Loopy's docs said that on frame start that the temp address is copied to the $2006 address, which the ppu uses to fetch the tile addresses. I have a question regarding this, if you write say, an out of bound name table address, like $3f00 address to $2006 for $2007 and didn't change it at all during vblank. So on frame start, the starting address that the PPU will fetch tiles from is $3F00?