Here is the CIF output I captured after adding FILLL.
>> =============================================================
>> OpenBIOS 1.0 [Nov 19 2012 20:51]
>> Configuration device id QEMU version 1 machine id 2
>> CPUs: 1
>> Memory: 128M
>> UUID: 00000000-0000-0000-0000-000000000000
>> CPU type PowerPC,750
Welcome to OpenBIOS v1.0 built on Nov 19 2012 20:51
Trying hd:,\\:tbxi...
Trying hd:,\ppc\bootinfo.txt...
No valid state has been set by load or init-program
0 > boot cd:,\\:tbxi >> finddevice("/openprom") = 0xfff69f4c
>> getprop(0xfff69f4c, "model", 0x0565f68c, 255) = 15
>> 0x0565f68c 4f 70 65 6e 46 69 72 6d 77 61 72 65 20 33 00 __ OpenFirmware 3.
>> peer(0x00000000) = 0xfff69d8c
>> getprop(0xfff69d8c, "#address-cells", 0x056579d0, 4) = 4
>> 0x056579d0 00 00 00 01 __ __ __ __ __ __ __ __ __ __ __ __ ....
>> peer(0x00000000) = 0xfff69d8c
>> getprop(0xfff69d8c, "#size-cells", 0x056579d4, 4) = 4
>> 0x056579d4 00 00 00 01 __ __ __ __ __ __ __ __ __ __ __ __ ....
>> of_client_interface: interpret 05616674
>> interpret hex unselect-dev " /packages" find-device new-device " sl_words" device-name : open true ; : close ; 0 value outputLevel : slw_set_output_level dup 0= if 0 stdout ! then to outputLevel ; : slw_emit 2 outputLevel <= if emit else drop then ; : slw_cr 2 outputLevel <= if cr then ; 0 value keyboardIH 20 buffer: keyMap : slw_init_keymap to keyboardIH keyMap dup 20 0 fill ; : slw_update_keymap { ; dpth } depth -> dpth keyboardIH if " get-key-map" keyboardIH $call-method depth dpth - 1 = if 20 then 4 / 0 do dup i 4 * + l@ keyMap i 4 * + tuck l@ or swap l! loop drop then ; 0 value screenIH 0 value cursorAddr 0 value cursorX 0 value cursorY 0 value cursorW 0 value cursorH 0 value cursorFrames 0 value cursorPixelSize 0 value cursorStage 0 value cursorTime 0 value cursorDelay : slw_spin screenIH 0<> cursorAddr 0<> and if get-msecs dup cursorTime - cursorDelay >= if to cursorTime slw_update_keymap cursorStage 1+ cursorFrames mod dup to cursorStage handle_calls return: 00000000 07c5b8e0
>> finddevice("/options") = 0xfff6a0f4
>> finddevice("/chosen") = 0xfff6a16c
>> of_client_interface: interpret 056133e4
>> interpret dev /chosen new-device " memory-map" device-name active-package device-end ([1] -- [2])
>> handle_calls return: 00000000 fff77c8c
>> getprop(0xfff6a16c, "mmu", 0x056579ec, 4) = 4
>> 0x056579ec 07 c5 a8 2c __ __ __ __ __ __ __ __ __ __ __ __ .Ũ,
>> getprop(0xfff6a16c, "memory", 0x056579f0, 4) = 4
>> 0x056579f0 07 c5 ae 58 __ __ __ __ __ __ __ __ __ __ __ __ .ŮX
>> peer(0x00000000) = 0xfff69d8c
>> of_client_interface: interpret 05616db8 fff69d8c 0000000a 056131d4
>> interpret get-package-property if 0 0 then ([4] -- [3])
>> handle_calls return: 00000000 00000019 fff76f6c
>> getprop(0xfff6a16c, "stdout", 0x056579f4, 4) = 4
>> 0x056579f4 07 c5 af 5c __ __ __ __ __ __ __ __ __ __ __ __ .ů\
>> instance-to-package(0x07c5af5c) = 0xfff76640
>> getprop(0xfff6a16c, "stdin", 0x056579f8, 4) = 4
>> 0x056579f8 07 c5 b0 64 __ __ __ __ __ __ __ __ __ __ __ __ .Űd
>> instance-to-package(0x07c5b064) = 0xfff76640
>> getprop(0xfff76640, "name", 0x0565f81c, 31) = 5
>> 0x0565f81c 63 68 2d 62 00 __ __ __ __ __ __ __ __ __ __ __ ch-b.
