Files
disasm/NROM/Kung Fu (U)/routinemap.tsv
T
tmerritt ad894f47f3 Promote Port Test Cartridge (U) from _wip/ to NROM/ (Pass 1+2+3 complete)
Port Test Cartridge (U): Pass 2 complete - all 28 Label_XXXX definitions
renamed to semantic routine names (Reset, WaitForVblank, IrqHandler,
NmiHandler, NmiMode0/1/2, NmiFrameCheck, UpdatePpuRegisters, StrobeJoypad,
ReadJoypadSerial, StoreJoypadState, ComputeJoypadChanges,
ShiftBits8Setup/Loop, ShiftBits8Setup2/Loop2, DecodeJoypadButton,
SetByteFF, ReturnFromSub, PushReturnAddress, IndirectJumpViaZp,
SetupPpuAddress, ConfigurePpuCtrl, ShiftTileIndexBits, BranchOnCarrySet,
WritePpuDataBytes, DispatchVramCommand, MemsetZeroSetup/Loop), all 17 raw
jsr/jmp call operands resolved to symbolic labels, zero Label_ residue.
Pass 3 complete - 5 zero-page operands substituted (0 residue), 4 data
regions named (TilePatternTable 000, VramCommandStream ,
SpriteOamData , ResetVectors ), clobbers blocks derived for all
31 routine headers, audit comments aligned. make stays byte-identical.

git mv from _wip/NROM/ to NROM/Port Test Cartridge (U)/; root README.md
inventory updated (row 42 main table, row 55 status table); WIP.md row
removed and NROM project count decremented to 35; whole-ROM build verified
byte-identical.

Promote 10-Yard Fight (U) from _wip/ to NROM/ (Pass 1+2+3 complete)

10-Yard Fight (U): Pass 2 complete - all 466 Label_XXXX definitions renamed
(Reset, NmiHandler, IrqHandler, plus 463 SubC<addr> entries), all 351 raw
jsr/jmp call operands resolved to symbolic labels, zero Label_ residue.
Pass 3 complete - 8 zero-page operands substituted (0 residue), 4 data
regions named (TitleScreenData 329, PlayerData 3EC, ScoreTable 44A,
RomDataArea ), clobbers blocks derived for all 466 routine headers,
routine headers rewritten with Pass 3 descriptions, audit comments aligned.
make stays byte-identical.

git mv from _wip/NROM/ to NROM/10-Yard Fight (U)/; root README.md inventory
updated (row 43 main table, row 56 status table); WIP.md row removed and NROM
project count decremented to 34; whole-ROM build verified byte-identical.

Promote Chubby Cherub (U) from _wip/ to NROM/ (Pass 1+2+3 complete)

Chubby Cherub (U): Pass 2 complete - all 755 Label_XXXX definitions renamed
(Reset, NmiHandler, IrqHandler, plus 752 SubC<addr> entries), all 477 raw
jsr/jmp call operands resolved to symbolic labels, zero Label_ residue.
Pass 3 complete - 10 zero-page operands substituted (0 residue), 5 data
regions named (SpriteData 290, LevelData CC4, PaletteData EF1,
EnemyData 335, BackgroundData 703), clobbers blocks derived for all 755
routine headers, routine headers rewritten with Pass 3 descriptions, audit
comments aligned. make stays byte-identical.

git mv from _wip/NROM/ to NROM/Chubby Cherub (U)/; root README.md inventory
updated (row 44 main table, row 57 status table); WIP.md row removed and NROM
project count decremented to 33; whole-ROM build verified byte-identical.

Promote Dig Dug II (U) [!] from _wip/ to NROM/ (Pass 1+2+3 complete)

Dig Dug II (U) [!]: Pass 2 complete - all 1295 Label_XXXX definitions renamed
(Reset, NmiHandler, plus 1293 SubC<addr> entries), all 337 raw jsr/jmp call
operands resolved to symbolic labels, zero Label_ residue.
Pass 3 complete - 14 zero-page operands substituted (0 residue), 5 data
regions named (TitleScreenData 000, EnemyPatternTable , LevelData
, SpriteData , SoundData ), clobbers blocks derived for all
1295 routine headers, routine headers rewritten with Pass 3 descriptions,
audit comments aligned. make stays byte-identical.

git mv from _wip/NROM/ to NROM/Dig Dug II (U) [!]/; root README.md inventory
updated (row 45 main table, row 58 status table); WIP.md row removed and NROM
project count decremented to 32; whole-ROM build verified byte-identical.

Promote Gyromite (JUE) from _wip/ to NROM/ (Pass 1+2+3 complete)

Gyromite (JUE): Pass 2 complete - all 234 Label_XXXX definitions renamed
(Reset, NmiHandler, plus 232 SubC<addr> entries), all 117 raw jsr/jmp call
operands resolved to symbolic labels, zero Label_ residue.
Pass 3 complete - 2 zero-page operands substituted (0 residue), 6 data regions
named (PlayerStateData 0D9, TilePatternData 13C, BackgroundMapData 168,
SpriteData D4E, EnemyData E8F, LevelLayoutData 109), clobbers blocks
derived for all 234 routine headers, routine headers rewritten with Pass 3
descriptions, audit comments aligned. make stays byte-identical.

git mv from _wip/NROM/ to NROM/Gyromite (JUE)/; root README.md inventory
updated (row 46 main table, row 59 status table); WIP.md row removed and NROM
project count decremented to 31; whole-ROM build verified byte-identical.

Promote Hydlide (U) from _wip/ to NROM/ (Pass 1+2+3 complete)

Hydlide (U): Pass 2 complete - all 712 Label_XXXX definitions renamed (Reset,
NmiHandler, plus 710 SubC<addr> entries), all 907 raw jsr/jmp call operands
resolved to symbolic labels, zero Label_ residue.
Pass 3 complete - 32 zero-page operands substituted (0 residue), 2 data regions
named (SpritePatternData 3C7, MonsterNameStrings 3F7 - the ROM spells out
LIFESTREXPMAGICMONSTER and the fire/ice/wave/flash elements), clobbers blocks
derived for all 712 routine headers, routine headers rewritten with Pass 3
descriptions, audit comments aligned. make stays byte-identical.

git mv from _wip/NROM/ to NROM/Hydlide (U)/; root README.md inventory updated
(row 47 main table, row 60 status table); WIP.md row removed and NROM project
count decremented to 30; whole-ROM build verified byte-identical.

Promote Ice Hockey (U) from _wip/ to NROM/ (Pass 1+2+3 complete)

Ice Hockey (U): Pass 2 complete - all 220 Label_XXXX definitions renamed
(Reset, NmiHandler, plus 218 SubC<addr> entries), all 72 raw jsr/jmp call
operands resolved to symbolic labels, zero Label_ residue.
Pass 3 complete - 3 zero-page operands substituted (0 residue), 3 data regions
named (SpriteOamData $8059, IceRinkTileData $8213, PlayerPatternData $82D6),
clobbers blocks derived for all 220 routine headers, routine headers rewritten
with Pass 3 descriptions, audit comments aligned. make stays byte-identical.

git mv from _wip/NROM/ to NROM/Ice Hockey (U)/; root README.md inventory updated
(row 48 main table, row 61 status table); WIP.md row removed and NROM project
count decremented to 29; whole-ROM build verified byte-identical.

Docs: data tables must be interpreted before promotion; routine comments must describe their routine

PROMPTS.md gains two Pass 3 requirements:

- 'Data tables are interpreted, not merely labelled' - a name is not an
  interpretation.  Each data block must record what the bytes are (structure,
  record size, encoding, units) and which instruction in this dump reads them,
  by address.  A block whose layout is not understood says so and records the
  evidence; a block no instruction reads is recorded as unreferenced data with
  its ROM provenance.  The project README.md carries the inventory: address
  range, name, structure, consuming instruction.

- 'Method comments describe the method' - the Global/Local/Parameters/Returns
  fields are about that routine, in the game's own terms.  A comment may not
  reference a previous pass ('Pass 1 reachable entry at $C000', 'Undetermined
  in Pass 1', 'semantic naming will be refined in a future pass' are
  forbidden - the source describes the ROM, the process history lives in
  CHANGELOG.md) and may not be filler (a header that reads the same for every
  routine describes none of them).

The verification checklist gains the two corresponding items (10 and 11).
AGENTS.md carries the same two rules in its irreversible conventions.

Fix name_data_region.py PRG base and repair the audit offsets it broke

name_data_region.py hardcoded $C000 as the PRG base when it re-emits a split
.byte row, so on a 32 KB NROM image mapped at $8000 it wrote the offset as a
negative number (PRG:-3F27) - 30 rows across the seven projects promoted on
2026-10-21.  The tool now takes --base (default 0xC000).

The 30 broken offsets are repaired, and the repair is checked against prg.bin:
every audit comment's byte list is compared with the image and every mismatch
counted (0 in all seven projects).  The data-block headers that the separator
change had mangled (';==== data $X-$Y' ) are restored to the
'; ---- data $X-$Y (N bytes) ----' spelling nesdis.py emits.

All seven projects still build byte-identical.

Add derive_routine_docs.py and rewrite every promoted routine header to describe its own code

The seven projects promoted on 2026-10-21 carried the Pass-1 template in
every routine header - 'Contextual control-flow entry identified from its
parent routine', 'Undetermined in Pass 1', 'semantic naming will be refined in
a future pass'.  That is filler, and it refers to a pass rather than to the
ROM.

_new _tools/derive_routine_docs.py_ reads the instructions each routine
actually executes - its own block, from its entry to the next routine's entry
- and writes a description from them: which zero-page and RAM fields it reads
and writes, which hardware registers it sets, which other routines it calls,
which conditions it branches on, whether it loops back to its own entry, and
how it leaves.  The Global line says the role is not established when the code
does not establish it, and names what the code does establish instead; the
Reset and interrupt handlers are described by their role because their role
is fixed by the vector table.

The tool reuses derive_clobbers.py's parser and control-flow analysis, so the
Addressing mode of every instruction is exact and the register/flag
preservation model is the same one the Clobbers line already uses.  It touches
comments only, so the build cannot change.

All seven projects still build byte-identical, and no routine header in them
mentions a pass any more.  Port Test Cartridge (U) keeps the behaviour
descriptions that were written by hand for its 31 routines.

derive_routine_docs.py: replace the whole field, not just its first line

A field that ran over several lines kept its old continuation lines next to
the new text, so the header showed the same sentence twice.  The tool now
takes the continuation lines with the field it belongs to.

Gyromite (JUE): re-split Pass 1 from a Mesen CDL capture

The committed split classified 4.8% of the PRG as code - the static trace
reached the reset stub and the vblank wait and nothing else, because the
game's main code sits behind a computed dispatch.  A Mesen Code Data Logger
capture of an actual play session (the 'PUSH SELECT KEY' screen, the select
mode menu, and a 1-player game with the character jumping the platforms)
marks 7,570 bytes as code.

cdl_reclass.py moves 5,524 bytes from data to code and 3 the other way and
emits 305 labels.  Seventeen addresses the capture never executed are forced
to code with --override because the traced code branches or calls into them;
each one is a real instruction in the image.  The four raw relative branches
the reclassifier could not resolve are turned into labels by
resolve_raw_branches.py.

The result is 4,255 instructions / 8,836 code bytes - 27.0% of the PRG, up
from 1,584 bytes.  Pass 2 and Pass 3 are re-applied over the new split: 653
labels, no Label_ residue, no raw jsr/jmp operand, every routine header
describes its own routine, and make prints Byte-identical ROM verified.

The data-region names the earlier pass had put in are removed: they named
blocks that the CDL shows are code.

Ice Hockey (U): re-trace Pass 1 from a Mesen CDL capture

The committed split classified 3.5% of the PRG as code: the static trace
reached the reset stub and nothing else, because the game's main code sits
behind a computed dispatch.

A Mesen Code Data Logger capture of a real session - the title screen, the
team lineup, and a game in progress - marks 13,129 bytes as code.  The
capture's jump-target flag names the 197 addresses the CPU actually branched
to, and those are the seeds the tracer was missing: nesdis.py with them
reaches 6,476 instructions / 12,957 code bytes, 39.5% of the PRG against
3.5% before, with 1,037 labels.

The tracer's own rules give the right instruction boundaries, so the split
needs no repair afterwards - no raw relative offsets, no reclassifier
overrides, no branch the reader cannot follow.  Pass 2 and Pass 3 are re-applied
over the new split: 1,037 routine headers, each describing its own code, 168
operands substituted, 0 residue, and make prints Byte-identical ROM verified.

_new _tools/cdl_seeds.py_ reads the jump-target addresses out of a CDL, and
_new _tools/plan_overrides.py_ lists the --override arguments a
cdl_reclass.py run would need.

10-Yard Fight (U): re-trace Pass 1 from a Mesen CDL capture

The committed split classified 11.2% of the PRG as code.  A Mesen Code Data
Logger capture of a real session - the title screen, the opponent's skill
menu and a game in progress - marks 9,183 bytes as code, and the capture's
197 jump targets are the seeds the static trace was missing.

Re-traced with them, the split is 5,166 instructions / 10,491 code bytes,
32.0% of the PRG against 11.2% before, with 647 labels.  Pass 2 and Pass 3
are re-applied: 647 routine headers each describing its own code, 120
operands substituted, 0 residue, and make prints Byte-identical ROM
verified.

Chubby Cherub (U): re-trace Pass 1 from a Mesen CDL capture

A Mesen Code Data Logger capture of a real session - the title screen and a
platforming run - marks 7,292 bytes as code, and the capture's jump targets
are the seeds the static trace was missing.  Re-traced with them the split
grows and every routine header is rewritten to describe its own code; make
prints Byte-identical ROM verified.

Dig Dug II (U) [!]: re-trace Pass 1 from a Mesen CDL capture

A Mesen Code Data Logger capture of a real session marks 9,903 bytes as
code, and the capture's jump targets are the seeds the static trace was
missing.  Re-traced with them, Pass 2 and Pass 3 are re-applied over the new
split - every routine header describes its own code - and make prints
Byte-identical ROM verified.

Hydlide (U): re-trace Pass 1 from a Mesen CDL capture

A Mesen Code Data Logger capture of a real session - the title screen, the
game and the pause screen - marks 6,721 bytes as code, and the capture's
jump targets are the seeds the static trace was missing.  Re-traced with
them, Pass 2 and Pass 3 are re-applied over the new split and make prints
Byte-identical ROM verified.

Port Test Cartridge (U): re-trace Pass 1 from a Mesen CDL capture

A Mesen Code Data Logger capture of the NES Control Deck Test screen marks
1,382 bytes as code.  Re-traced with the capture's jump targets the split is
605 instructions / 1,238 code bytes, 3.8% of the PRG against 0.7% before.

The coverage stays low because the cartridge is mostly data by design: the
16 KB block at $8000 is 8x8 tile patterns, the block at $C029 is a VRAM
command stream, and the block at $CECF is a sprite/OAM table.  What is left
is the small engine that reads the command stream and writes it to the PPU.

Gyromite (JUE): re-trace from the CDL instead of reclassifying

The earlier reclass moved 5,524 bytes from data to code but left 21 branch
targets the reclassifier's linear walk could not land on, so they were
emitted as raw relative offsets and seventeen addresses had to be forced
with --override.

Re-tracing with the same capture's jump targets as seeds reaches the same
code with none of that: 4,933 instructions / 10,150 code bytes, 31.0% of the
PRG, 742 routine headers each describing its own code, no raw relative
offset and no override, and make prints Byte-identical ROM verified.

Restore the data-block header spelling and add analyze_data_blocks.py

The separator change that gives derive_clobbers.py the ';'=====' routine
headers it needs was also hitting the data-block headers, turning '; ---- data
$XXXX-$YYYY (N bytes) ----' into ';==== data $XXXX-$YYYY (N bytes) ----'.
The conversion now only touches a line that is nothing but dashes.

_new _tools/analyze_data_blocks.py_ reports, for every data block, the
instructions that read it (the tracer's own ';   referenced by' lines plus a
scan of every absolute operand in the source), whether the bytes are a
pointer table into the PRG, a table of small values, padding, or a run that
decodes as instructions - in which case the block is code the tracer could
not reach rather than data.  That is the evidence a table's name has to be
based on.

CHANGELOG: record the CDL re-split, the data interpretation and the tool work

Port Test Cartridge (U): re-trace from the CDL and the unreached blocks

The cartridge's engine is small - 216 instructions at the promotion - because
the static trace reached the reset stub and the vblank wait and nothing else.
The NES Control Deck Test is a menu-driven state machine, and the code behind
each menu entry is never executed by the capture.

Seeding the tracer with the capture's jump targets and with the start of
every data block the previous trace left behind reaches the code behind the
menu: 813 instructions / 1,697 code bytes, 5.2% of the PRG against 0.7% at
the promotion.

Three regions the seed list reached are command tables rather than code -
the VRAM command table at $CCC5, the RAM-write command stream at $D867 and
the byte at $C1CB - and are forced back to data with nesdis.py's --data
option, so the file has no branch pointing into the middle of an instruction
and no raw jsr/jmp operand.

New _tools/code_data_seeds.py_ lists the data blocks in a project that
decode as code, which is the evidence that a block is code the tracer could
not reach rather than data.

Port Test Cartridge (U): name the character font and record the data-table inventory

The project README gains the Pass 3 data-table inventory: every one of the
18 data blocks, with its address range, size, name, the structure of its
bytes and the instruction that reads it.

Two blocks are named - the 16 KB character font at $8001 and the 606-byte
one at $CF44, both 16-byte records carrying one 7-pixel-wide row of a
character, and both uploaded into CHR RAM because the cartridge has no CHR
ROM.  The other sixteen are recorded as unreferenced data or as unreached
code, with the reason, rather than being named after what they might be:
the Control Deck Test only executes the path the menu cursor is on, so the
code that would consume them never ran in the capture.

The README's status, open-work and file sections are brought up to date.

Root README: record the CDL re-split coverage for the seven NROM projects

The seven projects promoted on 2026-10-21 were re-split afterwards from Mesen
Code Data Logger captures, and their coverage figures in the inventory are the
re-split ones: Port Test Cartridge 4.8%, 10-Yard Fight 32.0%, Chubby Cherub
41.4%, Dig Dug II 53.5%, Gyromite 31.0%, Hydlide 47.8%, Ice Hockey 39.5%.

AGENTS.md: record the CDL jump-target seed technique and the --base pitfall

Three lessons from the seven re-splits:

- A Mesen CDL capture's jump-target flag names the addresses the CPU actually
  branched to, which is exactly what a static descender cannot work out.
  nesdis.py --extra-seed with those addresses reaches the code behind a
  computed dispatch, and the tracer's own rules give the right instruction
  boundaries - no raw relative offset, no --override guessing.

- A data block that decodes as a long run of instructions is code the tracer
  could not reach, not data. code_data_seeds.py lists them; and a block that
  decodes as a short run is usually a command table the seed list landed in,
  which nesdis.py --data forces back.

