> The NES doesn't tend to do tricks with dynamic runtime code generation, so NES games are good candidates for being statically analyzed and transpiled.

Runtime code generation is rare, but dynamic dispatch (i.e. "JMP indirect" through RAM), jump tables, and certain instruction-level hacks are fairly common. This can make it tricky to reliably identify all subroutines or traces [1].

[1] https://andrewkelley.me/post/jamulator.html