Blaster Master (USA)
Blaster Master (USA) is on a MMC1 board with 131,072 bytes of program. A crawl of 8,000 steps from power-on kept 183 paths that found new code. Played back over 369,723 frames, they executed 13,581 bytes of it, 10 percent.
What the rules named
- The poll: 2
- The wait for the frame: 3
- The bank switch: 6
- The picture writer: 1
- The palette writers: 1
- The sprite writers: 6
- The scroll writer: 1
- The sound driver: 1
- Where two things are compared: 1
The 280 routines the runs entered
Every place the game's code was entered, by a call, an interrupt or a jump through a table. The ones a rule named come first, with what the rule saw, and their names in the listing say what they are: a poll, an engine, a drain.
| at | its name in the listing | entered by | times | what it is, and the evidence |
|---|---|---|---|---|
| $E63C (bank 7) | b7_bank_E63C | a call | 1,465,820 | The bank switch: writes 7,329,095, in the blank 28,017, while drawing 7,301,078 |
| $835C (bank 5) | b5_sound_835C | a call | 581,958 | The sound driver: frames it ran in 145,889, writes 225,687 |
| $EC73 (bank 7) | b7_sprites_EC73 | a call | 325,799 | The sprite writers: frames it ran in 89,580, writes to the sprite page 6,779,728 |
| $E914 (bank 7) | b7_poll_E914 | a call | 310,426 | The poll: port $4016, reads a frame 15, strobes a frame 3 The poll: port $4017, reads a frame 15, strobes a frame 3 |
| $EF2B (bank 7) | b7_compare_EF2B | a call | 249,098 | Where two things are compared: instructions 2, pairs of bytes 6, bytes in all 8, times compared 2,865, X positions at $001C,$0472,$0480,$048E,$049C, Y positions at $001E,$0474,$049E |
| $EB98 (bank 7) | b7_drain_EB98 | a call | 157,957 | The palette writers: frames it ran in 158,149, writes 4,919,582 The picture writer: frames it ran in 158,149, writes 4,919,582, in the blank 4,919,582, while drawing 0 |
| $E650 (bank 7) | b7_bank_E650 | a call | 155,393 | The bank switch: writes 776,964, in the blank 776,964, while drawing 0 |
| $E664 (bank 7) | b7_bank_E664 | a call | 155,393 | The bank switch: writes 776,965, in the blank 776,965, while drawing 0 |
| $E6BF (bank 7) | b7_scroll_E6BF | a call | 155,393 | The scroll writer: frames it ran in 155,393, writes in the blank 310,786 |
| $EC61 (bank 7) | b7_sprites_EC61 | a call | 155,393 | The sprite writers: frames it ran in 156,300, writes to the sprite page 9,940,736 |
| $C7D8 (bank 7) | b7_sprites_C7D8 | a call | 47,888 | The sprite writers: frames it ran in 48,099, writes to the sprite page 1,532,414 |
| $F668 (bank 7) | b7_sprites_F668 | a call | 40,043 | The sprite writers: frames it ran in 40,043, writes to the sprite page 1,498,072 |