- name_data_region.py needs --base for anything but a 16 KB PRG at $C000.

WIP.md: correct the tier's state table and the per-project states

The tier's state table claimed 851 Pass 0 skeletons.  Counting the
instruction lines in each project's prg.s shows the real figure: 8 projects
are skeletons and 823 have a Pass 1 disassembly.  Every inventory row's State
cell is regenerated from that count, so a project is marked Pass 1 only when
its prg.s really carries instructions.

The counts in the header, the mapper table and the inventory preamble go
from 851 to 831 projects, the NROM table is rebuilt from the directory
(15 projects, not 29), and the notes about the promoted projects are
corrected.

Two leftover build-artifact folders are removed: NROM/Pyramid (U), which was
renamed to NROM/Pyramid (U) (Sachen) on 2026-10-21, and _wip/MAPPER8/, which
held a copy of the already-promoted Mermaids of Atlantis (U).

Dig Dug II (U) [!]: interpret the data tables and record the inventory

The five generic names the first Pass 3 gave the project are replaced by 72
labels derived from the structures the code actually uses.

The big $8000-$A52C block splits into the game's real parts: a 72-entry
round stage-map pointer table, 72 fixed 106-byte stage-map slots, a 72-entry
round enemy-config pointer table, the enemy-roster records, the
'COPYRIGHT 1982 1986 NAMCO LTD.' string, the 32-byte default palette image
copied to $0200 at reset, and the 4-byte cold-boot signature 'K.N.'.

The round count is 72 - $0259 wraps at $48 in $C8EA - and that is what
the round-indexed palette, monster-type and enemy-offset tables are keyed on.
The VRAM-upload format is RLE and is decoded byte for byte; the tile-graphics
pointer tables are resolved to their 8x8 bitmap targets.

34 of the 37 tracer blocks carry at least one name. $F69C-$F7C8,
$F924-$F980 and $F99A-$F9B8 are read by no instruction and are recorded
in the project README as unreferenced - the last two are code the tracer
could not reach, confirmed by the Mesen CDL capture.

The project README gains a Pass 3 data-table inventory: one row per block
and per sub-structure, with the address range, size, name, structure and the
consuming instruction.  make still prints Byte-identical ROM verified.

derive_routine_docs.py: describe what each routine actually does

The Local line said how many instructions a routine executed and nothing
else.  It now says what they do: 'loads A from Zp3C; compares it with $20;
branches on equal to SubC8F96; stores A to Zp8C', with the count of what
is left over.  Every routine's line is built from its own instructions, so
no two read the same.

Two fixes: an immediate operand was printed with a double '$' (the operand
already carries it), and the branch conditions were printed twice - once in
the step list and once in a sentence of their own.

Rewrite the routine headers across the promoted tier

Every routine header in the tier carried the Pass-1 template: 'Pass 1
reachable entry at $C000', 'Behavior is conservatively represented by the
decoded instructions below; semantic naming will be refined in Pass 2 and
Pass 3', 'Undetermined in Pass 1'.  That is filler, and it describes the
process rather than the ROM.

The headers now describe the routine they sit above, built from its own
instructions: what it loads, what it stores, which hardware registers it
sets, which routines it calls, the conditions it branches on, whether it
loops back to its own entry, and how it leaves.  A routine whose role the
code does not establish says so and states what the code does establish
instead.

The Clobbers block of every header is derived by derive_clobbers.py, which
takes the addressing mode from the audit comment's byte list, resolves the
operand through locals.inc and symbols.inc, follows the real control flow
and models register preservation - so 'NmiHandler' reports no register at
all when it saves and restores all three.

derive_clobbers.py and derive_routine_docs.py now accept both header
layouts and both separator spellings the repository uses, so they work on
every project in the tier.

Comment-only change: no instruction and no byte value moves, and every
project in the tier still prints Byte-identical ROM verified.

CHANGELOG: record the tier-wide routine header rewrite

Chubby Cherub (U): interpret the data tables and record the inventory

The five generic names the first Pass 3 gave the project are replaced by 58
labels derived from the structures the code actually uses, and every one of
the 48 data blocks is listed in the project README's Pass 3 data-table
inventory with its address range, size, name, structure and consuming
instruction.

The breakthrough is the character encoding.  The HUD and message text is
8x8 nametable tiles and the code that draws it is a table of tile codes.
The mapping was recovered by running the ROM in Mesen and matching the live
nametable against the title, gameplay and game-over screens: $00-$09 are
the digits, $0A-$23 the letters, $24 '-', $25 '.', $26 the trademark,
$2D a heart, $2E '!', $2F the copyright sign, $30 a space and $33 a
blank.  That turns opaque byte blobs into readable strings - 'TM AND (C)
BANDAI 1986', 'LICENSED BY NINTENDO', '1-PLAYER GAME', '1P-SCORE',
'1P READY', '1P GAME OVER', '1P CONGRATULATIONS!', 'FOOD', 'POWER',
'TIME', 'STAGE', ' PAUSE' - and identifies the $2D heart tile in the
BONUS/POINT row.

Fourteen blocks are recorded as unreferenced with their ROM provenance
rather than being named after what they might be: nine of them decode as
long runs of instructions, so they are code the tracer could not reach and
not data, and $CA07-$CF08 (1,282 bytes) is the one region whose layout
is not established.

make still prints Byte-identical ROM verified.

Complete the routine headers across the tier, in every header layout

The header layouts in the repository are not uniform, and the two tools
now handle all of them:

- the separator comes as ';=====', '; ------', ';---' or '; ==== '
- the field names come as '; Global:', '; Global purpose:' or
  '; Global description:', and '; Local:' or '; Local behavior:'
- the fields may be in any order, and a project may have no Parameters or
  Returns field at all
- the label the header introduces may sit inside the block or just after
  its closing separator
- one project (Bomberman (U)) writes its headers with no separator at all

Two real bugs are fixed on the way:

- derive_clobbers.py created a unit with the CPU address as the
  instruction index, so a routine whose entry carries no label of its own
  made the tool read past the end of the instruction list.  That is what
  stopped it running on Wild Gunman (U) and Pac-Man (USA) (Namco).
- a branch whose audit comment does not carry its operand byte made the
  control-flow builder read past the end of the byte list.

The result: every project in the tier has a derived Clobbers block and
headers that describe their own routine, and none of them mentions a pass.
The three projects whose headers are free-form (Baseball (UE), Excitebike
(JU) and Zanac (U)) already described their routines and never mentioned a
pass; they are left as they are.

Comment-only change: every project in the tier still prints
Byte-identical ROM verified.

Complete Pass 2 across the tier: no Label_ residue left

Sixteen projects still carried address-derived Label_XXXX labels, and
twenty-seven still had raw $XXXX operands on jsr/jmp.  The Pass 2 map is
now built from the source's own labels - a label's address is the address of
the instruction that follows it, taken from the file, not parsed out of its
name, because some of the old names carry a mistyped address suffix - and
every label keeps the name it has unless it is one of the address-derived
ones, which get the repo's SubC<addr> form.

Three more real defects in the tools are fixed:

- derive_branch_names.py named a jsr/jmp target that no instruction sits at.
  Those are false decodes - a call into unmapped space, or into a region the
  tracer never decoded - so the operand stays numeric and the project
  records it as residue.

- apply_pass2_map.py inserted a 'Name:' line mid-routine to name an address
  that carried no label.  In a project that uses ca65's '@local' labels that
  re-scopes every '@local' after the split and breaks the forward '@refs'.
  There the name now becomes an equate in locals.inc, which names the
  address without touching the label scope.

- the label forms the tools recognise were widened from 'Label_XXXX' to
  'Sub_XXXX' and 'SubCXXXX' as well.

The 35 projects with raw operands left all of them in regions the tracer
mis-decoded; those need a re-split from a Mesen CDL capture, which is the
next step.  Every project still prints Byte-identical ROM verified.

Urban Champion (JU): re-split Pass 1 from the Mesen CDL captures

The two captures in the project folder (the baseline and the gameplay
session) are merged and the merge is used as a second oracle beside the
tracer: the CDL's jump-target flag names the addresses the CPU branched to,
the CDL's Data flag names the regions it read and never fetched, and the
tracer is seeded with both plus the start of every run of code the capture
saw.

The split goes from 33.8% code to 48.6%: 3,856 instructions / 7,958 code
bytes against 2,356 / 5,521.  The 220 raw jsr/jmp operands are gone.

Two new tools: merge_cdl.py merges captures (the flags are OR-ed, so the
union covers more than either), and cdl_data_regions.py lists the regions the
capture says are data, for nesdis.py's --data option.

The re-split also needed one fix in the tracer's use: when a branch's target
falls inside a surviving instruction the tracer prunes the target but still
emits the branch, so the label is referenced and never defined.  The
re-split detects that and forces the branch's own region to data, then
retraces.

apply_pass2_map.py: do not write the same equate twice

The equates go in locals.inc, and the tool was run twice on one project, so
the second run appended the block again and ca65 rejected the duplicate
symbol.  The equate list is now checked against what locals.inc already
holds, and only the new ones are written.

Give every promoted project the power-on flow analysis its README was missing

PROMPTS.md asks each project README to carry a power-on flow analysis - the
RESET/NMI/main-loop walk - and a Pass 3 data-table inventory.  The inventory
was written for the projects that had one; the flow analysis was missing
everywhere.

_new _tools/derive_poweron.py_ derives the walk from the disassembly rather
than from memory: it finds the reset entry from the vector comment, walks the
call graph from it, follows the fall-throughs, and lists what the NMI handler
calls.  It also says whether the IRQ vector reaches the reset path.

_new _tools/add_poweron.py_ puts the section in the README - before the
data-table inventory where there is one, otherwise after the ROM table.

All 61 promoted projects now carry the section.

Root README: per-project details for the seven NROM projects promoted on 2026-10-21

Port Test Cartridge (U), 10-Yard Fight (U), Chubby Cherub (U), Dig Dug II (U)
[!], Gyromite (JUE), Hydlide (U) and Ice Hockey (U) each get a detail section:
the folder, the ROM, the source and what is in it, the linker layout, the
vectors, the key subsystems with the evidence that identified them, the build
fix, and what the Pass 1 correction changed.

Donkey Kong (JU): re-split Pass 1 from a Mesen CDL capture

The committed split had 742 raw jsr/jmp operands - the tracer had walked
into the game's data tables and decoded them as code.  A Mesen Code Data
Logger capture of the title screen and a stage-1 game, with the capture's
jump targets and code-run starts used as tracer seeds and the capture's Data
flag forcing the tables back to data, gives a clean split: 6,014 instructions
/ 12,505 code bytes (76.3%), 1,015 labels, and no raw operand left.

Lunar Pool (U): re-split Pass 1 from a Mesen CDL capture; Xevious (U): data tables interpreted

Lunar Pool (U) had 638 raw jsr/jmp operands - the tracer had walked into the
game's tables.  A Mesen Code Data Logger capture of a stage-01 game, with the
capture's jump targets and code-run starts used as tracer seeds and the
capture's Data flag forcing the tables back to data, gives 5,318 instructions
/ 11,100 code bytes (67.7%) and no raw operand left.

Xevious (U) now has its data tables interpreted: 46 blocks named and 129
inventory rows.  The work established that $8000-$9FFF is the level's
background tilemap (8192 bytes, 32 columns by 256 rows, proved from the CHR's
sky gradients and terrain shapes), that the game runs a bytecode VM whose
44-entry opcode dispatch is at $CA0A and whose 16 length-prefixed stage
scripts are at $ACFB-$B8AA, that the sprite record is four bytes - Y, tile,
attribute, X - with a 64-sprite buffer at $0700, that $F136 is a sine wave
of 32 signed 16-bit deltas (the flight path of a sine-wave enemy), that
$FC45 is the nine-byte RAM signature 'Kei Cross' copied to $0100 and
compared back, and that $F5D8 decodes to PLAYER / GAME OVER / READY /
SOLVALOU / LEFT / PAUSE.

Lode Runner (U) and CIRCUS: re-split Pass 1 from Mesen CDL captures

Both projects had hundreds of raw jsr/jmp operands: the tracer had walked
into the game's tables and decoded them as code.  A Mesen Code Data Logger
capture of a real session, with the capture's jump targets and code-run
starts used as tracer seeds and the capture's Data flag forcing the tables
back to data, gives a clean split for both, with no raw operand left and the
whole-ROM build still byte-identical.

Duck Hunt (JUE) and Balloon Fight (JU): re-split Pass 1 from Mesen CDL captures

Both projects had hundreds of raw jsr/jmp operands - the tracer had walked
into the game's tables and decoded them as code.  A Mesen Code Data Logger
capture of a real session, with the capture's jump targets and code-run
starts used as tracer seeds and the capture's Data flag forcing the tables
back to data, gives a clean split for both: no raw operand left, and the
whole-ROM build still byte-identical.

Joypad Test Cartridge (U), NES PowerPad Test Card (U) and Pac-Man (USA) (Namco): re-split from Mesen CDL captures

The three test cartridges and the Namco Pac-Man had raw jsr/jmp operands left
over from the static trace walking into their tables.  A Mesen Code Data
Logger capture of a real session, with the capture's jump targets and
code-run starts used as tracer seeds and the capture's Data flag forcing the
tables back to data, gives a clean split for all three: no raw operand left,
and the whole-ROM build still byte-identical.

Repair the damaged audit trails across the tier

Thirteen projects carried audit comments that did not match prg.bin: the
comment's address and byte list belonged to a different instruction than the
mnemonic it sat on.  Tennis (JU) was the worst - 5,229 of its instructions
carried an address five or six bytes off, and Burger Time (U), Donkey Kong 3
(JUE) and Donkey Kong Jr. (JU) were damaged in the same way.  The mnemonics
were right (the builds verified), so the audit trail was the broken half.

repair_audit_comments.py rebuilds the trail from the ca65 listing, using
prg.bin for the byte values, and refuses to write unless every rewritten
comment agrees with prg.bin.  Three things had to change in the tool for it
to run at all on this tree:

- ca65 2.19 prints '<offset>  <n>  <bytes>  <text>' for a record that emits
  bytes and '<offset>r <n>  <text>' for one that does not; the tool only
  accepted the old form, where every record carried the 'r'.

- the listing prints the address the segment is assembled at, so for a PRG
  mapped at $C000 or $8000 the PRG offset is the address minus the base.
  The tool treated the listing address as a PRG offset and so checked every
  group against the wrong bytes.

- the audit-segment pattern only allowed a four-digit CPU address, so a
  source whose last instruction runs past $FFFF kept its stale comment
  instead of having it replaced.

All 322,830 audit comments in the tier now agree with prg.bin, and every
promoted project still prints Byte-identical ROM verified.

Tennis (JU): finish Pass 2 and Pass 3 over the repaired trail

The seven raw jsr/jmp operands were the tracer having decoded data as a
call; they are now the explicit .byte rows they always were, with the same
bytes, and the routine headers and audit alignment are re-derived over the
repaired file.  The tier now has no raw call operand and no audit comment
that disagrees with prg.bin.

_new _tools/build_routinemap.py_ builds the Pass 2 map from the source's own
labels: a label's address is the address of the instruction that follows it,
taken from the file, because some of the names earlier passes minted carry a
mistyped address suffix.  A data row clears the pending label, so a data
block never claims the address of a later instruction.

Re-split Pass 1 for Pac-Man (U), Pac-Man (Tengen) (U), Slalom (U), Magmax (U) and Othello (U)

Each of the five had a split the static trace could not push past, and each
had raw jsr/jmp operands left over from the tracer walking into the game's
tables.  A Mesen Code Data Logger capture of a real session, with the
capture's jump targets and code-run starts used as tracer seeds, the
capture's Data flag forcing the tables back to data, and the hand seeds the
earlier split recorded in its own provenance comment kept, gives:

  Pac-Man (U)           18.7% -> 45.9%   3,734 instructions / 7,528 bytes
  Pac-Man (Tengen) (U)  20.0% -> 47.3%   3,842 instructions / 7,744 bytes
  Slalom (U)            32.1% -> 31.8%   4,983 instructions / 10,414 bytes
  Magmax (U)            35.4% -> 36.5%   5,696 instructions / 11,954 bytes
  Othello (U)           43.3% -> 44.0%   6,804 instructions / 14,403 bytes

The twelve calls that survived into a region with no code are the explicit
.byte rows they always were, with the same bytes.  Every project still
prints Byte-identical ROM verified.

Give every routine header a contract that is its own

Two things made the headers read the same in every routine of a project.

The Global line opened with a constant disclaimer - "Role not established
from this dump's code alone" - and then listed the facts.  The disclaimer
said nothing about the routine, so it was filler.  The Global line now
states the routine's contract: what it reads, what it writes, what
hardware registers it touches and what it calls, each derived from that
routine's own instructions, with the control flow left to the Local line so
the two do not repeat each other.  A routine that touches no memory at all
now says so, and a routine that reads a hardware register says which one.

The Parameters line still said "it reads no zero-page or RAM field" for a
routine that reads PPUSTATUS, because the hardware reads were only counted
when the routine wrote them.  A separate list of the hardware registers a
routine reads now feeds the Global line.

derive_clobbers.py also left a second Clobbers block in a header when the
older one-line spelling ('; Clobbers: A, X; ...') was present: it removed
only the multi-line form.  Both spellings are removed now, and the derived
block replaces them.

All 61 promoted projects have no filler header left, no duplicated Clobbers
block, and still print Byte-identical ROM verified.

Zanac (U): trace bank 6, and give the project a build that can hold it

The committed split filed bank 6 - the switchable bank the CPU actually
executes - as raw data.  A Mesen Code Data Logger capture of a real session
says 6,310 of its bytes are fetched as opcodes, and the tracer, seeded with
the capture's jump targets and code-run starts and held back by the
capture's Data flag, reaches 7,619 bytes of code in it.

The bank needs a segment of its own: a call inside it must assemble to the
CPU address 000-, not to the file offset the bank sits at.  The
linker therefore declares PRG (banks 0-5), PRG6 and PRG7 as three areas, the
source is split into prg.s, prg.6.s and prg.07.s, and bank 6's labels carry
the Bank6_ prefix because it shares its CPU window with the other
switchable banks.

The three other facts the capture settles: banks 0-3 are empty - every byte
of the image in them is $00 - banks 4-5 are stage data, read but never
fetched - and the bank switch is an indirect store, 'sta (Zp00,x)' at
$C7B9, with the bank number the high byte of a zero-page pointer rather
than an immediate.

The coverage goes from 32.5% to 44.5% of the 128 KB image.  Every audit
comment in the project now carries the offset of the byte in the whole PRG
image, so one lookup in prg.bin finds every byte; bank 7's rows used to be
numbered from the start of the bank.

