ov027 — overlay detail · Tongari Boushi Archive

ov027 magazine

containers: magazine, magazine/Trophy.ofs, magazine/magazine.lzs

Header

Numeric metadata for this overlay as read from the overlay table at ROM offset 0x8DE00 (per-entry stride 32 bytes). Function counts, data-item counts, and the call-graph fan-out are from a Ghidra 11.3.1 headless auto-analysis pass.

Overlay ID 27

File ID 27

RAM load address 0x02155a00

RAM size 13,984 bytes (0x36a0)

BSS size 0 bytes

On-disk compressed size 10,840 bytes

Compression flag 0x1 (BLZ-compressed)

Functions 60

External calls 102

Jump tables 4

Data items 217

Code coverage 76% (10,678 of 13,984 bytes)

Reading the binary

The overlay ships on the cart at file ID 27 under the BLZ code-LZ compression wrapper (the same backward-LZ scheme Nintendo uses for executable ARM9 code). At load time the engine reads the overlay table entry at ROM offset 0x8DE00 + 27 * 0x20, allocates the destination RAM region at 0x02155a00, decompresses the body in-place (if compressed), and resolves any external relocations.

To inspect this overlay outside the running game, decompress overlay/overlay_027.bin with ndspy.codeCompression.decompress() (Python ndspy library) and load the resulting plaintext into Ghidra or IDA at base address 0x02155a00. The raw Ghidra auto-analysis dump used to populate this page lives at notes/overlay_knowledgebase/raw/ov027.json; the per-overlay descriptive markdown is at notes/overlay_knowledgebase/ov027.md.

Embedded strings

5 UTF-16 LE strings live inside this overlay's compiled binary. These addresses are absolute (inside the overlay's RAM image after load). The text is stored as little-endian UTF-16 code units, NUL-terminated.

0x02158234 `ぷ码頃盁`

0x021582da `ゼ态笒餀`

0x0215848c `゚码項唁蠰`

0x021584ce `ゼ态騄頀砒餃`

0x02158b50 `毪殩ヵ倩`

Container references

Distinct container basenames referenced by this overlay. Each is loaded via the content cache by passing the basename string to a lookup that resolves it to a file ID in the ROM's FAT. The path column shows the file's location in the clean extract, where resolved.

magazine → data/magazine/magazine.lzs

Unresolved

These container basenames appeared in the overlay's string table but no file of that name was found in the clean extract. Most are false-positive ASCII matches (function names, register maps, fragments of other strings); a few may be containers that the overlay names but never actually opens. Listed for completeness.

magazine/Trophy.ofs — no matching container found in clean extract
magazine/magazine.lzs — no matching container found in clean extract

Function list

Functions Ghidra auto-identified inside this overlay's RAM range. Names prefixed FUN_ are auto-generated from the function's entry address; size is in bytes; the "calls" column counts both intra-overlay branches and external ARM9 call targets. The "strings" column counts how many UTF-16 LE strings each function references.

Show all 60 functions

#	Address	Size	Calls	Strings	Role hint
1	0x02155b84	1,524	96	1	refs: magazine/magazine.lzs
2	0x021561f8	16	0	0	trampoline / small helper
3	0x02156208	42	5	0	code
4	0x02156234	1,424	78	0	high-fan-out (likely dispatcher / setup)
5	0x021567dc	44	2	0	code
6	0x02156810	18	1	0	trampoline / small helper
7	0x02156828	26	1	0	trampoline / small helper
8	0x02156848	16	0	0	trampoline / small helper
9	0x02156858	26	1	0	trampoline / small helper
10	0x02156878	8	0	0	trampoline / small helper
11	0x02156880	62	2	0	code
12	0x021568c4	412	3	0	code
13	0x02156a70	26	1	0	trampoline / small helper
14	0x02156a90	16	0	0	trampoline / small helper
15	0x02156aa0	42	2	0	code
16	0x02156ad8	76	6	0	code
17	0x02156b30	26	1	0	trampoline / small helper
18	0x02156b50	250	9	0	code
19	0x02156c54	26	1	0	trampoline / small helper
20	0x02156c74	52	4	0	code
21	0x02156cac	122	0	0	code
22	0x02156d2c	90	4	0	code
23	0x02156d88	56	1	0	code
24	0x02156dc4	18	1	0	trampoline / small helper
25	0x02156dd8	8	0	0	trampoline / small helper
26	0x02156de8	110	5	0	code
27	0x02156e58	18	1	0	trampoline / small helper
28	0x02156e6c	110	7	0	code
29	0x02156ee8	38	4	0	trampoline / small helper
30	0x02156f14	26	2	0	trampoline / small helper
31	0x02156f34	26	2	0	trampoline / small helper
32	0x02156f54	490	17	0	code
33	0x02157154	88	8	0	code
34	0x021571c0	40	0	0	code
35	0x021571f0	40	0	0	code
36	0x02157220	48	0	0	code
37	0x02157258	48	0	0	code
38	0x02157290	50	0	0	code
39	0x021572cc	56	3	1	refs: magazine
40	0x0215730c	58	3	1	refs: magazine
41	0x02157350	22	2	0	trampoline / small helper
42	0x0215736c	138	8	1	refs: magazine
43	0x0215740c	62	5	0	code
44	0x02157450	544	32	0	high-fan-out (likely dispatcher / setup)
45	0x02157690	2,212	62	0	high-fan-out (likely dispatcher / setup)
46	0x02157f7c	886	13	0	code
47	0x02158318	458	8	0	code
48	0x021584f4	66	7	0	code
49	0x02158538	22	0	0	trampoline / small helper
50	0x02158558	26	2	0	trampoline / small helper
51	0x0215857c	42	2	0	code
52	0x021585b4	74	0	0	code
53	0x02158608	122	1	0	code
54	0x02158690	52	1	0	code
55	0x021586cc	124	6	0	code
56	0x0215874c	26	2	0	trampoline / small helper
57	0x02158a50	60	2	0	code
58	0x02158c0c	12	1	0	trampoline / small helper
59	0x02158c18	26	2	0	trampoline / small helper
60	0x02158c34	32	3	0	trampoline / small helper

Open questions & conflicts

Open questions / unknowns

Auto-analysis identified 60 functions covering 10678 of 13984 overlay bytes.
Function names are auto-generated `FUN_<addr>`. Manual renaming based on call-graph + string-ref analysis is a follow-up.
BSS size is 0 bytes; Ghidra-imported overlay does not include BSS so any references into the BSS range appear as unresolved.

Conflicts with the prior shallow pass

No major conflicts detected with prior-pass `overlay_role_final.json` record.

Source

Per-overlay markdown: notes/overlay_knowledgebase/ov027.md
Raw Ghidra dump: notes/overlay_knowledgebase/raw/ov027.json
Overlay-system explainer: overlays system
Plain-English overlay primer: overlay knowledgebase

‹ ov026 All overlays ov028 ›