Hi kizwan! About TOLUD there is not so simple as I thought at first. Currently, I have decoded about 50% of 64 KB boot block(000F0000-000FFFFF).In the fragment "Pre" I probably made a mistake. So I decided to first decode the entire block, and then work on the bugs. I just examine the code that allocates the address space and sets all main registers. Definitely i can not say anything, because the values of chipset registers are changed one after another and sometimes several times.As soon as it becomes clear where the code is evaluated (set TOLUD value) I will tell you immediately. The process of decoding is tedious but very interesting for me.