On the official website I can’t find the “start address” it used for loading device tree blob file, so I decide writing a program traversal all of memory find the entry it stored the .dtb magic number.