ov043 β€” overlay detail

DS game only γ¨γ‚“γŒγ‚Šγƒœγ‚¦γ‚·γ¨γŠγ—γ‚ƒγ‚Œγͺまほう぀かい The field guide documents the DS game's internals.

containers: 2d/itemstackwnd.lzs, 2d/safe.lzs, safe

ov043 general_2d_ui

containers: 2d/itemstackwnd.lzs, 2d/safe.lzs, safe

Header

Numeric metadata for this overlay as read from the overlay table at ROM offset 0x8DE00 (per-entry stride 32 bytes). Function counts, data-item counts, and the call-graph fan-out are from a Ghidra 11.3.1 headless auto-analysis pass.

Overlay ID 43
File ID 43
RAM load address 0x02155a00
RAM size 13,152 bytes (0x3360)
BSS size 0 bytes
On-disk compressed size 10,800 bytes
Compression flag 0x1 (BLZ-compressed)
Functions 60
External calls 71
Jump tables 5
Data items 317
Code coverage 78% (10,212 of 13,152 bytes)

Reading the binary

The overlay ships on the cart at file ID 43 under the BLZ code-LZ compression wrapper (the same backward-LZ scheme Nintendo uses for executable ARM9 code). At load time the engine reads the overlay table entry at ROM offset 0x8DE00 + 43 * 0x20, allocates the destination RAM region at 0x02155a00, decompresses the body in-place (if compressed), and resolves any external relocations.

To inspect this overlay outside the running game, decompress overlay/overlay_043.bin with ndspy.codeCompression.decompress() (Python ndspy library) and load the resulting plaintext into Ghidra or IDA at base address 0x02155a00. The raw Ghidra auto-analysis dump used to populate this page lives at notes/overlay_knowledgebase/raw/ov043.json; the per-overlay descriptive markdown is at notes/overlay_knowledgebase/ov043.md.

Embedded strings

4 UTF-16 LE strings live inside this overlay's compiled binary. These addresses are absolute (inside the overlay's RAM image after load). The text is stored as little-endian UTF-16 code units, NUL-terminated.

0x02156164 `途頋へ逋`
0x02157602 `γƒŒζ €θ– η ‰ζ² `
0x021576dc `ツ态梑沠`
0x02157c08 `ι „ζΆ‘γšι€„`

Container references

Distinct container basenames referenced by this overlay. Each is loaded via the content cache by passing the basename string to a lookup that resolves it to a file ID in the ROM's FAT. The path column shows the file's location in the clean extract, where resolved.

Unresolved

These container basenames appeared in the overlay's string table but no file of that name was found in the clean extract. Most are false-positive ASCII matches (function names, register maps, fragments of other strings); a few may be containers that the overlay names but never actually opens. Listed for completeness.

Function list

Functions Ghidra auto-identified inside this overlay's RAM range. Names prefixed FUN_ are auto-generated from the function's entry address; size is in bytes; the "calls" column counts both intra-overlay branches and external ARM9 call targets. The "strings" column counts how many UTF-16 LE strings each function references.

Show all 60 functions
# Address Size Calls Strings Role hint
1 0x02155e48 16 0 0 trampoline / small helper
2 0x02155e58 56 1 0 code
3 0x02155e94 1,236 56 0 high-fan-out (likely dispatcher / setup)
4 0x021563c0 16 0 0 trampoline / small helper
5 0x021563d4 12 1 0 trampoline / small helper
6 0x021563e4 12 0 0 trampoline / small helper
7 0x021563f4 12 1 0 trampoline / small helper
8 0x02156404 212 12 3 refs: safe.lzs \| safe.lzs \| safe.lzs
9 0x021564ec 64 5 0 code
10 0x02156530 378 29 0 high-fan-out (likely dispatcher / setup)
11 0x021566c8 96 9 3 refs: safe.lzs \| safe.lzs \| safe.lzs
12 0x0215673c 62 3 0 code
13 0x02156780 362 9 0 code
14 0x02156908 26 0 0 trampoline / small helper
15 0x02156924 712 27 0 high-fan-out (likely dispatcher / setup)
16 0x02156c8c 1,086 34 0 high-fan-out (likely dispatcher / setup)
17 0x02157100 82 2 0 code
18 0x02157158 42 0 0 code
19 0x021571f4 48 2 0 code
20 0x0215722c 128 2 0 code
21 0x021572b4 78 4 0 code
22 0x02157314 406 11 0 code
23 0x021574d4 100 2 0 code
24 0x02157544 104 3 0 code
25 0x021575b4 4 0 0 trampoline / small helper
26 0x021575b8 4 0 0 trampoline / small helper
27 0x021575bc 32 2 0 trampoline / small helper
28 0x021575dc 96 6 0 code
29 0x02157640 204 6 0 code
30 0x02157718 110 8 0 code
31 0x0215779c 92 3 0 code
32 0x02157800 62 5 0 code
33 0x02157848 104 7 0 code
34 0x021578c4 92 3 0 code
35 0x02157928 200 8 0 code
36 0x021579fc 64 1 0 code
37 0x02157a44 674 25 0 high-fan-out (likely dispatcher / setup)
38 0x02157d08 152 7 0 code
39 0x02157db4 108 3 0 code
40 0x02157e28 152 7 0 code
41 0x02157ed4 108 3 0 code
42 0x02157f48 82 1 0 code
43 0x02157fa4 642 26 0 high-fan-out (likely dispatcher / setup)
44 0x02158240 154 6 0 code
45 0x021582e8 106 2 0 code
46 0x02158358 190 3 0 code
47 0x02158428 8 0 0 trampoline / small helper
48 0x02158434 52 2 0 code
49 0x02158470 138 4 0 code
50 0x021584fc 100 4 0 code
51 0x02158568 376 10 0 code
52 0x021586f4 98 1 0 code
53 0x0215876c 78 1 0 code
54 0x021587c4 52 2 0 code
55 0x021587f8 58 3 0 code
56 0x02158838 74 1 0 code
57 0x0215888c 134 4 0 code
58 0x02158924 202 10 0 code
59 0x02158a00 52 2 0 code
60 0x02158a44 12 1 0 trampoline / small helper

Open questions & conflicts

Open questions / unknowns

Conflicts with the prior shallow pass

Source