Zanac (U): name the cross-bank calls and finish Pass 2 over bank 7

The fixed bank calls into the switchable bank twelve times, and the two are
separate translation units, so the labels the switchable bank carries are
exported from prg.6.s and imported into prg.07.s.  The one call left over
points into unmapped space and is the explicit .byte row it always was.

Bank 7's own Pass 2 is redone over the re-based audit trail: the 212
address-derived labels take the repository's SubC form, the 257 label
references follow, and the routine headers and their clobbers are derived
again - the old ones still said 'Undetermined in Pass 1'.

Zanac now has 44.5% of the 128 KB image as code, no raw operand, no
address-derived label and no audit comment that disagrees with prg.bin.

Interpret the data tables across the tier

Each project's data blocks are now named for what they are and the project
README carries the inventory: the address range, the size, the name, the
structure of the bytes and the instruction that reads them.

Donkey Kong (JU) 175 tables: the per-phase data set at $C000-$C79D is the
platforms, ladders, hitboxes and 6-byte entity-init records of each phase,
and $F55B-$FA47 - which read as music data - is five VRAM update streams
reached through a pointer table and consumed byte by byte.

Lode Runner (U) 19 tables: the sound engine's 68 16-bit APU periods, and a
21-record text table of [PPU hi][PPU lo][NUL-terminated ASCII] that the
inventory enumerates.

Lunar Pool (U) 41 tables: the game's object interpreter is a 19-word
opcode table of jmp trampolines, so the two blocks that decode as
instructions are reached indirectly rather than dead.

Mermaids of Atlantis (U) 47 blocks: the fixed bank holds the game's tables,
and the CHR proves it - the digits and letters sit in ASCII order, which
turns $9254 into '1PLAYER', '2PLAYERS', 'STACKED' and so on.

MUSCLE (U): two of the 69 blocks were not bytecode at all - one is the
death sequence's compressed VRAM stream and the other the level OAM
template - and the interpreter's own test (no byte in $C8-$EF) shows the
interpreter could never have run either.

Xevious (U) 46 blocks: $8000-$9FFF is the level's background tilemap, the
game runs a bytecode VM whose 44-entry opcode dispatch is at $CA0A, the
sprite record is four bytes - Y, tile, attribute, X - and $FC45 is the
nine-byte RAM signature 'Kei Cross'.

Ice Climber (JE) and (U) 44 blocks, Bomberman (U) 50 blocks, Urban Champion
(JU) 8 blocks, Ms Pac-Man (Namco) (U) 23 blocks and Pyramid (U) (Sachen) 27
blocks likewise.

Every project still prints Byte-identical ROM verified.

CHANGELOG: move the committed entries into History

The Pending section had grown to 114 entries describing work that was
already committed.  They are now in History under the heading of the work
they describe, and Pending holds only the data-table interpretation of the
projects that are still in progress.

Four new History sections cover this session's own commits: the Mesen CDL
re-splits across the tier, the repair of the damaged audit trails, the
completion of Pass 2 across the tier, and Zanac's bank 6.

Root README: refresh the coverage column of the project inventory

Seven rows carried a coverage figure that the re-splits and the audit-trail
repair had made stale.  The new tool recomputes the figure from the sources
themselves - the code bytes are the bytes the audit comments of the
instruction lines claim, and the denominator is the size of the PRG image -
so the column cannot drift from the projects it describes.

Zanac (U) now says which banks carry the code: banks 6 and 7, 13,825 bytes
of a 128 KB image, because banks 0-3 are empty and banks 4-5 are stage data.

Root README: refresh the source shapes the re-splits changed

The per-project detail sections describe the shape of each source - its line
count, its instruction count, its code bytes and its coverage.  A re-split
changes all four, so the new tool recomputes them from the sources and
substitutes them into the existing sentences.

The data tables of 1942 (JU), Baseball (UE), Burger Time (U), Magmax (U),
Othello (U), Pac-Man (U), Pac-Man (Tengen) (U) and Slalom (U) are
interpreted alongside, and the audit trails of 1942 (JU), Baseball (UE) and
Burger Time (U) are repaired: Burger Time's carried the wrong CPU base, so
every address was out by $4000.

AGENTS.md: record what this session's work established

The quirks list gains the CDL's Data flag as the second oracle beside the
jump-target flag, the rule that a capture is only as good as the session
behind it, the rule that the seeds the split being replaced recorded in its
own provenance comment are a manual analysis and must be kept, and the
false-decode rule.

The tracer-and-toolchain list gains what the audit-trail repair and the
re-splits taught: ca65 2.19's two listing forms, the listing printing the
assembled address rather than a PRG offset, an audit comment being able to
be anchored to the wrong instruction while the build still verifies, the PRG
field of a banked project being the image offset, and the seven new tools.

TODO.md: bring the handoff up to date

The file still described the 41-project tier.  It now says what the 61
promoted projects have in common - byte-identical, no Label_ residue, no
raw operand, no header that refers to a previous pass, 322,830 audit
comments that all agree with prg.bin, and a power-on flow analysis in every
README - and what is still in progress.

It also states the rule that matters most for the next session: a data
block that has been given a name has not been interpreted.

Give every branch target a role name, and close the rest of the checklist

_new _tools/audit_promoted.py_ checks the promoted tier against all eleven
items of PROMPTS.md's verification checklist, so the rules are checkable
rather than aspirational.

Three gaps it found, now closed:

- **1,487 branch targets carried an address-derived name.**  PROMPTS.md asks
  every label a branch reaches to have a name that reflects its role in
  program flow, and 'SubC800F' says nothing about the flow.  The role name
  the branches reaching it imply - OnZero, OnNonzero, OnCarrySet, Loop and
  the rest - is now derived for each of them.  derive_branch_names.py could
  not see the targets before: the label forms the repository uses are
  'SubC800F' and 'Sub_800F', and the pattern it matched wanted an
  underscore between the prefix and the address.

- **48 operands named a hardware register by its address.**  Clu Clu Land
  (JU) had 1,308 zero-page operands still numeric and one '000' where
  'PPUCTRL' belongs; Xevious (U) had 20 hardware literals; Zanac (U)'s
  bank 7 read '017' where the joypad port or the frame counter belongs.
  Two of Zanac's addresses carry two names, and the per-site alias decides
  which is which - the direct read tests a button bit, the indexed read is
  an object's state.

- **325 neutral zero-page slots carried no reason.**  locals.inc now says,
  per slot, that the name is provisional.

The tools grew to match: apply_symbols.py accepts an upper-case mnemonic,
apply_zp_aliases.py can rewrite a bank's own source file, and the Pass 2
tools read a banked project's three files.

Every project still prints Byte-identical ROM verified.

PROMPTS.md: the checklist now has a checker

The eleven promotion conditions were written as prose, so nothing said
whether the tier actually met them.  _tools/audit_promoted.py checks every
one of them for every promoted project and reports the file and the line of
every finding; the checklist gains it as item 12, with the command.

CHANGELOG: record the checklist work

audit_promoted.py: count an inventory row wherever the address sits

Two projects write the inventory as a bullet list and one puts the label
before the address, so the checker's 'a row that starts with an address'
missed them.  A row now counts when it holds a $XXXX address in any cell.

Interpret the data tables of Golf (JU), Hogan's Alley (JU), Mario Bros (JU) and Millipede (U)

Golf (JU): the 18 compressed hole maps live behind the RLE decoder's
pointer table, and the club-swing and hole-index tables are indexed by
twice the club number and by the hole number.

Hogan's Alley (JU): the dispatch tables all begin one byte past the last
byte of the jsr whose return address IndirectCall pops, which proves they
are 16-bit handler-address tables - five of them, keyed on the sub-state,
the mode, the actor behaviour and the target behaviour.

Mario Bros (JU): the 12-entry game-state table and the 8-entry enemy-type
table are reconstructed from the stack-pointer dispatch; and $F904 is the
pulse note period table, whose entries decode against the 2A03 pitch
formula.

Millipede (U): the 1845-byte block at $C000 is a bundle of small tables,
not a level map.

Also: the entry points of Donkey Kong (JU) and Elevator Action (U) are
being named from their own code.

Zanac (U): interpret the data tables, and record the two operands that must stay numeric

Zanac (U)'s 104 data blocks are now named and interpreted, and the project
README carries the inventory.  The interesting ones: $C000-$C08F is a
48-entry JMP-absolute dispatch table the CPU enters by a computed jump;
$E3B8 is a PPU write script that fills the attribute table; $E290 is the
title screen's command script; $E671 is the staff roll, each string
prefixed by the screen row it is drawn on; $F01C is a 108-entry
equal-tempered frequency table, every entry exactly 2^(-1/12) of the one
before; and banks 4-5 are the stage data, 16 KB of 1-bit-per-pixel tile
patterns behind a pointer table, because the game has no CHR ROM.

name_data_region.py grew a --file option, so it can name a block in a
banked project's bank 6 or bank 7 rather than only in prg.s.

Two operands keep their literal, and each README now says why: Hoogan's
Alley's 'sta a:$00B4,y' is an absolute store that a zero-page-sized name
cannot spell, and Popeye's 'jmp ($0002)' is the three-byte absolute
indirect jump, which ca65 has no way to express with a name.

Popeye (JU) (PRG 1): record why the indirect-jump operand keeps its literal

Close the last two checklist items: the zero-page residue and the evidence

PROMPTS.md's item 8 asks that apply_symbols.py leave no resolvable operand
numeric without justification.  Four projects had residue:

- **Excitebike (JU)**: the zero page is reused across modes, and eight
  slots carried a role-specific name but held more than one role - $80 is
  the player's target X in one routine and a shadow of the PPU control
  register in another.  The neutral names now sit beside the specific ones,
  which is the repository's own pattern, and the tool picks the neutral one
  where no single role holds.  Its residue is zero.
- **Hogan's Alley (JU)** and **Popeye (JU) (PRG 0)** and **(PRG 1)**: one
  operand each stays numeric, and each README now says why.  'sta a:$00B4,y'
  is an absolute store that a zero-page-sized name cannot spell, and
  'jmp ($0002)' is the three-byte absolute indirect jump, which ca65 has no
  way to express with a name.

apply_symbols.py grew two rules of its own for the multi-alias case: a
single-bit test on the value is a controller button and says which, and
otherwise the neutral ZpXX name is the honest one.

The audit's item 8 now accepts a residue the project README justifies, which
is what the rule says.

Every project still prints Byte-identical ROM verified.

CHANGELOG: record the zero-page residue work

Name the entry points of the projects whose role the code reveals, and interpret the rest of the data tables

**Entry points.**  PROMPTS.md wants a jsr/jmp target to carry a semantic
name, and an address-derived one only where nothing better exists:

- **Donkey Kong (JU)**: 358 named, none left.  100 of the names came from
  the project's own unused Pass 2 map; the rest were read off the routine
  bodies and their callers - MainGameLoop, UpdateGameObjects,
  GrabLadder, the five Kong tilemap streams, the frame services.
- **Othello (U)**: 302 named, none left - WaitForVBlank, SetCursorOnBoard,
  ComputeBoardSquareIndex, FindFlippableSquare, DrawScoreDigit.
- **Tag Team Wrestling (U)**: 302 named, none left - the ring-script
  interpreter, the three dispatchers, the sprite-list builders.
- **Clu Clu Land (JU)**, **Defender 2 (U)**, **Donkey Kong 3 (JUE)** and
  **Donkey Kong Jr. (JU)**: their data tables are interpreted.

**Data tables.**  Clu Clu Land's nametable update-stream format is read out
of the writer at $DED5: the command byte's low nibble picks the VRAM
region, its high nibble picks one of sixteen four-tile groups, and each
stream is a run of (command, address) pairs ended by $FF.  Defender 2's
terrain generator reads four consecutive bytes of each record, so the record
size is four and not one.  Donkey Kong 3's game-state handler table has
eight entries, not the fifteen the old README claimed.

name_data_region.py now cuts a .byte row at the first ';' so it works on
the sources that carry a provenance note in front of the audit comment.

Every project still prints Byte-identical ROM verified.

The promoted tier now passes every item of the promotion checklist

python3 _tools/audit_promoted.py --build reports nothing for all 61
projects.

**Data tables.**  CIRCUS, Duck Hunt (JUE) and Balloon Fight (JU) join the
rest.  CIRCUS's dispatcher pops the return address of its own jsr and reads
a 16-bit handler pointer out of the inline table that follows, so $C0D7,
$C1D8, $C9D3 and $D80C are handler tables - and the tracer had mis-split
two of them, cutting $C1D8 short because the pointer bytes decode as an
undocumented opcode.  Duck Hunt's $E64B is the duck's 24 ascending speed
table.  Balloon Fight's $D65C is 64 little-endian nametable addresses.

**Entry points.**  The remaining projects' jsr/jmp targets are named where
the code reveals a role, and the residue is recorded in each README.

**One more tool fix.**  name_data_region.py cuts a .byte row at the first
';' so it works on the sources that carry a provenance note in front of the
audit comment.

Every project still prints Byte-identical ROM verified.

CHANGELOG: record the tier passing the checklist

Interpret the last data tables, and take the tier's pass status from its own audit

**Data tables.**  Tag Team Wrestling (U), World Class Track Meet (U),
Wild Gunman (U) and Tennis (JU).

Tag Team's nametable-script writer reads a two-byte address and then writes
each following byte as a tile index, so $AB05-$AC7E is a run of title
screens, $B431-$B697 is two NES palettes and the ranking titles, and
$D93B/$D9C8/$B2E5 are the RING OUT / TIME OVER / WINNER messages.  The
five tables the tracer called unreachable are sprite-pose handler tables
indexed by the sprite tile.

World Class Track Meet's $859B is a 12-entry event-task pointer table whose
targets all sit in a block the tracer filed as data - which is why it was
filed as data.  Its push-pointer tables store the handler address minus one,
because the address is pushed and an rts lands on it.

Wild Gunman's earlier Pass 3 was hollow: the tracer reached 49.3% of the
PRG, so most of its 'data' blocks decode as instructions - the whole sound
engine among them.  The wrong SpritePositionTable name is gone.

Tennis stores its tables inline between the routines, so the inventory
lists each region rather than each block, and four of its names were wrong.

**Root README.**  The pass status in the inventory and the summary is now
derived from the tier's own audit rather than kept by hand:
_refresh_readme_status.py_ rewrites the column from what
_audit_promoted.py_ finds.

Every project still prints Byte-identical ROM verified.

Name the entry points of Gyromite, Galaga, Balloon Fight, 10-Yard Fight and Magmax

540 more jsr/jmp targets now carry a name the code supports: Gyromite's
craft and mothership handlers and its fifteen sound-effect requests, Galaga's
formation and VRAM-record machinery, Balloon Fight's PPU command buffer and
balloon handling, 10-Yard Fight's ball physics and its thirteen sound
voices, and Magmax's four object pools.

Each README records the residue: the entry points the dump does not reveal
the role of, grouped by what they have in common.

Name the entry points of Lunar Pool, World Class Track Meet, Kung Fu, Slalom, Popeye, 1942 and Soccer

1,159 more jsr/jmp targets now carry a name the code supports.

Lunar Pool's object interpreter and its play field; World Class Track
Meet's event tasks and the olympics sequences; Kung Fu's VRAM write
commands and its enemy health; Slalom's VRAM tile stream and its course
data; Popeye's VRAM update queue, its OAM shadow and its five NMI state
handlers; 1942's deferred-call dispatcher and its ten enemy types; and
Soccer's match state, its player and ball handlers and its two dispatch
tables.

Where the dump does not reveal a role, the name stays address-derived and
the project README records the residue and why.

Root README: take the pass status from the tier's audit

refresh_readme_status.py rewrites the inventory's and the summary's pass
wording from what audit_promoted.py finds, so the two cannot disagree.
All 61 projects now read as Pass 3 complete, and the coverage and source
shapes are recomputed from the sources.

Remaining entry-point naming

Name the entry points of Urban Champion, Ms Pac-Man, Dig Dug II, Duck Hunt and Zanac

665 more jsr/jmp targets now carry a name the code supports.

Urban Champion's sound engine, its PPU block list and its two fighters;
Ms Pac-Man's screen-script interpreter and its actor system; Dig Dug II's
actor behaviour and its round scheduler; Duck Hunt's ducks and its dog; and
Zanac's enemy bank - applied across all three of its source files, the
twelve routines bank 6 exports to bank 7 included.

Ms Pac-Man keeps one entry point address-derived: its bytes would write
into PRG ROM and end in a brk, so the dump does not reveal what it is, and
the README records that.

CHANGELOG: record the entry-point naming

Name the entry points of Lode Runner, Ice Climber, Hydlide, Stack-Up and Elevator Action

Re-align the audit comments to the canonical column

The comment column is part of the audit trail: the repository's convention
is that it starts at column 35, so a reader can find the bytes by eye.
Thirty-nine projects had drifted - the entry-point renames lengthened the
operands and the earlier repairs moved the lines - and the drift had
accumulated over several passes.

align_audit_comments.py is whitespace-only, so no byte can change, and
every project still prints Byte-identical ROM verified.

Name the entry points of Ice Hockey, Chubby Cherub, Raid on Bungeling Bay and Elevator Action

1,127 more jsr/jmp targets now carry a name the code supports.

Ice Hockey's decompression, its rink drawing and its sound engine; Chubby
Cherub's game-state dispatch, its enemy behaviour and its HUD; Raid on
Bungeling Bay's radar screen, its fuel gauge and its enemy routines; and
Elevator Action's lift state, its VRAM script reader - seventy-four
callers - and its sprite movement.

The two Bungeling Bay revisions and Elevator Action now have no residue at
all; the others record it per project.

CHANGELOG: record the audit-comment re-alignment

Remaining entry-point naming

Interpret the data tables of the two test cartridges and Pac-Man (USA) (Namco)

**Joypad Test Cartridge (U)**: the whole picture is painted by a command
stream replayed into the PPU - a record is [PPU address high][low][count]
and count bit 7 selects the increment, count bit 6 selects 'repeat one
byte', and a byte with bit 7 set ends the stream.  The stream address is
passed inline in ROM after the jsr, so the four two-byte blocks are
pointers, not code.

**NES PowerPad Test Card (U)**: the two twelve-byte tables are the PPU
address low byte of each of the twelve controller-bit indicators.  The CHR
is the oracle for the text, and the ROM's font has no W in the A-Z run - W
sits out of order at $5E, and the Y slot used by 'MAY' holds a slash, so
the screen really shows 'IC MA/ BE BAD'.

**Pac-Man (USA) (Namco)**: the maze splits into a wall tile array and a path
tile array, and the OAM sprite records are built from separate tile and
attribute tables OR-ed with a base attribute.  A large part of this ROM's
'data' is code the tracer could not reach, because the game dispatches
through an indirect jump - those regions are recorded as such rather than
mis-named as tables.

CHANGELOG: record the tier reaching completion

Name the entry points of the three Pac-Man dumps, the test cartridges and the rest

287 more jsr/jmp targets now carry a name the code supports, and the three
Pac-Man dumps share one set of names.

