Linear sweep missing many thumb2 functions

See internal binary problem service sweep initiative

Examples at 0x87e923c4, 0x87e8882c, and lots of other places in the binary

The pseudocode for bx shows that we should be considering creating thumb2 functions at even addresses (taken from here):

// BXWritePC()
// ===========

BXWritePC(bits(32) address)
    if CurrentInstrSet() == InstrSet_ThumbEE then
        if address<0> == '1' then
            BranchTo(address<31:1>:'0');  // Remaining in ThumbEE state
        else
            UNPREDICTABLE;
    else
        if address<0> == '1' then
            SelectInstrSet(InstrSet_Thumb);
            BranchTo(address<31:1>:'0');
        elsif address<1> == '0' then
            SelectInstrSet(InstrSet_ARM);
            BranchTo(address);
        else // address<1:0> == '10'
            UNPREDICTABLE;

Start by reproducing the linear sweep on the referenced internal binary and inspect handling around 0x87e923c4 and 0x87e8882c. Compare the bx behavior with the linked ARM pseudocode, then identify an existing sweep test or entry point to exercise the case. Done means the missing Thumb2 functions are discovered at the reported even addresses without regressing other ARM/Thumb analysis.