Files
disasm/NROM/Pyramid (U) (Sachen)/routinemap.tsv
T
tmerritt 691b2bc23c Xevious (U): Pass 1 disassembly
The first _wip project to get a real disassembly.  4,165 instructions /
8,444 code bytes (25.8%), 24,324 data bytes, 0 unclassified -- every byte
of the 32 KB PRG is now classified as code or data.

The split needed three stages, all recorded in prg.s's header:

  * nesdis.py --undocumented --auto-seed at base $8000 gave 3,272
    instructions / 6,555 bytes.  The undocumented opcodes matter here: the
    trace stops dead at the first one it cannot decode.
  * Four hand-seeded entries ($C08B, $DC1E, $E0D5, $E134).  Each is a
    branch target from decoded code that sat inside an untraced data run,
    so the tracer never reached it.
  * A merged four-session Mesen Code Data Logger capture (kept as
    xevious_mesen.cdl) promoted 1,902 bytes from data to code and
    demoted 22 the trace had called code.

Two tool bugs fell out and are fixed here:

  * nesdis.py emitted the undocumented single-byte NOPs ($1A/$3A/$5A/
    $7A/$DA/$FA) as `nop`, which ca65 assembles as the *official* $EA --
    the rebuild stopped being byte-identical at $DF82.  The check now
    keys on the opcode byte, not just the addressing mode.  All three
    `make regen` pipelines (MUSCLE, Pyramid, Urban Champion) are
    unaffected and still reproduce prg.s byte for byte.

  * cdl_reclass.py left the original data-block header in place when the
    CDL split that block, so the file ended up with two region headers
    describing overlapping spans (20 of them here).  The header is now
    dropped with the block it describes; the promoted projects that use
    the tool are byte-for-byte unchanged.

The project README has the power-on flow analysis.  The most interesting
find is at $FC45: the reset path compares RAM $0100-$0107 against the
ASCII string "Kei Cros", and the copyright text at $FF1E reads
"MAIN: KEI CROSS.  SOUND: UHOHOY OHNOGI."  The OAM is at $0700, not
$0200 -- the NMI handler does LDA #$07 / STA $4014.

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>

Add explicit `make wip` / `make wipclean` targets for the _wip tier

The root Makefile's all / clean / <MAPPER> targets deliberately name only
the promoted mapper folders, so nothing in them reaches into _wip/.  Give
the pre-promotion tier its own opt-in targets instead of the manual
`for d in _wip/*/*/; do make -C "$d"; done` loop:

  make wip          # build + verify every _wip/<MAPPER>/<Project>/
  make wipclean     # clean the build artifacts in that tier

Both the Makefile and the four documents that describe the tier (README,
TODO, WIP, AGENTS) are updated together, so the tree stays consistent.

The same commit records Xevious (U) reaching Pass 2 in those documents:
all 487 labels named, every branch and call symbolic, zero Label_XXXX and
zero raw $XXXX operands left.

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>

Update the _wip/ tier documentation; fix the make wip target and the mirroring bug

The WIP tier's four documents (WIP.md, README.md, TODO.md, AGENTS.md) had
drifted away from the tree.  Every number in them was re-derived from the
ROMs and the folder layout rather than carried forward.

Counts and structure
  - The tier holds 854 projects across 29 mapper folders, not "856 across
    30".  Xevious (U) and Zanac (U) were promoted on 2026-10-20 and their
    _wip/ folders were left behind as residue -- "git mv" moves only the
    tracked files, so the old folder survived with its build artifacts and a
    stale README.  Both are removed now; the promotion procedure documents
    the step so it does not recur.
  - _wip/MAPPER8/ holds a copy of the already-promoted Mermaids of
    Atlantis (U) and is excluded from every count and table.
  - Pass 0 skeletons: 852 (was 855).  Xevious (U) left the tier, so the
    two projects with a real disassembly are Golf (JU) and Volleyball (U).
  - PRG sizes 2 / 150 / 42 / 522 / 127 / 10 / 1; 226 projects with no CHR;
    38 keep the CPU-address linker layout; 37 are mapper 0.
  - Every inventory row was re-checked against its ROM: PRG/CHR size,
    mirroring, all three vectors, and the battery / four-screen / footer
    notes.  854 of 854 rows now match.

Fixes
  - The root Makefile used $(WIP) but never defined it, so "make wip" and
    "make wipclean" expanded to "for m in /*/" -- they walked the
    filesystem root instead of the tier.  "WIP := _wip" is now defined, and
    "make wip" builds and verifies the whole tier: 855 of 855 passed, 0
    failures.
  - make_skeleton.py masked header byte 6 with 0x03, so the battery bit
    (bit 1) leaked into the mirroring value and 56 battery-backed ROMs'
    READMEs claimed "Four-screen" while their own "Four-screen VRAM" row
    said "no".  The mask is now 0x01 and the 56 READMEs are corrected.
  - Golf (JU)'s README still described the pre-flatten copilot/ folder and
    the old PRG-only compare; it now describes the whole-ROM build.
  - Pyramid (U)'s audit comments are canonical again, so Golf (JU) is the
    only project in the tree still on the pre-canonical spelling.