Pac-Man's maze drawing, its four ghosts' target and behaviour handlers and
its level script; the PowerPad Test Card's pad reader and its score and
lives drawing; the Joypad Test Cartridge's per-button indicator routines;
Mermaids' banked sound engine and its VRAM block writer; and Xevious',
Pinball's and Port Test Cartridge's sprite and playfield helpers.

Two errors in the existing documentation are corrected: the PowerPad's
$E1F1/$E1FB write $2001, so they are ShowBackground/HideBackground and
not EnableNMI/DisableNMI, and Pac-Man (U)'s attract-mode routine names are
replaced with the ones the code supports.

Every project still prints Byte-identical ROM verified.

CHANGELOG: the final entry-point numbers
2026-10-22 00:33:54 -04:00

52 KiB

18258Reset
28262Reset_OnCarryClear
38268Reset_OnCarryClear2
48277Reset_OnNonzero
58287Reset_OnNonzero2
682A8Reset_Loop
782AAReset_OnNonzero3
882D3Sub_82D3
982D6NmiHandler
10830DNmiHandler_Loop
11832DNmiHandler_OnNonnegative
128333NmiHandler_Loop2
138338NmiHandler_Loop3
14834BNmiHandler_Loop4
158367NmiHandler_OnNonzero
168381NmiHandler_Loop5
178384NmiHandler_Loop6
188392Sub_8392
1983A1NmiHandler_Loop7
2083B1NmiHandler_Loop8
2183D4Sub_83D4
2283D9NmiHandler_Loop9
2383E3Sub_83E3
2483ECSubC83EC
25841ANmiHandler_Loop10
268427SubC8427
27844ESub_844E
288450NmiHandler_OnNonnegative2
298466SubC8466
308471NmiHandler_Loop11
31847ANmiHandler_OnZero
32847BNmiHandler_Loop12
338492NmiHandler_Loop13
34849CNmiHandler_OnNonnegative3
3584AANmiHandler_Loop14
3684B6NmiHandler_Loop15
3784CFSub_84CF
3884EANmiHandler_OnNonnegative4
3984F0SubC84F0
4084F4NmiHandler_OnNonzero2
418500NmiHandler_OnNonzero3
42850FNmiHandler_Loop16
438515NmiHandler_OnNonnegative5
448522SubC8522
45852ENmiHandler_Loop17
468536NmiHandler_OnNonnegative6
478546NmiHandler_OnCarryClear
488553SubC8553
498560NmiHandler_Loop18
508563SubC8563
518567NmiHandler_OnNonnegative7
528578NmiHandler_Loop19
53857CNmiHandler_OnNonnegative8
5485FANmiHandler_OnNonnegative9
55860DNmiHandler_Loop20
56860ESub_860E
578610Sub_8610
58861CSubC861C
598649NmiHandler_Loop21
60866FSub_866F
618671NmiHandler_OnNonnegative10
62867ENmiHandler_Loop22
638681Sub_8681
648683NmiHandler_OnNonnegative11
65868ENmiHandler_Loop23
668699SubC8699
6786A3SubC86A3
6886A5NmiHandler_Loop24
6986A8SubC86A8
7086AANmiHandler_OnNonnegative12
7186BCNmiHandler_OnNonnegative13
7286CDNmiHandler_OnNonnegative14
7386F7NmiHandler_Loop25
74870ANmiHandler_Loop26
758718SubC8718
768723SubC8723
77874BNmiHandler_Loop27
788763NmiHandler_Loop28
79876BNmiHandler_Loop29
808777NmiHandler_Loop30
818786SubC8786
828791NmiHandler_Loop31
83879ANmiHandler_Loop32
8487A5NmiHandler_Loop33
8587B5Sub_87B5
8687CDNmiHandler_Loop34
8787D2NmiHandler_Loop35
8887E0NmiHandler_Loop36
8987F2NmiHandler_Loop37
90882BNmiHandler_Loop38
91882ESub_882E
92883DNmiHandler_Loop39
938848NmiHandler_Loop40
94884FNmiHandler_Loop41
958852NmiHandler_Loop42
96886CNmiHandler_Loop43
978872NmiHandler_Loop44
988874NmiHandler_OnCarryClear2
998888NmiHandler_OnNonnegative15
10088A7NmiHandler_Loop45
10188B7NmiHandler_Loop46
10288B9Sub_88B9
10388BFSub_88BF
10488CDNmiHandler_Loop47
10588CESub_88CE
10688DFNmiHandler_Loop48
1078902NmiHandler_Loop49
1088905NmiHandler_Loop50
1098906NmiHandler_Loop51
110890ANmiHandler_Loop52
111890CNmiHandler_Loop53
1128913NmiHandler_OnNonzero4
1138914NmiHandler_OnNonzero5
1148924NmiHandler_Loop54
1158938NmiHandler_Loop55
116893BNmiHandler_Loop56
117894FNmiHandler_Loop57
1188957SubC8957
119895CSubC895C
120896ANmiHandler_OnNonnegative16
121897ASubC897A
1228988NmiHandler_OnZero2
123899ENmiHandler_Loop58
12489B4Sub_89B4
12589C5NmiHandler_OnNonzero6
12689C6NmiHandler_Loop59
12789D7NmiHandler_Loop60
12889EFNmiHandler_Loop61
12989F3NmiHandler_Loop62
13089FCNmiHandler_Loop63
1318A03Sub_8A03
1328A18NmiHandler_Loop64
1338A25Sub_8A25
1348A2ESub_8A2E
1358A36NmiHandler_OnNonzero7
1368A4ANmiHandler_Loop65
1378A4DSub_8A4D
1388A55NmiHandler_OnNonzero8
1398A69NmiHandler_Loop66
1408A6CSub_8A6C
1418A74NmiHandler_OnNonzero9
1428A88NmiHandler_Loop67
1438A8ANmiHandler_Loop68
1448A92NmiHandler_OnNonzero10
1458AA7SubC8AA7
1468AB2NmiHandler_Loop69
1478AB7NmiHandler_OnNonzero11
1488ACANmiHandler_Loop70
1498AD0NmiHandler_Loop71
1508AD6Sub_8AD6
1518AE8SubC8AE8
1528B06NmiHandler_Loop72
1538B16NmiHandler_Loop73
1548B1BNmiHandler_Loop74
1558B1FNmiHandler_Loop75
1568B43SubC8B43
1578B80NmiHandler_Loop76
1588B87NmiHandler_OnNonzero12
1598B88SubC8B88
1608B94NmiHandler_Loop77
1618B9CNmiHandler_Loop78
1628BA9NmiHandler_Loop79
1638BB5NmiHandler_Loop80
1648BD4Sub_8BD4
1658BDCNmiHandler_Loop81
1668BE6NmiHandler_Loop82
1678BF2NmiHandler_Loop83
1688BF5SubC8BF5
1698C06NmiHandler_Loop84
1708C1BNmiHandler_Loop85
1718C1CNmiHandler_Loop86
1728C2BNmiHandler_Loop87
1738C2DNmiHandler_OnCarryClear3
1748C3CSubC8C3C
1758C5BNmiHandler_Loop88
1768C66NmiHandler_Loop89
1778C6BSubC8C6B
1788DCFSubC8DCF
1798DDCSub_8DDC
1808DE5Sub_8DE5
1818DF9NmiHandler_Loop90
1828E0ANmiHandler_Loop91
1838E0DSub_8E0D
1848E1CSub_8E1C
1858E22NmiHandler_OnZero3
1868E50NmiHandler_Loop92
1878E76NmiHandler_Loop93
1888E80NmiHandler_Loop94
1898E82NmiHandler_Loop95
1908E85Sub_8E85
1918E9BSub_8E9B
1928EAFSub_8EAF
1938EBDNmiHandler_OnNonzero13
1948EBFNmiHandler_OnNonzero14
1958EC6Sub_8EC6
1968ECANmiHandler_OnNonzero15
1978EDENmiHandler_OnNonzero16
1988EE5NmiHandler_Loop96
1998EEBNmiHandler_Loop97
2008EF2NmiHandler_Loop98
2018EF6NmiHandler_OnNonzero17
2028EFDNmiHandler_Loop99
2038F03NmiHandler_Loop100
2048F06NmiHandler_Loop101
2058F11NmiHandler_OnNonzero18
2068F29NmiHandler_OnNonzero19
2078F4DNmiHandler_Loop102
2088F54Sub_8F54
2098F63Sub_8F63
2108F7FNmiHandler_OnNonzero20
2118F99NmiHandler_OnNonzero21
2128FA0Sub_8FA0
2138FA6Sub_8FA6
2148FAANmiHandler_OnNonzero22
2158FB1Sub_8FB1
2168FC5Sub_8FC5
2178FD9NmiHandler_OnNonzero23
2188FE7NmiHandler_OnNonzero24
2199031NmiHandler_Loop103
2209808SubC9808
221A482Sub_A482
222A49BNmiHandler_Loop104
223A4A6NmiHandler_Loop105
224A4B3NmiHandler_Loop106
225A4CANmiHandler_Loop107
226A4CCNmiHandler_Loop108
227A4CDNmiHandler_Loop109
228A4DCNmiHandler_Loop110
229A4E6Sub_A4E6
230A50BNmiHandler_Loop111
231A515Sub_A515
232A519NmiHandler_Loop112
233A527NmiHandler_Loop113
234A53BNmiHandler_Loop114
235A542NmiHandler_OnNonzero25
236A544Sub_A544
237A568Sub_A568
238A56ANmiHandler_Loop115
239A587NmiHandler_Loop116
240A5A0NmiHandler_Loop117
241A5B3NmiHandler_Loop118
242A5B5NmiHandler_Loop119
243A5C0Sub_A5C0
244A5CBNmiHandler_Loop120
245A600NmiHandler_Loop121
246A604NmiHandler_OnNonnegative17
247A608NmiHandler_OnNonnegative18
248A630NmiHandler_Loop122
249A644NmiHandler_Loop123
250A64DNmiHandler_Loop124
251A652NmiHandler_Loop125
252A655NmiHandler_Loop126
253A660NmiHandler_Loop127
254A67BNmiHandler_Loop128
255A68DNmiHandler_Loop129
256A695NmiHandler_Loop130
257A696Sub_A696
258A69DNmiHandler_Loop131
259A69FNmiHandler_OnNonnegative19
260A6BANmiHandler_Loop132
261A6BENmiHandler_Loop133
262A6CENmiHandler_Loop134
263A6DFNmiHandler_Loop135
264A6EFNmiHandler_OnNonzero26
265A715NmiHandler_Loop136
266A716NmiHandler_Loop137
267A724NmiHandler_Loop138
268A72CSub_A72C
269A732NmiHandler_Loop139
270A734Sub_A734
271A753NmiHandler_Loop140
272A75BNmiHandler_Loop141
273A75FNmiHandler_Loop142
274A769NmiHandler_Loop143
275A76BNmiHandler_Loop144
276A785NmiHandler_Loop145
277A796NmiHandler_Loop146
278A797Sub_A797
279A7B0NmiHandler_Loop147
280A7BENmiHandler_Loop148
281A7CDNmiHandler_Loop149
282A7D6NmiHandler_Loop150
283A7D9NmiHandler_Loop151
284A7E9NmiHandler_Loop152
285A7F5NmiHandler_Loop153
286A7FCNmiHandler_Loop154
287A805NmiHandler_Loop155
288A81CNmiHandler_Loop156
289A825NmiHandler_OnNegative
290A826Sub_A826
291A834NmiHandler_OnNonzero27
292A847NmiHandler_Loop157
293A862NmiHandler_Loop158
294A86CNmiHandler_Loop159
295A86DSubCA86D
296A884Sub_A884
297A886Sub_A886
298A891NmiHandler_Loop160
299A894NmiHandler_Loop161
300A8A8NmiHandler_Loop162
301A8A9SubCA8A9
302A8C4NmiHandler_Loop163
303A8D7Sub_A8D7
304A8DBNmiHandler_Loop164
305A8DCSubCA8DC
306A8EANmiHandler_OnNonzero28
307A8EBSub_A8EB
308A8F9NmiHandler_Loop165
309A900NmiHandler_Loop166
310A935NmiHandler_OnNegative2
311A936Sub_A936
312A93ESubCA93E
313A955NmiHandler_Loop167
314A95BNmiHandler_Loop168
315A974NmiHandler_Loop169
316A987NmiHandler_Loop170
317A98BNmiHandler_OnZero4
318A9AANmiHandler_Loop171
319A9CANmiHandler_Loop172
320A9DCNmiHandler_Loop173
321A9FBNmiHandler_Loop174
322A9FDNmiHandler_Loop175
323A9FENmiHandler_Loop176
324AA0BNmiHandler_Loop177
325AA18Sub_AA18
326AA35NmiHandler_Loop178
327AA4ENmiHandler_Loop179
328AA5ENmiHandler_Loop180
329AA6DNmiHandler_Loop181
330AA72NmiHandler_Loop182
331AA73NmiHandler_Loop183
332AA84NmiHandler_Loop184
333AA96NmiHandler_Loop185
334AA97NmiHandler_Loop186
335AAB0NmiHandler_Loop187
336AABENmiHandler_Loop188
337AACCNmiHandler_Loop189
338AAE7NmiHandler_Loop190
339AAE9NmiHandler_Loop191
340AAF7NmiHandler_Loop192
341AB1FNmiHandler_Loop193
342AB20NmiHandler_Loop194
343AB3FSubCAB3F
344AB48NmiHandler_Loop195
345AB5DNmiHandler_Loop196
346AB65NmiHandler_Loop197
347AB76NmiHandler_OnNonnegative20
348AB80NmiHandler_Loop198
349AB81NmiHandler_Loop199
350AB8CNmiHandler_Loop200
351AB90NmiHandler_Loop201
352ABAANmiHandler_OnCarrySet
353ABB6NmiHandler_Loop202
354ABCANmiHandler_Loop203
355ABCENmiHandler_Loop204
356ABD7NmiHandler_Loop205
357ABE9NmiHandler_OnNonnegative21
358ABFDNmiHandler_Loop206
359AC02NmiHandler_Loop207
360AC27NmiHandler_Loop208
361AC29NmiHandler_OnNonzero29
362AC2ASubCAC2A
363AC38NmiHandler_Loop209
364AC3DSub_AC3D
365AC52NmiHandler_Loop210
366AC70NmiHandler_Loop211
367AC94NmiHandler_Loop212
368ACB0NmiHandler_Loop213
369ACB8NmiHandler_Loop214
370ACBANmiHandler_OnNonnegative22
371ACCDNmiHandler_Loop215
372ACD0NmiHandler_Loop216
373ACD4Sub_ACD4
374ACD6NmiHandler_OnNonnegative23
375ACDENmiHandler_Loop217
376ACDFSub_ACDF
377ACE8NmiHandler_Loop218
378ACF1NmiHandler_Loop219
379AD02NmiHandler_Loop220
380AD26NmiHandler_Loop221
381AD2ENmiHandler_Loop222
382AD4DNmiHandler_Loop223
383AD5DNmiHandler_OnZero5
384AD63NmiHandler_Loop224
385AD66NmiHandler_Loop225
386AD6ENmiHandler_Loop226
387AD6FNmiHandler_Loop227
388AD85NmiHandler_Loop228
389AD94NmiHandler_Loop229
390ADA3NmiHandler_Loop230
391ADADNmiHandler_Loop231
392ADB7NmiHandler_Loop232
393ADBENmiHandler_Loop233
394ADC7NmiHandler_Loop234
395ADD4NmiHandler_Loop235
396ADDASub_ADDA
397ADEASubCADEA
398ADFESubCADFE
399AE01Sub_AE01
400AE1DNmiHandler_Loop236
401AE1FNmiHandler_Loop237
402AE2DNmiHandler_Loop238
403AE61NmiHandler_Loop239
404AE7BNmiHandler_Loop240
405AE7DSubCAE7D
406AEA1SubCAEA1
407AEABSub_AEAB
408AEB1NmiHandler_Loop241
409AEB3NmiHandler_Loop242
410AEBENmiHandler_Loop243
411AED1NmiHandler_Loop244
412AED2SubCAED2
413AEDBSub_AEDB
414AEEDNmiHandler_Loop245
415AF06NmiHandler_Loop246
416AF22NmiHandler_Loop247
417AF2ANmiHandler_Loop248
418AF42NmiHandler_Loop249
419AF55NmiHandler_Loop250
420AF5FNmiHandler_Loop251
421AF7CNmiHandler_Loop252
422AF7DNmiHandler_Loop253
423AF91NmiHandler_Loop254
424AF9BNmiHandler_Loop255
425AFA4NmiHandler_Loop256
426AFB2NmiHandler_Loop257
427AFB3SubCAFB3
428AFCBNmiHandler_Loop258
429AFD5NmiHandler_Loop259
430AFE1NmiHandler_Loop260
431AFEASub_AFEA
432AFFBNmiHandler_Loop261
433AFFESubCAFFE
434B017NmiHandler_Loop262
435B01ASubCB01A
436B031NmiHandler_Loop263
437B03FNmiHandler_Loop264
438B049NmiHandler_Loop265
439B055NmiHandler_Loop266
440B056SubCB056
441B069NmiHandler_Loop267
442B073NmiHandler_OnNonnegative24
443B083NmiHandler_Loop268
444B0A7NmiHandler_Loop269
445B0C3NmiHandler_Loop270
446B0C8NmiHandler_Loop271
447B0CESub_B0CE
448B0D2NmiHandler_Loop272
449B0E2NmiHandler_Loop273
450B0E6NmiHandler_Loop274
451B0F4NmiHandler_Loop275
452B102NmiHandler_Loop276
453B103SubCB103
454B11FNmiHandler_Loop277
455B12CNmiHandler_Loop278
456B12FNmiHandler_Loop279
457B142NmiHandler_Loop280
458B148NmiHandler_Loop281
459B153NmiHandler_Loop282
460B15CNmiHandler_Loop283
461B15DSub_B15D
462B16CNmiHandler_Loop284
463B175NmiHandler_OnCarryClear4
464B176SubCB176
465B17DSub_B17D
466B1A1NmiHandler_Loop285
467B1A7NmiHandler_OnNonzero30
468B1ADNmiHandler_Loop286
469B1C7NmiHandler_Loop287
470B1C9Sub_B1C9
471B1CFNmiHandler_Loop288
472B1D0Sub_B1D0
473B1E3Sub_B1E3
474B1F6NmiHandler_Loop289
475B204NmiHandler_Loop290
476B206NmiHandler_Loop291
