0x3cbf4	8	write	CNTFRQ_EL0	no
0x3cbfc	8	read	CNTPCT_EL0 (physical counter)	yes — row 880
0x3cc04	8	read	CNTKCTL_EL1	yes — row 881
0x3cc0c	8	write	CNTKCTL_EL1	no
0x3cc14	8	read	CNTP_TVAL_EL0	yes — row 882
0x3cc1c	8	write	CNTP_TVAL_EL0	no
0x3cc24	8	read	CNTP_CTL_EL0	yes — row 883
0x3cc2c	8	write	CNTP_CTL_EL0	no
0x3cc34	8	read	CNTV_TVAL_EL0	yes — row 884
0x3cc3c	8	write	CNTV_TVAL_EL0	no
0x3cc44	8	read	CNTV_CTL_EL0	yes — row 885
0x3cc4c	8	write	CNTV_CTL_EL0	no
0x3cc54	8	read	CNTVCT_EL0 (virtual counter)	yes — row 886
0x3cc5c	8	read	CNTP_CVAL_EL0	yes — row 887
0x3cc64	8	write	CNTP_CVAL_EL0	no
0x3cc6c	8	read	CNTV_CVAL_EL0	yes — row 888
0x3cc74	8	write	CNTV_CVAL_EL0	no
0x3cc7c	8	read	CNTVOFF_EL2	yes — row 889
0x3cc84	8	write	CNTVOFF_EL2	no

So of these 20 true addresses, the 11 mrs/read accessors are already present in the main table under their correct RVA (rows 879–889); the 9 msr/write accessors are not entered anywhere in the main table under any RVA and remain a genuine, unresolved gap in the 890-function inventory (address-taken/called-by-nothing code the automated pass never bounded). There are no further functions past 0x3cc84 — real string data ("LinuxLoader\0\nASSERT_EFI_ERROR ...") begins immediately at true RVA 0x3cc8c, right after the last real function in the block — msr cntvoff_el2, x0 / ret at true RVA 0x3cc84–0x3cc8b. The ABL code section therefore effectively ends at 0x3cc8c, not 0x3cd44.

2.6.6. Provenance

Source:

../artifacts/abl_a/abl_dxe_fv.bin (all RVAs). Upstream reference (structural correlation only): CodeLinaro clo/la/abl/tianocore/edk2 at tag LA.UM.9.12.1.r2-05100-SMxx50.QSSI12.0.

Method:

radare2 (base 0) aa/aac/aap/aar function analysis; reachability by BFS over clean CALL cross-references from 0x1000 (class A) unioned with a raw 8-byte little-endian stored-pointer scan (class B); remainder is class C. Per-function strings resolved by decoding AArch64 adrp/add literal pairs with Capstone (radare2 does not resolve these as xrefs). Source-file attribution from embedded EDK2 ASSERT path strings. Tag enumeration via git ls-remote against CodeLinaro LA/LE and the Codeaurora mirror. Counts and rows are generated from the analysis artifacts, not hand-transcribed.

Cross-refs:

ABL overview, key handling, fastboot, ABL entry point and top-level orchestration, Kernel/DTB/ramdisk load and the kernel hand-off, AVB enforcement code path (LoadImageAndAuth / libavb), Fastboot handler internals (FastbootLib), Physical keys: power, volume, and the boot-mode dispatcher, Open questions and limits of analysis.