Advertisement
Not a member of Pastebin yet?
Sign Up,
it unlocks many cool features!
- ec0 / ec4 jump
- $701E8D
- ----------------------
- sprite state jumps:
- ----------------------
- Everything is in bank 03
- RAM jumps have been tabbed and converted to a more obvious adress
- $01 700D61
- -
- $02 9A6E
- - normal state
- $03 700D9B
- - ?
- $04 9A6E
- - normal state
- $05 469B
- -unmapped?
- -will BRK BRK until it hits $600x ?
- $06 A247
- - normal state
- $07 C7A3
- - will eventually jump into 7E00AD
- -
- $08 9AC8
- - normal state
- $09 7E1C9B
- - ?
- $0A A11D
- - normal state
- $0B 8CA2
- - will RTL immediately
- $0C 9F8D
- - normal state
- $0D 84A0
- - junk
- $0E A085
- - normal state
- $0F 8FA1
- - junk
- $10 9A90
- - normal state
- $11 7E0A9B
- - ?
- $12 A00B
- - normal state
- $13 700BA1
- - OAM low table mirror. 4-byte entries with format
- - xxxxxxxx yyyyyyyy tttttttt yxppccct
- - (x = X coordinate, y = Y coordinate, t = tile number, c = palette 0-7, p = priority, x&y = flip)
- $14 4B6C
- - unmapped?
- - will prob eventually hit $600x
- $15 AB4C
- - Will RTS (corrupt stack) and do a bunch of bullshit
- $16 A9AC
- - Will do a bunch of bs until it RTL but corrupts stack with a PLX
- $17 7E10AA
- - mostly 00 and static ?
- $18 7E0011
- - ASM scratch values
- $19 9D01
- - jumps into middle of spritestate $08 - will RTL
- $1A 7E009E
- - Empty, will eventually reach some ASM in RAM
- - see 00:8140
- $1B 700F01
- - Sprite state
- - Will be overwritten by tongue glitch
- $1C BD70
- - will corrupt stack with PLB but will RTL
- -
- $1D 7000BE
- - Yoshi's Current animation frame (2-bytes)
- - cant manipulate very well
- $1E 701361
- -24 2-word pairs:
- -Word 1: Sprite ID ($000 - $1F4)
- -Word 2: Pointer to first entry within OAM buffer
- $1F 7E0A74
- - ?
- $20 701D0B
- - Sprites X and Y values
- - Starts at sprite #11 X-screen and goes down (#10 #09)
- - Issue: every other byte is limited to 00-0F
- $21 70007E
- - ?
- $22 701361
- - 24 2-word pairs:
- - Word 1: Sprite ID ($000 - $1F4)
- - Word 2: Pointer to first entry within OAM buffer
- $23 C274
- - junk
- $24 7E10C3
- -?
- $25 A811
- - Corrupts stack
- $26 B9A9
- - jumps into continue main_egg and RTLs fine
- $27 7E00BA
- - Empty, will eventually reach some ASM in RAM
- - see 00:8140
- $28 8001
- - junk
- -
- $29 8581
- - Hangs on WAI
- -
- $2A 7E0086
- - some camera bs
- - often 6B that'll RLT instantly
- $2B B901
- - Jumps into continue main_egg and seem to pop off your eggs and make them baby mario?
- - will RTL eventually
- - will do nothing if not at F00
- $2C 7E02BA
- - ?
- $2D 8003
- - junk
- $2E 8581
- - Will hang on WAI
- -
- $2F 7E0286
- -?
- -
- $30 E203
- - will hang on a GSU call
- -
- $31 7E10E3
- -?
- -
- $32 A811
- - Corrupts stack
- $33 5AA9
- -will BRK BRK until it hits 600x ?
- $34 AB5B
- - corrupt stack
- $35 DCAC
- - junk
- -
- $36 7000DD
- -?
- $37 701961
- -sprite table - very static?
- $38 BD7A
- - corrupts stack with PLB
- $39 7000BE
- -Yoshi's current animation frame
- $3A 701361
- -24 2-word pairs:
- -Word 1: Sprite ID ($000 - $1F4)
- -Word 2: Pointer to first entry within OAM buffer
- $3B 7E0A74
- -?
- $3C 701D0B
- - looking good
- -Sprites X and Y values
- -starts at sprite #11 X-screen and goes down (#10 #09)
- $3D 70007E
- -?
- -mostly static stuff
- $3E 701361
- -24 2-word pairs:
- -Word 1: Sprite ID ($000 - $1F4)
- -Word 2: Pointer to first entry within OAM buffer
- $3F C274
- - Junk
- $40 7E10C3
- -
- $41 DA11
- - junk
- $42 AADB
- - junk
- -
- $43 BFAB
- - corrupt stack
- -
- $44 2EC0
- - will eventually hit (GSU) registers at $3000?