New in WIP.md
  - Byte 7's lower nybble is non-zero on 58 of the ROMs -- 55 carry the
    literal "DiskDude!" watermark, two "DisNi0330", one "byKH+KEN".  Only
    the upper nybble carries mapper bits, so the noise is harmless.
  - The twelve ROMs that set the four-screen bit, split by whether their
    board actually supports four-screen VRAM.

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>

Promote Volleyball (U) from _wip/NROM/ to NROM/

Volleyball (U) reached Pass 3 before promotion, so this is a promotion of a
finished disassembly rather than a Pass 0 skeleton.

The disassembly
  - 11,395 instructions / 23,926 code bytes (73.0 % of the PRG image),
    8,842 data bytes, 0 unclassified.
  - The split needed the game-state dispatch table at $85E1 declared to the
    tracer (--table 85E1:11) -- without it only 66 % of the image traced --
    plus a Mesen Code Data Logger capture taken while a random-input bot
    played the attract demo, which promoted 1,757 bytes from data to code.
  - Pass 2 named all 1,989 labels: 730 read out of the code by hand, 1,221
    internal branch targets derived mechanically.  Zero Label_XXXX, zero raw
    $XXXX call or branch operands, zero SubC residue.
  - Pass 3 named the zero page, the $0500 ball structure and all 37 data
    blocks.  apply_symbols.py --report: 0 pending substitutions, 0
    multi-alias residue.  align_audit_comments.py: no column drift.
  - cdl_check.py cross-checks the finished prg.s against the capture: 0
    CDL-code bytes not covered by an instruction, 0 CDL-data bytes that
    start one.
  - 29 neutral ZpXX zero-page slots remain, each with its reason recorded
    in locals.inc, as the promotion rules allow.

The promotion
  - git mv "_wip/NROM/Volleyball (U)" "NROM/Volleyball (U)".  Mapper 0, so
    it lands in NROM/.  The whole-ROM build was already in place, so there
    was no build surgery; the project builds byte-identically at its new
    home and the old folder is gone (git mv moves the untracked build
    artifacts too, so no residue was left behind).
  - Root README.md: new inventory row 39 and a per-project detail section,
    plus the WIP-tier counts.  The detail sections for Xevious (U) and
    Zanac (U) were numbered one too high against the inventory rows and
    are now aligned; a leftover editing note in the same place is gone.
  - WIP.md: the Volleyball row leaves the inventory, and the tier is now
    853 projects across 29 mapper folders (36 in _wip/NROM/), 852 of them
    Pass 0 skeletons.  Golf (JU) is the only project left in the tier with
    a real disassembly.
  - TODO.md and AGENTS.md: the same counts, and the promoted tier is now
    40 projects (39 under NROM/).

Verified: make wip builds and verifies the whole tier (854 of 854 passed,
0 failures) and make builds the promoted tier (39 of 39 passed).

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>

Rename NROM/Pyramid (U) to NROM/Pyramid (U) (Sachen)

The promoted inventory row had read "Pyramid (U) (Sachen)" since the
project was promoted on 2026-10-20, but the folder was named "Pyramid (U)" --
so the row pointed at a folder that did not exist.  The folder now matches
the row, and the project's own README title, its ROM file name
("Pyramid (U) (Sachen).nes") and the parenthetical convention the rest of
the promoted tier already uses (Popeye (JU) (PRG 0/1), Raid on Bungeling
Bay (U) [a2], Pac-Man (Tengen) (U)).

What changed inside the project
  - The Makefile's regen target passes --project "Pyramid (U) (Sachen)", so
    the tracer writes the matching header line.  prg.s and locals.inc were
    updated to that header line and nothing else -- the disassembly is
    byte-identical to before.
  - make regen still reproduces prg.s and locals.inc byte for byte.
  - The project's README's build-verification line now names the new folder.

References updated: the root README.md (inventory prose, the row-33 detail
section, the build-status table, and the notable-observations bullet),
TODO.md (the promoted-projects table and the Pyramid notes) and AGENTS.md
(the recently-promoted list and the unlicensed-titles quirk).

Verified: make builds the promoted tier (39 of 39 passed) and the project
rebuilds byte-identically at its new path.

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>

Rebuild Mermaids of Atlantis (U): bank-aware Pass 1, Pass 2/3 names

The promoted project did not build: a Pass 2 rename had been applied
half-way, leaving eight undefined symbols and two jumps that pointed at
the wrong routine, while the root README already claimed the project was
byte identical.  The _wip copy still built, because it held the un-renamed
Pass 1 source.

