From Vita Development Wiki
Jump to navigation Jump to search

System Controller.


Version World Privilege
1.69-3.60 Non-secure Kernel


Known NIDs

Version Name World Visibility NID
1.69-3.60 SceSysconForDriver Non-secure Kernel 0x60A35F64


#define SCE_KERNEL_ERROR_SYSCON_ERROR     0x80250000
#define SCE_SYSCON_ERROR_INVALID_SIZE     0x80250001

#define SCE_SYSCON_ERROR_ILLEGAL_SIZE     0x80250100
#define SCE_SYSCON_ERROR_NOEXEC           0x80250102
#define SCE_SYSCON_ERROR_INVALID_FLAGS    0x80250105

// Syscon error codes are gotten with 0x80250200 | rx[3], where rx is the data returned by Syscon

typedef struct SceSysconPacket { // size is 0x80
	struct SceSysconPacket *next;
	SceUInt32 status;		// Lower 16 bits contain flags
	SceUID semaId;
	SceUInt32 index;		// Out: returns to which packet list the packet was inserted into
	SceUInt8 tx[32];		// tx[0..1] = cmd, tx[2] = size i.e. sizeof(actual_data)+1, rx[3..31] = actual_data
	SceUInt8 rx[32];		// rx[0..1] = cmd, rx[2] = size i.e. sizeof(actual_data)+2, rx[3] = error_code, rx[4..31] = actual_data
	void *tx_extra;
	void *rx_extra;
	SceSize rx_extra_size;
	SceUInt32 rx_offset;
	int (*callback)(SceSysconPacket *packet, void *argp);
	void *argp;
	SceUInt32 time;
	SceUInt32 unk[5];
} SceSysconPacket;

typedef enum SceSysconControl {
	SCE_SYSCON_CTRL_UP        = 0x1,
	SCE_SYSCON_CTRL_POWER     = 0x4000,
	SCE_SYSCON_CTRL_VOLUP     = 0x10000,
} SceSysconControl;

Flags (passed to sceSysconCmdExecForDriver, etc), also lower bits of status:

Flags Meaning
0x1 Some kind of priority that helps to select to which packet list the packet is inserted into.
0x100 Do not insert packet checksum (at tx_buf[2 + len]), where len = tx_buf[2]. And don't memset the rest of the buffer to -1 (memset(tx_buf + len + 3, -1, 29 - len)) if len < 29.
0x400 When set, use rx_extra to receive the data. rx_extra_size must be greater than 32.
0x800 When set, use tx_extra instead of tx for sending data. The size is contained in tx_extra[2] and must be smaller or equal to 253. When cleared: use tx and the size is contained in tx[2], which has to be smaller or equal 29.



Version NID
0.931-3.60 0x94AB13CC

int sceSysconErnieShutdownForDriver(int mode);


Version NID
0.931-3.60 0x14B99945

Executes SMC 0x11A: return sceSysconSetPowerMode(2, 0);

int sceSysconPowerCtrlKermitResetForDriver(void);


Version NID
0.931-3.60 0x87DA378D

If Syscon version <= 0x70503, it does nothing and returns error 0x8025023F.

int sceSysconBatterySWResetForDriver(void);


Version NID
0.931 not present
3.60 0xF93CF833

Used by ScePower.

int sceSysconGetBatteryFullCapacityForDriver(void *pResult);


Version NID
0.931 not present
3.60 0xCD73079D

Used by ScePower.

int sceSysconGetBatteryCycleCountForDriver(void *pRedsult);


Version NID
0.931-3.60 0x2CEF078E
int sceSysconBatteryStartBLModeForDriver(void);


Version NID
0.931-3.60 0xE4AE7852
int sceSysconBatteryStopBLModeForDriver(void);


Version NID
0.931-3.60 0xE4F29744

BL command (1 byte at most) must be contained in either unk_byte or pSrc.

int sceSysconBatterySetBLCommandForDriver(SceUInt16 ctx, SceUInt8 unk_byte, void *pSrc, SceUInt8 size);


Version NID
0.931-3.60 0x74B2AB55
int sceSysconBatteryExecBLCommandForDriver(SceUInt16 ctx);


Version NID
0.931-3.60 0x448DAFF1
// size must be between 0 and 0x10
int sceSysconBatteryReadBLCommandForDriver(SceUInt16 ctx, SceUInt8 unk1, SceUInt8 unk2, void *pDst, SceUInt8 size);


Version NID
0.931-0.940 not present
3.60 0x4FEC564C
int sceSysconGetManualChargeModeForDriver(int *piMode);


Version NID
0.931-0.940 not present
3.60 0xC6A2C9EF
int sceSysconCtrlManualChargeModeForDriver(int mode);


Version NID
0.931-0.940 not present
3.60 0x701535FC
typedef struct SceSysconLogInfo { // size is 8 on FW 3.60
   uint8_t unk_0[8];
} SceSysconLogInfo;

int sceSysconGetLogInfoForDriver(SceSysconLogInfo *pInfo);


Version NID
0.931-0.940 not present
3.60 0x4E55CF5E
int sceSysconLogStartForDriver(void);


Version NID
0.931-0.940 not present
3.60 0x9C0B1E61
int sceSysconLogStartWaitingForDriver(void);


Version NID
0.931-0.940 not present
3.60 0x487D97F3
int sceSysconLogReadDataForDriver(SceUInt32 offset, void *buffer, SceSize size);


Version NID
0.931-0.940 not present
3.60 0x3B354824


Version NID
0.931-0.940 not present
3.60 0x3843D657


Version NID
0.931-0.940 not present
3.60 0xEF810687


Version NID
0.931 not present
3.60 0x727F985A

This is a guessed name.

