QEMU supports two types of guest image boot for virt, and the way for the guest code to locate the dtb binary differs:1.For guests using the Linux kernel boot protocol(this means any non-ELF file passed to the QEMU -kernel option)
the address of the DTB is passed in a register(r2 for32-bit guests, or x0 for64-bit guests)2.For guests booting as “bare-metal” (any other kind of boot)
the DTB is at the start of RAM(0x4000_0000)// 类似 u-boot.bin 或者 UEFI.bin