| $F88C (bank 7) | b7_sprites_F88C | a call | 540 | The sprite writers: frames it ran in 540, writes to the sprite page 15,112 |
| $E678 (bank 7) | b7_bank_E678 | a call | 183 | The bank switch: writes 915, in the blank 915, while drawing 0 |
| $E68C (bank 7) | b7_bank_E68C | a call | 183 | The bank switch: writes 183, in the blank 183, while drawing 0 |
| $FFF4 (bank 7) | b7_reset | power-on | 183 | The bank switch: writes 366, in the blank 366, while drawing 0 The sprite writers: frames it ran in 49,898, writes to the sprite page 46,848 |
| $BDF6 (bank 5) | a call | 1,318,361 | ||
| $808C (bank 5) | a call | 1,262,208 | ||
| $E61B (bank 7) | a call | 878,627 | ||
| $82CE (bank 5) | a call | 581,958 | ||
| $F0BC (bank 7) | a call | 534,826 | ||
| $EA3A (bank 7) | a call | 514,086 | ||
| $E9A2 (bank 7) | a call | 417,792 | ||
| $EB51 (bank 7) | a call | 290,997 | ||
| $F029 (bank 7) | a call | 278,175 | ||
| $EFD7 (bank 7) | a call | 249,098 | ||
| $C928 (bank 7) | a call | 243,570 | ||
| $C8DF (bank 7) | a call | 243,445 | ||
| $C9A4 (bank 7) | a call | 243,236 | ||
| $DC47 (bank 7) | a call | 220,040 | ||
| $DCDD (bank 7) | a call | 207,134 | ||
| $E996 (bank 7) | a call | 205,762 | ||
| $ECB4 (bank 7) | a call | 192,090 | ||
| $F1CA (bank 7) | a call | 160,430 | ||
| $EB7E (bank 7) | each frame (NMI) | 157,957 | ||
| $BE23 (bank 5) | a call | 157,776 | ||
| $DEEB (bank 7) | a call | 157,776 | ||
| $E697 (bank 7) | a call | 155,393 | ||
| $E936 (bank 7) | a call | 155,393 | ||
| $E287 (bank 7) | a call | 155,212 | ||
| $E2C1 (bank 7) | a call | 155,212 | ||
| $E8A9 (bank 7) | a call | 155,212 | ||
| $E895 (bank 7) | a call | 154,145 | ||
| $8127 (bank 6) | a table | 149,264 | ||
| $F011 (bank 7) | a call | 144,359 | ||
| $D2AB (bank 7) | a call | 102,999 | ||
| $D9F5 (bank 7) | a call | 101,063 | ||
| $D1A4 (bank 7) | a call | 94,860 | ||
| $CD0A (bank 7) | a call | 94,530 | ||
| $CDD0 (bank 7) | a call | 74,103 | ||
| $EB14 (bank 7) | a call | 73,633 | ||
| $D40B (bank 7) | a call | 72,381 | ||
| $D3A3 (bank 7) | a call | 72,259 | ||
| $D3F8 (bank 7) | a call | 72,247 | ||
| $D394 (bank 7) | a call | 71,988 | ||
| $D2FE (bank 7) | a call | 66,249 | ||
| $D2DE (bank 7) | a call | 63,062 | ||
| $D9D3 (bank 7) | a call | 56,538 | ||
| $EA3C (bank 7) | a call | 53,698 | ||
| $D798 (bank 7) | a call | 51,700 | ||
| $C642 (bank 7) | a call | 47,888 | ||
| $C8AE (bank 7) | a call | 47,888 | ||
| $C971 (bank 7) | a call | 47,888 | ||
| $CA4B (bank 7) | a call | 47,888 | ||
| $D883 (bank 7) | a call | 47,888 | ||
| $D18D (bank 7) | a call | 47,430 | ||
| $CC6D (bank 7) | a call | 47,265 | ||
| $D1AD (bank 7) | a call | 47,265 | ||
| $CBDF (bank 7) | a call | 47,100 | ||