#define STATE_ON 0

int sceSysconCtrlDolceLEDForDriver(SceUInt32 state);


Version NID
0.931-3.60 0x4D588A0A

A temp name was sceSysconGetTimeStampForDriver, derived from PSP.

Returns the timestamp of latest installed Syscon FW patch, formatted as YYYYMMDDhhmm. This comes from a string stored in Syscon FW under another format: $Date:: YYYY-MM-DD hh:mm:ss +0900#$

Example: $Date:: 2013-12-13 15:52:05 +0900#$ in Syscon FW becomes 201312131552 in Syscon command 2.

// pTimestamp will point to a buffer of size 0x10 bytes, containing a string of size 13 (12: length + 1: terminal character)
int sceSysconGetBaryonTimestampForDriver(char *pTimestamp);


Version NID
0.931-3.60 0xCF5B2F2F

Result is 2 bytes wakeup factor coming from Syscon command 0x10.

int sceSysconGetWakeupFactorForDriver(SceUInt32 *pWakeupFactor);


Version NID
0.931-3.60 0x62155962

If Syscon version is strictly lower than 0x40000, it does nothing and returns 0.

Sets the pin CDC Hot Plug Detect (HPD) state of the HDMI bridge (AD80244 / ADV7533).

int sceSysconCtrlHdmiCecPowerForDriver(SceBool enable_HDMI_CDC_HPD_pin);


Version NID
0.931-3.60 0x3FDD29D6
int SceSysconForDriver_3FDD29D6(int a1, SceBool use_flag);


Version NID
0.931-3.60 0x7F198FA2

Used by ScePower. when setting a device clock frequency. Maybe set the voltage.

/* device:
1: SetSysClockFrequency, SetDmac5ClockFrequency, SetBusClockFrequency, SetCameraBusClockFrequency
2: SetArmClockFrequency
3: SetGpuClockFrequency, SetVipClockFrequency
4: SetGpuClockFrequencyInternal, SetGpuXbarClockFrequency, SetCompatClockFrequency

unk: 0x8A - (something got from ScePervasiveForDriver)

int SceSysconForDriver_7F198FA2(SceUInt32 device, SceUInt32 unk);


Version NID
0.931-3.60 0x8A95D35C

Temp name was sceSysconResetDeviceForDriver.

int sceSysconSetPowerModeForDriver(int type, int mode);

It issues SMC #0 with r12 = 0x11A.

The mode argument is usually set to 0x2 or sometimes 0x8002 (which seems to correspond to some request by the UDC and BT drivers).

The type argument determines what to do.

Real define names are like: "SCE_SYSCON_POWERMODE_MODE_STANDBY".

Type Description Syscon command
0 Power off {0xC0, 0, 5, type, (~mode) & 0xFF, (~mode >> 8) & 0xFF, (mode >> 16) & 0xFF}
1 Suspend (low-power state) {0xC0, 0, 5, type, (~mode) & 0xFF, (~mode >> 8) & 0xFF, (mode >> 16) & 0xFF}
2 Cold reset {0x01, 8, 1, 0}
3 ?Reset to update mode? {0xC1, 0, 2, 0}
4 ?Reset to update mode? {0xC1, 0, 2, 1}
5 Hibernate {0xC2, 0, 2, 0x5A}
16 ?? {0xC0, 0, 5, type, (~mode) & 0xFF, (~mode >> 8) & 0xFF, (mode >> 16) & 0xFF}
17 Soft reset (suspend and immediately resume) {0xC0, 0, 5, type, (~mode) & 0xFF, (~mode >> 8) & 0xFF, (mode >> 16) & 0xFF}


Version NID
0.931-0.940 not present
0.990-3.60 0x4946538A
int sceSysconEnableHibernateIOForDriver(int a1);


Version NID
0.931-0.940 not present
3.60 0x55DF1C9B

Temp name was sceSysconWaitInitializedForDriver.

int sceSysconWaitReadyForDriver(void);


Version NID
0.931-3.60 0x6E517D22
int sceSysconCmdSyncForDriver(SceSysconPacket *packet, int noWait);


Version NID
0.931-3.60 0x9ADDCA4A
int sceSysconCmdExecForDriver(SceSysconPacket *packet, unsigned int flags);


Version NID
0.931-3.60 0xC2224E82
int sceSysconCmdExecAsyncForDriver(SceSysconPacket *packet, u32 flags, int (*callback)(SceSysconPacket *, void *), void *argp);


Version NID
0.931-3.60 0xBE1ADE4F

If Syscon version is strictly lower than 0x40000, it does nothing and returns 0. Calls Syscon command 0x888.

Enables/disables GameCard reader.

Used by SceSdstor.