>> open("keyboard") = 0x07c5bc88
>> of_client_interface: call-method 05616d78 07c5b8e0 07c5bc88
>> call-method slw_init_keymap ([3] -- [2])
>> handle_calls return: 00000000 fff77754
>> of_client_interface: call-method 05616d88 07c5b8e0
>> call-method slw_update_keymap ([2] -- [1])
>> handle_calls return: 00000000
>> getprop(0xfff6a0f4, "security-mode", 0x0565f83c, 32) = -1
>> of_client_interface: call-method 05616d60 07c5b8e0 00000000
>> call-method slw_set_output_level ([3] -- [1])
>> handle_calls return: 00000000
>> of_client_interface: call-method 05613c70 07c5b8e0
>> call-method slw_cr ([2] -- [1])
>> handle_calls return: 00000000
>> of_client_interface: call-method 05613c70 07c5b8e0
>> call-method slw_cr ([2] -- [1])
>> handle_calls return: 00000000
>> of_client_interface: call-method 05613c78 07c5b8e0 0000004d
>> call-method slw_emit ([3] -- [1])
>> handle_calls return: 00000000
>> of_client_interface: call-method 05613c78 07c5b8e0 00000061
>> call-method slw_emit ([3] -- [1])
>> handle_calls return: 00000000
>> of_client_interface: call-method 05613c78 07c5b8e0 00000063
>> call-method slw_emit ([3] -- [1])
>> handle_calls return: 00000000
>> of_client_interface: call-method 05613c78 07c5b8e0 00000020
>> call-method slw_emit ([3] -- [1])
>> handle_calls return: 00000000
>> of_client_interface: call-method 05613c78 07c5b8e0 0000004f
>> call-method slw_emit ([3] -- [1])
>> handle_calls return: 00000000
>> of_client_interface: call-method 05613c78 07c5b8e0 00000053
>> call-method slw_emit ([3] -- [1])
>> handle_calls return: 00000000
>> of_client_interface: call-method 05613c78 07c5b8e0 00000020
>> call-method slw_emit ([3] -- [1])
>> handle_calls return: 00000000
>> of_client_interface: call-method 05613c78 07c5b8e0 00000058
>> call-method slw_emit ([3] -- [1])
>> handle_calls return: 00000000
>> of_client_interface: call-method 05613c78 07c5b8e0 00000020
>> call-method slw_emit ([3] -- [1])
>> handle_calls return: 00000000
>> of_client_interface: call-method 05613c78 07c5b8e0 0000004c
>> call-method slw_emit ([3] -- [1])
>> handle_calls return: 00000000
>> of_client_interface: call-method 05613c78 07c5b8e0 0000006f
>> call-method slw_emit ([3] -- [1])
>> handle_calls return: 00000000
>> of_client_interface: call-method 05613c78 07c5b8e0 00000061
>> call-method slw_emit ([3] -- [1])
>> handle_calls return: 00000000
>> of_client_interface: call-method 05613c78 07c5b8e0 00000064
>> call-method slw_emit ([3] -- [1])
>> handle_calls return: 00000000
>> of_client_interface: call-method 05613c78 07c5b8e0 00000065
>> call-method slw_emit ([3] -- [1])
>> handle_calls return: 00000000
>> of_client_interface: call-method 05613c78 07c5b8e0 00000072
>> call-method slw_emit ([3] -- [1])
>> handle_calls return: 00000000
>> of_client_interface: call-method 05613c70 07c5b8e0
>> call-method slw_cr ([2] -- [1])
>> handle_calls return: 00000000
>> claim(0x05000000, 4194304, 0) = 0x05000000
>> claim(0x05400000, 2097152, 0) = 0x05400000
>> claim(0x04000000, 16777216, 0) = 0x04000000
>> claim(0x00004000, 67092480, 0) = 0x00004000
>> peer(0x00000000) = 0xfff69d8c
>> child(0xfff69d8c) = 0xfff69ea8
>> getprop(0xfff69ea8, "device_type", 0x056569c8, 4095) = -1
>> child(0xfff69ea8) = 0x00000000
>> peer(0xfff69ea8) = 0xfff69f4c
>> getprop(0xfff69f4c, "device_type", 0x056569c8, 4095) = 8
>> 0x056569c8 42 6f 6f 74 52 4f 4d 00 __ __ __ __ __ __ __ __ BootROM.