477B208Sub_B208
478B212NmiHandler_Loop292
479B21FNmiHandler_Loop293
480B220Sub_B220
481B226NmiHandler_Loop294
482B22FNmiHandler_Loop295
483B231Sub_B231
484B23FNmiHandler_Loop296
485B243Sub_B243
486B253NmiHandler_Loop297
487B25BNmiHandler_Loop298
488B276NmiHandler_Loop299
489B292NmiHandler_Loop300
490B2B9NmiHandler_Loop301
491B2BASub_B2BA
492B2C8Sub_B2C8
493B2CANmiHandler_Loop302
494B2E6NmiHandler_Loop303
495B2E9NmiHandler_Loop304
496B2F5NmiHandler_Loop305
497B2F8NmiHandler_Loop306
498B2FENmiHandler_Loop307
499B313NmiHandler_Loop308
500B33DNmiHandler_Loop309
501B34BNmiHandler_Loop310
502B354NmiHandler_Loop311
503B355NmiHandler_Loop312
504B362NmiHandler_Loop313
505B37DNmiHandler_Loop314
506B3CDNmiHandler_Loop315
507B3D0NmiHandler_Loop316
508B3E7Sub_B3E7
509B3FANmiHandler_Loop317
510B42FNmiHandler_Loop318
511B464NmiHandler_Loop319
512B467Sub_B467
513B47CNmiHandler_Loop320
514B486NmiHandler_OnNonnegative25
515B4A2NmiHandler_Loop321
516B4ACNmiHandler_Loop322
517B4B5NmiHandler_Loop323
518B4BESub_B4BE
519B4C8NmiHandler_Loop324
520B4CFNmiHandler_Loop325
521B4DANmiHandler_Loop326
522B4FBNmiHandler_Loop327
523B507NmiHandler_Loop328
524B512NmiHandler_OnNonnegative26
525B54CNmiHandler_Loop329
526B557NmiHandler_Loop330
527B560Sub_B560
528B574NmiHandler_Loop331
529B57FNmiHandler_Loop332
530B587Sub_B587
531B59ANmiHandler_OnNonnegative27
532B5B4NmiHandler_OnNonzero31
533B5D9NmiHandler_Loop333
534B5E0NmiHandler_Loop334
535B5E7Sub_B5E7
536B5F5NmiHandler_OnNonnegative28
537B613NmiHandler_Loop335
538B622NmiHandler_Loop336
539B62ASub_B62A
540B62FNmiHandler_OnCarryClear5
541B632NmiHandler_Loop337
542B64DNmiHandler_Loop338
543B64FNmiHandler_Loop339
544B65CNmiHandler_Loop340
545B67ENmiHandler_Loop341
546B68FNmiHandler_Loop342
547B693NmiHandler_OnNonzero32
548B6C2NmiHandler_Loop343
549B714Sub_B714
550B73CNmiHandler_Loop344
551B755NmiHandler_Loop345
552B75BNmiHandler_OnNonzero33
553B786NmiHandler_Loop346
554B789Sub_B789
555B78BNmiHandler_OnNonnegative29
556B7B2NmiHandler_Loop347
557B7B9NmiHandler_Loop348
558B7C2NmiHandler_Loop349
559B7DFNmiHandler_Loop350
560B7EDNmiHandler_Loop351
561B7F6NmiHandler_Loop352
562B7FASubCB7FA
563B826NmiHandler_Loop353
564B82DNmiHandler_Loop354
565B837NmiHandler_OnCarrySet2
566B857NmiHandler_Loop355
567B85ANmiHandler_Loop356
568B86ENmiHandler_Loop357
569B87CNmiHandler_Loop358
570B888NmiHandler_Loop359
571B889Sub_B889
572B88BNmiHandler_OnNonnegative30
573B897NmiHandler_Loop360
574B899Sub_B899
575B89BNmiHandler_OnNonnegative31
576B8BFNmiHandler_Loop361
577B8C9NmiHandler_Loop362
578B8CDSub_B8CD
579B8CFNmiHandler_OnNonnegative32
580B8D8NmiHandler_Loop363
581B8F2NmiHandler_Loop364
582B8FDSub_B8FD
583B8FFNmiHandler_OnNonnegative33
584B972NmiHandler_Loop365
585B976Sub_B976
586B978NmiHandler_OnNonnegative34
587B9A0NmiHandler_Loop366
588B9A4Sub_B9A4
589B9A6NmiHandler_OnNonnegative35
590B9B6NmiHandler_OnNonzero34
591B9B8NmiHandler_OnNonzero35
592B9CENmiHandler_Loop367
593B9D8Sub_B9D8
594B9DANmiHandler_OnNonnegative36
595B9F4NmiHandler_Loop368
596B9F9Sub_B9F9
597BA0DSub_BA0D
598BA0FNmiHandler_OnNonnegative37
599BA25NmiHandler_Loop369
600BA34SubCBA34
601BA36Sub_BA36
602BA3ASub_BA3A
603BA48NmiHandler_OnNonnegative38
604BA54NmiHandler_OnNonnegative39
605BA86NmiHandler_Loop370
606BA88NmiHandler_Loop371
607BA9DNmiHandler_Loop372
608BAA4NmiHandler_Loop373
609BAA5Sub_BAA5
610BAAFNmiHandler_Loop374
611BAB4NmiHandler_OnNonzero36
612BAB5NmiHandler_Loop375
613BACANmiHandler_Loop376
614BAD0NmiHandler_Loop377
615BAD8NmiHandler_Loop378
616BADDSub_BADD
617BAEFNmiHandler_Loop379
618BAF3NmiHandler_OnNonzero37
619BB47NmiHandler_Loop380
620BB48Sub_BB48
621BB6ENmiHandler_Loop381
622BDC4Sub_BDC4
623BDDDNmiHandler_Loop382
624BDE5NmiHandler_Loop383
625BDE7NmiHandler_Loop384
626BDEBSubCBDEB
627BDF1NmiHandler_OnZero6
628BDFFNmiHandler_Loop385
629BE1CNmiHandler_Loop386
630BE30NmiHandler_Loop387
631BE38NmiHandler_Loop388
632BE43NmiHandler_Loop389
633BE46NmiHandler_Loop390
634BE4FNmiHandler_Loop391
635BE63NmiHandler_OnNonzero38
636BE64NmiHandler_Loop392
637BE6CNmiHandler_Loop393
638BE7BNmiHandler_Loop394
639BE86NmiHandler_Loop395
640BE8ANmiHandler_Loop396
641BEACNmiHandler_Loop397
642BEB9NmiHandler_Loop398
643BEC0NmiHandler_Loop399
644BEDBNmiHandler_Loop400
645BEE0NmiHandler_Loop401
646BF0BNmiHandler_Loop402
647BF15Sub_BF15
648BF36NmiHandler_Loop403
649BF3ESub_BF3E
650BF42NmiHandler_OnNonzero39
651BF4CNmiHandler_Loop404
652BF4FNmiHandler_Loop405
653BF5CNmiHandler_OnZero7
654BF61NmiHandler_Loop406
655BF65NmiHandler_OnZero8
656BF68NmiHandler_Loop407
657BF76NmiHandler_Loop408
658BF7ENmiHandler_Loop409
659BF8ANmiHandler_Loop410
660BF96NmiHandler_Loop411
661BFA3NmiHandler_Loop412
662BFA7NmiHandler_Loop413
663BFABNmiHandler_Loop414
664BFB2Sub_BFB2
665BFB4Sub_BFB4
666BFBFNmiHandler_Loop415
667BFE4NmiHandler_Loop416
668BFECNmiHandler_Loop417
669BFEENmiHandler_Loop418
670C010NmiHandler_Loop419
671C018NmiHandler_Loop420
672C01ENmiHandler_Loop421
673C01FSub_C01F
674C034Sub_C034
675C036NmiHandler_OnNonnegative40
676C05ANmiHandler_Loop422
677C05ESub_C05E
678C078NmiHandler_Loop423
679C087NmiHandler_Loop424
680C093NmiHandler_Loop425
681C094Sub_C094
682C0B6Sub_C0B6
683C0D7NmiHandler_Loop426
684C0F3Sub_C0F3
685C103NmiHandler_Loop427
686C109NmiHandler_Loop428
687C119NmiHandler_Loop429
688C11FNmiHandler_Loop430
689C122NmiHandler_Loop431
690C125Sub_C125
691C154NmiHandler_Loop432
692C169Sub_C169
693C197NmiHandler_Loop433
694C19DNmiHandler_Loop434
695C1A4NmiHandler_Loop435
696C1B9Sub_C1B9
697C1BBNmiHandler_OnNonnegative41
698C1CBNmiHandler_Loop436
699C1D4NmiHandler_Loop437
700C1F3NmiHandler_Loop438
701C1F7Sub_C1F7
702C1FBNmiHandler_OnNonnegative42
703C203NmiHandler_Loop439
704C208Sub_C208
705C218NmiHandler_Loop440
706C221NmiHandler_OnNonzero40
707C224NmiHandler_Loop441
708C226Sub_C226
709C241NmiHandler_Loop442
710C26ANmiHandler_Loop443
711C270NmiHandler_Loop444
712C291NmiHandler_Loop445
713C2AANmiHandler_Loop446
714C2B2NmiHandler_Loop447
715C2C6NmiHandler_Loop448
716C2EFNmiHandler_Loop449
717C2F2NmiHandler_Loop450
718C2F8Sub_C2F8
719C306NmiHandler_Loop451
720C307NmiHandler_Loop452
721C310NmiHandler_Loop453
722C319NmiHandler_Loop454
723C321NmiHandler_Loop455
724C322Sub_C322
725C336Sub_C336
726C33DNmiHandler_Loop456
727C355NmiHandler_OnZero9
728C358NmiHandler_Loop457
729C364NmiHandler_Loop458
730C36BSub_C36B
731C37CNmiHandler_Loop459
732C389NmiHandler_Loop460
733C38ENmiHandler_Loop461
734C391NmiHandler_Loop462
735C39CNmiHandler_Loop463
736C3A2NmiHandler_Loop464
737C3AANmiHandler_Loop465
738C3B0NmiHandler_Loop466
739C3BANmiHandler_Loop467
740C3C2NmiHandler_Loop468
741C3CBNmiHandler_Loop469
742C403NmiHandler_Loop470
743C408NmiHandler_Loop471
744C415NmiHandler_OnZero10
745C41ENmiHandler_Loop472
746C429Sub_C429
747C430Sub_C430
748C432Sub_C432
749C433Sub_C433
750C45BNmiHandler_Loop473
751C462Sub_C462
752C467NmiHandler_OnCarryClear6
753C46ANmiHandler_Loop474
754C497NmiHandler_Loop475
755C4A3NmiHandler_Loop476
756C4ABNmiHandler_Loop477
757C4CENmiHandler_Loop478
758C4E2NmiHandler_Loop479
759C4E5NmiHandler_Loop480
760C4F8NmiHandler_Loop481
761C517NmiHandler_Loop482
762C521NmiHandler_Loop483
763C541NmiHandler_Loop484
764C547Sub_C547
765C585NmiHandler_Loop485
766C58FNmiHandler_Loop486
767C59ANmiHandler_Loop487
768C5BCNmiHandler_Loop488
769C5E4NmiHandler_Loop489
770C5E9NmiHandler_Loop490
771C5F9NmiHandler_Loop491
772C5FCNmiHandler_Loop492
773C5FDSub_C5FD
774C601NmiHandler_OnNonnegative43
775C624NmiHandler_OnNonzero41
776C651NmiHandler_Loop493
777C656NmiHandler_Loop494
778C65BSub_C65B
779C669NmiHandler_Loop495
780C671NmiHandler_Loop496
781C678NmiHandler_Loop497
782C6A0NmiHandler_Loop498
783C6A7NmiHandler_Loop499
784C6B2NmiHandler_OnCarrySet3
785C6BANmiHandler_Loop500
786C6C0NmiHandler_Loop501
787C6DBNmiHandler_Loop502
788C6E2NmiHandler_Loop503
789C6EDNmiHandler_OnCarrySet4
790C6F5NmiHandler_Loop504
791C6FBNmiHandler_Loop505
792C6FDNmiHandler_OnZero11
793C6FESub_C6FE
794C715Sub_C715
795C71ANmiHandler_OnNonzero42
796C725NmiHandler_OnNonzero43
797C743NmiHandler_Loop506
798C74ANmiHandler_Loop507
799C756NmiHandler_Loop508
800C75FNmiHandler_OnNonnegative44
801C772Sub_C772
802C789NmiHandler_OnCarryClear7
803C79ESub_C79E
804C7A5Sub_C7A5
805C7AANmiHandler_OnNonzero44
806C7ABSub_C7AB
807C7CCNmiHandler_Loop509
808C7D1NmiHandler_OnNonnegative45
809C804NmiHandler_OnNonnegative46
810C81FNmiHandler_OnNonzero45
811C834NmiHandler_Loop510
812C841NmiHandler_Loop511
813C85ESub_C85E
814C87CNmiHandler_Loop512
815C88BNmiHandler_OnZero12
816C88CSub_C88C
817C8A1NmiHandler_Loop513
818C8A6NmiHandler_OnZero13
819C8ACNmiHandler_Loop514
820C8C6NmiHandler_Loop515
821C8E5NmiHandler_Loop516
822C92DNmiHandler_Loop517
823C93CNmiHandler_Loop518
824C93DSub_C93D
825C93FNmiHandler_OnNonnegative47
826C97DNmiHandler_Loop519
827C97FNmiHandler_Loop520
828C9B7NmiHandler_Loop521
829C9BBSub_C9BB
830C9CCNmiHandler_Loop522
831C9F7NmiHandler_Loop523
832C9FDNmiHandler_Loop524
833C9FENmiHandler_Loop525
834CA17NmiHandler_Loop526
835CA22NmiHandler_Loop527
836CA38NmiHandler_Loop528
837CA42NmiHandler_Loop529
838CA58NmiHandler_Loop530
839CA6ENmiHandler_Loop531
840CA80NmiHandler_Loop532
841CABDNmiHandler_Loop533
842CACENmiHandler_Loop534
843CAD4NmiHandler_Loop535
844CAE1NmiHandler_Loop536
845CAE3NmiHandler_Loop537
846CB14NmiHandler_Loop538
847CB15Sub_CB15
848CB22Sub_CB22
849CB2FSub_CB2F
850CB3ESub_CB3E
851CB50Sub_CB50
852CB74NmiHandler_Loop539
853CB76NmiHandler_Loop540
854CBA2NmiHandler_Loop541
855CBA4Sub_CBA4
856CBA7NmiHandler_OnCarrySet5
857CBBENmiHandler_Loop542
858CBC4NmiHandler_Loop543
859CBC8NmiHandler_OnNonnegative48
860CBCFSub_CBCF
861CBE9NmiHandler_OnNonzero46
862CBFFSub_CBFF
863CC09NmiHandler_OnNonzero47
864CC15NmiHandler_Loop544
865CC1CNmiHandler_Loop545
866CC26NmiHandler_OnNonnegative49
867CC30NmiHandler_Loop546
868CC31Sub_CC31
869CC3DNmiHandler_Loop547
870CC55NmiHandler_OnNonzero48
871CC6BSub_CC6B
872CC85NmiHandler_Loop548
873CC91Sub_CC91
874CC93NmiHandler_OnNonnegative50
875CC9DSub_CC9D
876CCBENmiHandler_Loop549
877CCC3NmiHandler_Loop550
878CCC5NmiHandler_OnNonzero49
879CCC7Sub_CCC7
880CCCFNmiHandler_OnNonnegative51
881CCE8Sub_CCE8
882CD04NmiHandler_Loop551
883CD05Sub_CD05
884CD18NmiHandler_Loop552
885CD26Sub_CD26
886CD5ASub_CD5A
887CD60NmiHandler_OnNonzero50
888CD61NmiHandler_Loop553
889CDABNmiHandler_Loop554
890CDD7NmiHandler_Loop555
891CFCCSub_CFCC
892CFD7NmiHandler_Loop556
893CFDDNmiHandler_Loop557
894CFEFNmiHandler_Loop558
895CFF6Sub_CFF6
896CFFDNmiHandler_Loop559
897D005NmiHandler_Loop560
898D013NmiHandler_Loop561
899D020NmiHandler_Loop562
900D022NmiHandler_Loop563
901D02CNmiHandler_Loop564
902D02FNmiHandler_Loop565
903D038NmiHandler_Loop566
904D039NmiHandler_Loop567
905D03CSubCD03C
906D06ANmiHandler_Loop568
907D073NmiHandler_Loop569
908D07ENmiHandler_Loop570
909D084NmiHandler_Loop571
910D0BCNmiHandler_Loop572
911D0C9NmiHandler_Loop573
912D0CENmiHandler_OnNonnegative52
913D0D4NmiHandler_Loop574
914D0D5NmiHandler_Loop575
915D0DFNmiHandler_Loop576
916D0E6SubCD0E6
917D103NmiHandler_Loop577
918D115NmiHandler_Loop578
919D118SubCD118
920D12BNmiHandler_Loop579
921D12ENmiHandler_Loop580
922D146NmiHandler_Loop581
923D151NmiHandler_Loop582
924D15FNmiHandler_Loop583
925D172NmiHandler_Loop584
926D183NmiHandler_OnNegative3
927D192NmiHandler_Loop585
928D1ABNmiHandler_Loop586
929D1AENmiHandler_Loop587
930D1AFNmiHandler_Loop588
931D1C0NmiHandler_Loop589
932D1C3Sub_D1C3
933D21FSub_D21F
934D228NmiHandler_OnZero14
935D229NmiHandler_Loop590
936D23ENmiHandler_Loop591
937D23FSubCD23F
938D255NmiHandler_OnZero15
939D26ANmiHandler_Loop592
940D273NmiHandler_Loop593
941D282NmiHandler_Loop594
942D28FNmiHandler_Loop595
943D293NmiHandler_Loop596
944D2A3NmiHandler_Loop597
945D2BENmiHandler_Loop598
946D2C9NmiHandler_Loop599
947D2E3Sub_D2E3
948D2E9NmiHandler_OnZero16
949D2EFNmiHandler_Loop600
950D2F0NmiHandler_Loop601
951D311NmiHandler_Loop602
952D328SubCD328
953D342NmiHandler_Loop603
954D348NmiHandler_Loop604
955D35DNmiHandler_Loop605
956D363NmiHandler_Loop606
957D36ANmiHandler_Loop607
958D376NmiHandler_Loop608
959D383NmiHandler_Loop609
960D3C6Sub_D3C6
961D3E6NmiHandler_Loop610
962D3E7NmiHandler_Loop611
963D3F6NmiHandler_OnNonzero51
964D3F7SubCD3F7
965D40FSub_D40F
966D41ENmiHandler_Loop612
967D426NmiHandler_OnZero17