| $D3DE (bank 7) | a call | 45,564 | ||
| $D37A (bank 7) | a call | 45,442 | ||
| $D7A0 (bank 7) | a call | 44,721 | ||
| $DC51 (bank 7) | a call | 43,780 | ||
| $D2B1 (bank 7) | a call | 42,598 | ||
| $D256 (bank 7) | a call | 40,088 | ||
| $894E (bank 6) | a call | 38,549 | ||
| $96A2 (bank 6) | a call | 37,528 | ||
| $8E32 (bank 6) | a call | 37,108 | ||
| $92DE (bank 6) | a table | 37,108 | ||
| $96C2 (bank 6) | a call | 37,108 | ||
| $CF07 (bank 7) | a call | 37,108 | ||
| $9641 (bank 6) | a call | 37,038 | ||
| $96D5 (bank 6) | a call | 37,038 | ||
| $96EB (bank 6) | a call | 37,038 | ||
| $D21D (bank 7) | a call | 37,003 | ||
| $D9AF (bank 7) | a call | 32,136 | ||
| $A2FA (bank 6) | a call | 31,517 | ||
| $A30A (bank 6) | a call | 31,390 | ||
| $D697 (bank 7) | a call | 31,390 | ||
| $D6CD (bank 7) | a call | 31,390 | ||
| $E04E (bank 7) | a call | 31,002 | ||
| $CCE8 (bank 7) | a call | 30,389 | ||
| $CCFF (bank 7) | a call | 28,300 | ||
| $888C (bank 6) | a call | 28,229 | ||
| $D37D (bank 7) | a call | 26,817 | ||
| $D3E1 (bank 7) | a call | 26,817 | ||
| $DCB2 (bank 7) | a call | 22,464 | ||
| $F19B (bank 7) | a call | 20,212 | ||
| $EB71 (bank 7) | a call | 19,408 | ||
| $CCF9 (bank 7) | a call | 18,965 | ||
| $CCEF (bank 7) | a call | 16,876 | ||
| $E083 (bank 7) | a call | 16,650 | ||
| $DF68 (bank 7) | a call | 16,049 | ||
| $A871 (bank 6) | a table | 15,617 | ||
| $E02F (bank 7) | a call | 15,617 | ||
| $A7F1 (bank 6) | a table | 14,155 | ||
| $E74D (bank 7) | a call | 12,845 | ||
| $E974 (bank 7) | a call | 11,541 | ||
| $DCD4 (bank 7) | a call | 11,232 | ||
| $F1BC (bank 7) | a call | 11,180 | ||
| $E775 (bank 7) | a call | 11,134 | ||
| $D327 (bank 7) | a call | 10,167 | ||
| $D349 (bank 7) | a call | 10,167 | ||
| $DF84 (bank 7) | a call | 10,167 | ||
| $DFA0 (bank 7) | a call | 10,167 | ||
| $E0A5 (bank 7) | a call | 10,167 | ||
| $E986 (bank 7) | a call | 9,702 | ||
| $85E2 (bank 6) | a call | 8,413 | ||
| $950D (bank 6) | a call | 8,359 | ||
| $815F (bank 6) | a table | 8,350 | ||
| $880B (bank 6) | a call | 8,334 | ||
| $D975 (bank 7) | a call | 6,433 | ||
| $D98C (bank 7) | a call | 6,433 | ||
| $D71F (bank 7) | a call | 5,598 | ||
| $8624 (bank 6) | a call | 5,588 | ||
| $9C6B (bank 6) | a table | 5,231 | ||
| $DA15 (bank 7) | a call | 5,029 | ||
| $D95E (bank 7) | a call | 4,942 | ||
| $DC2D (bank 7) | a call | 4,866 | ||
| $DB98 (bank 7) | a call | 4,779 | ||
| $D2DB (bank 7) | a call | 4,035 | ||
| $E4FD (bank 7) | a call | 3,588 | ||
| $978B (bank 6) | a table | 3,530 | ||
| $E4AB (bank 7) | a call | 3,352 | ||
| $8124 (bank 6) | a table | 3,067 | ||
| $E704 (bank 7) | a call | 2,982 | ||
| $F19F (bank 7) | a call | 2,363 | ||