>> child(0xfff69f4c) = 0xfff6fd0c
>> getprop(0xfff6fd0c, "device_type", 0x056569c8, 4095) = -1
>> child(0xfff6fd0c) = 0x00000000
>> peer(0xfff6fd0c) = 0x00000000
>> peer(0xfff69f4c) = 0xfff6a0f4
>> getprop(0xfff6a0f4, "device_type", 0x056569c8, 4095) = -1
>> child(0xfff6a0f4) = 0x00000000
>> peer(0xfff6a0f4) = 0xfff6a16c
>> getprop(0xfff6a16c, "device_type", 0x056569c8, 4095) = -1
>> child(0xfff6a16c) = 0xfff77c8c
>> getprop(0xfff77c8c, "device_type", 0x056569c8, 4095) = -1
>> child(0xfff77c8c) = 0x00000000
>> peer(0xfff77c8c) = 0x00000000
>> peer(0xfff6a16c) = 0xfff6a250
>> getprop(0xfff6a250, "device_type", 0x056569c8, 4095) = -1
>> child(0xfff6a250) = 0xfff6a2f4
>> getprop(0xfff6a2f4, "device_type", 0x056569c8, 4095) = -1
>> child(0xfff6a2f4) = 0x00000000
>> peer(0xfff6a2f4) = 0x00000000
>> peer(0xfff6a250) = 0xfff6fa00
>> getprop(0xfff6fa00, "device_type", 0x056569c8, 4095) = -1
>> child(0xfff6fa00) = 0xfff70b14
>> getprop(0xfff70b14, "device_type", 0x056569c8, 4095) = -1
>> child(0xfff70b14) = 0x00000000
>> peer(0xfff70b14) = 0xfff70c54
>> getprop(0xfff70c54, "device_type", 0x056569c8, 4095) = -1
>> child(0xfff70c54) = 0x00000000
>> peer(0xfff70c54) = 0xfff718c4
>> getprop(0xfff718c4, "device_type", 0x056569c8, 4095) = -1
>> child(0xfff718c4) = 0x00000000
>> peer(0xfff718c4) = 0xfff724b4
>> getprop(0xfff724b4, "device_type", 0x056569c8, 4095) = -1
>> child(0xfff724b4) = 0x00000000
>> peer(0xfff724b4) = 0xfff72808
>> getprop(0xfff72808, "device_type", 0x056569c8, 4095) = -1
>> child(0xfff72808) = 0x00000000
>> peer(0xfff72808) = 0xfff72aa8
>> getprop(0xfff72aa8, "device_type", 0x056569c8, 4095) = -1
>> child(0xfff72aa8) = 0x00000000
>> peer(0xfff72aa8) = 0xfff72d44
>> getprop(0xfff72d44, "device_type", 0x056569c8, 4095) = -1
>> child(0xfff72d44) = 0x00000000
>> peer(0xfff72d44) = 0xfff72f7c
>> getprop(0xfff72f7c, "device_type", 0x056569c8, 4095) = -1
>> child(0xfff72f7c) = 0x00000000
>> peer(0xfff72f7c) = 0xfff731b4
>> getprop(0xfff731b4, "device_type", 0x056569c8, 4095) = -1
>> child(0xfff731b4) = 0x00000000
>> peer(0xfff731b4) = 0xfff733ec
>> getprop(0xfff733ec, "device_type", 0x056569c8, 4095) = -1
>> child(0xfff733ec) = 0x00000000
>> peer(0xfff733ec) = 0xfff73624
>> getprop(0xfff73624, "device_type", 0x056569c8, 4095) = -1
>> child(0xfff73624) = 0x00000000
>> peer(0xfff73624) = 0xfff73858
>> getprop(0xfff73858, "device_type", 0x056569c8, 4095) = -1
>> child(0xfff73858) = 0x00000000
>> peer(0xfff73858) = 0xfff73924
>> getprop(0xfff73924, "device_type", 0x056569c8, 4095) = -1
>> child(0xfff73924) = 0x00000000
>> peer(0xfff73924) = 0xfff739ec
>> getprop(0xfff739ec, "device_type", 0x056569c8, 4095) = -1
>> child(0xfff739ec) = 0x00000000
>> peer(0xfff739ec) = 0xfff775b4
>> getprop(0xfff775b4, "device_type", 0x056569c8, 4095) = -1
>> child(0xfff775b4) = 0x00000000
>> peer(0xfff775b4) = 0x00000000
>> peer(0xfff6fa00) = 0xfff716c4
>> getprop(0xfff716c4, "device_type", 0x056569c8, 4095) = -1
>> child(0xfff716c4) = 0xfff77040
>> getprop(0xfff77040, "device_type", 0x056569c8, 4095) = 4
>> 0x056569c8 63 70 75 00 __ __ __ __ __ __ __ __ __ __ __ __ cpu.