// param: 1 = enable SD (GameCard reader) power, 0 = disable SD (GameCard reader) power
int sceSysconCtrlSdPowerForDriver(SceUInt16 param);


Version NID
0.931-0.990 0x4FBDA504
3.60 not present

If Syscon version is strictly lower than 0x40000, it does nothing and returns 0. Calls Syscon command 0x88A.

int sceSysconCtrlWirelessPowerForDriver(SceUInt16 param);


Version NID
0.931-0.940 not present
3.60 0xA2E85DB9

Replacement function for #sceSysconCtrlWirelessPowerForDriver. Calls Syscon command 0x88A.

int sceSysconCtrlWirelessPower2ForDriver(SceUInt16 param);


Version NID
0.931-0.990 0xDF8C6D2D
3.60 not present

If motherboard is not "hardware info third byte 0x10" (probably IRS-001), it does nothing and returns 0, probably because missing hardware. Calls Syscon command 0xB1. Wireless power down might be a button to enable/disable Wireless, a bit like on PSP.

int sceSysconCtrlWirelessPowerDownForDriver(SceUInt16 param);


Version NID
0.931 not present
3.60 0xCC6F90A8

This function is not used by the OS and anyway it would always return error because it calls a command that is not implemented in Syscon FW.

int sceSysconVerifyConfigstorageScriptForDriver(int a1, void *pScript, SceSize size);


Version NID
0.931 not present
3.60 0x89C5CFD6

The OS uses this function to change between modes: IDU mode, Show Mode, no mode. This works by spoofing or rewriting Hardware Info. This is reboot persistent.

int sceSysconLoadConfigstorageScriptForDriver(int a1, void *pScript, SceSize size);


Version NID
0.931 not present
0.990-3.60 0xA4968B8C
int sceSysconBeginConfigstorageTransactionForDriver(void);


Version NID
0.931 not present
0.990-3.60 0x7B9B3617
int sceSysconCommitConfigstorageTransactionForDriver(void);


Version NID
0.931 not present
0.990-3.60 0xFCC3E8EE
int sceSysconEndConfigstorageTransactionForDriver(void);


Version NID
0.931-3.60 0xF245CD6F
/** A set of debug handlers for syscon, that you can set in sceSysconSetDebugHandlersForDriver(). */
typedef struct SceSysconDebugHandlers {
    /** Structure size (probably, unused). */
    s32 size;
    /** Callback ran right before running a packet, with a pointer to it passed as the first argument. */
    void (*start)(SceSysconPacket *packet);
    /** Callback ran right after finishing running a packet, with a pointer to it passed as the first argument. */
    void (*end)(SceSysconPacket *packet);
} SceSysconDebugHandlers;

int sceSysconSetDebugHandlersForDriver(SceSysconDebugHandlers *debug_handlers);


Version NID
0.931-0.940 not present
3.60 0x9ADC9936
int sceSysconGetBatteryCalibDataForDriver(int *piData1, int *piData2, int *piData3, int *piData4);


Version NID
0.931-3.60 0xF492E69E
typedef struct SceKernelTouchpanelDeviceInfo {
  uint16_t FrontVendorID;
  uint16_t FrontFwVersion;
  uint16_t BackVendorID;
  uint16_t BackFwVersion;
} SceKernelTouchpanelDeviceInfo;

int sceSysconGetTouchpanelDeviceInfoForDriver(SceKernelTouchpanelDeviceInfo *pInfo);


Version NID
0.931-0.940 not present
0.990-3.60 0x030D447F

This is a guessed name.

Returns extended panel info.

typedef struct SceKernelTouchpanelDeviceInfo2 {
	uint16_t FrontVendorID;
	uint16_t FrontFwVersion;
	uint16_t FrontUnk1;
	uint8_t FrontUnk2;
	uint8_t FrontUnk3;
	uint16_t unused1;
	uint16_t BackVendorID;
	uint16_t BackFwVersion;
	uint16_t BackUnk1;
	uint8_t BackUnk2;
	uint8_t BackUnk3;
	uint16_t unused2;
} SceKernelTouchpanelDeviceInfo2;

int sceSysconGetTouchpanelDeviceInfo2ForDriver(SceKernelTouchpanelDeviceInfo2 *pInfo);


Version NID
0.931-3.60 0xCBD6D8BC

Returns Hardware Info obtained from Syscon command 0x5.

int sceSysconGetHardwareInfoForDriver(void);


Version NID
0.931-0.940 not present
3.60 0x965C68C3

Returns Hardware Info, ID and Hardware Type obtained from Syscon command 0x6.

// "hwinfo = 0x%08x, id = 0x%llx, hwtype = 0x%08x"
typedef struct SceKernelHardwareInfo2 {
  int hwinfo;
  uint64_t id; // unsure
  int hwtype; // unsure
} SceKernelHardwareInfo2;

int sceSysconGetHardwareInfo2ForDriver(SceKernelHardwareInfo2 *pInfo);


Version NID
0.931-3.60 0xFF86F4C5

Baryon is the PSP Syscon. A more proper name would be Ernie version.

int sceSysconGetBaryonVersionForDriver(void);


Version NID
0.931-3.60 0x0D0B6D25

Maybe exits Syscon Deal DownLoader mode.

int SceSysconForDriver_0D0B6D25(void);


Version NID
0.931-0.940 not present
1.03-3.60 0xEBE3262C

In SceSblPostSsMgr, used just after #sceSysconGetBaryonVersionForDriver.

Returns 8 bits of some Syscon Mode information. Bit 6 (from right) is Syscon DownLoader Mode flag. Bit 3 (from right) is Power Online flag.

