Oh well, I guess I get the very big picture. As Nova is written in C++, not C, the code contains constructors that somehow must be called almost as the first thing the hypervisor do. It seems the compilers make an array of function pointers to constructors functions (pointing inside .text I presume) that it puts inside a .ctors section of the .elf file. Guess I need to use nm and/or readelf on the hypervisor file to know more.