# Subsystem Behaviour Map

This map groups the recovered BIOS modules by externally visible behaviour. It
is intended as a navigation aid for analysis, not as a claim that every module
in the firmware has been fully reconstructed.

## Boot Core and Dispatch

| Behaviour | Evidence |
| --- | --- |
| PEI dispatcher, PEI services, PPI database, HOB creation, memory init | `MdeModulePkg/Core/Pei/PeiMain/PeiCore/README.md` |
| PEI-to-DXE transfer, DXE Core discovery, LZMA decompression, x64 page tables | `MdeModulePkg/Core/DxeIplPeim/README.md` |
| DXE services, protocol/handle database, memory, image loading, event/timer, dispatcher | `MdeModulePkg/Core/Dxe/SectionExtraction/CoreSectionExtraction/README.md` |
| SMM IPL, SMRAM allocation, SMM communication, SMM Core loading | `MdeModulePkg/Core/PiSmmCore/PiSmmIpl/README.md` |
| SMM Core SMST services and SMI handler dispatch | `MdeModulePkg/Core/PiSmmCore/PiSmmCore/README.md` |

## Security, Measurement, and Update Control

| Behaviour | Evidence |
| --- | --- |
| Intel Boot Guard PEI hash verification of firmware-volume segments | `PurleyPlatPkg/BootGuard/ExtendBtGSupportToDxe/Pei/BootGuardPei/README.md` |
| TPM 2.0 DXE protocol, PCR extend, event log, TPM ACPI update | `AmiModulePkg/TCG2/Common/TcgDxe/Tcg2Dxe/README.md` |
| TPM/TCG PEI and platform setup policy | `AmiModulePkg/TCG2/Common/TcgPei/TcgPei/README.md`, `AmiModulePkg/TCG2/Common/TcgPlatformSetupPolicy/README.md` |
| Secure Boot variable provisioning and `SetupMode` handling | `AmiModulePkg/SecureBoot/SecureBootDXE/README.md` |
| SMM TCG storage-security path | `AmiModulePkg/TcgStorageSecurity/SmmTcgStorageSec/README.md` |
| Flash and secure-flash update paths | `AmiModulePkg/Flash/SmiFlash/README.md`, `AmiModulePkg/SecureFlash/SecSMIFlash/README.md` |
| Crypto service initialization | `AmiCryptoPkg/CryptoLib/CryptLibInitRun/README.md`, `AmiCryptoPkg/CryptoSMM/README.md` |

## BMC, IPMI, and Out-of-Band Management

| Behaviour | Evidence |
| --- | --- |
| PEI BMC/IPMI initialization | `AmiIpmiPkg/Ipmi/PeiIpmiInitialize/PeiIpmiBmcInitialize/PeiIpmiBmcInitialize/README.md` |
| DXE KCS transport, BMC self-test, Type 42/SPMI records, boot flags | `AmiIpmiPkg/Ipmi/IpmiInitialize/DxeIpmiBmcInitialize/DxeIpmiBmcInitialize/README.md` |
| SMM IPMI initialization | `AmiIpmiPkg/Ipmi/SmmIpmiBmcInitialize/README.md` |
| SEL/status-code forwarding | `AmiIpmiPkg/Ipmi/DxeSelStatusCode/README.md`, `AmiIpmiPkg/Ipmi/PeiSelStatusCode/PeiSelStatusCode/README.md` |
| BMC event-log handling | `AmiIpmiPkg/Ipmi/BmcElog/BmcElog/README.md`, `AmiIpmiPkg/Ipmi/SmmBmcElog/README.md` |
| BMC LAN/IPMI network setup | `AmiNetworkPkg/UefiNetworkStack/Ipv4/BmcLanConfig/README.md`, `AmiNetworkPkg/UefiNetworkStack/Ipv6/Ip6BmcLanConfig/README.md` |
| Lenovo inventory collection for management consumers | `LenovoServerPkg/SystemInventory/SystemInventory/README.md`, `LenovoServerPkg/InventoryApp/README.md` |

## Setup, HII, and Boot Option Policy

| Behaviour | Evidence |
| --- | --- |
| AMI Aptio setup UI, menu database parsing, rendering, hotkeys | `AmiTsePkg/EDK/MiniSetup/AMITSE/README.md` |
| Boot-option management and UEFI boot variables | `AmiTsePkg/EDK/MiniSetup/AMITSE/README.md` |
| Lenovo setup variable and HII infrastructure | `LenovoServerPkg/Setup/README.md` |
| Server management setup pages | `LenovoServerPkg/ServerMgmtSetup/README.md` |
| Socket setup pages | `LenovoServerPkg/SocketSetup/README.md` |
| Setup defaults | `LenovoServerPkg/SetupDefaults/SetupDefaultLoad/README.md` |
| SKU/riser/board-specific setup updates | `PurleyRpPkg/Uba/UbaMain/Dxe/TypeNeonCityEPRP/SetupConfigUpdateDxe/README.md` and sibling `Type*/SetupConfigUpdateDxe` modules |
| Network, NVMe, PCI, TPM, FPGA setup pages | `AmiNetworkPkg/UefiNetworkStack/Common/NetworkStackSetupScreen/README.md`, `AmiModulePkg/Nvme/NvmeDynamicSetup/README.md`, `AmiModulePkg/PCI/PciOutOfResourceSetupPage/README.md`, `PurleySktPkg/Dxe/FpgaInit/FpgaSocketSetup/README.md` |

