I kinda want to yank the function out of the EXE into a separate tool and just call it remotely, but it's so globals-based that I'm worried it'd break writing some address I'm not emulating.
So being able to have the pages not loaded and watching for page faults would be useful! unfortunately, 16bit real mode