ov028 β€” overlay detail

DS game only γ¨γ‚“γŒγ‚Šγƒœγ‚¦γ‚·γ¨γŠγ—γ‚ƒγ‚Œγͺまほう぀かい The field guide documents the DS game's internals.

containers: umatbl

ov028 horse_2d_ui

containers: umatbl

Header

Numeric metadata for this overlay as read from the overlay table at ROM offset 0x8DE00 (per-entry stride 32 bytes). Function counts, data-item counts, and the call-graph fan-out are from a Ghidra 11.3.1 headless auto-analysis pass.

Overlay ID 28
File ID 28
RAM load address 0x02155a00
RAM size 2,400 bytes (0x960)
BSS size 0 bytes
On-disk compressed size 2,096 bytes
Compression flag 0x1 (BLZ-compressed)
Functions 20
External calls 35
Jump tables 1
Data items 57
Code coverage 75% (1,796 of 2,400 bytes)

Reading the binary

The overlay ships on the cart at file ID 28 under the BLZ code-LZ compression wrapper (the same backward-LZ scheme Nintendo uses for executable ARM9 code). At load time the engine reads the overlay table entry at ROM offset 0x8DE00 + 28 * 0x20, allocates the destination RAM region at 0x02155a00, decompresses the body in-place (if compressed), and resolves any external relocations.

To inspect this overlay outside the running game, decompress overlay/overlay_028.bin with ndspy.codeCompression.decompress() (Python ndspy library) and load the resulting plaintext into Ghidra or IDA at base address 0x02155a00. The raw Ghidra auto-analysis dump used to populate this page lives at notes/overlay_knowledgebase/raw/ov028.json; the per-overlay descriptive markdown is at notes/overlay_knowledgebase/ov028.md.

Embedded strings

No UTF-16 LE strings are embedded directly in this overlay's binary. Any text it displays at runtime comes from a container file loaded via the content cache.

Container references

Distinct container basenames referenced by this overlay. Each is loaded via the content cache by passing the basename string to a lookup that resolves it to a file ID in the ROM's FAT. The path column shows the file's location in the clean extract, where resolved.

Function list

Functions Ghidra auto-identified inside this overlay's RAM range. Names prefixed FUN_ are auto-generated from the function's entry address; size is in bytes; the "calls" column counts both intra-overlay branches and external ARM9 call targets. The "strings" column counts how many UTF-16 LE strings each function references.

Show all 20 functions
# Address Size Calls Strings Role hint
1 0x02155adc 14 0 0 trampoline / small helper
2 0x02155aec 6 0 0 trampoline / small helper
3 0x02155af4 88 3 0 code
4 0x02155b50 116 12 0 code
5 0x02155bd0 230 10 0 code
6 0x02155cc0 50 2 1 refs: umatbl.lzs
7 0x02155d00 28 2 0 trampoline / small helper
8 0x02155d20 576 31 1 refs: umatbl.lzs
9 0x02155f7c 8 0 0 trampoline / small helper
10 0x02155f84 16 0 0 trampoline / small helper
11 0x02155f94 72 4 0 code
12 0x02155fe0 100 12 0 code
13 0x0215604c 296 17 0 code
14 0x02156184 56 2 0 code
15 0x021561bc 6 0 0 trampoline / small helper
16 0x021561c8 6 0 0 trampoline / small helper
17 0x021561d4 6 0 0 trampoline / small helper
18 0x021561e0 6 0 0 trampoline / small helper
19 0x021561ec 98 4 0 code
20 0x02156260 18 0 0 trampoline / small helper

Open questions & conflicts

Open questions / unknowns

Conflicts with the prior shallow pass

Source