>> child(0xfff77040) = 0x00000000
>> peer(0xfff77040) = 0x00000000
>> peer(0xfff716c4) = 0xfff717c4
>> getprop(0xfff717c4, "device_type", 0x056569c8, 4095) = 7
>> 0x056569c8 6d 65 6d 6f 72 79 00 __ __ __ __ __ __ __ __ __ memory.
>> child(0xfff717c4) = 0x00000000
>> peer(0xfff717c4) = 0xfff73ab8
>> getprop(0xfff73ab8, "device_type", 0x056569c8, 4095) = 4
>> 0x056569c8 70 63 69 00 __ __ __ __ __ __ __ __ __ __ __ __ pci.
>> child(0xfff73ab8) = 0xfff73ed0
>> getprop(0xfff73ed0, "device_type", 0x056569c8, 4095) = 8
>> 0x056569c8 64 69 73 70 6c 61 79 00 __ __ __ __ __ __ __ __ display.
>> child(0xfff73ed0) = 0x00000000
>> peer(0xfff73ed0) = 0xfff743a4
>> getprop(0xfff743a4, "device_type", 0x056569c8, 4095) = 8
>> 0x056569c8 6e 65 74 77 6f 72 6b 00 __ __ __ __ __ __ __ __ network.
>> child(0xfff743a4) = 0x00000000
>> peer(0xfff743a4) = 0xfff74780
>> getprop(0xfff74780, "device_type", 0x056569c8, 4095) = 8
>> 0x056569c8 70 63 69 2d 69 64 65 00 __ __ __ __ __ __ __ __ pci-ide.
>> child(0xfff74780) = 0xfff74bbc
>> getprop(0xfff74bbc, "device_type", 0x056569c8, 4095) = 4
>> 0x056569c8 61 74 61 00 __ __ __ __ __ __ __ __ __ __ __ __ ata.
>> child(0xfff74bbc) = 0xfff74d3c
>> getprop(0xfff74d3c, "device_type", 0x056569c8, 4095) = 6
>> 0x056569c8 62 6c 6f 63 6b 00 __ __ __ __ __ __ __ __ __ __ block.
>> child(0xfff74d3c) = 0x00000000
>> peer(0xfff74d3c) = 0x00000000
>> peer(0xfff74bbc) = 0xfff75108
>> getprop(0xfff75108, "device_type", 0x056569c8, 4095) = 4
>> 0x056569c8 61 74 61 00 __ __ __ __ __ __ __ __ __ __ __ __ ata.
>> child(0xfff75108) = 0x00000000
>> peer(0xfff75108) = 0x00000000
>> peer(0xfff74780) = 0xfff75288
>> getprop(0xfff75288, "device_type", 0x056569c8, 4095) = 7
>> 0x056569c8 6d 61 63 2d 69 6f 00 __ __ __ __ __ __ __ __ __ mac-io.