The disassembly is now derived from the ROM itself, with the Mesen Code
Data Logger as the oracle for the code/data split:

* _tools/banked_dis.py traces every MMC3 bank separately, each with the CPU
  window it is visible at, seeded from a CDL capture so the code a static
  trace cannot reach is disassembled too.  The CDL is the authority: a
  decode the CPU never fetched is dropped, and so is the fall-through
  behind a call whose target never returns (the game's dispatchers have
  their jump table right behind the call).
* One segment per bank (PRG0..PRG7) with its own .org, so the assembler
  knows the CPU address of every label while the linker still writes the
  bytes to the bank's file offset.  A flat segment cannot do both: a call
  would encode the file offset instead of the CPU address.
* Pass 2 names every label - 494 routines, no Label_XXXX and no raw
  $XXXX branch or jump operand left.  Pass 3 applies 13 semantic zero-page
  aliases and writes the routine headers.
* 8,075 bytes of code (12.3% of the 64 KB PRG), up from 200 bytes.

The banking turned out to be unusual and is documented: the fixed bank is
the fourth 8 KB bank (file $6000-$7FFF), not the last one, and the image
carries the reset stub and the vector table twice.  The live NMI vector
is $808F - the frame handler - while the copy at the end of the image
names $8189, which is a BRK in the first half.  The game's text table
lives at CPU $F1D6, which is the fixed window, and that is what settles
the question.

Also: the leftover _wip/MAPPER8 folder is removed, as it is for every
other promotion.

The project builds byte identical:

    Byte-identical ROM verified.

Add CHANGELOG.md: the pass history of every project

A project goes through four milestones - Pass 1 (the code/data split),
Pass 2 (the labels replaced by names), Pass 3 (the semantic naming) and
Promotion (the move into the top-level mapper folder) - and the history
of those milestones was scattered over the commit log, the project
READMEs and the root README.

CHANGELOG.md gathers it: one section per project with a row for each
milestone, the date, and a sentence saying what the milestone produced.
The numbers are the ones the project README and the root README already
carry - instruction count, code coverage, named labels, semantic
zero-page aliases, named data tables - so a reader can see at a glance
which projects are done and which are not.  Golf (JU), the only project
still in _wip/ with a real disassembly, is listed with its open
milestones, and the other 852 _wip/ projects are covered as a tier.

The requirement is now part of the workflow contract: PROMPTS.md gains a
"Pass 3: Changelog entry" section and a ninth checklist item, and
AGENTS.md points at the file.  A milestone and its changelog row go in
the same commit, so the changelog and the source never disagree.

Balloon Fight (JU): repair the audit trail and complete the routine headers

The per-instruction audit trail was stale by two bytes from
ResetInitializationData ($C085) onward.  5,944 of the 6,007 comments named
the wrong CPU address and PRG offset, because the three-byte .byte "HAL"
signature at $C082-$C084 had been counted as one byte when the trail was
first generated - the routine headers and the linker labels were right all
along, so the source and its own headers disagreed with each other.  The
trail was rebuilt from the ca65 -l listing with
_tools/repair_audit_comments.py, and every rewritten comment was re-checked
against prg.bin.  The comments were also moved into the canonical column-35
field: they had sat two spaces after the mnemonic, with no column discipline
at all, unlike every other promoted project.

All 63 routine headers now carry a ; Clobbers: block, so the headers carry
the full template AGENTS.md describes.  The blocks are derived, not written by
hand.  The new _tools/derive_clobbers.py takes the opcode from the audit
comment's byte list, so the addressing mode is exact and a data directive is
never mistaken for an instruction; it resolves the operand through
locals.inc and symbols.inc to name what is written; it follows the real
control flow, so a jsr to another named entry is a call (the callee's
clobbers count) while a branch or a fall-through is not; and it models
register preservation, so NmiHandler reports *no register* - it saves and
restores A, X and Y around the frame - and FlushPpuCommandPreserved reports
only A, because X and Y come back unchanged.

Two tools changed.  derive_clobbers.py is new.  align_audit_comments.py had
an off-by-one: it tested the indented code length against 31 instead of
against 35, so code texts of 28-31 characters were never padded into the
column.

The change is comments only.  The code text of all 8,538 lines is unchanged,
make still prints "Byte-identical ROM verified.", the 6,007 audit comments
still re-check against prg.bin, all 63 routine headers agree with the
instructions they describe, and every label agrees with reconstructed.lbl.
ReflectObjectYVelocity and UpdateSpecialObjectSystem moved out of locals.inc
and became labels in prg.s at their real addresses.

CHANGELOG.md becomes the repository's running log: a Pending list of the
changes to be put in the next commit, a History of the commits already made,
and the per-project milestone index at the end.  The next commit's message is
written from the Pending entries, so the two cannot drift apart.  PROMPTS.md
and AGENTS.md describe the new shape.  WIP.md drops the _wip/MAPPER8/ note:
the folder held a copy of Mermaids of Atlantis (U) that had already been
promoted.

World Class Track Meet (U): Pass 1, the code/data split

Pass 1 is done.  The split is 8,400 instructions / 18,028 code bytes (55.0 %)
of the 32 KB PRG, with 884 routine entries, 55 data blocks and 102 zero-page
aliases.  The PRG is CNROM (mapper 3) and maps whole at $8000-$FFFF, so the
linker moved the PRG segment from a .nes file offset to $8000 and the build
still compares byte identical.

