ov112 β€” overlay detail

DS game only γ¨γ‚“γŒγ‚Šγƒœγ‚¦γ‚·γ¨γŠγ—γ‚ƒγ‚Œγͺまほう぀かい The field guide documents the DS game's internals.

(no containers/strings -- pure code)

ov112 secondary_engine_a

(no containers/strings -- pure code)

Header

Numeric metadata for this overlay as read from the overlay table at ROM offset 0x8DE00 (per-entry stride 32 bytes). Function counts, data-item counts, and the call-graph fan-out are from a Ghidra 11.3.1 headless auto-analysis pass.

Overlay ID 112
File ID 112
RAM load address 0x0215e4a0
RAM size 1,568 bytes (0x620)
BSS size 0 bytes
On-disk compressed size 1,372 bytes
Compression flag 0x1 (BLZ-compressed)
Functions 13
External calls 19
Jump tables 0
Data items 14
Code coverage 62% (978 of 1,568 bytes)

Reading the binary

The overlay ships on the cart at file ID 112 under the BLZ code-LZ compression wrapper (the same backward-LZ scheme Nintendo uses for executable ARM9 code). At load time the engine reads the overlay table entry at ROM offset 0x8DE00 + 112 * 0x20, allocates the destination RAM region at 0x0215e4a0, decompresses the body in-place (if compressed), and resolves any external relocations.

To inspect this overlay outside the running game, decompress overlay/overlay_112.bin with ndspy.codeCompression.decompress() (Python ndspy library) and load the resulting plaintext into Ghidra or IDA at base address 0x0215e4a0. The raw Ghidra auto-analysis dump used to populate this page lives at notes/overlay_knowledgebase/raw/ov112.json; the per-overlay descriptive markdown is at notes/overlay_knowledgebase/ov112.md.

Embedded strings

No UTF-16 LE strings are embedded directly in this overlay's binary. Any text it displays at runtime comes from a container file loaded via the content cache.

Container references

This overlay references no container files β€” it is pure code (or reads only from globals shared with the persistent ARM9 binary).

Function list

Functions Ghidra auto-identified inside this overlay's RAM range. Names prefixed FUN_ are auto-generated from the function's entry address; size is in bytes; the "calls" column counts both intra-overlay branches and external ARM9 call targets. The "strings" column counts how many UTF-16 LE strings each function references.

Show all 13 functions
# Address Size Calls Strings Role hint
1 0x0215e574 102 4 0 code
2 0x0215e5e0 52 2 0 code
3 0x0215e614 184 8 0 code
4 0x0215e6d0 52 2 0 code
5 0x0215e704 10 0 0 trampoline / small helper
6 0x0215e710 114 3 0 code
7 0x0215e790 90 6 0 code
8 0x0215e8d4 10 0 0 trampoline / small helper
9 0x0215e900 146 11 0 code
10 0x0215e994 114 2 0 code
11 0x0215ea0c 10 0 0 trampoline / small helper
12 0x0215ea18 82 3 0 code
13 0x0215ea70 12 1 0 trampoline / small helper

Open questions & conflicts

Open questions / unknowns

Conflicts with the prior shallow pass

Source