>> child(0xfff75288) = 0xfff75768
>> getprop(0xfff75768, "device_type", 0x056569c8, 4095) = 9
>> 0x056569c8 76 69 61 2d 63 75 64 61 00 __ __ __ __ __ __ __ via-cuda.
>> child(0xfff75768) = 0xfff75984
>> getprop(0xfff75984, "device_type", 0x056569c8, 4095) = 4
>> 0x056569c8 61 64 62 00 __ __ __ __ __ __ __ __ __ __ __ __ adb.
>> child(0xfff75984) = 0xfff75aec
>> getprop(0xfff75aec, "device_type", 0x056569c8, 4095) = 9
>> 0x056569c8 6b 65 79 62 6f 61 72 64 00 __ __ __ __ __ __ __ keyboard.
>> child(0xfff75aec) = 0x00000000
>> peer(0xfff75aec) = 0xfff75d14
>> getprop(0xfff75d14, "device_type", 0x056569c8, 4095) = 6
>> 0x056569c8 6d 6f 75 73 65 00 __ __ __ __ __ __ __ __ __ __ mouse.
>> child(0xfff75d14) = 0x00000000
>> peer(0xfff75d14) = 0x00000000
>> peer(0xfff75984) = 0xfff75ea0
>> getprop(0xfff75ea0, "device_type", 0x056569c8, 4095) = 4
>> 0x056569c8 72 74 63 00 __ __ __ __ __ __ __ __ __ __ __ __ rtc.
>> child(0xfff75ea0) = 0x00000000
>> peer(0xfff75ea0) = 0x00000000
>> peer(0xfff75768) = 0xfff76080
>> getprop(0xfff76080, "device_type", 0x056569c8, 4095) = 6
>> 0x056569c8 6e 76 72 61 6d 00 __ __ __ __ __ __ __ __ __ __ nvram.
>> child(0xfff76080) = 0x00000000
>> peer(0xfff76080) = 0xfff762a0
>> getprop(0xfff762a0, "device_type", 0x056569c8, 4095) = 5
>> 0x056569c8 65 73 63 63 00 __ __ __ __ __ __ __ __ __ __ __ escc.
>> child(0xfff762a0) = 0xfff763a8
>> getprop(0xfff763a8, "device_type", 0x056569c8, 4095) = 7
>> 0x056569c8 73 65 72 69 61 6c 00 __ __ __ __ __ __ __ __ __ serial.
>> child(0xfff763a8) = 0x00000000
>> peer(0xfff763a8) = 0xfff76640
>> getprop(0xfff76640, "device_type", 0x056569c8, 4095) = 7
>> 0x056569c8 73 65 72 69 61 6c 00 __ __ __ __ __ __ __ __ __ serial.
>> child(0xfff76640) = 0x00000000
>> peer(0xfff76640) = 0x00000000
>> peer(0xfff762a0) = 0xfff768ac
>> getprop(0xfff768ac, "device_type", 0x056569c8, 4095) = 4
>> 0x056569c8 61 74 61 00 __ __ __ __ __ __ __ __ __ __ __ __ ata.
>> child(0xfff768ac) = 0xfff76b54
>> getprop(0xfff76b54, "device_type", 0x056569c8, 4095) = 6
>> 0x056569c8 62 6c 6f 63 6b 00 __ __ __ __ __ __ __ __ __ __ block.
>> child(0xfff76b54) = 0x00000000
>> peer(0xfff76b54) = 0x00000000
>> peer(0xfff768ac) = 0x00000000
>> peer(0xfff75288) = 0x00000000
>> parent(0xfff73ed0) = 0xfff73ab8
>> peer(0xfff73ab8) = 0x00000000
>> parent(0xfff73ab8) = 0xfff69d8c
>> peer(0xfff69d8c) = 0x00000000
>> parent(0xfff69d8c) = 0x00000000
>> finddevice("/chaos/control") = 0xffffffff
>> finddevice("screen") = 0xfff76640
>> of_client_interface: interpret 0561366c
>> interpret " _screen-ihandle" $find if execute else 0 then ([1] -- [2])
>> interpret '" _screen-ihandle" $find if execute else 0 then': possible argument error (-1--2) got 2
>> handle_calls return: 00000000 00000000
>> package-to-path(0xfff73ed0, 0x0565f5ac, 255) = 24
>> 0x0565f5ac 2f 70 63 69 40 38 30 30 30 30 30 30 30 2f 51 45 /pci@80000000/QE
>> 0x0565f5bc 4d 55 2c 56 47 41 40 31 __ __ __ __ __ __ __ __ MU,VGA@1
>> open("/pci@80000000/QEMU,VGA@1:0") = 0x07c5bcf4
>> getprop(0xfff73ed0, "display-type", 0x0565f6bc, 31) = -1
>> getprop(0xfff73ed0, "address", 0x0562aba4, 4) = 4
>> 0x0562aba4 80 00 00 00 __ __ __ __ __ __ __ __ __ __ __ __ ....