Four dispatch tables had to be seeded by hand.  The event table at $F796 (5
entries) is read at $F780 and jumped to through `jmp ($001F)`.  The three
push-pointer tables - $BFC4 (16 entries), $BFE4 (2) and $E5F2 (7) - push a
handler address and `rts` into it, and the 6502's `rts` adds one to the
address it pops, so each table stores the entry address minus one; the seeds
are the table values plus one.  The tracer runs with --undocumented: the code
uses undocumented NMOS opcodes as ordinary code (ANC $37 at $BFF8, and the
RRA/RLA/SLO and NOP forms elsewhere).  Seeding the tables takes the coverage
from 27.8 % to 55.0 %.

$C0BE-$C0C5 is forced back to data: the IRQ vector $C0C0 points into the
middle of the `jmp $C047` at $C0BE, and the game never executes CLI, so the
vector is dead.  `make pass1` regenerates prg.s and locals.inc from prg.bin
and reproduces the committed prg.s byte for byte.

The project README records the split, the four dispatch tables, the dead IRQ
vector, the wrong CHR size field in the header, and what is still data.  The
milestone index in CHANGELOG.md gains the project; WIP.md, README.md and
AGENTS.md follow the tier counts and the layout.

nesdis.py gains a --mapping-note option, so the header's "PRG mapped at" line
can describe a board that is not NROM - CNROM's whole 32 KB at $8000-$FFFF is
not "mirrored to the upper half".

Replaces runs of $00 and $FF with .res <run>, <byte>

Golf (JU) and World Class Track Meet (U): Pass 2/3 complete, promoted from _wip/

- World Class Track Meet (U) - Pass 2 complete: all 884 Label_<addr>
  definitions replaced (651 semantic routine names + 233 Sub_<addr>), all 731
  raw $XXXX jsr/jmp call operands resolved to symbolic labels, all branch
  targets given role-based names; routinemap.tsv added; make stays
  byte-identical.
- World Class Track Meet (U) - Pass 3 complete: 24 semantic zero-page
  aliases applied via apply_symbols.py (0 residue), 78 neutral ZpXX slots
  documented with reasons in locals.inc, all hardware-register operands use
  symbols.inc names, project README rewritten with Pass 2/Pass 3 sections and
  data-table inventory; promoted out of _wip/CNROM/.
- World Class Track Meet (U) - project README documents the five event-table
  entries at $F796 and marks the olympics mode as not yet proven.
- Golf (JU) - audit comments converted from pre-canonical (; C000: A9 00)
  to the canonical ; CPU:$C000 PRG:0000  A9 00 form at column 35; 4,156
  comments re-aligned, comment/whitespace only, whole-ROM build stays
  byte-identical.
- Golf (JU) - 339 internal branch-target Label_ labels given role-based names
  via _tools/derive_branch_names.py; 0 raw $XXXX branch/jump operands remain.
- Golf (JU) - 275 zero-page operands substituted with locals.inc aliases via
  apply_symbols.py; 0 residue; promoted out of _wip/NROM/.
- Xevious (U) - runs of $FF padding replaced with .res <count>, $FF in prg.s;
  whole-ROM build stays byte-identical.
- Both projects promoted via git mv; leftover _wip/ folders removed; root
  README.md inventory rows added; WIP.md rows removed.

World Class Track Meet (U): apply zero-page symbol substitutions

Run apply_symbols.py to substitute ZpXX zero-page operands with
semantic locals.inc aliases (SlotState, GameMode, etc.) at proven
sites; 0 residue, whole-ROM build stays byte-identical.

Xevious (U): re-split Pass 1 from the Mesen CDL and decode the data tables

- Xevious (U) - Pass 1 re-split from the Mesen CDL (xevious_mesen.cdl) with
  _tools/cdl_reclass.py: 1,158 bytes data->code, 48 code->data, 42 labels
  emitted and 3 branch targets labelled; code 11,321->12,455 bytes
  (34.5%->38.0%), instructions 5,513->6,002. The 45 recovered entry points
  are named Sub_XXXX, so no Label_XXXX remains; six CDL-silent raw call
  operands are documented as residue.
- Xevious (U) - the 4,448-byte block at $A74B-$B8AA is split into six proven
  tables: VramWritePtrTable (15 pointers), VramWriteData, DataStreamPtrTable
  (16), ObjTilePtrTable (99), ObjTileData and DataStreamData. The $D833
  pointer table is corrected to base $D833 (4 entries; the old ObjCodePtrTable
  at $D834 was one byte late). $F957-$FAF5 is split into ObjSpeedTable,
  ObjSpeedTable2, SpriteLayoutPtrTable (19) and SpriteLayoutData;
  $FEE6-$FF1C into PaletteData and OamAttrTable. $F5D8 is decoded as
  TextTileData (font tile indices: PLAYER, GAME OVER, READY, SOLVALOU, LEFT,
  PAUSE); $F53C becomes AttrAddrTable, $F89E HandlerPtrTable and $EF3B
  SpriteLayoutData2. Project README rewritten with the corrected stats, a
  32-entry table inventory and the Pass 1 residue.
- _tools/cdl_reclass.py - preserve the data label(s) between a data-block
  header and its first .byte row when the block stays data; the $DF78 split
  dropped Data_DF78 and the rebuild failed with an undefined symbol.
- _tools/resolve_raw_branches.py - handle negative relative offsets
  (beq *-$0B); the pattern only matched *+$NN and *$NN.

