And a deeper investigation shows that the only place where there is a switch from emulation to native mode occurs at $8000, but that code also jumps to $fe72 where there is no defined content. That might call into question if the ROM is dumped fully. Definitely not something that I can fix.