Post #1860439

@techokami fun fact: the well-known Super Mario World arbitrary code execution speedrun involves JSRing to $014A13. This address is not mapped by any part of the system, so behavior at this point is governed by bus capacitance and the pattern of data reads as the 65C816 processor fetches instruction bytes. By sheer coincidence, this results a coherent sequence of instructions that eventually executes the payload instructions, programmed into the X positions of a handful of koopa shells.