; flash seems to get mapped to ff000
; reset vector is f000:fff0 = ffff0
; so there's ff0 = 4080 bytes of something before the reset vector. what is it?

[bits 16]
[org 0xff000]

times (0xff0 - ($ - $$)) db 0x00

  mov eax, 0xcafeface
  hlt

times (0x1000 - ($ - $$)) db 0xf4