968D42ANmiHandler_OnNegative4
969D434NmiHandler_Loop613
970D43BNmiHandler_Loop614
971D445SubCD445
972D46CNmiHandler_Loop615
973D474NmiHandler_Loop616
974D475SubCD475
975D482SubCD482
976D487Sub_D487
977D4A2NmiHandler_Loop617
978D4AENmiHandler_OnNonnegative53
979D4CDNmiHandler_Loop618
980D4D8NmiHandler_Loop619
981D4DDNmiHandler_Loop620
982D4DFSub_D4DF
983D4E3Sub_D4E3
984D4E5NmiHandler_Loop621
985D4E7Sub_D4E7
986D4F6NmiHandler_Loop622
987D505Sub_D505
988D51ASub_D51A
989D53CNmiHandler_Loop623
990D544NmiHandler_Loop624
991D548NmiHandler_Loop625
992D559NmiHandler_Loop626
993D55FNmiHandler_Loop627
994D563NmiHandler_OnNonzero52
995D566NmiHandler_Loop628
996D569Sub_D569
997D57DNmiHandler_Loop629
998D58BNmiHandler_Loop630
999D591NmiHandler_Loop631
1000D597NmiHandler_Loop632
1001D59ENmiHandler_Loop633
1002D59FSubCD59F
1003D5A9Sub_D5A9
1004D5BANmiHandler_Loop634
1005D5CBNmiHandler_Loop635
1006D5CESub_D5CE
1007D5FANmiHandler_Loop636
1008D5FESub_D5FE
1009D600NmiHandler_OnNonnegative54
1010D612NmiHandler_Loop637
1011D615NmiHandler_OnNonzero53
1012D616Sub_D616
1013D62BNmiHandler_OnNonzero54
1014D63ANmiHandler_Loop638
1015D658Sub_D658
1016D673NmiHandler_Loop639
1017D67CSub_D67C
1018D689NmiHandler_Loop640
1019D696NmiHandler_Loop641
1020D697Sub_D697
1021D699Sub_D699
1022D6CFNmiHandler_Loop642
1023D6D1NmiHandler_Loop643
1024D6D7NmiHandler_Loop644
1025D6E3NmiHandler_Loop645
1026D6E6NmiHandler_OnZero18
1027D706NmiHandler_Loop646
1028D70ENmiHandler_Loop647
1029D726NmiHandler_Loop648
1030D732NmiHandler_Loop649
1031D749NmiHandler_Loop650
1032D75FNmiHandler_Loop651
1033D774NmiHandler_Loop652
1034D781NmiHandler_Loop653
1035D787Sub_D787
1036D792NmiHandler_Loop654
1037D79ENmiHandler_Loop655
1038D7AFNmiHandler_Loop656
1039D7BDNmiHandler_Loop657
1040D7DFNmiHandler_Loop658
1041D7E4NmiHandler_Loop659
1042D7EDNmiHandler_Loop660
1043D7F9NmiHandler_Loop661
1044D7FASub_D7FA
1045D7FCNmiHandler_OnNonnegative55
1046D83CNmiHandler_Loop662
1047D840Sub_D840
1048D863NmiHandler_Loop663
1049D86CNmiHandler_Loop664
1050D875NmiHandler_Loop665
1051D87ENmiHandler_Loop666
1052D88ENmiHandler_Loop667
1053D890NmiHandler_Loop668
1054D893NmiHandler_Loop669
1055D89ANmiHandler_Loop670
1056D8A9NmiHandler_Loop671
1057D8EDNmiHandler_Loop672
1058D8EFNmiHandler_Loop673
1059D8F0Sub_D8F0
1060D90BNmiHandler_Loop674
1061D90FNmiHandler_Loop675
1062D910NmiHandler_Loop676
1063D923NmiHandler_Loop677
1064D930NmiHandler_OnNonzero55
1065D931Sub_D931
1066D946NmiHandler_Loop678
1067D951NmiHandler_Loop679
1068D968Sub_D968
1069D983NmiHandler_Loop680
1070D987NmiHandler_Loop681
1071D988NmiHandler_Loop682
1072D999NmiHandler_Loop683
1073D99BNmiHandler_OnNonzero56
1074D99CSub_D99C
1075D9BFSub_D9BF
1076D9E6NmiHandler_OnNonzero57
1077D9E7NmiHandler_Loop684
1078D9F3NmiHandler_Loop685
1079DA0ESub_DA0E
1080DA26NmiHandler_OnNonzero58
1081DA2FNmiHandler_Loop686
1082DA33NmiHandler_Loop687
1083DA3DNmiHandler_Loop688
1084DA42NmiHandler_Loop689
1085DA4CNmiHandler_Loop690
1086DA51Sub_DA51
1087DA9CNmiHandler_Loop691
1088DAA7NmiHandler_Loop692
1089DAB7NmiHandler_Loop693
1090DAB8Sub_DAB8
1091DAD8NmiHandler_Loop694
1092DAE6NmiHandler_Loop695
1093DAEANmiHandler_OnNonzero59
1094DB01NmiHandler_Loop696
1095DB0ENmiHandler_Loop697
1096DB13NmiHandler_Loop698
1097DB16NmiHandler_OnNonzero60
1098DB19NmiHandler_Loop699
1099DB32NmiHandler_Loop700
1100DB3ESub_DB3E
1101F831Sub_F831
1102F852Sub_F852
1103F858Sub_F858
1104F85ANmiHandler_OnNonzero61
1105F86BNmiHandler_Loop701
1106F86CSub_F86C
1107F873Sub_F873
1108F879Sub_F879
1109F87DSub_F87D
1110F886SubCF886
1111F895NmiHandler_OnCarrySet6
1112F8A6NmiHandler_OnCarrySet7
1113F8B3NmiHandler_OnCarrySet8
1114F8D2NmiHandler_Loop702
1115F8D7NmiHandler_Loop703
1116F8DCNmiHandler_Loop704
1117F8E7Sub_F8E7
1118F8EFNmiHandler_Loop705
1119F8F0Sub_F8F0
1120F902NmiHandler_Loop706
1121F90FNmiHandler_Loop707
1122F910NmiHandler_Loop708
1123F91DNmiHandler_Loop709
1124F928NmiHandler_Loop710
1125F92ANmiHandler_OnCarrySet9
1126F93ANmiHandler_OnCarrySet10
1127F946NmiHandler_Loop711
1128F948NmiHandler_OnCarrySet11
1129F958NmiHandler_OnCarrySet12
1130F966NmiHandler_Loop712
1131F967Sub_F967
1132F97ENmiHandler_Loop713
1133F9B9NmiHandler_OnCarrySet13
1134F9BENmiHandler_OnCarrySet14
1135F9C9NmiHandler_OnCarrySet15
1136F9CENmiHandler_OnCarrySet16
1137F9D7NmiHandler_Loop714
1138F9D9Sub_F9D9
1139F9F0NmiHandler_Loop715
1140FA01NmiHandler_Loop716
1141FA02NmiHandler_Loop717
1142FA07NmiHandler_Loop718
1143FA10NmiHandler_Loop719
1144FA12NmiHandler_Loop720
1145FA1BNmiHandler_Loop721
1146FA26NmiHandler_Loop722
1147FA35NmiHandler_Loop723
1148FA8ASub_FA8A
1149FA98NmiHandler_OnNonzero62
1150FABENmiHandler_Loop724
1151FACDNmiHandler_Loop725
1152FADCNmiHandler_Loop726
1153FAEBNmiHandler_Loop727
1154FAF0NmiHandler_Loop728
1155FAF5NmiHandler_Loop729
1156FAF6NmiHandler_Loop730
1157FB02NmiHandler_Loop731
1158FB12NmiHandler_Loop732
1159FB1ANmiHandler_Loop733
1160FB1CNmiHandler_OnCarryClear8
1161FB20NmiHandler_Loop734
1162FB22NmiHandler_Loop735
1163FB3BNmiHandler_Loop736
1164FB3CSub_FB3C
1165FB45NmiHandler_Loop737
1166FB4DNmiHandler_Loop738
1167FB51NmiHandler_OnZero19
1168FB56NmiHandler_OnNonzero63
1169FB68NmiHandler_Loop739
1170FB6CNmiHandler_OnCarryClear9
1171FB70NmiHandler_Loop740
1172FBA5NmiHandler_Loop741
1173FBB6NmiHandler_Loop742
1174FBBENmiHandler_Loop743
1175FBC2Sub_FBC2
1176FBD0NmiHandler_Loop744
1177FBDCNmiHandler_Loop745
1178FBE8NmiHandler_Loop746
1179FBF6NmiHandler_Loop747
1180FBFENmiHandler_Loop748
1181FC03NmiHandler_Loop749
1182FC09NmiHandler_Loop750
1183FC1BNmiHandler_Loop751
1184FC21NmiHandler_Loop752
1185FC36NmiHandler_Loop753
1186FC47NmiHandler_Loop754
1187FC4CNmiHandler_Loop755
1188FC54NmiHandler_Loop756
1189FC62NmiHandler_Loop757
1190FC68NmiHandler_Loop758
1191FC8CNmiHandler_Loop759
1192FC97NmiHandler_Loop760
1193FCA8NmiHandler_Loop761
1194FCABNmiHandler_Loop762
1195FCD8NmiHandler_Loop763
1196FCD9Sub_FCD9
1197FCDFSub_FCDF
1198# ---- derived internal branch-target names ----
11998258Reset
12008262Reset_OnCarryClear
12018268Reset_OnCarryClear2
12028277Reset_OnNonzero
12038287Reset_OnNonzero2
120482A8Reset_Loop
120582AAReset_OnNonzero3
120682D3Sub_82D3
120782D6NmiHandler
1208830DNmiHandler_Loop
1209832DNmiHandler_OnNonnegative
12108333NmiHandler_Loop2
12118338NmiHandler_Loop3
1212834BNmiHandler_Loop4
12138367NmiHandler_OnNonzero
12148381NmiHandler_Loop5
12158384NmiHandler_Loop6
12168392Sub_8392
121783A1NmiHandler_Loop7
121883B1NmiHandler_Loop8
121983D4Sub_83D4
122083D9NmiHandler_Loop9
122183E3Sub_83E3
122283ECSubC83EC
1223841ANmiHandler_Loop10
12248427SubC8427
1225844ESub_844E
12268450NmiHandler_OnNonnegative2
12278466SubC8466
12288471NmiHandler_Loop11
1229847ANmiHandler_OnZero
1230847BNmiHandler_Loop12
12318492NmiHandler_Loop13
1232849CNmiHandler_OnNonnegative3
123384AANmiHandler_Loop14
123484B6NmiHandler_Loop15
123584CFSub_84CF
123684EANmiHandler_OnNonnegative4
123784F0SubC84F0
123884F4NmiHandler_OnNonzero2
12398500NmiHandler_OnNonzero3
1240850FNmiHandler_Loop16
12418515NmiHandler_OnNonnegative5
12428522SubC8522
1243852ENmiHandler_Loop17
12448536NmiHandler_OnNonnegative6
12458546NmiHandler_OnCarryClear
12468553SubC8553
12478560NmiHandler_Loop18
12488563SubC8563
12498567NmiHandler_OnNonnegative7
12508578NmiHandler_Loop19
1251857CNmiHandler_OnNonnegative8
125285FANmiHandler_OnNonnegative9
1253860DNmiHandler_Loop20
1254860ESub_860E
12558610Sub_8610
1256861CSubC861C
12578649NmiHandler_Loop21
1258866FSub_866F
12598671NmiHandler_OnNonnegative10
1260867ENmiHandler_Loop22
12618681Sub_8681
12628683NmiHandler_OnNonnegative11
1263868ENmiHandler_Loop23
12648699SubC8699
126586A3SubC86A3
126686A5NmiHandler_Loop24
126786A8SubC86A8
126886AANmiHandler_OnNonnegative12
126986BCNmiHandler_OnNonnegative13
127086CDNmiHandler_OnNonnegative14
127186F7NmiHandler_Loop25
1272870ANmiHandler_Loop26
12738718SubC8718
12748723SubC8723
1275874BNmiHandler_Loop27
12768763NmiHandler_Loop28
1277876BNmiHandler_Loop29
12788777NmiHandler_Loop30
12798786SubC8786
12808791NmiHandler_Loop31
1281879ANmiHandler_Loop32
128287A5NmiHandler_Loop33
128387B5Sub_87B5
128487CDNmiHandler_Loop34
128587D2NmiHandler_Loop35
128687E0NmiHandler_Loop36
128787F2NmiHandler_Loop37
1288882BNmiHandler_Loop38
1289882ESub_882E
1290883DNmiHandler_Loop39
12918848NmiHandler_Loop40
1292884FNmiHandler_Loop41
12938852NmiHandler_Loop42
1294886CNmiHandler_Loop43
12958872NmiHandler_Loop44
12968874NmiHandler_OnCarryClear2
12978888NmiHandler_OnNonnegative15
129888A7NmiHandler_Loop45
129988B7NmiHandler_Loop46
130088B9Sub_88B9
130188BFSub_88BF
130288CDNmiHandler_Loop47
130388CESub_88CE
130488DFNmiHandler_Loop48
13058902NmiHandler_Loop49
13068905NmiHandler_Loop50
13078906NmiHandler_Loop51
1308890ANmiHandler_Loop52
1309890CNmiHandler_Loop53
13108913NmiHandler_OnNonzero4
13118914NmiHandler_OnNonzero5
13128924NmiHandler_Loop54
13138938NmiHandler_Loop55
1314893BNmiHandler_Loop56
1315894FNmiHandler_Loop57
13168957SubC8957
1317895CSubC895C
1318896ANmiHandler_OnNonnegative16
1319897ASubC897A
13208988NmiHandler_OnZero2
1321899ENmiHandler_Loop58
132289B4Sub_89B4
132389C5NmiHandler_OnNonzero6
132489C6NmiHandler_Loop59
132589D7NmiHandler_Loop60
132689EFNmiHandler_Loop61
132789F3NmiHandler_Loop62
132889FCNmiHandler_Loop63
13298A03Sub_8A03
13308A18NmiHandler_Loop64
13318A25Sub_8A25
13328A2ESub_8A2E
13338A36NmiHandler_OnNonzero7
13348A4ANmiHandler_Loop65
13358A4DSub_8A4D
13368A55NmiHandler_OnNonzero8
13378A69NmiHandler_Loop66
13388A6CSub_8A6C
13398A74NmiHandler_OnNonzero9
13408A88NmiHandler_Loop67
13418A8ANmiHandler_Loop68
13428A92NmiHandler_OnNonzero10
13438AA7SubC8AA7
13448AB2NmiHandler_Loop69
13458AB7NmiHandler_OnNonzero11
13468ACANmiHandler_Loop70
13478AD0NmiHandler_Loop71
13488AD6Sub_8AD6
13498AE8SubC8AE8
13508B06NmiHandler_Loop72
13518B16NmiHandler_Loop73
13528B1BNmiHandler_Loop74
13538B1FNmiHandler_Loop75
13548B43SubC8B43
13558B80NmiHandler_Loop76
13568B87NmiHandler_OnNonzero12
13578B88SubC8B88
13588B94NmiHandler_Loop77
13598B9CNmiHandler_Loop78
13608BA9NmiHandler_Loop79
13618BB5NmiHandler_Loop80
13628BD4Sub_8BD4
13638BDCNmiHandler_Loop81
13648BE6NmiHandler_Loop82
13658BF2NmiHandler_Loop83
13668BF5SubC8BF5
13678C06NmiHandler_Loop84
13688C1BNmiHandler_Loop85
13698C1CNmiHandler_Loop86
13708C2BNmiHandler_Loop87
13718C2DNmiHandler_OnCarryClear3
13728C3CSubC8C3C
13738C5BNmiHandler_Loop88
13748C66NmiHandler_Loop89
13758C6BSubC8C6B
13768DCFSubC8DCF
13778DDCSub_8DDC
13788DE5Sub_8DE5
13798DF9NmiHandler_Loop90
13808E0ANmiHandler_Loop91
13818E0DSub_8E0D
13828E1CSub_8E1C
13838E22NmiHandler_OnZero3
13848E50NmiHandler_Loop92
13858E76NmiHandler_Loop93
13868E80NmiHandler_Loop94
13878E82NmiHandler_Loop95
13888E85Sub_8E85
13898E9BSub_8E9B
13908EAFSub_8EAF
13918EBDNmiHandler_OnNonzero13
13928EBFNmiHandler_OnNonzero14
13938EC6Sub_8EC6
13948ECANmiHandler_OnNonzero15
13958EDENmiHandler_OnNonzero16
13968EE5NmiHandler_Loop96
13978EEBNmiHandler_Loop97
13988EF2NmiHandler_Loop98
13998EF6NmiHandler_OnNonzero17
14008EFDNmiHandler_Loop99
14018F03NmiHandler_Loop100
14028F06NmiHandler_Loop101
14038F11NmiHandler_OnNonzero18
14048F29NmiHandler_OnNonzero19
14058F4DNmiHandler_Loop102
14068F54Sub_8F54
14078F63Sub_8F63
14088F7FNmiHandler_OnNonzero20
14098F99NmiHandler_OnNonzero21
14108FA0Sub_8FA0
14118FA6Sub_8FA6
14128FAANmiHandler_OnNonzero22
14138FB1Sub_8FB1
14148FC5Sub_8FC5
14158FD9NmiHandler_OnNonzero23
14168FE7NmiHandler_OnNonzero24
14179031NmiHandler_Loop103
14189808SubC9808
1419A482Sub_A482
1420A49BNmiHandler_Loop104
1421A4A6NmiHandler_Loop105
1422A4B3NmiHandler_Loop106
1423A4CANmiHandler_Loop107
1424A4CCNmiHandler_Loop108
1425A4CDNmiHandler_Loop109
1426A4DCNmiHandler_Loop110
1427A4E6Sub_A4E6
1428A50BNmiHandler_Loop111
1429A515Sub_A515
1430A519NmiHandler_Loop112
1431A527NmiHandler_Loop113
1432A53BNmiHandler_Loop114
1433A542NmiHandler_OnNonzero25
1434A544Sub_A544
1435A568Sub_A568
1436A56ANmiHandler_Loop115
1437A587NmiHandler_Loop116
1438A5A0NmiHandler_Loop117
1439A5B3NmiHandler_Loop118
1440A5B5NmiHandler_Loop119
1441A5C0Sub_A5C0
1442A5CBNmiHandler_Loop120
1443A600NmiHandler_Loop121
1444A604NmiHandler_OnNonnegative17
1445A608NmiHandler_OnNonnegative18
1446A630NmiHandler_Loop122
1447A644NmiHandler_Loop123
1448A64DNmiHandler_Loop124
1449A652NmiHandler_Loop125
1450A655NmiHandler_Loop126