- -
- $45 852F
- - junk
- -
- $46 7E0386
- -?
- $47 8504
- - jumps into $0000
- - JMP ($0F91,x)
- $48 7E0086
- -?
- -
- $49 BF01
- - flips the N flag?
- - still emulates whole frame?
- - will work for credits warp
- - crashes after though
- $4A 30C0
- - registers
- $4B 8531
- - JUNK
- $4C 7E0386
- - ?
- $4D 8504
- - jumps into $0000
- - JMP ($0F91,x)
- $4E 7E0286
- - ?
- $4F FA03
- - j u n k
- -
- $50 E2FB
- - corrupts stack, jumps into 0399
- $51 7E10E3
- - ?
- $52 A811
- - junk
- $53 5AA9
- - will hit $600x eventually
- $54 AB5B
- - corrupt stack
- $55 DCAC
- - junk
- -
- $56 7000DD
- - ?
- $57 701961
- sprite table - very static?
- $58 7E007A
- - ?
- $59 FF01
- - will SBC $FFFFFF,x until it hits $0001
- $5A 7E0100
- - ?
- $5B 7E0101
- - ?
- $5C FE02
- - eventually hits $0003
- $5D FFFF
- - eventually hits $0003
- $5E 7E0300
- - ?
- $5F 7E0003
- - ?
- $60 7E0C01
- - ?
- $61 7E000D
- - ?
- $62 F401
- - RTS and corrupts stack
- $63 FFF5
- - eventually hits 03/0001
- $64 7E0100
- - ?
- $65 7E0001
- - ?
- $66 7E0001
- - ?
- $67 7E0001
- - ?
- $68 FC01
- - lol no
- $69 FFFD
- - blabla loops around
- $6A FD00
- - junk
- $6B FFFD
- - ?
- $6C FB00
- - ?
- $6D FFFB
- - ?
- $6E FB00
- - ?
- $6F FFFB
- - ?
- $70 2300
- - will hit $3000 GSU registers
- $71 9023
- - RTL immediately
- $72 9A91
- - RTS immedately
- $73 7E039B
- - ?
- $74 BD04
- - corrupts stack before RTL
- $75 40BE
- - registers
- $76 701041
- -sprite table, meh?
- $77 2971
- - will hit $3000 GSU registers
- $78 F32A
- - will change mario's X velocity and then RTL
- $79 FFF4
- - hits $0000
- $7A 9E00
- - j u n k
- $7B 409E
- - registers
- $7C 701041
- -sprite table, meh
- $7D 4B71
- - registers
- $7E AB4C
- - j u n k
- $7F ADAC
- - RTL but corrupts stack
- $80 B0AE
- - corrupts stack
- $81 7001B1
- - ?
- $82 7E0D62
- - ?
- $83 550E
- - hits $6000
- $84 7E0B56
- - ?
- $85 7E0D0C
- - ?
- $86 980E
- - stuck at GSU
- $87 7E0399
- - ?
- $88 F004
- - corrupts stack
- $89 7E01F1
- - ?
- $8A 700B02
- - ?
- $8B A06C
- - RTLs
- $8C 7E00A1
- - ?
- $8D AD01
- - Zzz
- $8E 7004AE
- - ?
- $8F 700165
- - ?
- $90 F062
- - corrupts stack
- $91 7E13F1
- - ?
- $92 7E1014
- - ?
- $93 7E0211
- - ?
- $94 A003
- - RTL
- $95 7E02A1
- - ?
- $96 7E1803
- - ?
- $97 701919
- - sprite table
- - but what?
- $98 B47A
- - Will do a bunch of stuff and then RTLs normally
- - Will make sprites fail to spawn
- $99 9AB5
- - RTLs normally
- $9A 8D9B
- - RTL immediately
- $9B 70048E
- - ?
- $9C 700165
- - ?
- $9D 5962
- - Will enter somewhere in $600x
- $9E B45A
- - corrupts stack
- $9F 9AB5
- - RTLs normally
- $A0 309B
- - registers and stuff
- $A1 7E0331
- - ?
- $A2 9C04
- - Zeroes out tongue (cancel tongue glitch)
- - RTLs after
- $A3 70049D
- - ?
- $A4 700165
- - ?
- $A5 A062
- - RTLs but corrupts X (70) for infinite loop
- $A6 7E00A1
- - ?
- $A7 AD01
- - Zzzz
- $A8 7006AE
- - ?
- $A9 700167
- - ?
- $AA F062
- - Corrupts stack
- $AB 7E13F1
- - ?
