ov035 — overlay detail · Tongari Boushi Archive

ov035 3d_engine_other

containers: /model/item/Troom.ofs, /model/item/room.ofs, 2d/mealmenu.lzs (+2 more)

Header

Numeric metadata for this overlay as read from the overlay table at ROM offset 0x8DE00 (per-entry stride 32 bytes). Function counts, data-item counts, and the call-graph fan-out are from a Ghidra 11.3.1 headless auto-analysis pass.

Overlay ID 35

File ID 35

RAM load address 0x02155a00

RAM size 9,728 bytes (0x2600)

BSS size 0 bytes

On-disk compressed size 7,660 bytes

Compression flag 0x1 (BLZ-compressed)

Functions 42

External calls 88

Jump tables 2

Data items 177

Code coverage 76% (7,382 of 9,728 bytes)

Reading the binary

The overlay ships on the cart at file ID 35 under the BLZ code-LZ compression wrapper (the same backward-LZ scheme Nintendo uses for executable ARM9 code). At load time the engine reads the overlay table entry at ROM offset 0x8DE00 + 35 * 0x20, allocates the destination RAM region at 0x02155a00, decompresses the body in-place (if compressed), and resolves any external relocations.

To inspect this overlay outside the running game, decompress overlay/overlay_035.bin with ndspy.codeCompression.decompress() (Python ndspy library) and load the resulting plaintext into Ghidra or IDA at base address 0x02155a00. The raw Ghidra auto-analysis dump used to populate this page lives at notes/overlay_knowledgebase/raw/ov035.json; the per-overlay descriptive markdown is at notes/overlay_knowledgebase/ov035.md.

Embedded strings

3 UTF-16 LE strings live inside this overlay's compiled binary. These addresses are absolute (inside the overlay's RAM image after load). The text is stored as little-endian UTF-16 code units, NUL-terminated.

0x0215691a `須逊い逊`

0x02156b1e `逇順ゴ逆`

0x021574b6 `逃぀錁逃姀`

Container references

Distinct container basenames referenced by this overlay. Each is loaded via the content cache by passing the basename string to a lookup that resolves it to a file ID in the ROM's FAT. The path column shows the file's location in the clean extract, where resolved.

mealmenu → data/2d/mealmenu.lzs

Unresolved

These container basenames appeared in the overlay's string table but no file of that name was found in the clean extract. Most are false-positive ASCII matches (function names, register maps, fragments of other strings); a few may be containers that the overlay names but never actually opens. Listed for completeness.

/model/item/Troom.ofs — no matching container found in clean extract
/model/item/room.ofs — no matching container found in clean extract
2d/mealmenu.lzs — no matching container found in clean extract
pc_shop/foodmenu/model_pose_tables.lzs — no matching container found in clean extract

Function list

Functions Ghidra auto-identified inside this overlay's RAM range. Names prefixed FUN_ are auto-generated from the function's entry address; size is in bytes; the "calls" column counts both intra-overlay branches and external ARM9 call targets. The "strings" column counts how many UTF-16 LE strings each function references.

Show all 42 functions

#	Address	Size	Calls	Strings	Role hint
1	0x02155a00	250	11	0	code
2	0x02155b0c	76	9	0	code
3	0x0215603c	4	0	0	trampoline / small helper
4	0x02156040	100	0	0	code
5	0x021560a4	36	4	0	trampoline / small helper
6	0x021560c8	1,024	46	0	high-fan-out (likely dispatcher / setup)
7	0x021564d8	14	2	0	trampoline / small helper
8	0x021564ec	110	6	0	code
9	0x02156568	254	16	0	code
10	0x02156670	20	0	0	trampoline / small helper
11	0x02156684	46	4	0	code
12	0x021566bc	46	4	0	code
13	0x021566f4	116	0	0	code
14	0x0215676c	178	8	0	code
15	0x02156820	56	1	0	code
16	0x0215685c	22	1	0	trampoline / small helper
17	0x02156878	40	2	0	code
18	0x021568a4	18	2	0	trampoline / small helper
19	0x021568bc	10	0	0	trampoline / small helper
20	0x021568d0	10	0	0	trampoline / small helper
21	0x021568e4	228	4	0	code
22	0x021569cc	292	5	0	code
23	0x02156af4	262	14	0	code
24	0x02156bfc	364	22	0	high-fan-out (likely dispatcher / setup)
25	0x02156d74	246	10	0	code
26	0x02156e78	44	0	0	code
27	0x02156ea4	804	43	14	refs: mealmenu \\| mealmenu \\| mealmenu \\| mealmenu \\| mealmenu \\| mealmenu
28	0x02157220	128	15	0	code
29	0x021572bc	446	33	0	high-fan-out (likely dispatcher / setup)
30	0x021574a4	410	31	0	high-fan-out (likely dispatcher / setup)
31	0x0215764c	30	2	0	trampoline / small helper
32	0x02157670	52	1	0	code
33	0x021576ac	44	2	0	code
34	0x021576e0	10	0	0	trampoline / small helper
35	0x021576f4	38	0	0	trampoline / small helper
36	0x02157720	916	36	4	refs: /model/item/room.ofs \\| /model/item/Troom.ofs \\| /model/item/room.ofs \\| /model/item/Troom.ofs
37	0x02157b00	138	4	0	code
38	0x02157b98	70	2	0	code
39	0x02157be4	34	2	0	trampoline / small helper
40	0x02157c08	262	9	0	code
41	0x02157d18	100	6	0	code
42	0x02157d84	34	3	0	trampoline / small helper

Open questions & conflicts

Open questions / unknowns

Auto-analysis identified 42 functions covering 7382 of 9728 overlay bytes.
Function names are auto-generated `FUN_<addr>`. Manual renaming based on call-graph + string-ref analysis is a follow-up.
BSS size is 0 bytes; Ghidra-imported overlay does not include BSS so any references into the BSS range appear as unresolved.

Conflicts with the prior shallow pass

Partial overlap: prior-pass had `['mealmenu']`; Ghidra adds `['/model/item/Troom.ofs', '/model/item/room.ofs', '2d/mealmenu.lzs', 'pc_shop/foodmenu/model_pose_tables.lzs']`.

Source

Per-overlay markdown: notes/overlay_knowledgebase/ov035.md
Raw Ghidra dump: notes/overlay_knowledgebase/raw/ov035.json
Overlay-system explainer: overlays system
Plain-English overlay primer: overlay knowledgebase

‹ ov034 All overlays ov036 ›