Mez, here's what I've found so far...
The "pointer" for the start of the possible button sequence is at $0003B2. It loads the value at ROM address $009FA2 (start of your highlighted addresses above) into RAM address FFC078. It then loads the value at ROM address $009FAE into RAM address FFC07A, etc. It uses RAM addresses FFC078, FFC07A, FFC07C and FFC07E.
If you look at your picture of the hex editor, you'll see some of these RAM addresses right before the highlighted section. I'll have to figure out how to get into that section so I can do an assembly trace so I can figure out what it's doing. Not sure if it's connected to the stage select cheat or not.
The "pointer" for the start of the possible button sequence is at $0003B2. It loads the value at ROM address $009FA2 (start of your highlighted addresses above) into RAM address FFC078. It then loads the value at ROM address $009FAE into RAM address FFC07A, etc. It uses RAM addresses FFC078, FFC07A, FFC07C and FFC07E.
If you look at your picture of the hex editor, you'll see some of these RAM addresses right before the highlighted section. I'll have to figure out how to get into that section so I can do an assembly trace so I can figure out what it's doing. Not sure if it's connected to the stage select cheat or not.
Comment