Docs: refresh the tier counts to 41 promoted / 851 _wip, add the WCTM row

- Docs - tier counts refreshed to the post-promotion state across AGENTS.md,
  root README.md, WIP.md, TODO.md and CHANGELOG.md: 41 promoted projects
  (38 under NROM/, plus CNROM/World Class Track Meet (U), UNROM/Zanac (U) and
  MAPPER8/Mermaids of Atlantis (U)) and 851 _wip/ projects, every one of them
  a Pass 0 skeleton. The stale "39/40 promoted", "853 _wip", "Golf (JU) is
  still in _wip/" and "Golf is the last pre-canonical project" statements are
  corrected.
- Root README.md - the promoted inventory gained the missing World Class Track
  Meet (U) row (row 41, mapper 3, 32 KB PRG / 32 KB CHR), and the "All 38 are
  mapper 0 / 16 KB PRG" sentence is replaced with the actual split (36 of the
  41 rows are mapper 0 / 16 KB; Xevious and Volleyball are 32 KB, World Class
  Track Meet is mapper 3, Zanac mapper 2 and Mermaids mapper 8).
2026-10-21 11:36:32 -04:00

12 KiB

1# Pyramid (U) (Sachen) — Pass 2 name map
2#
3# Derived from this dump's own committed split. Every name below was read
4# out of the code; nothing is generic where the ROM gives a better basis.
5#
6# Format: <CPU address><TAB><name>
7#
8# The routine entries (the task table, the engine routines and the boot
9# chain) are named by hand; the internal branch targets are derived from the
10# branch that reaches them by _tools/derive_branch_names.py:
11# beq -> OnZero bne -> OnNonzero
12# bcc -> OnCarryClear bcs -> OnCarrySet
13# bmi -> OnNegative bpl -> OnNonnegative
14# bvc -> OnOverflowClear bvs -> OnOverflowSet
15# a backwards branch (the target is below the branch) -> Loop
16#
17# The game dispatches through `jmp` trampoline tables that live inside the
18# data regions ($C000-$C01B and the data blocks at $C01E, $C02A, $C042 and
19# $C054). Those table entries are the game's *task* entries and are named
20# Task_<name>; the routines they jump to carry the plain name.
21#
22# Two vocabularies are used for the zero-page and RAM state:
23# * $02/$03 the 16-bit script pointer
24# * $00/$01 the high/low bytes of a VRAM address
25# * $04 the command-list sync flag
26# * $05/$06 the VRAM write position
27# * $0700/$0701 the VRAM command buffer (16-bit pointer)
28C000Task_PlayVramScript
29C003Task_CopyBlockToCommandBuffer
30C006Task_UploadPalette1
31C009Task_UploadPalette2
32C00CTask_FinishCommandList
33C00FTask_StrobeControllers
34C012Task_EmitVramAddressMarker
35C015Task_DrawSpriteAtPosition
36C018Task_ClearOamShadow
37C01BTask_AddToCounter
38C027Task_FlushVramCommandList
39C03CTask_Multiply16
40C03FTask_BuildVramCommandList
41C048Task_ShiftRight8
42C04BTask_ShiftLeft8
43C04ETask_SetPalette16
44C051Task_SetPaletteBlock16
45C063PlayVramScript
46C090PlayVramScript_CopyRun
47C0A0PlayVramScript_WriteData
48C0A8PlayVramScript_StoreCount
49C0ADPlayVramScript_NextCommand
50C0B3PlayVramScript_End
51C0B9CopyBlockToCommandBuffer
52C0CDCopyBlockToCommandBuffer_Loop
53C0DBUploadPalette1
54C0EDUploadPalette1_Loop
55C0FBUploadPalette2
56C10DUploadPalette2_Loop
57C11BFinishCommandList
58C122FinishCommandList_Wait
59C127FlushVramCommandList
60C139FlushVramCommandList_Loop
61C155FlushVramCommandList_WriteData
62C15BFlushVramCommandList_End
63C160StrobeControllers
64C16AReadControllers
65C188DrawSpriteAtPosition
66C192EmitVramAddressMarker
67C198BuildVramAddress
68C1B6ClearOamShadow
69C1BAClearOamShadow_Loop
70C1C1AddToCounter
71C1C4AddToCounter_Wait
