0xC3
(soft reset = 0)
The return address written during an nmi acknowledge cycle is always stored in these registers.