ov063 minigame
containers: minigame/npcrunway.lzs, model/meffect/meffect.ofs, model/meffect/mefftex.ofs (+1 more)
Header
Numeric metadata for this overlay as read from the overlay table at ROM
offset 0x8DE00 (per-entry stride 32 bytes). Function
counts, data-item counts, and the call-graph fan-out are from a Ghidra
11.3.1 headless auto-analysis pass.
Reading the binary
The overlay ships on the cart at file ID 63 under the BLZ code-LZ compression wrapper (the same backward-LZ scheme Nintendo uses for executable ARM9 code).
At load time the engine reads the overlay table entry at ROM offset
0x8DE00 + 63 * 0x20, allocates the destination
RAM region at 0x02155a00, decompresses
the body in-place (if compressed), and resolves any external
relocations.
To inspect this overlay outside the running game, decompress
overlay/overlay_063.bin with
ndspy.codeCompression.decompress() (Python ndspy library)
and load the resulting plaintext into Ghidra or
IDA at base address 0x02155a00. The
raw Ghidra auto-analysis dump used to populate this page lives at
notes/overlay_knowledgebase/raw/ov063.json;
the per-overlay descriptive markdown is at
notes/overlay_knowledgebase/ov063.md.
Embedded strings
10 UTF-16 LE strings live inside this overlay's compiled binary. These addresses are absolute (inside the overlay's RAM image after load). The text is stored as little-endian UTF-16 code units, NUL-terminated.
Container references
Distinct container basenames referenced by this overlay. Each is loaded via the content cache by passing the basename string to a lookup that resolves it to a file ID in the ROM's FAT. The path column shows the file's location in the clean extract, where resolved.
-
npcrunwayβdata/minigame/npcrunway.lzs
Unresolved
These container basenames appeared in the overlay's string table but no file of that name was found in the clean extract. Most are false-positive ASCII matches (function names, register maps, fragments of other strings); a few may be containers that the overlay names but never actually opens. Listed for completeness.
-
minigame/npcrunway.lzsβ no matching container found in clean extract -
model/meffect/meffect.ofsβ no matching container found in clean extract -
model/meffect/mefftex.ofsβ no matching container found in clean extract
Function list
Functions Ghidra auto-identified inside this overlay's RAM range.
Names prefixed FUN_ are auto-generated from the function's
entry address; size is in bytes; the "calls" column counts both
intra-overlay branches and external ARM9 call targets. The "strings"
column counts how many UTF-16 LE strings each function references.
Show all 44 functions
| # | Address | Size | Calls | Strings | Role hint |
|---|---|---|---|---|---|
| 1 | 0x02155a00 | 34 | 1 | 0 | trampoline / small helper |
| 2 | 0x02155a24 | 116 | 6 | 1 | refs: npcrunway |
| 3 | 0x02155b30 | 80 | 7 | 0 | code |
| 4 | 0x02155b84 | 30 | 2 | 0 | trampoline / small helper |
| 5 | 0x02155d34 | 12 | 1 | 0 | trampoline / small helper |
| 6 | 0x02155d40 | 166 | 15 | 0 | code |
| 7 | 0x021560e4 | 1,946 | 87 | 3 | refs: minigame/npcrunway.lzs \| model/meffect/meffect.ofs \| model/meffect/mefftex.ofs |
| 8 | 0x02156194 | 160 | 10 | 0 | code |
| 9 | 0x021569de | 48 | 3 | 0 | code |
| 10 | 0x02156a0e | 4 | 0 | 0 | trampoline / small helper |
| 11 | 0x02156a1c | 6 | 0 | 0 | trampoline / small helper |
| 12 | 0x02156a24 | 16 | 0 | 0 | trampoline / small helper |
| 13 | 0x02156a34 | 8 | 0 | 0 | trampoline / small helper |
| 14 | 0x02156d58 | 624 | 33 | 1 | refs: npcrunway |
| 15 | 0x02157000 | 18 | 0 | 0 | trampoline / small helper |
| 16 | 0x02157688 | 74 | 7 | 0 | code |
| 17 | 0x021576d8 | 778 | 44 | 0 | high-fan-out (likely dispatcher / setup) |
| 18 | 0x02157a28 | 24 | 0 | 0 | trampoline / small helper |
| 19 | 0x02157a44 | 110 | 0 | 0 | code |
| 20 | 0x02157abc | 864 | 19 | 0 | code |
| 21 | 0x02157e3c | 16 | 0 | 0 | trampoline / small helper |
| 22 | 0x02157e50 | 18 | 0 | 0 | trampoline / small helper |
| 23 | 0x02157e6c | 10 | 0 | 0 | trampoline / small helper |
| 24 | 0x02157e7c | 12 | 0 | 0 | trampoline / small helper |
| 25 | 0x02157e88 | 354 | 9 | 0 | code |
| 26 | 0x02157fec | 130 | 4 | 0 | code |
| 27 | 0x02158070 | 180 | 5 | 0 | code |
| 28 | 0x02158124 | 110 | 6 | 0 | code |
| 29 | 0x02158194 | 200 | 8 | 0 | code |
| 30 | 0x02158268 | 10 | 0 | 0 | trampoline / small helper |
| 31 | 0x02158274 | 96 | 2 | 0 | code |
| 32 | 0x021582d8 | 232 | 6 | 0 | code |
| 33 | 0x021583c0 | 816 | 22 | 0 | high-fan-out (likely dispatcher / setup) |
| 34 | 0x02158924 | 44 | 0 | 0 | code |
| 35 | 0x02158950 | 12 | 0 | 0 | trampoline / small helper |
| 36 | 0x0215895c | 330 | 10 | 0 | code |
| 37 | 0x02158ab8 | 44 | 0 | 0 | code |
| 38 | 0x02158ae4 | 338 | 8 | 0 | code |
| 39 | 0x02158c54 | 338 | 9 | 0 | code |
| 40 | 0x02158db8 | 468 | 9 | 0 | code |
| 41 | 0x02158f98 | 56 | 1 | 0 | code |
| 42 | 0x02158fd0 | 56 | 1 | 0 | code |
| 43 | 0x02159008 | 52 | 4 | 0 | code |
| 44 | 0x0215903c | 112 | 10 | 0 | code |
Open questions & conflicts
Open questions / unknowns
- Auto-analysis identified 44 functions covering 9152 of 14688 overlay bytes.
- Function names are auto-generated `FUN_<addr>`. Manual renaming based on call-graph + string-ref analysis is a follow-up.
- BSS size is 0 bytes; Ghidra-imported overlay does not include BSS so any references into the BSS range appear as unresolved.
Conflicts with the prior shallow pass
- **Mismatch:** prior-pass `controls_containers` = `['pcrunway']`; Ghidra-extracted containers = `['minigame/npcrunway.lzs', 'model/meffect/meffect.ofs', 'model/meffect/mefftex.ofs', 'npcrunway']`. Ghidra wins.
Source
- Per-overlay markdown:
notes/overlay_knowledgebase/ov063.md - Raw Ghidra dump:
notes/overlay_knowledgebase/raw/ov063.json - Overlay-system explainer: overlays system
- Plain-English overlay primer: overlay knowledgebase