It exploits a feature of the ECS Agnus, basically it always sees the additional 512k from the trapdoor as Chip RAM even if the OS sees it as Ranger Fast.
The ACA500plus performs a realtime address translation so that the CPU thinks the RAM is in the Chip RAM area when in reality it is still at c00000 in hardware. The Agnus doesn't care either way.
|