## Silicon, Board, and SKU Initialization

| Behaviour | Evidence |
| --- | --- |
| PCH/south-cluster PEI silicon init | `PurleySktPkg/SouthClusterLbg/SiInit/Pei/SiInitPreMem/README.md`, `PurleySktPkg/SouthClusterLbg/SiInit/Pei/SiInit/README.md` |
| PCH DXE/SMM init | `PurleySktPkg/SouthClusterLbg/PchInit/Dxe/PchInitDxe/README.md`, `PurleySktPkg/SouthClusterLbg/PchInit/Smm/PchInitSmm/README.md` |
| GPIO init and unlock paths | `PurleySktPkg/SouthClusterLbg/Gpio/Pei/GpioInit/README.md`, `PurleySktPkg/SouthClusterLbg/Gpio/Smm/PchGpioUnlockSmm/README.md` |
| SMBus DXE/SMM support | `PurleySktPkg/SouthClusterLbg/Smbus/Dxe/PchSmbusDxe/README.md`, `PurleySktPkg/SouthClusterLbg/Smbus/Smm/PchSmbusSmm/README.md` |
| ME/HECI communication | `PurleySktPkg/Me/Heci/Pei/HeciInit/README.md`, `PurleySktPkg/Me/Heci/Dxe/HeciInitDxe/README.md`, `PurleySktPkg/Me/Heci/Smm/HeciSmm/README.md` |
| Intel SPS integration | `PurleySktPkg/Me/Sps/Pei/SpsPei/README.md`, `PurleySktPkg/Me/Sps/Dxe/SpsDxe/README.md`, `PurleySktPkg/Me/Sps/Smm/SpsSmm/README.md` |
| FPGA configuration and error handling | `PurleyRpPkg/Uba/UbaMain/Dxe/TypeNeonCityFPGA/FpgaConfigDataDxe/README.md`, `PurleyPlatPkg/Ras/Smm/ErrHandling/FpgaErrorHandler/FpgaErrorHandler/README.md` |
| Board/SKU data update modules | `PurleyRpPkg/Uba/UbaMain/Dxe/Type*/StaticSkuDataDxe`, `Type*/SlotDataUpdateDxe`, `Type*/SmbiosDataUpdateDxe`, `Type*/IioCfgUpdateDxe` |

## Inventory, SMBIOS, ACPI, and OS-Facing Tables

| Behaviour | Evidence |
| --- | --- |
| Hardware inventory collection during POST | `LenovoServerPkg/SystemInventory/SystemInventory/README.md` |
| SMBIOS base support and DMI edit | `AmiCompatibilityPkg/Smbios/Smbios/README.md`, `AmiCompatibilityPkg/Smbios/SmbiosDmiEdit/README.md` |
| Lenovo SMBIOS type updates | `LenovoServerPkg/SmbiosType11/SmbiosType11/README.md`, `LenovoServerPkg/SmbiosType39/README.md`, `LenovoServerPkg/SmbiosRpTable/README.md` |
| Save SMBIOS data to platform/BMC consumers | `LenovoServerPkg/OemSaveSmbiosDxe/README.md` |
| ACPI and BMC ACPI integration | `AmiModulePkg/ACPI/ACPI/README.md`, `AmiIpmiPkg/Ipmi/BmcAcpi/BmcAcpi/README.md` |
| TPM ACPI update | `AmiModulePkg/TCG2/Common/Tpm20Acpi/README.md`, `AmiModulePkg/TCG2/Common/TcgDxe/Tcg2Dxe/README.md` |

## Storage, Boot Devices, and Legacy Compatibility

| Behaviour | Evidence |
| --- | --- |
| AHCI/SATA and SMM AHCI support | `AmiModulePkg/AHCI/Ahci/README.md`, `AmiModulePkg/AHCI/AhciSmm/README.md` |
| NVMe and dynamic NVMe setup | `AmiModulePkg/Nvme/Nvme/README.md`, `AmiModulePkg/Nvme/NvmeDynamicSetup/README.md` |
| SCSI disk/bus and FAT filesystem | `MdeModulePkg/Bus/Scsi/ScsiDiskDxe/README.md`, `MdeModulePkg/Bus/Scsi/ScsiBusDxe/README.md`, `FatPkg/EnhancedFatDxe/README.md` |
| ATA pass-through, HDD security, SMART | `AmiModulePkg/AtaPassThru/AtaPassThru/README.md`, `AmiModulePkg/HddSecurity/HddSecurity/README.md`, `AmiModulePkg/HddSmart/HddSMART/README.md` |
| Opal/TCG storage security | `AmiModulePkg/OpalSecurity/OpalSecurity/README.md`, `AmiModulePkg/TcgStorageSecurity/TcgStorageSecurity/README.md` |
| CSM and legacy INT13/video paths | `AmiModulePkg/CSM/CsmDxe/README.md`, `AmiModulePkg/CSM/Aint13/README.md`, `AmiModulePkg/CSM/CsmVideo/README.md` |

