DS game only Header
Numeric metadata for this overlay as read from the overlay table at ROM
offset 0x8DE00 (per-entry stride 32 bytes). Function
counts, data-item counts, and the call-graph fan-out are from a Ghidra
11.3.1 headless auto-analysis pass.
Reading the binary
The overlay ships on the cart at file ID 125 under the BLZ code-LZ compression wrapper (the same backward-LZ scheme Nintendo uses for executable ARM9 code).
At load time the engine reads the overlay table entry at ROM offset
0x8DE00 + 125 * 0x20, allocates the destination
RAM region at 0x021601c0, decompresses
the body in-place (if compressed), and resolves any external
relocations.
To inspect this overlay outside the running game, decompress
overlay/overlay_125.bin with
ndspy.codeCompression.decompress() (Python ndspy library)
and load the resulting plaintext into Ghidra or
IDA at base address 0x021601c0. The
raw Ghidra auto-analysis dump used to populate this page lives at
notes/overlay_knowledgebase/raw/ov125.json;
the per-overlay descriptive markdown is at
notes/overlay_knowledgebase/ov125.md.
Embedded strings
No UTF-16 LE strings are embedded directly in this overlay's binary. Any text it displays at runtime comes from a container file loaded via the content cache.
Container references
Distinct container basenames referenced by this overlay. Each is loaded via the content cache by passing the basename string to a lookup that resolves it to a file ID in the ROM's FAT. The path column shows the file's location in the clean extract, where resolved.
-
defcosβdata/defcos.lzs
Unresolved
These container basenames appeared in the overlay's string table but no file of that name was found in the clean extract. Most are false-positive ASCII matches (function names, register maps, fragments of other strings); a few may be containers that the overlay names but never actually opens. Listed for completeness.
-
map/field/place.lzsβ no matching container found in clean extract
Function list
Functions Ghidra auto-identified inside this overlay's RAM range.
Names prefixed FUN_ are auto-generated from the function's
entry address; size is in bytes; the "calls" column counts both
intra-overlay branches and external ARM9 call targets. The "strings"
column counts how many UTF-16 LE strings each function references.
Show all 17 functions
| # | Address | Size | Calls | Strings | Role hint |
|---|---|---|---|---|---|
| 1 | 0x02160288 | 168 | 11 | 0 | code |
| 2 | 0x02160338 | 26 | 1 | 0 | trampoline / small helper |
| 3 | 0x02160354 | 26 | 2 | 0 | trampoline / small helper |
| 4 | 0x02160370 | 32 | 1 | 0 | trampoline / small helper |
| 5 | 0x02160394 | 22 | 0 | 0 | trampoline / small helper |
| 6 | 0x021603ac | 186 | 12 | 1 | refs: defcos.lzs |
| 7 | 0x02160514 | 12 | 1 | 0 | trampoline / small helper |
| 8 | 0x02160520 | 86 | 4 | 0 | code |
| 9 | 0x021606bc | 110 | 12 | 0 | code |
| 10 | 0x02160738 | 136 | 8 | 0 | code |
| 11 | 0x021607fc | 42 | 2 | 0 | code |
| 12 | 0x0216082c | 12 | 0 | 0 | trampoline / small helper |
| 13 | 0x0216083c | 1,524 | 113 | 0 | high-fan-out (likely dispatcher / setup) |
| 14 | 0x02160ea4 | 254 | 16 | 1 | refs: defcos.lzs |
| 15 | 0x02160fd8 | 198 | 14 | 0 | code |
| 16 | 0x021610b8 | 8 | 0 | 0 | trampoline / small helper |
| 17 | 0x021610c4 | 360 | 35 | 0 | high-fan-out (likely dispatcher / setup) |
Open questions & conflicts
Open questions / unknowns
- Auto-analysis identified 17 functions covering 3202 of 4384 overlay bytes.
- Function names are auto-generated `FUN_<addr>`. Manual renaming based on call-graph + string-ref analysis is a follow-up.
- BSS size is 32 bytes; Ghidra-imported overlay does not include BSS so any references into the BSS range appear as unresolved.
Conflicts with the prior shallow pass
- No major conflicts detected with prior-pass `overlay_role_final.json` record.
Source
- Per-overlay markdown:
notes/overlay_knowledgebase/ov125.md - Raw Ghidra dump:
notes/overlay_knowledgebase/raw/ov125.json - Overlay-system explainer: overlays system
- Plain-English overlay primer: overlay knowledgebase