>> getprop(0xfff73ed0, "width", 0x0562aba8, 4) = 4
>> 0x0562aba8 00 00 03 20 __ __ __ __ __ __ __ __ __ __ __ __ ...
>> getprop(0xfff73ed0, "height", 0x0562abac, 4) = 4
>> 0x0562abac 00 00 02 58 __ __ __ __ __ __ __ __ __ __ __ __ ...X
>> getprop(0xfff73ed0, "depth", 0x0562abb0, 4) = 4
>> 0x0562abb0 00 00 00 0f __ __ __ __ __ __ __ __ __ __ __ __ ....
>> getprop(0xfff73ed0, "linebytes", 0x0562abb4, 4) = 4
>> 0x0562abb4 00 00 06 40 __ __ __ __ __ __ __ __ __ __ __ __ ...@
>> of_client_interface: interpret 056136e4 00000001 00000640 fff73ed0
>> interpret value depthbytes value rowbytes to active-package frame-buffer-adr value this-frame-buffer-adr : rect-setup >r >r rowbytes * swap depthbytes * + this-frame-buffer-adr + r> depthbytes * -rot r> ; : DRAW-RECTANGLE rect-setup 0 ?do 2dup 4 pick move 2 pick rowbytes d+ loop 3drop ; : FILL-RECTANGLE rect-setup rot depthbytes case 1 of dup 8 << or dup 10 << or endof 2 of dup 10 << or endof endcase -rot 0 ?do dup 3 pick 3 pick filll rowbytes + loop 3drop ; : READ-RECTANGLE rect-setup >r swap r> 0 ?do 2dup 4 pick move rowbytes 3 pick d+ loop 3drop ; this-frame-buffer-adr 0 to active-package ([4] -- [2])
>> handle_calls return: 00000000 80000000
>> of_client_interface: call-method 05613620 07c5bcf4 00000258 00000320 00000000 00000000 00000001
>> call-method fill-rectangle ([7] -- [1])
>> handle_calls return: 00000000
>> getprop(0xfff6a16c, "bootpath", 0x056567c8, 255) = 12
>> 0x056567c8 63 64 3a 2c 5c 5c 3a 74 62 78 69 00 __ __ __ __ cd:,\\:tbxi.
>> finddevice("cd:,\\:tbxi") = 0xfff74d3c
>> getprop(0xfff74d3c, "device_type", 0x0565f7bc, 31) = 6
>> 0x0565f7bc 62 6c 6f 63 6b 00 __ __ __ __ __ __ __ __ __ __ block.
>> getprop(0xfff6a16c, "bootargs", 0x056568c8, 256) = 1
>> 0x056568c8 00 __ __ __ __ __ __ __ __ __ __ __ __ __ __ __ .
>> setprop(0xfff6a16c, "rootpath", 0x056568c8, 19)
>> 0x056568c8 63 64 3a 30 2c 5c 5c 6d 61 63 68 5f 6b 65 72 6e cd:0,\\mach_kern
>> 0x056568d8 65 6c 00 __ __ __ __ __ __ __ __ __ __ __ __ __ el.
>> = 19
>> setprop(0xfff73ed0, "AAPL,boot-display", 0x00000000, 0)
>> = 0
>> of_client_interface: call-method 05613610 07c5bcf4 00000080 00000080 000000ec 00000150 05617280
>> call-method draw-rectangle ([7] -- [1])