DS game only ov148 ucc
containers: /ucc/act/boil_mdl.ofs, /ucc/act/boil_mdl_prm.lzs, /ucc/act/boil_mdl_sub.ofs (+1 more)
Header
Numeric metadata for this overlay as read from the overlay table at ROM
offset 0x8DE00 (per-entry stride 32 bytes). Function
counts, data-item counts, and the call-graph fan-out are from a Ghidra
11.3.1 headless auto-analysis pass.
Reading the binary
The overlay ships on the cart at file ID 148 under the BLZ code-LZ compression wrapper (the same backward-LZ scheme Nintendo uses for executable ARM9 code).
At load time the engine reads the overlay table entry at ROM offset
0x8DE00 + 148 * 0x20, allocates the destination
RAM region at 0x021b1ba0, decompresses
the body in-place (if compressed), and resolves any external
relocations.
To inspect this overlay outside the running game, decompress
overlay/overlay_148.bin with
ndspy.codeCompression.decompress() (Python ndspy library)
and load the resulting plaintext into Ghidra or
IDA at base address 0x021b1ba0. The
raw Ghidra auto-analysis dump used to populate this page lives at
notes/overlay_knowledgebase/raw/ov148.json;
the per-overlay descriptive markdown is at
notes/overlay_knowledgebase/ov148.md.
Embedded strings
8 UTF-16 LE strings live inside this overlay's compiled binary. These addresses are absolute (inside the overlay's RAM image after load). The text is stored as little-endian UTF-16 code units, NUL-terminated.
Container references
Distinct container basenames referenced by this overlay. Each is loaded via the content cache by passing the basename string to a lookup that resolves it to a file ID in the ROM's FAT. The path column shows the file's location in the clean extract, where resolved.
Unresolved
These container basenames appeared in the overlay's string table but no file of that name was found in the clean extract. Most are false-positive ASCII matches (function names, register maps, fragments of other strings); a few may be containers that the overlay names but never actually opens. Listed for completeness.
-
/ucc/act/boil_mdl.ofsβ no matching container found in clean extract -
/ucc/act/boil_mdl_prm.lzsβ no matching container found in clean extract -
/ucc/act/boil_mdl_sub.ofsβ no matching container found in clean extract -
/ucc/uccboil.lzsβ no matching container found in clean extract
Function list
Functions Ghidra auto-identified inside this overlay's RAM range.
Names prefixed FUN_ are auto-generated from the function's
entry address; size is in bytes; the "calls" column counts both
intra-overlay branches and external ARM9 call targets. The "strings"
column counts how many UTF-16 LE strings each function references.
Show all 49 functions
| # | Address | Size | Calls | Strings | Role hint |
|---|---|---|---|---|---|
| 1 | 0x021b1da4 | 472 | 3 | 0 | code |
| 2 | 0x021b1f94 | 252 | 11 | 0 | code |
| 3 | 0x021b20b8 | 28 | 1 | 0 | trampoline / small helper |
| 4 | 0x021b20d4 | 84 | 5 | 0 | code |
| 5 | 0x021b2128 | 20 | 2 | 0 | trampoline / small helper |
| 6 | 0x021b2140 | 20 | 2 | 0 | trampoline / small helper |
| 7 | 0x021b2254 | 42 | 1 | 0 | code |
| 8 | 0x021b23d4 | 200 | 5 | 0 | code |
| 9 | 0x021b24b4 | 302 | 12 | 0 | code |
| 10 | 0x021b25f0 | 246 | 11 | 0 | code |
| 11 | 0x021b26f0 | 248 | 8 | 0 | code |
| 12 | 0x021b2804 | 150 | 0 | 0 | code |
| 13 | 0x021b289c | 92 | 1 | 0 | code |
| 14 | 0x021b28f8 | 14 | 1 | 0 | trampoline / small helper |
| 15 | 0x021b2908 | 684 | 38 | 4 | refs: /ucc/uccboil.lzs \| /ucc/act/boil_mdl_prm.lzs \| /ucc/act/boil_mdl_sub.ofs \| /ucc/act/boil_mdl_sub.ofs |
| 16 | 0x021b2be8 | 344 | 12 | 0 | code |
| 17 | 0x021b2d50 | 90 | 4 | 0 | code |
| 18 | 0x021b2db0 | 32 | 0 | 0 | trampoline / small helper |
| 19 | 0x021b2dd8 | 72 | 3 | 0 | code |
| 20 | 0x021b2e2c | 16 | 1 | 0 | trampoline / small helper |
| 21 | 0x021b2e3c | 704 | 7 | 0 | code |
| 22 | 0x021b3174 | 238 | 7 | 0 | code |
| 23 | 0x021b3274 | 16 | 0 | 0 | trampoline / small helper |
| 24 | 0x021b3288 | 16 | 0 | 0 | trampoline / small helper |
| 25 | 0x021b32a0 | 54 | 3 | 0 | code |
| 26 | 0x021b32dc | 44 | 0 | 0 | code |
| 27 | 0x021b3310 | 180 | 5 | 0 | code |
| 28 | 0x021b33cc | 6 | 0 | 0 | trampoline / small helper |
| 29 | 0x021b344c | 22 | 0 | 0 | trampoline / small helper |
| 30 | 0x021b3464 | 24 | 0 | 0 | trampoline / small helper |
| 31 | 0x021b3480 | 222 | 8 | 1 | refs: /ucc/act/boil_mdl.ofs |
| 32 | 0x021b3570 | 70 | 2 | 0 | code |
| 33 | 0x021b35c0 | 34 | 0 | 0 | trampoline / small helper |
| 34 | 0x021b35e8 | 86 | 3 | 0 | code |
| 35 | 0x021b3648 | 214 | 4 | 0 | code |
| 36 | 0x021b372c | 368 | 10 | 0 | code |
| 37 | 0x021b38b0 | 64 | 1 | 0 | code |
| 38 | 0x021b38f8 | 434 | 11 | 0 | code |
| 39 | 0x021b3ac0 | 202 | 0 | 0 | code |
| 40 | 0x021b3b98 | 152 | 5 | 0 | code |
| 41 | 0x021b3c40 | 138 | 1 | 0 | code |
| 42 | 0x021b3d98 | 90 | 3 | 0 | code |
| 43 | 0x021b3e00 | 22 | 0 | 0 | trampoline / small helper |
| 44 | 0x021b3e18 | 18 | 0 | 0 | trampoline / small helper |
| 45 | 0x021b3e2c | 74 | 3 | 0 | code |
| 46 | 0x021b3e84 | 50 | 4 | 0 | code |
| 47 | 0x021b4038 | 8 | 0 | 0 | trampoline / small helper |
| 48 | 0x021b41a0 | 56 | 0 | 0 | code |
| 49 | 0x021b422c | 12 | 1 | 0 | trampoline / small helper |
Open questions & conflicts
Open questions / unknowns
- Auto-analysis identified 49 functions covering 7026 of 10208 overlay bytes.
- Function names are auto-generated `FUN_<addr>`. Manual renaming based on call-graph + string-ref analysis is a follow-up.
- BSS size is 0 bytes; Ghidra-imported overlay does not include BSS so any references into the BSS range appear as unresolved.
Conflicts with the prior shallow pass
- No major conflicts detected with prior-pass `overlay_role_final.json` record.
Source
- Per-overlay markdown:
notes/overlay_knowledgebase/ov148.md - Raw Ghidra dump:
notes/overlay_knowledgebase/raw/ov148.json - Overlay-system explainer: overlays system
- Plain-English overlay primer: overlay knowledgebase