| $E182 (bank 7) | a call | 2,212 | ||
| $E196 (bank 7) | a call | 2,212 | ||
| $BFE8 (bank 5) | a call | 2,132 | ||
| $DECC (bank 7) | a call | 2,009 | ||
| $E6FA (bank 7) | a call | 1,972 | ||
| $F771 (bank 7) | a call | 1,928 | ||
| $ED12 (bank 7) | a call | 1,620 | ||
| $92DB (bank 6) | a table | 1,511 | ||
| $D908 (bank 7) | a call | 1,491 | ||
| $E308 (bank 7) | a call | 1,485 | ||
| $DAC4 (bank 7) | a call | 1,404 | ||
| $F1A3 (bank 7) | a call | 1,404 | ||
| $E0ED (bank 7) | a call | 1,230 | ||
| $E6F0 (bank 7) | a call | 1,145 | ||
| $E1D5 (bank 7) | a call | 979 | ||
| $8853 (bank 6) | a table | 970 | ||
| $F192 (bank 7) | a call | 826 | ||
| $E0C7 (bank 7) | a call | 759 | ||
| $EA03 (bank 7) | a call | 737 | ||
| $CE0F (bank 7) | a call | 735 | ||
| $E93F (bank 7) | a call | 735 | ||
| $BE17 (bank 5) | a call | 551 | ||
| $BFE5 (bank 5) | a call | 551 | ||
| $DEC2 (bank 7) | a call | 551 | ||
| $DF05 (bank 7) | a call | 551 | ||
| $DF0A (bank 7) | a call | 551 | ||
| $CE27 (bank 7) | a call | 514 | ||
| $B2EF (bank 6) | a table | 505 | ||
| $D2B9 (bank 7) | a call | 500 | ||
| $E1BD (bank 7) | a call | 474 | ||
| $E1D2 (bank 7) | a call | 474 | ||
| $EDF5 (bank 7) | a call | 452 | ||
| $B192 (bank 6) | a table | 435 | ||
| $B1DE (bank 6) | a call | 432 | ||
| $8562 (bank 6) | a table | 427 | ||
| $B2AB (bank 6) | a table | 414 | ||
| $E949 (bank 7) | a call | 408 | ||
| $E953 (bank 7) | a call | 408 | ||
| $E0FA (bank 7) | a call | 378 | ||
| $9EE3 (bank 6) | a table | 366 | ||
| $A53D (bank 6) | a table | 339 | ||
| $A670 (bank 6) | a call | 339 | ||
| $CE3C (bank 7) | a call | 339 | ||
| $E107 (bank 7) | a call | 339 | ||
| $E120 (bank 7) | a call | 333 | ||
| $D790 (bank 7) | a call | 321 | ||
| $9BAD (bank 6) | a table | 314 | ||
| $9BF0 (bank 6) | a table | 291 | ||
| $D7CF (bank 7) | a call | 271 | ||
| $AC66 (bank 6) | a table | 262 | ||
| $D7C0 (bank 7) | a call | 251 | ||
| $8C67 (bank 6) | a table | 240 | ||
| $E4A6 (bank 7) | a call | 240 | ||
| $D7B6 (bank 7) | a call | 233 | ||
| $D136 (bank 7) | a call | 212 | ||
| $E87C (bank 7) | a call | 192 | ||
| $CE2E (bank 7) | a call | 187 | ||
| $E9A6 (bank 7) | a call | 187 | ||
| $F45D (bank 7) | a call | 187 | ||
| $F547 (bank 7) | a call | 187 | ||
| $F58F (bank 7) | a call | 187 | ||
| $F9CA (bank 7) | a call | 187 | ||
| $CDBA (bank 7) | a call | 175 | ||
| $E9CF (bank 7) | a call | 171 | ||
| $F5D9 (bank 7) | a call | 171 | ||
| $F67C (bank 7) | a call | 171 | ||
| $D7E3 (bank 7) | a call | 168 | ||
| $C659 (bank 7) | a call | 165 | ||
| $C6EF (bank 7) | a call | 165 | ||
| $CC35 (bank 7) | a call | 165 | ||
| $DCFC (bank 7) | a call | 165 | ||
| $E823 (bank 7) | a call | 165 | ||
