The H3 CPU has a small bootloader inside, that enumerated the SD card and eMMC to look for a user-made bootloader. IIRC it looks for some file inside of the file system, and loads it to 0x70000. Thus you can customize it if you have enough time :)
[1] https://github.com/ssvb/lima-memtester/releases/tag/20151207...