SceUInt8 SceSysconForDriver_EBE3262C(void);


Version NID
0.931 not present
3.60 0x9ADD60D2
int sceSysconIsDownLoaderModeForDriver(void);


Version NID
0.931-3.60 0xB7BCC638
int sceSysconIsDealDownLoaderModeForDriver(void);


Version NID
0.931-3.60 0x9DA2A5AB

Returns true iff Syscon information bit 3 (from right) is set. See also #SceSysconForDriver_EBE3262C.

Used by many ScePower functions for example before setting display brightness (to save battery).

SceBool sceSysconIsPowerOnlineForDriver(void);


Version NID
0.931-3.60 0xD2F456DC

Runs Syscon command 0x1100.

void sceSysconGetErnieDLVersionForDriver(int *pVersion);


Version NID
0.931-3.60 0x68E0031E

Battery IC name: if HWinfo > 7 "Abby" else "Bert".

int sceSysconGetBatteryVersionForDriver(SceUInt16 *HWinfo, SceUInt16 *FWinfo, SceUInt16 *DFinfo);


Version NID
0.931-0.940 not present
3.60 0x3E09A1F4

In theory, this function should only be called when Product Mode is already set.

int sceSysconGetManufacturesStatusForDriver(int *piStatus);


Version NID
0.931-3.60 0x299B1CE7

Temp name was sceSysconReadCommandForDriver, sceSysconVsReadDataForDriver.

Calls syscon command 0x90.

Used by SceRtc.

See scratchpad content here

// size: On FW 3.60, must be between 0 and 0x18. On FW 0.931, must be 2, 4 or 8.
// offset: Must be between 0 and 0xFF.
// offset + size must not exceed 0x100
int sceSysconReadScratchPadForDriver(SceUInt32 offset, void *buffer, SceSize size);


Version NID
0.931-3.60 0xE26488B9

Temp name was sceSysconSendCommandForDriver, sceSysconVsWriteDataForDriver.

Calls syscon command 0x91.

Used by SceRtc and ScePower.

// size: On FW 3.60, must be between 0 and 0x18. On FW 0.931, must be 2, 4 or 8.
// offset: Must be between 0 and 0xFF.
// offset + size must not exceed 0x100
int sceSysconWriteScratchPadForDriver(SceUInt32 offset, void *buffer, SceSize size);


Version NID
0.931-3.60 0x81A6060D

Used by sceSblNvsReadDataForKernel and sceSblNvsWriteDataForKernel.

// mode: 0 before NVS read/write
int sceSysconNvsSetRunModeForDriver(int mode);


Version NID
0.931-3.60 0x2EC6D55D
// mode: unk
int sceSysconNvsSetUnkModeForDriver(int mode);


Version NID
0.931-3.60 0xACAFA2B8

Used by sceSblNvsReadDataForKernel and sceSblSsGetNvsDataForDriver.

int sceSysconNvsReadDataForDriver(SceUInt32 offset, void *buffer, SceSize size);


Version NID
0.931-3.60 0x10C9657A

Used by sceSblNvsWriteDataForKernel and sceSblSsSetNvsDataForDriver.

int sceSysconNvsWriteDataForDriver(SceUInt32 offset, void *buffer, SceSize size);


Version NID
0.931-3.60 0x1503D6A0

Returns data obtained by Syscon command 0x103.

int sceSysconGetMultiCnInfoForDriver(SceUInt32 *pInfo);


Version NID
0.931-3.60 0x8AAB6308
// port: 0: for JIG mode, 1 for UART0 logging mode, 0x10000: for normal mode
int sceSysconSetMultiCnPortForDriver(int port);


Version NID
3.60 0x6F586D1A

This is a guessed name.

#define DEVICE_UNK 0x40 // maybe PS button or CP power LED or maybe color (blue)

// unk: SceLedConfig.unk_4

int sceSysconConfigLEDForDriver(int device, SceUInt32 unk);


Version NID
0.931 not present
1.03-3.60 0x9CA6EB70

On motherboards IRT-001 and older, it does nothing and returns 0, probably because missing hardware that could be a LED, else it sends 2 bytes using Syscon command 0x89E.

Used by ScePower#ScePowerForDriver_38415146. Related to LED.

int SceSysconForDriver_9CA6EB70(SceBool state);


Version NID
0.931-3.60 0x8D1D97E8
int sceSysconCtrlAccPowerForDriver(SceBool enable);


Version NID
0.931-3.60 0x59DC5938

Sends 3 bytes to Syscon command 0x89A.

Related to SceUdcd and ScePower.

int sceSysconCtrlUsbStatusForDriver(SceUInt32 value);


Version NID
0.931 not present
3.60 0x710A7CF0

Temp name was sceSysconCtrlMsPowerForDriver.

int sceSysconCtrlRMRPowerForDriver(int enable_power);


Version NID
0.940 not present
3.60 0xB1F88B11

This is a guessed name.

int sceSysconCtrlDevKitUsbPowerForDriver(SceBool enable);


Version NID
0.940 not present
3.60 0x3274A925

This is a guessed name.

int sceSysconCtrlDolceUsbPowerForDriver(SceBool enable);


Version NID
0.931-3.60 0x44A173F5
int sceSysconJigOpenPortForDriver(void);


Version NID
0.931-3.60 0x483FAE05
int sceSysconJigClosePortForDriver(void);


Version NID
0.931-3.60 0xD24BF916
int sceSysconJigSetConfigForDriver(SceUInt8 a1, SceUInt8 a2);


Version NID
0.931 not present
0.990-3.60 0xDECCB2B4

Enables / disables Kermit UART0 output (logs) via Dongle (Jig).