72C1C9IncrementCounter16
73C1CFIncrementCounter16_End
74C1D0AdvanceScriptPointer
75C1D6AdvanceScriptPointer_Loop
76C1D7ConvertNibbleToBcd
77C1E2ConvertNibbleToBcd_Digit
78C1EAConvertNibbleToBcd_Store
79C1EFSetPpuCtrl
80C1F6WaitForVblankClear
81C1FBWaitForVblankSet
82C201SetPpuCtrlAndMask
83C205SetPpuCtrlAndMask_Alt
84C207SetPpuCtrlAndMask_Store
85C225StoreOamEntry
86C23ADrawTwoDigitNumber
87C256DrawTwoDigitNumber_Loop
88C25FDrawTwoDigitNumber_High
89C277EmitDigit
90C28AEmitDigit_SetFlag
91C28FEmitDigit_Store
92C294AddDeltaToPosition
93C2A0AddDeltaToPosition_Loop
94C2B6AddDeltaToPosition_Carry
95C2BEAddDeltaToPosition_Store
96C2E2AddDeltaToPosition_Carry2
97C2EAAddDeltaToPosition_Store2
98C2F9AddDeltaToPosition_End
99C300Multiply16
100C317BuildVramCommandList
101C31BBuildVramCommandList_SetAddress
102C32CBuildVramCommandList_Data
103C341BuildVramCommandList_Store
104C347BuildVramCommandList_End
105C34ACopyBlockToCommandBufferTail
106C354CopyBlockToCommandBufferTail_Loop
107C35FSetPaletteBlock
108C36DSetPaletteBlock_Loop
109C384ScanForButtonPress
110C386ScanForButtonPress_Loop
111C392DispatchTask1
112C3B6MoveSpriteRight
113C3C7MoveSpriteLeft
114C3D8ComputeOamSlotAddress
115C3E3MoveSpriteDown
116C3E7MoveSpriteUp
117C3EBMoveSpriteLeft2
118C3EFMoveSpriteRight2
119C3F0ClampSpriteToGrid
120C3FAClampSpriteToGrid_Redraw
121C3FDTask_ReturnStub
122C3FEBuildVramPositionWrite
123C43ESubtract16
124C460Subtract16_Loop
125C477Subtract16_Loop2
126C47ASubtract16_Loop3
127C49ASubtract16_Loop4
128C4B1Subtract16_Loop5
129C4B4Subtract16_Loop6
130C4B8ShiftRight8
131C4C0ShiftRight8_OnNonzero
132C4C7ShiftRight8_Loop
133C4D1ShiftLeft8
134C4D9ShiftLeft8_OnNonzero
135C4E4ShiftLeft8_Loop
136C4EBSetPalette16
137C4FDSetPalette16_Loop
138C50ASetPalette16_Entry
139C536SetPaletteBlock16
140C548SetPaletteBlock16_Loop
141C56DSetPaletteBlock16_Entry
142C585WriteDigitString
143C58FWriteDigitString_Loop
144C59DWriteDigitString_Loop_Loop
145C5A1WriteDigitString_Loop_Loop2
146C5ABAddDelta24
147C5B8AddDelta24_Copy
148C5C0AddDelta24_Loop
149C5E1AddDelta24_Borrow
150C614AddDelta24B
151C620AddDelta24B_Save
152C662SetPaletteEntry
153C676SetPaletteEntry_OnCarryClear
154C683SetPaletteEntry_OnCarryClear2
155C6A3SetPaletteEntry2
156C6BASetPaletteEntry2_OnNonnegative
157C6DBSetPaletteEntry2_OnCarryClear
158C800BootColdStart
159C805BootWaitForVblank
160C80ABootWaitForVblank2
161C815BootClearRam
162C835BootInitState
163C897BootFirstFrame
164C8A4BootDecCounters
165C8B8BootDecTimer
166C8D0BootCopySpriteData
167C8F2BootUploadPalette
168C90DBootCopyTableToBuffer
169C932BootCopyTableStart
170C934BootCopyTableLoop
171C9A7BootInitLevel
172CA1DBootCheckController
173CA32BootFrameCounter
174CA41BootDrawSprite
175CA61BootSetFlag
176CA68BootSelectTable
177CA80BootCopyTable
178CA97BootSetPaletteBlock
179CAF3BootInitPpu
180CB68ActorGridClear
181CB6CActorGridClear_Loop
182CB82ActorGridLookup
183CB99ActorGridRead
184CBADActorGridStart
185CBDCActorGridClamp
186CBE5ActorGridInit
187CBF9ActorGridFill
188CC11TaskScheduler
189CC3DTaskScheduler_Tick
190CC56TaskScheduler_Count
191CC5CTaskScheduler_Step
192CC71TaskScheduler_Scan
193CC73TaskScheduler_ScanLoop
194CC8BTaskScheduler_Button
195CC90TaskScheduler_Next
196CCA5TaskScheduler_Restart
197CCA8TaskScheduler_Accept
198CCB1DispatchTask2
199CCB8DispatchTask2_Build
200CCE5TaskScheduler_Return
201CCEETaskScheduler_Select
202CD07TaskScheduler_Compare
203CD18TaskScheduler_Compare_Loop
204CD23TaskScheduler_Compare_Loop2
