Three controllers/knobs, Attack, Decay and Amount (both negative as positive). The possible destinations are a switchable OSC 2 or FM Amount.
Figure 18. Modulation Envelope Structure
Figure 19. Modulation Envelope Panel