int sceSysconCtrlHostOutputViaDongleForDriver(SceBool enable);


Version NID
0.931-3.60 0x3C80B529
int receive_pm_sm_jig_msg_from_syscon(SceUInt32 offset, SceSize size, void *buf);


Version NID
0.931-3.60 0x7BFBA09E


Version NID
0.931-3.60 0x933D813F

Used just after send_pm_sm_jig_msg_to_syscon or when it fails before.

int send_pm_sm_stop_to_syscon(int a1, int a2, int a3);


Version NID
0.931 not present
3.60 0x956D07CB
int sceSysconIduModeSetForDriver(void);


Version NID
0.931 not present
3.60 0x34574496
int sceSysconIduModeClearForDriver(void);


Version NID
0.931 not present
3.60 0x6D65B70F
int sceSysconShowModeSetForDriver(void);


Version NID
0.931 not present
3.60 0x8D7724C0
int sceSysconShowModeClearForDriver(void);


Version NID
0.931-3.60 0x32418370

index 0 on FWs 0.931-0.940. index 0x24 on FW 3.60.


Version NID
0.931-0.990 0x4DEB8712
3.60 not present

This is a guessed name.

index 5 on FWs 0.931-0.940


Version NID
0.931-3.60 0x3F0DB7C0

index 6 on FWs 0.931-0.940. index 0x10 on FW 3.60.


Version NID
0.931-3.60 0x474A9EA7

This is a temp name.

index 0xC on FWs 0.931-0.940. index 6 on FW 3.60.


Version NID
0.931-0.940 not present
3.60 0x773B8126

index 0x17 on FW 3.60


Version NID
0.931-0.940 not present
3.60 0xA26586B2

This is a temp name.

Registers 2 callbacks (maybe constructor and destructor) for multi-connector OTG.

index 0x25 on FW 3.60

int sceSysconSetMultiCnOtgCallbackForDriver(void *cb_0, void *cb_1);


Version NID
0.931-0.940 not present
3.60 0x67A4CB9F

This is a temp name.

Registers 2 callbacks (maybe constructor and destructor) for mini-USB OTG.

index 0x26 on FW 3.60

int sceSysconSetMiniUsbOtgCallbackForDriver(void *cb_0, void *cb_1);


Version NID
0.931-0.940 not present
3.60 0x4A42712F

This is a temp name.

Registers 2 callbacks (maybe constructor and destructor) for accessory port.

index 0xF on FW 3.60

int sceSysconSetAccCallbackForDriver(void *cb_0, void *cb_1);


Version NID
0.931-3.60 0x9B00BC7F
// segment_no: a 8bit value
int sceSysconUpdaterSetSegmentForDriver(SceUInt32 segment_no);


Version NID
0.931-3.60 0x356B9696
// pSegment: the encrypted segment to load
// unk: maybe segment_no
// size: usually 0x400
int sceSysconUpdaterLoadSegmentForDriver(void *segment, int unk, SceSize size);


Version NID
0.931-3.60 0x734544E4
// pSegment: the encrypted segment to load
// unk: maybe segment_no
// size: usually 0x400
int sceSysconUpdaterLoadSegment2ForDriver(void *segment, int unk, SceSize size);


Version NID
0.931-3.60 0xD27C3D80

Computes checksum to use with sceSysconUpdaterExecProgrammingForDriver. It does not call any Syscon command.

int sceSysconUpdaterCalcChecksumForDriver(void *data, SceSize size, int *checksum);


Version NID
0.931-3.60 0x69AD76E4

Executes programming, i.e writes segments to Syscon Flash memory.

// checksum: value got from sceSysconUpdaterCalcChecksumForDriver
int sceSysconUpdaterExecProgrammingForDriver(int checksum);


Version NID
0.931-3.60 0xB487C2FB

On 3.60 Ernie FW, only updater run mode 0x72BA seems to be actually useful. Modes 0x9A54 and 0x152E are recognized but just returns without doing anything. Mode 0xC5E7 is not recognized by Ernie FW, although it is present on ARM side.

// mode: 0x72BA (0.931-3.60), 0x9A54 (0.931-0.3.60), 0x152E (3.60), 0x3665 (3.60), 0xC5E7 (3.60), 
int sceSysconUpdaterSetRunModeForDriver(int mode);


Version NID
0.931-3.60 0xC7747A63
// digest: sha1 of decrypted concatenated segments, comes from Syscon Update package packet type 0x20
// size: usually 0x14 (sha1 size)
int sceSysconUpdaterExecFinalizeForDriver(void *digest, SceSize size);


Version NID
0.931-0.940 not present
3.60 0xCBA836FF

Sends a 0x18-byte buffer to Syscon command 0x1185. This Syscon command 0x1185 seems to be unimplemented in recent Syscon FWs: it does not do anything.

// size: must be 0x18
int SceSysconForDriver_CBA836FF(void *pBuf, SceSize size);


Version NID
0.931-0.940 not present
1.03-3.60 0xEBDF88B9

Used in SceSblPostSsMgr to read data from SNVS with pm_sm command 8. Also used in SceSblUpdateMgr with update_service_sm commands 0xB0002 and 0xC0002.

// in_size: 0x10
// out_size: 0x30
int snvs_read(void *in_buf, SceSize in_size, void *out_buf, SceSize out_size);


Version NID
0.931-0.940 not present
1.03-3.60 0x63683B9B

Used in SceSblPostSsMgr to write data to SNVS with pm_sm command 8. Also used in SceSblUpdateMgr with update_service_sm commands 0xB0002 and 0xC0002.