205CD24TaskScheduler_Return2
206CD27TaskScheduler_Check
207CD43TaskScheduler_Check2
208CD72TaskScheduler_Return3
209CD75TaskScheduler_SetPointer
210CD80TaskScheduler_Wait
211CD85TaskScheduler_Wait2
212CD8ATaskScheduler_Wait3
213CDA4TaskScheduler_Finish
214CDACTaskScheduler_Advance
215CDBDTaskScheduler_Return4
216CDC0TaskScheduler_Start
217CDDCTaskScheduler_Place
218CE14TaskScheduler_CursorNext
219CE17TaskScheduler_Return5
220CE1ATaskScheduler_Move
221CE22TaskScheduler_MoveStep
222CE32TaskScheduler_Return6
223CE35TaskScheduler_Turn
224CE54TaskScheduler_TurnStep
225CE5BTaskScheduler_Return7
226CE5ETaskScheduler_Move2
227CE66TaskScheduler_Move2Step
228CE78TaskScheduler_Return8
229CE7BTaskScheduler_Turn2
230CE96TaskScheduler_Turn2Step
231CE9DTaskScheduler_Return9
232CEA0ActorPositionLookup
233CEA8ActorPositionLookup_Entry
234CED3TaskScheduler_Return10
235CED6ActorGridRebuild
236CEE0ActorGridRebuild_Row
237CEEBActorGridRebuild_Cell
238CEF6ActorGridRebuild_Next
239CF02ActorGridRebuild_NextRow
240CF0EActorGridRebuild_Column
241CF10ActorGridRebuild_ColumnStart
242CF14ActorGridRebuild_Slot
243CF29ActorGridRebuild_Copy
244CF35ActorGridRebuild_SlotEnd
245CF55ActorGridRebuild_Column2
246CF67ActorGridRebuild_Column2Loop
247CF74ActorGridRebuild_Copy2
248CF90ActorGridRebuild_Copy2End
249CF98ActorGridRebuild_Column2End
250CFC4ActorGridRebuild_End
251CFC7ActorGridNext
252CFFAActorGridNext_Reset
253CFFFActorGridNext_Start
254D020ActorGridNext_Start_Loop
255D02AActorSearch
256D036ActorSearch_Row
257D03DActorSearch_Slot
258D04AActorSearch_Match
259D074ActorSearch_Check
260D085ActorSearch_NotFound
261D087ActorSearch_Restore
262D0A0ActorSearch_Restore2
263D0ACActorSearch_Restore3
264D0ADActorSearch_Empty
265D0B6ActorSearch_Restore4
266D0B8ActorSearch_Next
267D0C3ActorSearch_Done
268D0D3ActorPositionTest
269D0DFActorPositionTest_Loop
270D0F5ActorPositionTest_Loop_Loop
271D0F8ActorPositionTest_Step
272D105ActorPositionTest_End
273D10DActorPositionTest_Match
274D134ActorPositionTest_Blocked
275D13CActorPositionTest_Taken
276D146ActorPositionTest_Compare
277D15BActorPositionTest_Blocked2
278D15EActorPositionTest_Compare2
279D16AActorPositionTest_Compare3
280D185ActorPositionTest_Next
281D190ActorPositionTest_Done
282D193RandomByte
283D1B2DrawActorRow
284D1BBDrawActorRow_Setup
285D1D7DrawActorRow_Copy
286D1ECDrawScore
287D1FDDrawLifeCount
288D20EDrawLevelNumber
289D21CDrawTileRow
290D227DrawTileRow_Loop
291D237DrawTileRow_Digit
292D23ADrawTileRow_Store
293D248DecimalSplit
294D24ADecimalSplit_Hundreds
295D253DecimalSplit_Tens
296D257DecimalSplit_Units
297D260DecimalSplit_Done
298D265DrawActorSprite
299D27FDrawActorSprite_Setup
300D2A0OamShadowClear
301D2A4OamShadowClear_Loop
302D2BFActorGridOffset
303D2EDActorGridOffset_Copy
304D3A1RandomWithinRange
305D3B5RandomWithinRange_Out
306D3B7ActorSpriteSetup
307D3BBActorSpriteSetup_Offset
308D41DActorSpriteSetup_State
309D424ActorSpriteSetup_Pos
310D42EActorSpriteSetup_Next
311D43EActorSpriteSetup_Draw
312D45AOamShadowClear2
313D45EOamShadowClear2_Loop
314D476OamShadowClear3
315D47FOamShadowClear3_Loop
316D488ActorSpriteSetup_Offset2
317D4B7OamShadowClear4
318D4BBOamShadowClear4_Loop
319D4C5ActorInitFromTable
320D50AActorUpdate
321D510ActorUpdate_Loop
322D512ActorUpdate_Slot
323D520ActorUpdate_Timer
324D530ActorUpdate_Move
325D54AActorUpdate_Next
326D555ActorUpdate_Done
327D56BActorUpdate_Anim
328D57AActorUpdate_AnimIndex
329D59AActorUpdate_Sprite
