ov067 β€” overlay detail

DS game only γ¨γ‚“γŒγ‚Šγƒœγ‚¦γ‚·γ¨γŠγ—γ‚ƒγ‚Œγͺまほう぀かい The field guide documents the DS game's internals.

containers: magicpie, ucc/%s.lzs

ov067 ucc

containers: magicpie, ucc/%s.lzs

Header

Numeric metadata for this overlay as read from the overlay table at ROM offset 0x8DE00 (per-entry stride 32 bytes). Function counts, data-item counts, and the call-graph fan-out are from a Ghidra 11.3.1 headless auto-analysis pass.

Overlay ID 67
File ID 67
RAM load address 0x021597a0
RAM size 1,792 bytes (0x700)
BSS size 0 bytes
On-disk compressed size 1,544 bytes
Compression flag 0x1 (BLZ-compressed)
Functions 12
External calls 29
Jump tables 1
Data items 33
Code coverage 57% (1,028 of 1,792 bytes)

Reading the binary

The overlay ships on the cart at file ID 67 under the BLZ code-LZ compression wrapper (the same backward-LZ scheme Nintendo uses for executable ARM9 code). At load time the engine reads the overlay table entry at ROM offset 0x8DE00 + 67 * 0x20, allocates the destination RAM region at 0x021597a0, decompresses the body in-place (if compressed), and resolves any external relocations.

To inspect this overlay outside the running game, decompress overlay/overlay_067.bin with ndspy.codeCompression.decompress() (Python ndspy library) and load the resulting plaintext into Ghidra or IDA at base address 0x021597a0. The raw Ghidra auto-analysis dump used to populate this page lives at notes/overlay_knowledgebase/raw/ov067.json; the per-overlay descriptive markdown is at notes/overlay_knowledgebase/ov067.md.

Embedded strings

No UTF-16 LE strings are embedded directly in this overlay's binary. Any text it displays at runtime comes from a container file loaded via the content cache.

Container references

Distinct container basenames referenced by this overlay. Each is loaded via the content cache by passing the basename string to a lookup that resolves it to a file ID in the ROM's FAT. The path column shows the file's location in the clean extract, where resolved.

Unresolved

These container basenames appeared in the overlay's string table but no file of that name was found in the clean extract. Most are false-positive ASCII matches (function names, register maps, fragments of other strings); a few may be containers that the overlay names but never actually opens. Listed for completeness.

Function list

Functions Ghidra auto-identified inside this overlay's RAM range. Names prefixed FUN_ are auto-generated from the function's entry address; size is in bytes; the "calls" column counts both intra-overlay branches and external ARM9 call targets. The "strings" column counts how many UTF-16 LE strings each function references.

Show all 12 functions
# Address Size Calls Strings Role hint
1 0x021597a0 66 3 0 code
2 0x02159a58 16 0 0 trampoline / small helper
3 0x02159a68 56 5 0 code
4 0x02159aa0 132 5 1 refs: magicpie
5 0x02159b28 66 4 0 code
6 0x02159b6c 154 6 0 code
7 0x02159c0c 62 2 0 code
8 0x02159c50 60 5 0 code
9 0x02159c90 252 5 0 code
10 0x02159d90 44 3 0 code
11 0x02159dbc 108 6 0 code
12 0x02159e30 12 1 0 trampoline / small helper

Open questions & conflicts

Open questions / unknowns

Conflicts with the prior shallow pass

Source