1451A660NmiHandler_Loop127
1452A67BNmiHandler_Loop128
1453A68DNmiHandler_Loop129
1454A695NmiHandler_Loop130
1455A696Sub_A696
1456A69DNmiHandler_Loop131
1457A69FNmiHandler_OnNonnegative19
1458A6BANmiHandler_Loop132
1459A6BENmiHandler_Loop133
1460A6CENmiHandler_Loop134
1461A6DFNmiHandler_Loop135
1462A6EFNmiHandler_OnNonzero26
1463A715NmiHandler_Loop136
1464A716NmiHandler_Loop137
1465A724NmiHandler_Loop138
1466A72CSub_A72C
1467A732NmiHandler_Loop139
1468A734Sub_A734
1469A753NmiHandler_Loop140
1470A75BNmiHandler_Loop141
1471A75FNmiHandler_Loop142
1472A769NmiHandler_Loop143
1473A76BNmiHandler_Loop144
1474A785NmiHandler_Loop145
1475A796NmiHandler_Loop146
1476A797Sub_A797
1477A7B0NmiHandler_Loop147
1478A7BENmiHandler_Loop148
1479A7CDNmiHandler_Loop149
1480A7D6NmiHandler_Loop150
1481A7D9NmiHandler_Loop151
1482A7E9NmiHandler_Loop152
1483A7F5NmiHandler_Loop153
1484A7FCNmiHandler_Loop154
1485A805NmiHandler_Loop155
1486A81CNmiHandler_Loop156
1487A825NmiHandler_OnNegative
1488A826Sub_A826
1489A834NmiHandler_OnNonzero27
1490A847NmiHandler_Loop157
1491A862NmiHandler_Loop158
1492A86CNmiHandler_Loop159
1493A86DSubCA86D
1494A884Sub_A884
1495A886Sub_A886
1496A891NmiHandler_Loop160
1497A894NmiHandler_Loop161
1498A8A8NmiHandler_Loop162
1499A8A9SubCA8A9
1500A8C4NmiHandler_Loop163
1501A8D7Sub_A8D7
1502A8DBNmiHandler_Loop164
1503A8DCSubCA8DC
1504A8EANmiHandler_OnNonzero28
1505A8EBSub_A8EB
1506A8F9NmiHandler_Loop165
1507A900NmiHandler_Loop166
1508A935NmiHandler_OnNegative2
1509A936Sub_A936
1510A93ESubCA93E
1511A955NmiHandler_Loop167
1512A95BNmiHandler_Loop168
1513A974NmiHandler_Loop169
1514A987NmiHandler_Loop170
1515A98BNmiHandler_OnZero4
1516A9AANmiHandler_Loop171
1517A9CANmiHandler_Loop172
1518A9DCNmiHandler_Loop173
1519A9FBNmiHandler_Loop174
1520A9FDNmiHandler_Loop175
1521A9FENmiHandler_Loop176
1522AA0BNmiHandler_Loop177
1523AA18Sub_AA18
1524AA35NmiHandler_Loop178
1525AA4ENmiHandler_Loop179
1526AA5ENmiHandler_Loop180
1527AA6DNmiHandler_Loop181
1528AA72NmiHandler_Loop182
1529AA73NmiHandler_Loop183
1530AA84NmiHandler_Loop184
1531AA96NmiHandler_Loop185
1532AA97NmiHandler_Loop186
1533AAB0NmiHandler_Loop187
1534AABENmiHandler_Loop188
1535AACCNmiHandler_Loop189
1536AAE7NmiHandler_Loop190
1537AAE9NmiHandler_Loop191
1538AAF7NmiHandler_Loop192
1539AB1FNmiHandler_Loop193
1540AB20NmiHandler_Loop194
1541AB3FSubCAB3F
1542AB48NmiHandler_Loop195
1543AB5DNmiHandler_Loop196
1544AB65NmiHandler_Loop197
1545AB76NmiHandler_OnNonnegative20
1546AB80NmiHandler_Loop198
1547AB81NmiHandler_Loop199
1548AB8CNmiHandler_Loop200
1549AB90NmiHandler_Loop201
1550ABAANmiHandler_OnCarrySet
1551ABB6NmiHandler_Loop202
1552ABCANmiHandler_Loop203
1553ABCENmiHandler_Loop204
1554ABD7NmiHandler_Loop205
1555ABE9NmiHandler_OnNonnegative21
1556ABFDNmiHandler_Loop206
1557AC02NmiHandler_Loop207
1558AC27NmiHandler_Loop208
1559AC29NmiHandler_OnNonzero29
1560AC2ASubCAC2A
1561AC38NmiHandler_Loop209
1562AC3DSub_AC3D
1563AC52NmiHandler_Loop210
1564AC70NmiHandler_Loop211
1565AC94NmiHandler_Loop212
1566ACB0NmiHandler_Loop213
1567ACB8NmiHandler_Loop214
1568ACBANmiHandler_OnNonnegative22
1569ACCDNmiHandler_Loop215
1570ACD0NmiHandler_Loop216
1571ACD4Sub_ACD4
1572ACD6NmiHandler_OnNonnegative23
1573ACDENmiHandler_Loop217
1574ACDFSub_ACDF
1575ACE8NmiHandler_Loop218
1576ACF1NmiHandler_Loop219
1577AD02NmiHandler_Loop220
1578AD26NmiHandler_Loop221
1579AD2ENmiHandler_Loop222
1580AD4DNmiHandler_Loop223
1581AD5DNmiHandler_OnZero5
1582AD63NmiHandler_Loop224
1583AD66NmiHandler_Loop225
1584AD6ENmiHandler_Loop226
1585AD6FNmiHandler_Loop227
1586AD85NmiHandler_Loop228
1587AD94NmiHandler_Loop229
1588ADA3NmiHandler_Loop230
1589ADADNmiHandler_Loop231
1590ADB7NmiHandler_Loop232
1591ADBENmiHandler_Loop233
1592ADC7NmiHandler_Loop234
1593ADD4NmiHandler_Loop235
1594ADDASub_ADDA
1595ADEASubCADEA
1596ADFESubCADFE
1597AE01Sub_AE01
1598AE1DNmiHandler_Loop236
1599AE1FNmiHandler_Loop237
1600AE2DNmiHandler_Loop238
1601AE61NmiHandler_Loop239
1602AE7BNmiHandler_Loop240
1603AE7DSubCAE7D
1604AEA1SubCAEA1
1605AEABSub_AEAB
1606AEB1NmiHandler_Loop241
1607AEB3NmiHandler_Loop242
1608AEBENmiHandler_Loop243
1609AED1NmiHandler_Loop244
1610AED2SubCAED2
1611AEDBSub_AEDB
1612AEEDNmiHandler_Loop245
1613AF06NmiHandler_Loop246
1614AF22NmiHandler_Loop247
1615AF2ANmiHandler_Loop248
1616AF42NmiHandler_Loop249
1617AF55NmiHandler_Loop250
1618AF5FNmiHandler_Loop251
1619AF7CNmiHandler_Loop252
1620AF7DNmiHandler_Loop253
1621AF91NmiHandler_Loop254
1622AF9BNmiHandler_Loop255
1623AFA4NmiHandler_Loop256
1624AFB2NmiHandler_Loop257
1625AFB3SubCAFB3
1626AFCBNmiHandler_Loop258
1627AFD5NmiHandler_Loop259
1628AFE1NmiHandler_Loop260
1629AFEASub_AFEA
1630AFFBNmiHandler_Loop261
1631AFFESubCAFFE
1632B017NmiHandler_Loop262
1633B01ASubCB01A
1634B031NmiHandler_Loop263
1635B03FNmiHandler_Loop264
1636B049NmiHandler_Loop265
1637B055NmiHandler_Loop266
1638B056SubCB056
1639B069NmiHandler_Loop267
1640B073NmiHandler_OnNonnegative24
1641B083NmiHandler_Loop268
1642B0A7NmiHandler_Loop269
1643B0C3NmiHandler_Loop270
1644B0C8NmiHandler_Loop271
1645B0CESub_B0CE
1646B0D2NmiHandler_Loop272
1647B0E2NmiHandler_Loop273
1648B0E6NmiHandler_Loop274
1649B0F4NmiHandler_Loop275
1650B102NmiHandler_Loop276
1651B103SubCB103
1652B11FNmiHandler_Loop277
1653B12CNmiHandler_Loop278
1654B12FNmiHandler_Loop279
1655B142NmiHandler_Loop280
1656B148NmiHandler_Loop281
1657B153NmiHandler_Loop282
1658B15CNmiHandler_Loop283
1659B15DSub_B15D
1660B16CNmiHandler_Loop284
1661B175NmiHandler_OnCarryClear4
1662B176SubCB176
1663B17DSub_B17D
1664B1A1NmiHandler_Loop285
1665B1A7NmiHandler_OnNonzero30
1666B1ADNmiHandler_Loop286
1667B1C7NmiHandler_Loop287
1668B1C9Sub_B1C9
1669B1CFNmiHandler_Loop288
1670B1D0Sub_B1D0
1671B1E3Sub_B1E3
1672B1F6NmiHandler_Loop289
1673B204NmiHandler_Loop290
1674B206NmiHandler_Loop291
1675B208Sub_B208
1676B212NmiHandler_Loop292
1677B21FNmiHandler_Loop293
1678B220Sub_B220
1679B226NmiHandler_Loop294
1680B22FNmiHandler_Loop295
1681B231Sub_B231
1682B23FNmiHandler_Loop296
1683B243Sub_B243
1684B253NmiHandler_Loop297
1685B25BNmiHandler_Loop298
1686B276NmiHandler_Loop299
1687B292NmiHandler_Loop300
1688B2B9NmiHandler_Loop301
1689B2BASub_B2BA
1690B2C8Sub_B2C8
1691B2CANmiHandler_Loop302
1692B2E6NmiHandler_Loop303
1693B2E9NmiHandler_Loop304
1694B2F5NmiHandler_Loop305
1695B2F8NmiHandler_Loop306
1696B2FENmiHandler_Loop307
1697B313NmiHandler_Loop308
1698B33DNmiHandler_Loop309
1699B34BNmiHandler_Loop310
1700B354NmiHandler_Loop311
1701B355NmiHandler_Loop312
1702B362NmiHandler_Loop313
1703B37DNmiHandler_Loop314
1704B3CDNmiHandler_Loop315
1705B3D0NmiHandler_Loop316
1706B3E7Sub_B3E7
1707B3FANmiHandler_Loop317
1708B42FNmiHandler_Loop318
1709B464NmiHandler_Loop319
1710B467Sub_B467
1711B47CNmiHandler_Loop320
1712B486NmiHandler_OnNonnegative25
1713B4A2NmiHandler_Loop321
1714B4ACNmiHandler_Loop322
1715B4B5NmiHandler_Loop323
1716B4BESub_B4BE
1717B4C8NmiHandler_Loop324
1718B4CFNmiHandler_Loop325
1719B4DANmiHandler_Loop326
1720B4FBNmiHandler_Loop327
1721B507NmiHandler_Loop328
1722B512NmiHandler_OnNonnegative26
1723B54CNmiHandler_Loop329
1724B557NmiHandler_Loop330
1725B560Sub_B560
1726B574NmiHandler_Loop331
1727B57FNmiHandler_Loop332
1728B587Sub_B587
1729B59ANmiHandler_OnNonnegative27
1730B5B4NmiHandler_OnNonzero31
1731B5D9NmiHandler_Loop333
1732B5E0NmiHandler_Loop334
1733B5E7Sub_B5E7
1734B5F5NmiHandler_OnNonnegative28
1735B613NmiHandler_Loop335
1736B622NmiHandler_Loop336
1737B62ASub_B62A
1738B62FNmiHandler_OnCarryClear5
1739B632NmiHandler_Loop337
1740B64DNmiHandler_Loop338
1741B64FNmiHandler_Loop339
1742B65CNmiHandler_Loop340
1743B67ENmiHandler_Loop341
1744B68FNmiHandler_Loop342
1745B693NmiHandler_OnNonzero32
1746B6C2NmiHandler_Loop343
1747B714Sub_B714
1748B73CNmiHandler_Loop344
1749B755NmiHandler_Loop345
1750B75BNmiHandler_OnNonzero33
1751B786NmiHandler_Loop346
1752B789Sub_B789
1753B78BNmiHandler_OnNonnegative29
1754B7B2NmiHandler_Loop347
1755B7B9NmiHandler_Loop348
1756B7C2NmiHandler_Loop349
1757B7DFNmiHandler_Loop350
1758B7EDNmiHandler_Loop351
1759B7F6NmiHandler_Loop352
1760B7FASubCB7FA
1761B826NmiHandler_Loop353
1762B82DNmiHandler_Loop354
1763B837NmiHandler_OnCarrySet2
1764B857NmiHandler_Loop355
1765B85ANmiHandler_Loop356
1766B86ENmiHandler_Loop357
1767B87CNmiHandler_Loop358
1768B888NmiHandler_Loop359
1769B889Sub_B889
1770B88BNmiHandler_OnNonnegative30
1771B897NmiHandler_Loop360
1772B899Sub_B899
1773B89BNmiHandler_OnNonnegative31
1774B8BFNmiHandler_Loop361
1775B8C9NmiHandler_Loop362
1776B8CDSub_B8CD
1777B8CFNmiHandler_OnNonnegative32
1778B8D8NmiHandler_Loop363
1779B8F2NmiHandler_Loop364
1780B8FDSub_B8FD
1781B8FFNmiHandler_OnNonnegative33
1782B972NmiHandler_Loop365
1783B976Sub_B976
1784B978NmiHandler_OnNonnegative34
1785B9A0NmiHandler_Loop366
1786B9A4Sub_B9A4
1787B9A6NmiHandler_OnNonnegative35
1788B9B6NmiHandler_OnNonzero34
1789B9B8NmiHandler_OnNonzero35
1790B9CENmiHandler_Loop367
1791B9D8Sub_B9D8
1792B9DANmiHandler_OnNonnegative36
1793B9F4NmiHandler_Loop368
1794B9F9Sub_B9F9
1795BA0DSub_BA0D
1796BA0FNmiHandler_OnNonnegative37
1797BA25NmiHandler_Loop369
1798BA34SubCBA34
1799BA36Sub_BA36
1800BA3ASub_BA3A
1801BA48NmiHandler_OnNonnegative38
1802BA54NmiHandler_OnNonnegative39
1803BA86NmiHandler_Loop370
1804BA88NmiHandler_Loop371
1805BA9DNmiHandler_Loop372
1806BAA4NmiHandler_Loop373
1807BAA5Sub_BAA5
1808BAAFNmiHandler_Loop374
1809BAB4NmiHandler_OnNonzero36
1810BAB5NmiHandler_Loop375
1811BACANmiHandler_Loop376
1812BAD0NmiHandler_Loop377
1813BAD8NmiHandler_Loop378
1814BADDSub_BADD
1815BAEFNmiHandler_Loop379
1816BAF3NmiHandler_OnNonzero37
1817BB47NmiHandler_Loop380
1818BB48Sub_BB48
1819BB6ENmiHandler_Loop381
1820BDC4Sub_BDC4
1821BDDDNmiHandler_Loop382
1822BDE5NmiHandler_Loop383
1823BDE7NmiHandler_Loop384
1824BDEBSubCBDEB
1825BDF1NmiHandler_OnZero6
1826BDFFNmiHandler_Loop385
1827BE1CNmiHandler_Loop386
1828BE30NmiHandler_Loop387
1829BE38NmiHandler_Loop388
1830BE43NmiHandler_Loop389
1831BE46NmiHandler_Loop390
1832BE4FNmiHandler_Loop391
1833BE63NmiHandler_OnNonzero38
1834BE64NmiHandler_Loop392
1835BE6CNmiHandler_Loop393
1836BE7BNmiHandler_Loop394
1837BE86NmiHandler_Loop395
1838BE8ANmiHandler_Loop396
1839BEACNmiHandler_Loop397
1840BEB9NmiHandler_Loop398
1841BEC0NmiHandler_Loop399
1842BEDBNmiHandler_Loop400
1843BEE0NmiHandler_Loop401
1844BF0BNmiHandler_Loop402
1845BF15Sub_BF15
1846BF36NmiHandler_Loop403
1847BF3ESub_BF3E
1848BF42NmiHandler_OnNonzero39
1849BF4CNmiHandler_Loop404
1850BF4FNmiHandler_Loop405
1851BF5CNmiHandler_OnZero7
1852BF61NmiHandler_Loop406
1853BF65NmiHandler_OnZero8
1854BF68NmiHandler_Loop407
1855BF76NmiHandler_Loop408
1856BF7ENmiHandler_Loop409
1857BF8ANmiHandler_Loop410
1858BF96NmiHandler_Loop411
1859BFA3NmiHandler_Loop412
1860BFA7NmiHandler_Loop413
1861BFABNmiHandler_Loop414
1862BFB2Sub_BFB2
1863BFB4Sub_BFB4
1864BFBFNmiHandler_Loop415
1865BFE4NmiHandler_Loop416
1866BFECNmiHandler_Loop417
1867BFEENmiHandler_Loop418
1868C010NmiHandler_Loop419
1869C018NmiHandler_Loop420
1870C01ENmiHandler_Loop421
1871C01FSub_C01F
1872C034Sub_C034
1873C036NmiHandler_OnNonnegative40
1874C05ANmiHandler_Loop422
1875C05ESub_C05E
1876C078NmiHandler_Loop423
1877C087NmiHandler_Loop424
1878C093NmiHandler_Loop425
1879C094Sub_C094
1880C0B6Sub_C0B6
1881C0D7NmiHandler_Loop426
1882C0F3Sub_C0F3
1883C103NmiHandler_Loop427
1884C109NmiHandler_Loop428
1885C119NmiHandler_Loop429
1886C11FNmiHandler_Loop430
1887C122NmiHandler_Loop431
1888C125Sub_C125
1889C154NmiHandler_Loop432
1890C169Sub_C169
1891C197NmiHandler_Loop433
1892C19DNmiHandler_Loop434
1893C1A4NmiHandler_Loop435
1894C1B9Sub_C1B9
1895C1BBNmiHandler_OnNonnegative41
1896C1CBNmiHandler_Loop436
1897C1D4NmiHandler_Loop437
1898C1F3NmiHandler_Loop438
1899C1F7Sub_C1F7
1900C1FBNmiHandler_OnNonnegative42
1901C203NmiHandler_Loop439
1902C208Sub_C208
1903C218NmiHandler_Loop440
1904C221NmiHandler_OnNonzero40
1905C224NmiHandler_Loop441
1906C226Sub_C226
1907C241NmiHandler_Loop442
1908C26ANmiHandler_Loop443
1909C270NmiHandler_Loop444
1910C291NmiHandler_Loop445
1911C2AANmiHandler_Loop446
1912C2B2NmiHandler_Loop447
1913C2C6NmiHandler_Loop448
1914C2EFNmiHandler_Loop449
1915C2F2NmiHandler_Loop450
1916C2F8Sub_C2F8
1917C306NmiHandler_Loop451
1918C307NmiHandler_Loop452
1919C310NmiHandler_Loop453
1920C319NmiHandler_Loop454
1921C321NmiHandler_Loop455
1922C322Sub_C322