// in_size: 0x30
// out_size: 0x10
int snvs_write(void *in_buf, SceSize in_size, void *out_buf, SceSize out_size);


Version NID
0.931-0.940 not present
3.60 0x4D03754A

Calls Syscon command 0xD0.

Used in SceSblUpdateMgr with update_service_sm command 0xD0002.

// in_buf: buffer that embeds input data, usually 0xD0002 command request + 8
// in_size: usually 0x28
// out_buf: buffer to receive result, usually 0xD0002 command request + 0x30
// out_size: usually 0x28
int syscon_update_command_0xD00002(void *in_buf, SceSize in_size, void *out_buf, SceSize out_size);


Version NID
0.931-3.60 0x901D6CD4

Sets a flag used internally by SceSyscon.

Used by SceCtrl, ScePower.

int SceSysconForDriver_901D6CD4(int enable);


Version NID
0.931-3.60 0x145F59A4

This is a guessed name.

See Boot Controls Info.

Runs syscon command 0x100.

int sceSysconGetControlsInfoForDriver(SceUInt32 *pCtrl);


Version NID
0.931-0.940 not present
3.60 0x76272CB9

Gets a 4 byte value.

Runs syscon command 0x120.

int SceSysconForDriver_76272CB9(SceUInt32 *unk);


Version NID
0.931-3.60 0xD7BEFF8B

Gets Syscon power on time in ticks of 0.5 second. Each second the counter automatically increases by 2.

Calls Syscon command 0x11.

Used to calculate the current time and date.

int SceSysconForDriver_D7BEFF8B(SceUInt32 *puiTime);


Version NID
0.931-3.60 0x3168F3AF

Calls Syscon command 0x12.

It is an alarm timer. It must be initialized using Syscon command 0x82 via #SceSysconForDriver_51164951.

// FW 0.931
int SceSysconForDriver_3168F3AF(SceUInt32 *pResult);

// FW 3.60
int SceSysconForDriver_3168F3AF(SceUInt32 *pResult, SceUInt32 *pResult2);


Version NID
0.931-0.940 not present
3.60 0xBA09F171

Calls Syscon command 0x13.

It might be related to alarm/timer.

int SceSysconForDriver_BA09F171(SceUInt32 *pResult, SceUInt32 *pResult2);


Version NID
0.931-3.60 0x9B6A6F64

Calls Syscon command 0x81.

Sets current Syscon power on time in ticks of 0.5 second. The set value can be get with #SceSysconForDriver_D7BEFF8B.

Used by SceRtc. Set to 0 just before setting Current Tick, to reset syscon power on time.

int SceSysconForDriver_9B6A6F64(SceUInt32 time);


Version NID
0.931-3.60 0x51164951

Calls Syscon command 0x82. On Syscon version < 0x90907, 4 bytes are sent to Syscon, whilst on Syscon version >= 0x90907, 5 bytes are sent to Syscon.

Used by SceRtc#sceRtcSetAlarmTickForDriver.

The set value can be get with #SceSysconForDriver_3168F3AF.

// a1: seen value: 0xffffffff during Syscon Init
// a2: some 8-bit flag, seen value: 0 during Syscon Init

// FW 0.931
int SceSysconForDriver_51164951(int a1);

// FW 3.60
int SceSysconForDriver_51164951(int a1, int a2);


Version NID
0.931 not present
3.60 0x373ECF8A

Calls Syscon command 0x83. Sends 3 bytes to Syscon. Used only if Hardware Info indicates that the motherboard is not IRT-001 or IRT-002 or type 0x10 (maybe named IRS-001) and if console is not in manufacturing mode.

int SceSysconForDriver_373ECF8A(SceUInt32 unk);


Version NID
0.931 not present
3.60 0x2659535C

Calls Syscon command 0x84. Sends 1 byte to Syscon: 0.

int SceSysconForDriver_2659535C(void);


Version NID
0.931 not present
3.60 0x4295D497

Calls Syscon command 0x85. Sends 1 byte to Syscon: 0.

int SceSysconForDriver_4295D497(void);


Version NID
0.931 not present
3.60 0x253CC522

Calls Syscon command 0x807. Gets 2 bytes from Syscon.

On DevKit, it returned 0x8025023F. Maybe limited by model.

int SceSysconForDriver_253CC522(SceUInt16 *pResult);


Version NID
0.931-3.60 0x175CE5A1

Calls Syscon command 0x883. Gets 8 bytes from Syscon.

// pDst: pointer to a buffer of at least 8 bytes
int SceSysconForDriver_175CE5A1(void *pDst);


Version NID
0.931-3.60 0x40FF3898

Sends 2 bytes to Syscon command 0x88F.

0xC/0 : Touch Front or Back device

0xC/1 : Touch Front or Back device

int sceSysconCtrlDeviceResetForDriver(SceUInt8 a1, SceUInt8 a2);


Version NID
0.931-3.60 0x285594F8

Sends 2 bytes to Syscon command 0x890.

int SceSysconForDriver_285594F8(SceUInt16 value);


Version NID
0.931-3.60 0x04EC7579
#define STATE_ON 1
#define STATE_OFF 0

#define DEVICE_UNK 0x40 // maybe PS button or CP power LED or maybe color (blue)

int sceSysconCtrlLEDForDriver(SceUInt16 device, SceBool state);


Version NID
0.931-3.60 0x596B17B7

Sends 2 bytes to Syscon command 0x892. Related to Battery. Maybe enables/disables battery charging.