| $CE82 (bank 7) | a call | 164 | ||
| $C772 (bank 7) | a call | 163 | ||
| $C9D6 (bank 7) | a call | 163 | ||
| $E692 (bank 7) | a call | 163 | ||
| $F7D1 (bank 7) | a call | 163 | ||
| $9707 (bank 6) | a call | 161 | ||
| $9770 (bank 6) | a table | 161 | ||
| $CBA9 (bank 7) | a call | 161 | ||
| $E243 (bank 7) | a call | 161 | ||
| $C5B2 (bank 7) | a call | 160 | ||
| $CA14 (bank 7) | a call | 160 | ||
| $A2E9 (bank 6) | a call | 127 | ||
| $867A (bank 6) | a table | 122 | ||
| $A7CE (bank 6) | a table | 114 | ||
| $E862 (bank 7) | a call | 96 | ||
| $EAE9 (bank 7) | a call | 96 | ||
| $88E9 (bank 6) | a call | 70 | ||
| $815C (bank 6) | a table | 63 | ||
| $A7EE (bank 6) | a table | 45 | ||
| $D238 (bank 7) | a call | 40 | ||
| $D1EF (bank 7) | a call | 38 | ||
| $A86E (bank 6) | a table | 36 | ||
| $882D (bank 6) | a table | 35 | ||
| $A634 (bank 6) | a call | 33 | ||
| $E6E9 (bank 7) | a call | 32 | ||
| $E9B8 (bank 7) | a call | 32 | ||
| $F833 (bank 7) | a call | 32 | ||
| $F90B (bank 7) | a call | 32 | ||
| $F927 (bank 7) | a call | 32 | ||
| $F9A5 (bank 7) | a call | 32 | ||
| $9B81 (bank 6) | a call | 27 | ||
| $9B98 (bank 6) | a table | 27 | ||
| $A53A (bank 6) | a table | 27 | ||
| $855F (bank 6) | a table | 25 | ||
| $8C64 (bank 6) | a table | 24 | ||
| $9BDB (bank 6) | a table | 24 | ||
| $D804 (bank 7) | a call | 22 | ||
| $D283 (bank 7) | a call | 20 | ||
| $8677 (bank 6) | a table | 18 | ||
| $8850 (bank 6) | a table | 18 | ||
| $9788 (bank 6) | a table | 18 | ||
| $9BAA (bank 6) | a table | 18 | ||
| $A7CB (bank 6) | a table | 18 | ||
| $E4BB (bank 7) | a call | 18 | ||
| $E4E0 (bank 7) | a call | 18 | ||
| $DF0F (bank 7) | a call | 17 | ||
| $DF27 (bank 7) | a call | 17 | ||
| $E3D1 (bank 7) | a call | 17 | ||
| $E07B (bank 7) | a call | 16 | ||
| $E355 (bank 7) | a call | 14 | ||
| $9C1F (bank 6) | a table | 12 | ||
| $E4EE (bank 7) | a call | 12 | ||
| $9BED (bank 6) | a table | 9 | ||
| $9C68 (bank 6) | a table | 9 | ||
| $D82C (bank 7) | a call | 7 | ||
| $E309 (bank 7) | a call | 7 | ||
| $E005 (bank 7) | a call | 6 | ||
| $A29E (bank 6) | a call | 5 | ||
| $AC3F (bank 6) | a table | 5 | ||
| $9EC2 (bank 6) | a table | 4 | ||
| $C5FA (bank 7) | a call | 4 | ||
| $DF46 (bank 7) | a call | 4 | ||
| $E38A (bank 7) | a call | 4 | ||
| $A511 (bank 6) | a table | 3 | ||
| $B171 (bank 6) | a table | 3 | ||
| $9B90 (bank 6) | a call | 2 | ||
| $B29E (bank 6) | a table | 2 | ||
| $D246 (bank 7) | a call | 2 | ||
| $E797 (bank 7) | a call | 2 | ||
| $E3F0 (bank 7) | a call | 1 | ||
| $F71C (bank 7) | a call | 1 |
Where it waits
Loops a rule named that sit inside a routine and are not themselves a place the code is entered.
