Source code for the SA-1 command wait loop written into RAM at $0E. This routine should be called there instead.

Source code for the SA-1 response wait loop written into RAM at $26. This routine should be called there instead.

SNES IRQ routine. Jumps to the address in $309B when fired, with the direct page set to $37xx.

The game only seems to use either $0084BB (no routine) or $01EA1F (status bar routine).

Routine to change the SNES mode (and Layer 3 priority) to the value in A.

Routine to update the Layer 1 VRAM metadata.
A = Tilemap size (------yx)
X = GFX address
Y = Tilemap address

Routine to update the Layer 2 VRAM metadata.
A = Tilemap size (------yx)
X = GFX address
Y = Tilemap address

Routine to update the Layer 3 VRAM metadata.
A = Tilemap size (------yx)
X = GFX address
Y = Tilemap address

Subroutine to execute buffered DMAs from $0100 to VRAM.

Subroutine to execute queued DMAs from $0900 to VRAM.

Table of VRAM DMA options, with 3 bytes per option. This is the table referenced by the VRAM DMA buffers at $0100/$0900.

Routine to write DMA data from a table in $--xxAAaa to $0100. The fist byte being FF marks the end of the table.

If the first byte of the DMA data is negative, then its source data is decompressed first.

Routine to transfer the data in $31-$38 to the circular VRAM DMA buffer at $0100.

Routine to write a single tile into the DMA buffer at $0100. Call with:
$AAaa = Tile number
$XXxx = Destination within tilemap

Subroutine to decompress data compressed with inhal. Call with:
$--aaXXxx = pointer to source data
$--(DB)YYyy = pointer to decompression destination
After calling, both these pointers are updated to the byte immediately following the data.

The routine can alternatively be called at $008894 if the user is already running on the SNES; this will skip some overhead code for transferring control from the SA-1.

Subroutine to wait for the SNES to fire NMI.

Routine to fetch controller inputs. The portion starting at $008A56 onwards always runs on the SNES, but the main routine can be called by either.

RNG routine. Uses $43 as a seed, and returns the result in $49.
The routine can also be called at $008AC4; doing so will use the value passed in A as a modulo operator for the result.

Routine to write data to palette at $0500. Call with:
$-xxAAaa = Pointer to source data
$YY = Starting color
$yy = Number of colors

The routine can alternatively be called at $008BC1, which will write to the alternative palette at $0700.

SA-1 RESET vector.
$008C3E sets the intial decompression buffer address.
$008C44 sets the maximum NMI load.

Routine to pass control from the SNES to the SA-1 chip. Pointer to the routine to execute should be in $--xxAAaa.

Routine to pass control to the SNES. Pointer to the routine to execute should be in $--xxAAaa.

Routine to transfer the data in $31-$38 to the VRAM DMA queue at $0900.

Routine to fix directional input. Takes the full 16-bit controller input in A, and if two mutually-exclusive directions are being pressed (i.e. up+down, left+right), clears the directional buttons.

Pointers to various gamemodes for the SA-1 chip. Indexed by $7390 times 3.

Routine to check for a multitap controller connection. If one is plugged in, it returns the relevant controller port in A/$08, as [12------].

The part of this starting at $00CDEC onwards simply serves as a signature for the routine and is not used by anything.

Routine to upload data to the SPC700. Enter at $00D66E with a 24-bit pointer to the data in $95 to transfer it.
Each data block should contain four header bytes at the start. The first two is the length of the block (excluding the header), while the second is the location in ARAM to write to. Blocks will be uploaded in sequence until a data block with length 0000 is read.

SNES debug RESET vector, used for the debug VRAM viewer. Booting to here will activate the VRAM viewer, whose handling is entirely contained within this routine.

SA-1 debug RESET vector, used for the debug VRAM viewer. Doesn't actually really do anything besides stall the SA-1.

Scanline that IRQ fires at in levels (the routine in $01EA1F).

VWF positioning info. Each option (00-1B) gets 8 bytes, ordered as follows:
0 - 16-bit VRAM address to put the Layer 3 GFX
2 - 16-bit VRAM address to put the Layer 3 tilemap
4 - X position to write the text at (in 8x8s)
5 - Y position to write the text at (in 8x8s)
6 - Width of the text (in 8x8s)
7 - Height of the text (in 8x8s)

The entire SPC engine. The first four bytes are a data header, with the first two being the size of the engine and thse second two being the location it gets written to in ARAM.
A disassembly of the engine can be found here.