Used by ScePower.

int SceSysconForDriver_596B17B7(SceBool enable);


Version NID
0.931-3.60 0x2A4B0437

Sends 3 bytes to Syscon command 0x893. Related to Battery. Maybe enables/disables battery charging.

Used by ScePower.

// a1: ex: 0, 1
// a2: ex: 0, 1

// FW 0.931
int SceSysconForDriver_2A4B0437(SceUInt32 a1);

// FW 3.60
int SceSysconForDriver_2A4B0437(SceUInt32 a1, SceUInt32 a2);


Version NID
0.931-3.60 0x5CDDA14D

If Syscon version < 0x80001, it does nothing and returns 0, else it sends 2 bytes to Syscon command 0x899.

Related to SceHpremote. Maybe enables/disables Jack power.

Used by ScePower.

int SceSysconForDriver_5CDDA14D(SceUInt32 value);


Version NID
0.931-3.60 0xA2FE9BF9

Gets info related to battery charge status, or USB power connection. See also Ernie#CMD_0x0800.

Used by ScePower.

int SceSysconForDriver_A2FE9BF9(void *pResult);


Version NID
0.931-3.60 0x9070F139

If Syscon version <= 0x70503, it calls Syscon command 0x8A0, else Syscon command 0x981.

Used by ScePower.

int sceSysconGetBatteryTempForDriver(int *pResult);


Version NID
0.931-3.60 0xC562AF3A

Only used by ScePower.

If Syscon version <= 0x70503, it calls Syscon command 0x802, else Syscon command 0x900.

int sceSysconGetBatteryRemainCapacityForDriver(SceUInt32 *pResult);


Version NID
0.931-3.60 0x03F11220

If Syscon version <= 0x70503, it calls Syscon command 0x803, else Syscon command 0x901.

Used by ScePower.

int sceSysconGetBatteryVoltForDriver(SceUInt32 *pResult);


Version NID
0.931 not present
3.60 0xAD0A8275

Used by ScePower.

int sceSysconGetBatteryLifePercentForDriver(SceUInt32 *pResult);


Version NID
0.931-2.50 not present
3.60 0x26F9D729

Only used if Syscon version >= 0x1040105.

Used by ScePower.

int sceSysconGetBatteryRemainLevelForDriver(SceUInt8 *pResult1, SceUInt8 *pResult2);


Version NID
0.931 0x00A65FC1
0.990-3.60 not present

If Syscon version <= 0x70503, it calls Syscon command 0x8A1, else Syscon command 0x982.

Used by ScePower.

int SceSysconForDriver_00A65FC1(int *pResult);


Version NID
0.931-3.60 0x0826BA07

If Syscon version <= 0x70503, it calls Syscon command 0x8A2, else Syscon command 0x983.

Used by ScePower.

int sceSysconGetBatteryElecForDriver(SceUInt16 *pResult);


Version NID
0.931-3.60 0xB841C141

If Syscon version <= 0x70503, it calls Syscon command 0x8A3, else Syscon command 0x984.

Used by ScePower.

int sceSysconGetBatteryLifeTimeForDriver(SceUInt16 *pResult);


Version NID
0.931-3.60 0x91D3B7A3

If Syscon version <= 0x70503, it calls Syscon command 0x8A4, else Syscon command 0x985.

Used by ScePower.

int sceSysconGetBatterySOHForDriver(void *pResult);


Version NID
0.931-3.60 0xFDB3AE9D

Gets 0x10 bytes from Syscon command 0x183.

int SceSysconForDriver_FDB3AE9D(int *pResult);


Version NID
0.931-3.60 0xC3504ADE

Gets a global variable.

int SceSysconForDriver_C3504ADE(void);


Version NID
0.931-3.60 0xB832B72C

Gets a global variable.

int SceSysconForDriver_B832B72C(void);


Version NID
0.931-3.60 0x86BAAF7D

Returns a 8-bit global variable casted to 32-bit for convenience.

Used by SceRtc.

int SceSysconForDriver_86BAAF7D(void);


Version NID
0.931-3.60 0xA57B5433
int SceSysconForDriver_A57B5433(void);


Version NID
0.931-3.60 0xACC7F71E
int SceSysconForDriver_ACC7F71E(void);


Version NID
0.931-3.60 0x769F9AC4

Returns a global variable initialized during SceSyscon initialization. Returns always SCE_TRUE (1) on PS TV.

int SceSysconForDriver_769F9AC4(void);


Version NID
0.931-3.60 0x4BC63A40
int SceSysconForDriver_4BC63A40(void);


Version NID
0.931-3.60 0x99A254A9
int SceSysconForDriver_99A254A9(void);


Version NID
0.931-0.940 not present
3.60 0x9A4F4B7C
int SceSysconForDriver_9A4F4B7C(void);


Version NID
0.931-0.940 not present
3.60 0x92D2C6A4
int SceSysconForDriver_92D2C6A4(void);


Version NID
0.931-0.940 not present
3.60 0xB9EA2FA8

Only used by SceUsbServ.

int SceSysconForDriver_B9EA2FA8(void);


Version NID
0.931-3.60 0xD7F5A797

Only used by ScePower.

