Hi, mjcoury:
I'm not using the same CPU, but I found that the writing of the address latch, the "*cMemory_ptr = 0xFF;" instruction, had to be executed from ram as well. Otherwise, the fetch of the following instruction caused the address latch to change.
But that was on an HC08, not an S08, so it may not be your problem.