## Network and Remote Boot

| Behaviour | Evidence |
| --- | --- |
| SNP/MNP/IP stack base | `AmiNetworkPkg/UefiNetworkStack/SnpDxe/README.md`, `PcAtChipsetPkg/PcatRealTimeClockSmm/PcatRealTimeClockSmm/MnpDxe/README.md` |
| PXE boot | `AmiNetworkPkg/UefiNetworkStack/PxeBcDxe/README.md` |
| HTTP boot | `AmiNetworkPkg/UefiNetworkStack/HttpBootDxe/README.md` |
| iSCSI boot | `AmiNetworkPkg/IScsiDxe/IScsiDxe/README.md` |
| DNS/DHCP/IP protocol modules | `MdeModulePkg` and `AmiNetworkPkg/UefiNetworkStack` protocol subtrees |
| Redfish API support | `AmiNetworkPkg/Redfish/AmiRedFishApi/README.md` |

## POST, Logging, RAS, and Error Handling

| Behaviour | Evidence |
| --- | --- |
| Lenovo PEI/DXE POST status-code paths | `LenovoServerPkg/POSTStatus/LnvPeiStatusCode/README.md`, `LenovoServerPkg/POSTStatus/LnvDxeStatusCode/README.md` |
| POST data transfer and screen information | `LenovoServerPkg/POSTDataTransfer/README.md`, `LenovoServerPkg/PostScreenInfo/PostScreenInfo/README.md` |
| Lenovo OOB/status drivers | `LenovoServerPkg/POSTStatus/LnvOobDriverDxe/README.md`, `LenovoServerPkg/POSTStatus/LnvDriverDxe/README.md` |
| Generic and BMC event logs | `AmiModulePkg/GenericElog/GenericElog/README.md`, `AmiModulePkg/GenericElog/SmmGenericElog/README.md`, `AmiIpmiPkg/Ipmi/SmmBmcElog/README.md` |
| WHEA boot and error logging | `CpPlatPkg/Whea/WheaPlatformBoot/README.md`, `CpPlatPkg/Whea/WheaElog/README.md`, `CpPlatPkg/Whea/WheaErrorLog/README.md` |
| Purley RAS and SMM recovery | `PurleyPlatPkg/Ras/Smm/ErrHandling`, `PurleySktPkg/Smm/Ras` |

## Runtime, Variables, and SMM Services

| Behaviour | Evidence |
| --- | --- |
| Runtime services DXE/SMM bridge | `AmiModulePkg/RuntimeDxe/RuntimeDxe/README.md`, `AmiModulePkg/RuntimeSmm/RuntimeSmm/README.md` |
| NVRAM PEI/SMM and SMI variable services | `AmiModulePkg/NVRAM/NvramPei/README.md`, `AmiModulePkg/NVRAM/NvramSmm/README.md`, `AmiModulePkg/SmiVariable/SmiVariable/README.md` |
| S3 NVRAM/save-state support | `AmiModulePkg/NVRAM/S3NvramSave/README.md`, `AmiModulePkg/SmmS3SaveState/S3SaveStateDxe/README.md`, `AmiModulePkg/SmmS3SaveState/SmmS3SaveState/README.md` |
| RTC runtime and SMM services | `PcAtChipsetPkg/PcatRealTimeClockRuntimeDxe/PcRtc/README.md`, `PcAtChipsetPkg/PcatRealTimeClockSmm/PcatRealTimeClockSmm/PcRtcSmm/README.md` |
| Register access services | `CpRcPkg/Universal/RegAccess/Pei/RegAccessPeim/README.md`, `CpRcPkg/Universal/RegAccess/Dxe/RegAccessDxe/README.md`, `CpRcPkg/Universal/RegAccess/Smm/RegAccessSMM/README.md` |

## High-Risk Analysis Areas

Prioritize direct source inspection before drawing conclusions in these areas:

- SMM communication and buffer validation.
- Flash and secure-flash update handlers.
- Runtime variable services and setup-variable policy.
- Secure Boot database provisioning.
- TPM physical-presence, MOR, and PCR event-log handling.
- BMC/IPMI command transport and SEL/status-code forwarding.
- RAS/WHEA SMI handlers and error-injection paths.
- CSM/legacy boot and storage-security paths.