pokemon_pinball_wiki/README.md

Pokemon Spike 3 Rootfs Triage Wiki

Static triage of the extracted Raspberry Pi based root filesystem in this workspace.

High-level Findings

• Product/banner identity: Stern Pinball Spike 3 from /etc/issue.
• OS base: Buildroot 2024.08.1 from /usr/lib/os-release.
• BusyBox: v1.36.1, build string 2025-10-22 11:34:32 EDT.
• CPU/userland target: 64-bit ARM/aarch64. Main ELFs use /lib/ld-linux-aarch64.so.1 and report Linux ABI 6.6.0.
• Kernel module tree: /lib/modules/6.6.28-v8, consistent with Raspberry Pi 64-bit kernel packaging.
• Init system: BusyBox init using /etc/inittab, not systemd.
• Boot sequence: /etc/inittab mounts runtime filesystems and runs /etc/init.d/rcS, which executes every /etc/init.d/S??* script in lexical order.
• Primary application path: /games/game -> /games/pokemon_pro/game.
• Main game payloads:
  • /games/pokemon_pro/game: stripped AArch64 PIE, 52,829,400 bytes.
  • /games/pokemon_pro/conagent: stripped AArch64 PIE, 272,432 bytes.
  • /games/pokemon_pro/image.bin: 1,154,884,359 bytes.
  • /games/pokemon_pro/assets/godot/main.pck: 256,326,416 bytes.
• Game version hint: /games/spk/index/pokemon_pro.sidx -> pokemon_pro-0_83_0.sidx, and release notes are under /games/pokemon_pro/data/.
• SPIKE support package version: /usr/local/spike/VERSION.txt says SPIKE3_secure v1.0.6.

Start Here

• HTML Viewer - self-contained reader with separate research, sound, voice-page, and media searches. Sound results can be previewed and downloaded in place.
• Analysis Evidence Map - compact map from analysis/ datasets to findings, confidence, and follow-up work.
• Artifact Index - hashes and generated artifact inventory.
• Next Analysis Targets - prioritized open work.
• Docker/QEMU Emulation - what currently boots, what is visible, and why the game is not fully playable.

System and Software

• Boot and Init
• Filesystem, Users, and Network
• Applications and Services
• Update and Recovery Flow
• Copy Fail Assessment
• Package, Image, Netbridge, and Firmware Notes

Native Components and Emulators

• Main Game Behavior Notes
• Conagent Reverse Engineering
• Conagent Machine Emulator
• Netbridge Reverse Engineering and Emulator
• Magikarp Topper Serial Key and Emulator
• Docker/QEMU Emulation

Assets and Radium Format

• Godot and Radium Assets
• Audio Asset Search
• Radium Image Format
• Full Sound Export
• Confirmed Native Sound Names
• Native Sound Test Labels
• Catalog-Offset Candidate Sound Labels
• SPIKE Menu Sound Export
• Best-Named Sound Export
• Unresolved Structural Sound Review
• Asset Previews
• Radium Section 3 Bitmap Previews
• Game Asset Spoilers and Possible Unreleased Features

Voice-Line Catalogs

These pages contain generated or inferred labels and are intentionally separated from ordinary research results in the HTML viewer.

• Draft ASR Sound Labels
• Low-Confidence ASR Review Candidates
• Catalog-Matched ASR Sound Labels
• Pokedex Voice Alignment

Notes and Caveats

• Most findings are static filesystem triage. The QEMU page clearly identifies the separate generated guest copy that was executed during emulator development.
• The extracted /boot directory is empty here. /etc/fstab expects /dev/mmcblk0p1 to mount at /boot as read-only VFAT with noauto; the actual boot partition may be a separate extraction artifact.
• I did not copy sensitive values into the wiki. In particular, corefile_passphrase.txt exists and is referenced by the core export script, but its value is intentionally omitted.
• viewer.html and sound-index.json are generated by scripts/build_viewer.py; rebuild after wiki or best-named sound-gallery edits so navigation, search, previews, and downloads stay in sync.