- $AC 7E1014
- - ?
- $AD 7E0211
- - ?
- $AE A003
- - RTLs
- $AF 7E02A1
- - ?
- $B0 7E1803
- - ?
- $B1 701919
- -sprite table
- $B2 B47A
- - Will do a bunch of stuff and then RTLs normally
- - Will make sprites fail to spawn
- $B3 9AB5
- - RTLs normally
- $B4 8D9B
- - RTL immediately
- $B5 70068E
- -?
- $B6 700167
- -?
- $B7 5962
- - Will hit $600x
- $B8 B45A
- - corrupts stack
- $B9 9AB5
- - RTLs normally
- $BA 309B
- - register bullshit
- $BB 7E0331
- - ?
- $BC 9C04
- - Zeroes out tongue (cancel tongue glitch)
- - RTLs after
- $BD 70069D
- - ?
- $BE 700167
- - ?
- $BF AD62
- - sets some sprite data and RLTs
- $C0 5AAE
- - Will hit $600x
- $C1 70015B
- - jumps into Yoshi's Y-position and later what you've tongued
- -
- $C2 7E1862
- - ?
- $C3 700D19
- - ?
- $C4 70046E
- - ?
- $C5 700165
- - ?
- $C6 3862
- - register bs
- $C7 E939
- - main_inflating_balloon routine: does a bunch of stuff
- - will RTL eventually
- $C8 7E08EA
- - ?
- $C9 7E0009
- - ?
- $CA 9D01
- - jumps into middle of spritestate 08 - will RTL
- $CB E29E
- - RTS corrupts stack
- $CC 7010E3
- -24 4-byte entries:
- -Sprite X coordinates, format:
- -$00ssppcc : ss = subpixels, pp = pixels within screen, cc = screen
- $CD AD71
- - RTLs
- $CE 5CAE
- - will reach $600x
- $CF 70015D
- - ?
- $D0 7E1862
- - ?
- $D1 700D19
- - ?
- $D2 70066E
- - ?
- $D3 700167
- - ?
- $D4 3862
- - register bs
- $D5 E939
- - main_inflating_balloon: does a bunch of stuff
- - will RTL eventually
- $D6 7008EA
- - ?
- $D7 700009
- - ?
- $D8 9D01
- - jumps into middle of spritestate 08 - will RTL
- $D9 829E
- - junk
- $DA 701183
- -24 4-byte entries:
- -Sprite Y coordinates, format:
- -$00ssppcc : ss = subpixels, pp = pixels within screen, cc = screen
- $DB AD72
- - immediate RTL
- $DC 52AE
- - will reach $600x
- $DD 700153
- - ?
- $DE 7E0D62
- - ?
- $DF 540E
- - will reach $600x
- $E0 700155
- - ?
- $E1 F062
- - corrupts stack and jumps into $0001
- $E2 7E01F1
- - ?
- $E3 700B02
- - ?
- $E4 E26C
- - corrupts stack
- $E5 20E3
- - register bs
- $E6 A921
- - RTS stack corrupts
- $E7 FFAA
- - loops around to $0002
- $E8 9E00
- - corrupts stuff?, really big subroutine
- $E9 A29E
- - clears carry and RTLs
- $EA 7014A3
- - sprite table - meh
- $EB AD75
- - Corrupts stack and jumps to 03:0399
- $EC 7008AE
- - ?
- $ED 700169
- - ?
- $EE D062
- - Does a bunch of stuff and RTL
- - pushes yoshi to left
- - Might crash if $12 [$00:7972] is > 03
- $EF 7E03D1
- -item memory
- $F0 4C04
- - register bs
- $F1 A74D
- - corrupts with PLA before RTL
- $F2 9DA8
- - JSR $57AD and ????
- -
- $F3 C29E
- - corrupts with PLA before RTL
- $F4 20C3
- - register bs
- $F5 AD21
- -stack corrupt? gets to 0399
- $F6 7002AE
- - ?
- $F7 700163
- - ?
- $F8 D062
- - Does a bunch of stuff and RTL
- - pushes yoshi to left
- - Might crash if $12 [$00:7972] is > 03
- $F9 7E03D1
- -Item memory
- $FA 4C04
- - register bs
- $FB BC4D
- - does some stuff and RTLs fine
- $FC 9BBD
- - does some stuff and RTL
- - might fail if Carry flag is clear?
- $FD BD9C
- - corrupts stack prob back to 03/0399
- $FE 7000BE
- -?
- $FF 701361
- -24 2-word pairs:
- -Word 1: Sprite ID ($000 - $1F4)
- -Word 2: Pointer to first entry within OAM buffer
Advertisement
Add Comment
Please, Sign In to add comment
Advertisement