I've come across five places in the $32 code with an SWI instruction. This instruction should vector to the 16 bit address pointed to by locations $FFF0 and $FFF1. The problem is that $32 has the address set to $6000 and there's NOTHING THERE. Unless I'm missing something, the next event would be to jump to the illegal address vector at $FFF8-$FFF9 which points to the hot restart address $C800.

Anyone care to offer an explanation for this wierd programming? All I can think of is "We can't get the ECM to stop crashing, so let's just make sure it reboots often"

 

All Vectors are at the very end of the BIN. Remember that while the MAF bin is only 16K big (Hex 4000), it's starting address is actually Hex C000 to FFFF for the ECM.