ov003 — overlay detail · Tongari Boushi Archive

ov003 general_2d_ui

containers: 2d/buyitem.lzs, 2d/itemorderwnd.lzs, buyitem (+1 more)

Header

Numeric metadata for this overlay as read from the overlay table at ROM offset 0x8DE00 (per-entry stride 32 bytes). Function counts, data-item counts, and the call-graph fan-out are from a Ghidra 11.3.1 headless auto-analysis pass.

Overlay ID 3

File ID 3

RAM load address 0x02155a00

RAM size 13,696 bytes (0x3580)

BSS size 0 bytes

On-disk compressed size 10,972 bytes

Compression flag 0x1 (BLZ-compressed)

Functions 45

External calls 128

Jump tables 8

Data items 244

Code coverage 87% (11,910 of 13,696 bytes)

Reading the binary

The overlay ships on the cart at file ID 3 under the BLZ code-LZ compression wrapper (the same backward-LZ scheme Nintendo uses for executable ARM9 code). At load time the engine reads the overlay table entry at ROM offset 0x8DE00 + 3 * 0x20, allocates the destination RAM region at 0x02155a00, decompresses the body in-place (if compressed), and resolves any external relocations.

To inspect this overlay outside the running game, decompress overlay/overlay_003.bin with ndspy.codeCompression.decompress() (Python ndspy library) and load the resulting plaintext into Ghidra or IDA at base address 0x02155a00. The raw Ghidra auto-analysis dump used to populate this page lives at notes/overlay_knowledgebase/raw/ov003.json; the per-overlay descriptive markdown is at notes/overlay_knowledgebase/ov003.md.

Embedded strings

No UTF-16 LE strings are embedded directly in this overlay's binary. Any text it displays at runtime comes from a container file loaded via the content cache.

Container references

Distinct container basenames referenced by this overlay. Each is loaded via the content cache by passing the basename string to a lookup that resolves it to a file ID in the ROM's FAT. The path column shows the file's location in the clean extract, where resolved.

buyitem → data/2d/buyitem.lzs
itemorderwnd → data/2d/itemorderwnd.lzs

Unresolved

These container basenames appeared in the overlay's string table but no file of that name was found in the clean extract. Most are false-positive ASCII matches (function names, register maps, fragments of other strings); a few may be containers that the overlay names but never actually opens. Listed for completeness.

2d/buyitem.lzs — no matching container found in clean extract
2d/itemorderwnd.lzs — no matching container found in clean extract

Function list

Functions Ghidra auto-identified inside this overlay's RAM range. Names prefixed FUN_ are auto-generated from the function's entry address; size is in bytes; the "calls" column counts both intra-overlay branches and external ARM9 call targets. The "strings" column counts how many UTF-16 LE strings each function references.

Show all 45 functions

#	Address	Size	Calls	Strings	Role hint
1	0x02155b3c	16	0	0	trampoline / small helper
2	0x02155b4c	16	0	0	trampoline / small helper
3	0x02155b5c	710	52	2	refs: 2d/buyitem.lzs \\| 2d/itemorderwnd.lzs
4	0x02155e44	16	0	0	trampoline / small helper
5	0x02155e54	1,740	83	0	high-fan-out (likely dispatcher / setup)
6	0x0215657c	442	15	4	refs: buyitem.lzs \\| buyitem.lzs \\| itemorderwnd.lzs \\| buyitem.lzs
7	0x0215679c	64	5	0	code
8	0x021567e0	184	8	2	refs: buyitem.lzs \\| buyitem.lzs
9	0x021568ac	304	12	3	refs: buyitem.lzs \\| buyitem.lzs \\| buyitem.lzs
10	0x02156a08	276	14	0	code
11	0x02156b20	96	2	0	code
12	0x02156b80	360	4	0	code
13	0x02156d00	124	1	0	code
14	0x02156d80	4	0	0	trampoline / small helper
15	0x02156d84	108	0	0	code
16	0x02156df4	232	5	0	code
17	0x02156ee4	214	17	4	refs: buyitem.lzs \\| buyitem.lzs \\| buyitem.lzs \\| buyitem.lzs
18	0x02156fd8	536	35	0	high-fan-out (likely dispatcher / setup)
19	0x02157210	2,204	159	0	high-fan-out (likely dispatcher / setup)
20	0x02157af8	32	4	0	trampoline / small helper
21	0x02157b18	390	19	0	code
22	0x02157cb8	8	0	0	trampoline / small helper
23	0x02157cc0	260	21	0	high-fan-out (likely dispatcher / setup)
24	0x02157dcc	124	0	0	code
25	0x02157e54	526	18	0	code
26	0x0215806c	436	9	0	code
27	0x02158224	214	10	0	code
28	0x0215830c	8	0	0	trampoline / small helper
29	0x0215831c	70	7	0	code
30	0x02158364	6	0	0	trampoline / small helper
31	0x0215836c	64	5	0	code
32	0x021583b0	72	0	0	code
33	0x021583f8	376	18	0	code
34	0x02158584	116	0	0	code
35	0x02158600	138	4	0	code
36	0x02158698	90	3	0	code
37	0x021586f8	28	1	0	trampoline / small helper
38	0x02158718	108	3	0	code
39	0x02158788	142	9	0	code
40	0x02158828	38	4	0	trampoline / small helper
41	0x02158854	10	0	0	trampoline / small helper
42	0x02158868	10	0	0	trampoline / small helper
43	0x0215887c	958	22	0	high-fan-out (likely dispatcher / setup)
44	0x02158c64	28	1	0	trampoline / small helper
45	0x02158c84	12	1	0	trampoline / small helper

Open questions & conflicts

Open questions / unknowns

Auto-analysis identified 45 functions covering 11910 of 13696 overlay bytes.
Function names are auto-generated `FUN_<addr>`. Manual renaming based on call-graph + string-ref analysis is a follow-up.
BSS size is 0 bytes; Ghidra-imported overlay does not include BSS so any references into the BSS range appear as unresolved.

Conflicts with the prior shallow pass

Partial overlap: prior-pass had `['buyitem']`; Ghidra adds `['2d/buyitem.lzs', '2d/itemorderwnd.lzs', 'itemorderwnd']`.

Source

Per-overlay markdown: notes/overlay_knowledgebase/ov003.md
Raw Ghidra dump: notes/overlay_knowledgebase/raw/ov003.json
Overlay-system explainer: overlays system
Plain-English overlay primer: overlay knowledgebase

‹ ov002 All overlays ov004 ›