there was a off by one error when reading the end of the 1mb range causing it to return bad offset/count. code changed to also allow write access to the vga framebuffers (0xa0000-0xaffff) and (0xb0000-0xbffff) so realemu can propery switch to text mode and clear the framebuffer.