It's at 0xfffc0000, just copying it to 0xc0000 does not seem to work...
yep.
Ok,
Ahh.. Thats it. So its in the gx datasheet and not the northbridge.
BC_XMAP_3 bits 31:28.
That controls the read/write access to the Fc000 to FFFFF . It defaults on reset to 0 which is read but no write. So verify that you have write enabled prior to when the emulator is called.
-- Richard A. Smith