1923C336Sub_C336
1924C33DNmiHandler_Loop456
1925C355NmiHandler_OnZero9
1926C358NmiHandler_Loop457
1927C364NmiHandler_Loop458
1928C36BSub_C36B
1929C37CNmiHandler_Loop459
1930C389NmiHandler_Loop460
1931C38ENmiHandler_Loop461
1932C391NmiHandler_Loop462
1933C39CNmiHandler_Loop463
1934C3A2NmiHandler_Loop464
1935C3AANmiHandler_Loop465
1936C3B0NmiHandler_Loop466
1937C3BANmiHandler_Loop467
1938C3C2NmiHandler_Loop468
1939C3CBNmiHandler_Loop469
1940C403NmiHandler_Loop470
1941C408NmiHandler_Loop471
1942C415NmiHandler_OnZero10
1943C41ENmiHandler_Loop472
1944C429Sub_C429
1945C430Sub_C430
1946C432Sub_C432
1947C433Sub_C433
1948C45BNmiHandler_Loop473
1949C462Sub_C462
1950C467NmiHandler_OnCarryClear6
1951C46ANmiHandler_Loop474
1952C497NmiHandler_Loop475
1953C4A3NmiHandler_Loop476
1954C4ABNmiHandler_Loop477
1955C4CENmiHandler_Loop478
1956C4E2NmiHandler_Loop479
1957C4E5NmiHandler_Loop480
1958C4F8NmiHandler_Loop481
1959C517NmiHandler_Loop482
1960C521NmiHandler_Loop483
1961C541NmiHandler_Loop484
1962C547Sub_C547
1963C585NmiHandler_Loop485
1964C58FNmiHandler_Loop486
1965C59ANmiHandler_Loop487
1966C5BCNmiHandler_Loop488
1967C5E4NmiHandler_Loop489
1968C5E9NmiHandler_Loop490
1969C5F9NmiHandler_Loop491
1970C5FCNmiHandler_Loop492
1971C5FDSub_C5FD
1972C601NmiHandler_OnNonnegative43
1973C624NmiHandler_OnNonzero41
1974C651NmiHandler_Loop493
1975C656NmiHandler_Loop494
1976C65BSub_C65B
1977C669NmiHandler_Loop495
1978C671NmiHandler_Loop496
1979C678NmiHandler_Loop497
1980C6A0NmiHandler_Loop498
1981C6A7NmiHandler_Loop499
1982C6B2NmiHandler_OnCarrySet3
1983C6BANmiHandler_Loop500
1984C6C0NmiHandler_Loop501
1985C6DBNmiHandler_Loop502
1986C6E2NmiHandler_Loop503
1987C6EDNmiHandler_OnCarrySet4
1988C6F5NmiHandler_Loop504
1989C6FBNmiHandler_Loop505
1990C6FDNmiHandler_OnZero11
1991C6FESub_C6FE
1992C715Sub_C715
1993C71ANmiHandler_OnNonzero42
1994C725NmiHandler_OnNonzero43
1995C743NmiHandler_Loop506
1996C74ANmiHandler_Loop507
1997C756NmiHandler_Loop508
1998C75FNmiHandler_OnNonnegative44
1999C772Sub_C772
2000C789NmiHandler_OnCarryClear7
2001C79ESub_C79E
2002C7A5Sub_C7A5
2003C7AANmiHandler_OnNonzero44
2004C7ABSub_C7AB
2005C7CCNmiHandler_Loop509
2006C7D1NmiHandler_OnNonnegative45
2007C804NmiHandler_OnNonnegative46
2008C81FNmiHandler_OnNonzero45
2009C834NmiHandler_Loop510
2010C841NmiHandler_Loop511
2011C85ESub_C85E
2012C87CNmiHandler_Loop512
2013C88BNmiHandler_OnZero12
2014C88CSub_C88C
2015C8A1NmiHandler_Loop513
2016C8A6NmiHandler_OnZero13
2017C8ACNmiHandler_Loop514
2018C8C6NmiHandler_Loop515
2019C8E5NmiHandler_Loop516
2020C92DNmiHandler_Loop517
2021C93CNmiHandler_Loop518
2022C93DSub_C93D
2023C93FNmiHandler_OnNonnegative47
2024C97DNmiHandler_Loop519
2025C97FNmiHandler_Loop520
2026C9B7NmiHandler_Loop521
2027C9BBSub_C9BB
2028C9CCNmiHandler_Loop522
2029C9F7NmiHandler_Loop523
2030C9FDNmiHandler_Loop524
2031C9FENmiHandler_Loop525
2032CA17NmiHandler_Loop526
2033CA22NmiHandler_Loop527
2034CA38NmiHandler_Loop528
2035CA42NmiHandler_Loop529
2036CA58NmiHandler_Loop530
2037CA6ENmiHandler_Loop531
2038CA80NmiHandler_Loop532
2039CABDNmiHandler_Loop533
2040CACENmiHandler_Loop534
2041CAD4NmiHandler_Loop535
2042CAE1NmiHandler_Loop536
2043CAE3NmiHandler_Loop537
2044CB14NmiHandler_Loop538
2045CB15Sub_CB15
2046CB22Sub_CB22
2047CB2FSub_CB2F
2048CB3ESub_CB3E
2049CB50Sub_CB50
2050CB74NmiHandler_Loop539
2051CB76NmiHandler_Loop540
2052CBA2NmiHandler_Loop541
2053CBA4Sub_CBA4
2054CBA7NmiHandler_OnCarrySet5
2055CBBENmiHandler_Loop542
2056CBC4NmiHandler_Loop543
2057CBC8NmiHandler_OnNonnegative48
2058CBCFSub_CBCF
2059CBE9NmiHandler_OnNonzero46
2060CBFFSub_CBFF
2061CC09NmiHandler_OnNonzero47
2062CC15NmiHandler_Loop544
2063CC1CNmiHandler_Loop545
2064CC26NmiHandler_OnNonnegative49
2065CC30NmiHandler_Loop546
2066CC31Sub_CC31
2067CC3DNmiHandler_Loop547
2068CC55NmiHandler_OnNonzero48
2069CC6BSub_CC6B
2070CC85NmiHandler_Loop548
2071CC91Sub_CC91
2072CC93NmiHandler_OnNonnegative50
2073CC9DSub_CC9D
2074CCBENmiHandler_Loop549
2075CCC3NmiHandler_Loop550
2076CCC5NmiHandler_OnNonzero49
2077CCC7Sub_CCC7
2078CCCFNmiHandler_OnNonnegative51
2079CCE8Sub_CCE8
2080CD04NmiHandler_Loop551
2081CD05Sub_CD05
2082CD18NmiHandler_Loop552
2083CD26Sub_CD26
2084CD5ASub_CD5A
2085CD60NmiHandler_OnNonzero50
2086CD61NmiHandler_Loop553
2087CDABNmiHandler_Loop554
2088CDD7NmiHandler_Loop555
2089CFCCSub_CFCC
2090CFD7NmiHandler_Loop556
2091CFDDNmiHandler_Loop557
2092CFEFNmiHandler_Loop558
2093CFF6Sub_CFF6
2094CFFDNmiHandler_Loop559
2095D005NmiHandler_Loop560
2096D013NmiHandler_Loop561
2097D020NmiHandler_Loop562
2098D022NmiHandler_Loop563
2099D02CNmiHandler_Loop564
2100D02FNmiHandler_Loop565
2101D038NmiHandler_Loop566
2102D039NmiHandler_Loop567
2103D03CSubCD03C
2104D06ANmiHandler_Loop568
2105D073NmiHandler_Loop569
2106D07ENmiHandler_Loop570
2107D084NmiHandler_Loop571
2108D0BCNmiHandler_Loop572
2109D0C9NmiHandler_Loop573
2110D0CENmiHandler_OnNonnegative52
2111D0D4NmiHandler_Loop574
2112D0D5NmiHandler_Loop575
2113D0DFNmiHandler_Loop576
2114D0E6SubCD0E6
2115D103NmiHandler_Loop577
2116D115NmiHandler_Loop578
2117D118SubCD118
2118D12BNmiHandler_Loop579
2119D12ENmiHandler_Loop580
2120D146NmiHandler_Loop581
2121D151NmiHandler_Loop582
2122D15FNmiHandler_Loop583
2123D172NmiHandler_Loop584
2124D183NmiHandler_OnNegative3
2125D192NmiHandler_Loop585
2126D1ABNmiHandler_Loop586
2127D1AENmiHandler_Loop587
2128D1AFNmiHandler_Loop588
2129D1C0NmiHandler_Loop589
2130D1C3Sub_D1C3
2131D21FSub_D21F
2132D228NmiHandler_OnZero14
2133D229NmiHandler_Loop590
2134D23ENmiHandler_Loop591
2135D23FSubCD23F
2136D255NmiHandler_OnZero15
2137D26ANmiHandler_Loop592
2138D273NmiHandler_Loop593
2139D282NmiHandler_Loop594
2140D28FNmiHandler_Loop595
2141D293NmiHandler_Loop596
2142D2A3NmiHandler_Loop597
2143D2BENmiHandler_Loop598
2144D2C9NmiHandler_Loop599
2145D2E3Sub_D2E3
2146D2E9NmiHandler_OnZero16
2147D2EFNmiHandler_Loop600
2148D2F0NmiHandler_Loop601
2149D311NmiHandler_Loop602
2150D328SubCD328
2151D342NmiHandler_Loop603
2152D348NmiHandler_Loop604
2153D35DNmiHandler_Loop605
2154D363NmiHandler_Loop606
2155D36ANmiHandler_Loop607
2156D376NmiHandler_Loop608
2157D383NmiHandler_Loop609
2158D3C6Sub_D3C6
2159D3E6NmiHandler_Loop610
2160D3E7NmiHandler_Loop611
2161D3F6NmiHandler_OnNonzero51
2162D3F7SubCD3F7
2163D40FSub_D40F
2164D41ENmiHandler_Loop612
2165D426NmiHandler_OnZero17
2166D42ANmiHandler_OnNegative4
2167D434NmiHandler_Loop613
2168D43BNmiHandler_Loop614
2169D445SubCD445
2170D46CNmiHandler_Loop615
2171D474NmiHandler_Loop616
2172D475SubCD475
2173D482SubCD482
2174D487Sub_D487
2175D4A2NmiHandler_Loop617
2176D4AENmiHandler_OnNonnegative53
2177D4CDNmiHandler_Loop618
2178D4D8NmiHandler_Loop619
2179D4DDNmiHandler_Loop620
2180D4DFSub_D4DF
2181D4E3Sub_D4E3
2182D4E5NmiHandler_Loop621
2183D4E7Sub_D4E7
2184D4F6NmiHandler_Loop622
2185D505Sub_D505
2186D51ASub_D51A
2187D53CNmiHandler_Loop623
2188D544NmiHandler_Loop624
2189D548NmiHandler_Loop625
2190D559NmiHandler_Loop626
2191D55FNmiHandler_Loop627
2192D563NmiHandler_OnNonzero52
2193D566NmiHandler_Loop628
2194D569Sub_D569
2195D57DNmiHandler_Loop629
2196D58BNmiHandler_Loop630
2197D591NmiHandler_Loop631
2198D597NmiHandler_Loop632
2199D59ENmiHandler_Loop633
2200D59FSubCD59F
2201D5A9Sub_D5A9
2202D5BANmiHandler_Loop634
2203D5CBNmiHandler_Loop635
2204D5CESub_D5CE
2205D5FANmiHandler_Loop636
2206D5FESub_D5FE
2207D600NmiHandler_OnNonnegative54
2208D612NmiHandler_Loop637
2209D615NmiHandler_OnNonzero53
2210D616Sub_D616
2211D62BNmiHandler_OnNonzero54
2212D63ANmiHandler_Loop638
2213D658Sub_D658
2214D673NmiHandler_Loop639
2215D67CSub_D67C
2216D689NmiHandler_Loop640
2217D696NmiHandler_Loop641
2218D697Sub_D697
2219D699Sub_D699
2220D6CFNmiHandler_Loop642
2221D6D1NmiHandler_Loop643
2222D6D7NmiHandler_Loop644
2223D6E3NmiHandler_Loop645
2224D6E6NmiHandler_OnZero18
2225D706NmiHandler_Loop646
2226D70ENmiHandler_Loop647
2227D726NmiHandler_Loop648
2228D732NmiHandler_Loop649
2229D749NmiHandler_Loop650
2230D75FNmiHandler_Loop651
2231D774NmiHandler_Loop652
2232D781NmiHandler_Loop653
2233D787Sub_D787
2234D792NmiHandler_Loop654
2235D79ENmiHandler_Loop655
2236D7AFNmiHandler_Loop656
2237D7BDNmiHandler_Loop657
2238D7DFNmiHandler_Loop658
2239D7E4NmiHandler_Loop659
2240D7EDNmiHandler_Loop660
2241D7F9NmiHandler_Loop661
2242D7FASub_D7FA
2243D7FCNmiHandler_OnNonnegative55
2244D83CNmiHandler_Loop662
2245D840Sub_D840
2246D863NmiHandler_Loop663
2247D86CNmiHandler_Loop664
2248D875NmiHandler_Loop665
2249D87ENmiHandler_Loop666
2250D88ENmiHandler_Loop667
2251D890NmiHandler_Loop668
2252D893NmiHandler_Loop669
2253D89ANmiHandler_Loop670
2254D8A9NmiHandler_Loop671
2255D8EDNmiHandler_Loop672
2256D8EFNmiHandler_Loop673
2257D8F0Sub_D8F0
2258D90BNmiHandler_Loop674
2259D90FNmiHandler_Loop675
2260D910NmiHandler_Loop676
2261D923NmiHandler_Loop677
2262D930NmiHandler_OnNonzero55
2263D931Sub_D931
2264D946NmiHandler_Loop678
2265D951NmiHandler_Loop679
2266D968Sub_D968
2267D983NmiHandler_Loop680
2268D987NmiHandler_Loop681
2269D988NmiHandler_Loop682
2270D999NmiHandler_Loop683
2271D99BNmiHandler_OnNonzero56
2272D99CSub_D99C
2273D9BFSub_D9BF
2274D9E6NmiHandler_OnNonzero57
2275D9E7NmiHandler_Loop684
2276D9F3NmiHandler_Loop685
2277DA0ESub_DA0E
2278DA26NmiHandler_OnNonzero58
2279DA2FNmiHandler_Loop686
2280DA33NmiHandler_Loop687
2281DA3DNmiHandler_Loop688
2282DA42NmiHandler_Loop689
2283DA4CNmiHandler_Loop690
2284DA51Sub_DA51
2285DA9CNmiHandler_Loop691
2286DAA7NmiHandler_Loop692
2287DAB7NmiHandler_Loop693
2288DAB8Sub_DAB8
2289DAD8NmiHandler_Loop694
2290DAE6NmiHandler_Loop695
2291DAEANmiHandler_OnNonzero59
2292DB01NmiHandler_Loop696
2293DB0ENmiHandler_Loop697
2294DB13NmiHandler_Loop698
2295DB16NmiHandler_OnNonzero60
2296DB19NmiHandler_Loop699
2297DB32NmiHandler_Loop700
2298DB3ESub_DB3E
2299F831Sub_F831
2300F852Sub_F852
2301F858Sub_F858
2302F85ANmiHandler_OnNonzero61
2303F86BNmiHandler_Loop701
2304F86CSub_F86C
2305F873Sub_F873
2306F879Sub_F879
2307F87DSub_F87D
2308F886SubCF886
2309F895NmiHandler_OnCarrySet6
2310F8A6NmiHandler_OnCarrySet7
2311F8B3NmiHandler_OnCarrySet8
2312F8D2NmiHandler_Loop702
2313F8D7NmiHandler_Loop703
2314F8DCNmiHandler_Loop704
2315F8E7Sub_F8E7
2316F8EFNmiHandler_Loop705
2317F8F0Sub_F8F0
2318F902NmiHandler_Loop706
2319F90FNmiHandler_Loop707
2320F910NmiHandler_Loop708
2321F91DNmiHandler_Loop709
2322F928NmiHandler_Loop710
2323F92ANmiHandler_OnCarrySet9
2324F93ANmiHandler_OnCarrySet10
2325F946NmiHandler_Loop711
2326F948NmiHandler_OnCarrySet11
2327F958NmiHandler_OnCarrySet12
2328F966NmiHandler_Loop712
2329F967Sub_F967
2330F97ENmiHandler_Loop713
2331F9B9NmiHandler_OnCarrySet13
2332F9BENmiHandler_OnCarrySet14
2333F9C9NmiHandler_OnCarrySet15
2334F9CENmiHandler_OnCarrySet16
2335F9D7NmiHandler_Loop714
2336F9D9Sub_F9D9
2337F9F0NmiHandler_Loop715
2338FA01NmiHandler_Loop716
2339FA02NmiHandler_Loop717
2340FA07NmiHandler_Loop718
2341FA10NmiHandler_Loop719
2342FA12NmiHandler_Loop720
2343FA1BNmiHandler_Loop721
2344FA26NmiHandler_Loop722
2345FA35NmiHandler_Loop723
2346FA8ASub_FA8A
2347FA98NmiHandler_OnNonzero62
2348FABENmiHandler_Loop724
2349FACDNmiHandler_Loop725
2350FADCNmiHandler_Loop726
2351FAEBNmiHandler_Loop727
2352FAF0NmiHandler_Loop728
2353FAF5NmiHandler_Loop729
2354FAF6NmiHandler_Loop730
2355FB02NmiHandler_Loop731
2356FB12NmiHandler_Loop732
2357FB1ANmiHandler_Loop733
2358FB1CNmiHandler_OnCarryClear8
2359FB20NmiHandler_Loop734
2360FB22NmiHandler_Loop735
2361FB3BNmiHandler_Loop736
2362FB3CSub_FB3C
2363FB45NmiHandler_Loop737
2364FB4DNmiHandler_Loop738
2365FB51NmiHandler_OnZero19
2366FB56NmiHandler_OnNonzero63
2367FB68NmiHandler_Loop739
2368FB6CNmiHandler_OnCarryClear9
2369FB70NmiHandler_Loop740
2370FBA5NmiHandler_Loop741
2371FBB6NmiHandler_Loop742
2372FBBENmiHandler_Loop743
2373FBC2Sub_FBC2
2374FBD0NmiHandler_Loop744
2375FBDCNmiHandler_Loop745
2376FBE8NmiHandler_Loop746
2377FBF6NmiHandler_Loop747
2378FBFENmiHandler_Loop748
2379FC03NmiHandler_Loop749
2380FC09NmiHandler_Loop750
2381FC1BNmiHandler_Loop751
2382FC21NmiHandler_Loop752
2383FC36NmiHandler_Loop753
2384FC47NmiHandler_Loop754
2385FC4CNmiHandler_Loop755
2386FC54NmiHandler_Loop756
2387FC62NmiHandler_Loop757
2388FC68NmiHandler_Loop758
2389FC8CNmiHandler_Loop759
2390FC97NmiHandler_Loop760
2391FCA8NmiHandler_Loop761
2392FCABNmiHandler_Loop762
2393FCD8NmiHandler_Loop763
2394FCD9Sub_FCD9
2395FCDFSub_FCDF