| at | its name in the listing | what it is, and the evidence |
|---|---|---|
| $E93A (bank 7) | b7_wait_E93A | The wait for the frame: waits on the byte at $0012, times entered 155,342, turns 469,638,754, writes of it under the frame interrupt 1,912,657, frames in all 159,303 |
| $F647 (bank 7) | b7_wait_F647 | The wait for the frame: waits on the byte at $00E0, times entered 161, turns 24,632, calls on each turn 1, writes of it under the frame interrupt 652, frames in all 159,303 |
| $F872 (bank 7) | b7_wait_F872 | The wait for the frame: waits on the byte at $00F3, times entered 12, turns 536, calls on each turn 2, writes of it under the frame interrupt 155,212, frames in all 159,303 |
The tables it jumps through
A table of addresses the game picks one from. Some sit right after a call to a jump engine; others are anywhere in the cartridge, and we find them by where the address the game jumped through was loaded from. Some games jump by pushing an address and returning to it, and some keep a table as two, the low bytes of its addresses in one place and the high bytes in another; both are found the same way. An entry is counted as far as the runs saw one taken; the true table may be longer. The last column is the byte of memory whose value picked the entry, where we could follow it: the game's mode, or what one of its objects is doing.
| at | reached | entries | taken | chosen by the byte at |
|---|---|---|---|---|
| $8002 (bank 6) | through a pointer | 97 | 15 | $0470, $049A, $047E, $048C |
The memory its routines share
821 bytes of memory were written by one routine and read by another, and 69 places were reached through an index, which is what a table or a set of object slots in memory looks like.
Reaches through an index: those that hold positions, then the longest
| from | bytes reached | instructions | positions it holds |
|---|---|---|---|
| $0401 | 225 | 3 | 4 across, 2 down |
| $0001 | 123 | 1 | 1 across, 1 down |
| $0300 | 256 | 17 | |
| $0400 | 256 | 17 | |
| $0500 | 256 | 16 | |
| $0700 | 256 | 15 | |
| $0600 | 256 | 10 | |
| $0000 | 256 | 8 | |
| $0200 | 256 | 4 | |
| $0402 | 225 | 4 | |
| $0403 | 225 | 4 | |
| $0406 | 225 | 4 |
What travels with a position
Arrays that at least two routines step through together with an array of positions, across the same range. That is what a table of the things on the screen looks like in memory: one array for each property, one slot for each thing. We can say which arrays hold positions, which of the others get added into them, which is what a speed does, which pick the way through a jump table, which is what a state or a kind does, and which are only ever counted down, which is what a timer does. What the rest hold is not named yet.
| slots | arrays | routines | positions across | positions down | added into them | choosing a jump | counted down | travelling with them |
|---|---|---|---|---|---|---|---|---|
| 123 | 2 | 2 | $0001 | $0001 | $0000 | $0000 | $0000 | |
| 225 | 14 | 3 | $0401 | $0401 | $0400, $0402, $0403, $0404, $0405, $0406, $0407, $0408, $0409, $040A, $040B, $040C, $040D |
The 24 busiest shared bytes
| byte | reads and writes | routines writing | routines reading |
|---|---|---|---|
| $0012 | 433,471,936 | 6 | 6 |
| $007A | 17,191,360 | 6 | 6 |
| $007B | 14,534,076 | 6 | 6 |
| $003F | 9,389,757 | 6 | 6 |
| $00F7 | 9,284,376 | 3 | 6 |
| $003E | 8,977,386 | 6 | 6 |
| $0044 | 8,550,393 | 6 | 6 |
| $00F8 | 8,225,997 | 2 | 2 |
| $0000 | 6,857,979 | 6 | 6 |
| $0058 | 5,625,428 | 4 | 3 |
| $0057 | 3,606,069 | 3 | 6 |
| $0045 | 3,481,849 | 6 | 6 |
| $0056 | 3,132,097 | 4 | 5 |
| $00DB | 2,458,885 | 6 | 6 |
| $0001 | 1,840,001 | 6 | 6 |
| $0049 | 1,787,749 | 6 | 6 |
| $001D | 1,644,411 | 3 | 6 |
| $00FF | 1,617,441 | 6 | 6 |
| $00F5 | 1,563,394 | 2 | 4 |
| $004A | 1,494,662 | 6 | 6 |
| $0048 | 1,363,005 | 6 | 6 |
| $0046 | 1,355,401 | 6 | 6 |
| $00E9 | 1,320,676 | 2 | 3 |
| $004B | 1,267,643 | 6 | 6 |
This page shows none of the game's bytes. The listing these figures were read from stays with the cartridge.