[Sony Xperia XZ Premium Guides, News, & Discussion] munjeni:
s1 use some fastboot commands, probably we can use others one too

v0 = calloc(1uLL, 0xA0uLL);
if ( !v0 )
{
v162 = sub_23338("vendor/semc/fs/build/../main/build/linux/../../loader/protocol/fastboot.c");
sub_4D838(
"[ERROR @ %s:%d]:\nprot_init calloc of handle failed\n",
(__int64)v162,
2082LL,
v163,
v164,
v165,
v166,
v167,
v175);
return 0LL;
}
v1 = sub_4DB44();
*v0 = v1;
if ( !v1 )
{
v168 = sub_23338("vendor/semc/fs/build/../main/build/linux/../../loader/protocol/fastboot.c");
sub_4D838("[ERROR @ %s:%d]:\ntr_open failed\n", (__int64)v168, 2088LL, v169, v170, v171, v172, v173, v175);
LABEL_37:
free(v0);
return 0LL;
}
sub_2BC2C("version", (__int64)sub_2BDBC, v2, v3, v4, v5, v6, v7, v175);
sub_2BC2C("max-download-size", (__int64)sub_2BDE4, v8, v9, v10, v11, v12, v13, v14);
sub_2BC2C("Version-sony", (__int64)sub_2BE14, v15, v16, v17, v18, v19, v20, v21);
sub_2BC2C("Loader-version", (__int64)sub_2BE3C, v22, v23, v24, v25, v26, v27, v28);
sub_2BC2C("serialno", (__int64)sub_2BE70, v29, v30, v31, v32, v33, v34, v35);
sub_2BC2C("version-bootloader", (__int64)sub_2BE84, v36, v37, v38, v39, v40, v41, v42);
sub_2BC2C("version-baseband", (__int64)sub_2BE98, v43, v44, v45, v46, v47, v48, v49);
sub_2BC2C("product", (__int64)sub_2BEAC, v50, v51, v52, v53, v54, v55, v56);
sub_2BC2C("Phone-id", (__int64)sub_2BEC0, v57, v58, v59, v60, v61, v62, v63);
sub_2BC2C("Rooting-status", (__int64)sub_2BEC8, v64, v65, v66, v67, v68, v69, v70);
sub_2BC2C("Device-id", (__int64)sub_2BED0, v71, v72, v73, v74, v75, v76, v77);
sub_2BC2C("Platform-id", (__int64)sub_2BF48, v78, v79, v80, v81, v82, v83, v84);
sub_2BC2C("Frp-partition", (__int64)sub_2BFC0, v85, v86, v87, v88, v89, v90, v91);
sub_2BC2C("secure", (__int64)sub_2BFE8, v92, v93, v94, v95, v96, v97, v98);
sub_2BC2C("Sector-size", (__int64)sub_2BFF0, v99, v100, v101, v102, v103, v104, v105);
sub_2BC2C("Ufs-info", (__int64)sub_2C040, v106, v107, v108, v109, v110, v111, v112);
sub_2BC2C("Emmc-info", (__int64)sub_2C050, v113, v114, v115, v116, v117, v118, v119);
sub_2BC2C("Keystore-counter", (__int64)sub_2C060, v120, v121, v122, v123, v124, v125, v126);
sub_2BC2C("Sake-root", (__int64)sub_2C198, v127, v128, v129, v130, v131, v132, v133);
sub_2BC2C("Default-security", (__int64)sub_2C244, v134, v135, v136, v137, v138, v139, v140);
sub_2BC2C("S1-root", (__int64)sub_2C290, v141, v142, v143, v144, v145, v146, v147);
sub_2BC2C("Security-state", (__int64)sub_2C2DC, v148, v149, v150, v151, v152, v153, v154);
sub_2BC2C("USB-version", (__int64)sub_2C448, v155, v156, v157, v158, v159, v160, v161);
if ( (unsigned int)sub_2C450(off_139020[0], (__int64)sub_2C5F4, 1)
|| (unsigned int)sub_2C450(off_139060[0], (__int64)sub_2C6E8, 1)
|| (unsigned int)sub_2C450(off_139068[0], (__int64)&loc_2C704, 1)
|| (unsigned int)sub_2C450(off_139070[0], (__int64)&loc_2C720, 1)
|| (unsigned int)sub_2C450(off_139078[0], (__int64)&loc_2C73C, 1)
|| (unsigned int)sub_2C450(off_139098[0], (__int64)&loc_2C758, 1)
|| (unsigned int)sub_2C450(off_139018[0], (__int64)&loc_2D1A8, 1)
|| (unsigned int)sub_2C450(off_1390B8[0], (__int64)&loc_2D4F0, 1)
|| (unsigned int)sub_2C450(off_1390C0[0], (__int64)&loc_2D730, 0)
|| (unsigned int)sub_2C450(off_139080[0], (__int64)&loc_2D948, 1)
|| (unsigned int)sub_2C450(off_139088[0], (__int64)&loc_2DCF8, 1)
|| (unsigned int)sub_2C450(off_139030[0], (__int64)&loc_2E270, 0)
|| (unsigned int)sub_2C450(off_139008[0], (__int64)&loc_2E5D4, 0)
|| (unsigned int)sub_2C450(off_139010[0], (__int64)&loc_2EA88, 0)
|| (unsigned int)sub_2C450(off_139028[0], (__int64)&loc_2ECA4, 0)
|| (unsigned int)sub_2C450(off_139038[0], (__int64)&loc_2F070, 0)
|| (unsigned int)sub_2C450(off_139040[0], (__int64)&loc_2F3D8, 0)
|| (unsigned int)sub_2C450(off_139058[0], (__int64)&loc_2F51C, 0)
|| (unsigned int)sub_2C450(off_139048[0], (__int64)&loc_2F5FC, 0)
|| (unsigned int)sub_2C450(off_139050[0], (__int64)&loc_2F6DC, 0)
|| (unsigned int)sub_2C450(off_139090[0], (__int64)&loc_2F7BC, 0)
|| (unsigned int)sub_2C450(off_1390A0[0], (__int64)&loc_2FBA4, 0)
|| (unsigned int)sub_2C450(off_1390A8[0], (__int64)&loc_2FCE8, 0)
|| (unsigned int)sub_2C450(off_1390B0[0], (__int64)&loc_2FE78, 0)
|| (unsigned int)sub_2C450(off_1390C8[0], (__int64)&loc_30784, 0)
|| (unsigned int)sub_2C450(off_1390D0[0], (__int64)&loc_30A4C, 0)
|| (unsigned int)sub_2C450(off_1390D8[0], (__int64)&loc_30CB8, 0)
|| (unsigned int)sub_2C450(off_1390E0[0], (__int64)&loc_3126C, 0)
|| (unsigned int)sub_2C450(off_1390E8[0], (__int64)&loc_31484, 0)
|| (unsigned int)sub_2C450(off_1390F0[0], (__int64)&loc_315D4, 0)
|| (unsigned int)sub_2C450(off_1390F8[0], (__int64)&loc_31978, 0) )
{
goto LABEL_37;
}
return v0;
}

These thing we can read with fastboot getvar too? Anybody tried list all fastboot commands including oems one? https://androidforums.com/threads/list-of-fastboot-command.714676/