Check out this Intel manual:
http://www.intel.com/content/dam/www/public/us/en/documents/manuals/64-ia-32-architectures-software-developer-vol-3a-part-1-manual.pdf
Go to page 9-6 and subsequent pages, all of which describe the initial CPU startup mode. The first command is taken from ffffff00 (which was connected to the BIOS ROM):
The first instruction that is fetched and executed following a hardware reset is located at physical address FFFFFFF0H. This address is 16 bytes below the processor's uppermost physical address. The EPROM containing the software- initialization code must be located at this address.
And remembering that at this stage he is still in realmode mode:
The CS register has two parts: the visible segment selector part and the hidden base address part. In real-address mode, the base address is normally formed by shifting the 16-bit segment selector value 4 bits to the left to produce a 20-bit base address. However, during a hardware reset, the segment selector in the CS register is loaded with F000H and the base address is loaded with FFFF0000H. The starting address is thus formed by adding the base address to the value in the EIP register (that is, FFFF0000 + FFF0H = FFFFFFF0H).
And then look further, in Figure 9-3, the 64K memory location is from ffffffff to ffff0000 and it is indicated that there is an EPROM or system biography, and therefore not RAM.
Peter Teoh
source share