330D5ADActorUpdate_SpritePos
331D5CAActorUpdate_NextSprite
332D632ActorSpawn
333D63BActorSpawn_Setup
334D655ActorSpawn_Start
335D66DActorSpawn_Copy
336D679ActorSpawn_CopyLoop
337D6ACActorGridShift
338D6B2ActorGridShift_Row
339D6BBActorGridShift_Scan
340D6C9ActorGridShift_Next
341D6D6ActorGridShift_Dst
342D6E7ActorGridShift_Copy
343D6F6ActorGridShift_Copy_Loop
344D6FDActorGridShift_Copy2
345D720ActorGridShift_End
346D72CActorGridShift_Done
347D72ENmiHandler
348D78ANmiHandler_Body
349D793NmiHandler_Epilogue
350D79DNmiHandler_Number
351D79FNmiHandler_NumberLoop
352D7A8NmiHandler_NumberDigit
353D7B6WriteSoundRegister
354D7C5WriteSoundRegister_Loop
355D7D7SoundTableEntry
356D7E3IrqHandler
357D7EBColdStartAlternate
358DE9ASoundInit
359DEA9SoundInit_Copy
360DECBSoundPlayEffect
361DEFFSoundClearVoices
362DF0ESoundStopAll
363DF14SoundStopAll_Loop
364DF29SoundClearVoices_Loop
365DF80SoundTick
366DF89PlaySoundEffectFromSlot
367DF8ESoundTick_Voice
368DF9ASoundTick_Next
369DFA1SoundTick_Command
370DFACSoundTick_Command2
371DFB5SoundTick_Command3
372DFBFSoundTick_Command4
373DFD5SoundTick_Sample
374DFF4SoundTick_Volume
375E00CSoundTick_Volume2
376E017SoundTick_VolumeLoop
377E029SoundTick_Envelope
378E04BSoundPlayer
379E057SoundPlayer_Reset
380E05ESoundPlayer_Command
381E069SoundPlayer_Command2
382E072SoundPlayer_Command3
383E07CSoundPlayer_Command4
384E099SoundPlayer_Volume
385E0B1SoundPlayer_Volume2
386E0BCSoundPlayer_VolumeLoop
387E0CESoundPlayer_Envelope
388E0F0SoundPlayer2
389E0FCSoundPlayer2_Reset
390E103SoundPlayer2_Command
391E10ESoundPlayer2_Command2
392E117SoundPlayer2_Command3
393E121SoundPlayer2_Command4
394E13ESoundPlayer2_Volume
395E156SoundPlayer2_Volume2
396E161SoundPlayer2_VolumeLoop
397E173SoundPlayer2_Envelope
398E195SoundPlayer3
399E1A1SoundPlayer3_Reset
400E1A8SoundPlayer3_Command
401E1B7SoundPlayer3_Command2
402E1D4SoundPlayer3_Sample
403E1E9SoundPlayer3_Envelope
404E1FBSoundPlayer3_Write
405E20BSoundPlayer3_WriteLoop
406E215SoundPlayer3_Voice
407E220SoundPlayer3_VoiceLoop
408E226SoundPlayer3_VoiceLoop_OnCarryClear
409E230SoundPlayer3_Voice2
410E236SoundPlayer3_Voice2Loop
411E240SoundPlayer3_Decay
412E249SoundPlayer3_Decay2
413E24FSoundPlayer3_Decay2Loop
414E259SoundPlayer3_Done
415E25ASoundVoiceIndexAdvance
416E260SoundVoiceIndexAdvance_End
417E261SoundVoiceIndexAdvance2
418E267SoundVoiceIndexAdvance2_End
419E268SoundVoiceIndexAdvance3
420E26ESoundVoiceIndexAdvance3_End
421E26FSoundVoiceIndexAdvance4
422E275SoundVoiceIndexAdvance4_End
423ED6ESampleTableLookup
424EDB7SampleTableLookup_OnNonzero
425F891SampleTableRead
426F894SampleTableRead2
427F897SampleTableRead3
428F89ASampleTableNext
429F8A2SampleTableNext_OnNonzero
430F8ADSampleTableNext_Loop
431F8B2SampleTableNext_Loop2
432F8BCSampleTableNext_Loop3
433F8C0SampleTableNext_Loop4
434F8C4SampleTableNext_OnZero
435F8C5SampleTableNext_Loop5
436F8D8SampleTableNext_Loop6
437F8DDSampleTableNext_OnNegative
438F8EFSampleTableEnd
439F908SampleTableEnd_OnNonzero
440F914SampleTableEnd_Loop
441F922SampleTableEnd_Loop2
442F929SampleTableEnd_Loop3
443F93CSampleTableEnd_Loop4
444F941SampleTableCopy
445F942SampleDecode
446F951SampleTableCopy2
447F959SampleTableCopy2_Loop
448FF00Reset
449FF2FReset_Loop
450FF3EBootChainEntry
451FF49BootPokeMapperUnlock
452FF4CBootUnlockDelay
453FF4EBootUnlockDelay_OnNonzero
454FF50BootUnlockDelay_OnNonzero2
455FF57BootCheckStackBytes
456FF67BootCheckStackBytes_Fail
457FF69BootSeedStackBytes
458FF74ClearCheckerBytes