int SceSysconForDriver_D7F5A797(void);


Version NID
0.931-3.60 0x29CF4335
int SceSysconForDriver_29CF4335(void);


Version NID
0.931-3.60 0x32B2DB3D
int SceSysconForDriver_32B2DB3D(void);


Version NID
0.931-3.60 0x142D5E82
int SceSysconForDriver_142D5E82(void);


Version NID
0.931-3.60 0x490C5548
int SceSysconForDriver_490C5548(void);


Version NID
0.931 not present
0.940-3.60 0x012B57B3
int SceSysconForDriver_012B57B3(void);


Version NID
0.931-0.940 not present
3.60 0x27758A64
int SceSysconForDriver_27758A64(void);


Version NID
0.931-0.940 not present
3.60 0x4A184B7C

Related to battery, called by ScePower#ScePowerForDriver_627A89C6.

int SceSysconForDriver_4A184B7C(void);


Version NID
0.931-0.940 not present
3.60 0xACEE1C70

Related to battery. Only used when battery is working.

Used by ScePower#ScePowerForDriver_0D56C601.

int SceSysconForDriver_ACEE1C70(void);


Version NID
0.931-0.940 not present
3.60 0x03C50DC3
int SceSysconForDriver_03C50DC3(void);


Version NID
0.931-0.940 not present
3.60 0xBFDA5590
int SceSysconForDriver_BFDA5590(void);


Version NID
0.931-0.940 not present
3.60 0x63B14156
int SceSysconForDriver_63B14156(void);


Version NID
0.931-0.940 not present
3.60 0x50CAE242
int SceSysconForDriver_50CAE242(void);


Version NID
0.931-0.940 not present
3.60 0x9F4042F8
int SceSysconForDriver_9F4042F8(void);


Version NID
0.931-0.940 not present
3.60 0xC50568E9
int SceSysconForDriver_C50568E9(void);


Version NID
0.931-0.940 not present
3.60 0x1A0C140F

used by scePowerIsLowBatteryInhibitUpdateReboot

int sceSysconIsLowBatteryInhibitUpdateRebootForDriver(void);


Version NID
0.931-0.940 not present
3.60 0x1E3130EE

used by scePowerIsLowBatteryInhibitUpdateDownload

int sceSysconIsLowBatteryInhibitUpdateDownloadForDriver(void);


Version NID
0.931-0.940 not present
3.60 0xC0F215B7

Gets a global variable (one byte) updated by #sceSysconCmdSyncForDriver.

int SceSysconForDriver_C0F215B7(void);


Version NID
0.931-0.940 not present
3.60 0xD6F6D472

Gets electric information (maybe intensity) of the device connected to USB OTG on Slim PS Vita.

Returns a global variable updated by #sceSysconCmdSyncForDriver, obtained using Syscon command 0x130.

int SceSysconForDriver_D6F6D472(int *pInfo);


Version NID
0.931-0.940 not present
3.60 0xE7893732

Calls Syscon command 0x1B0. Related to UART, JIG or MultiCn.

// value holds 3 useful bytes and 1 byte not sent to syscon
int SceSysconForDriver_E7893732(int value);


Version NID
0.931-3.60 0xA039B563

Calls Syscon command 0x880.

int SceSysconForDriver_A039B563(SceUInt32 *pResult);


It seems like the command format is as follows: (direction << 8) | cmd_id, where direction = 1 means write to syscon, and direction = 0 means read from syscon.

Command Return size (without considering the 2 bytes rx.size and rx.error_code) Functions NIDs Description
0x0 0x0 0x0D0B6D25
0x1 0x4 module_start sceSysconGetBaryonVersionForDriver. Used during SysconInit.
0x2 0xC module_start sceSysconGetBaryonTimestampForDriver. Returns 12-byte string followed by at least 2-byte memory leak. Used during SysconInit.
0x3 0x4 module_start sceSysconGetSleepFactor. Used during SysconInit.
0x4 0x4
0x5 0x4 0xCBD6D8BC, module_start sceSysconGetHardwareInfoForDriver
0x6 0x10 0x965C68C3, module_start sceSysconGetHardwareInfo2ForDriver. Get "Hardware flags". See KBL Param#Hardware flags.
0x10 0x2 0xCF5B2F2F sceSysconGetWakeupFactorForDriver
0x11 0x4 0xD7BEFF8B ??
0x12 0x5 or 0x6 0x3168F3AF ??
0x13 0x2 0xBA09F171 ??
0x14 0x1 0x93075DD1 ??
0x15 0x4 0x3E09A1F4 sceSysconGetManufacturesStatusForDriver
0x80 0x0 module_start ?? Used during SysconInit.
0x81 ? 0x9B6A6F64
0x82 ? 0x51164951
0x83 ? 0x373ECF8A Sends 3 bytes to Syscon.
0x84 ? 0x2659535C Sends 1 byte to Syscon.
0x85 ? 0x4295D497
0x86 8 0x701535FC sceSysconGetLogInfoForDriver
0x87 0 0x4E55CF5E sceSysconLogStartForDriver. Sends 1 byte to Syscon: 0.
0x88 0x18 0x487D97F3 sceSysconLogReadDataForDriver. Sends 2 bytes to Syscon: offset.
0x89 0 0x9C0B1E61 sceSysconLogStartWaitingForDriver. Sends 1 byte to Syscon: 0.
0x90 ?0x3B? 0x299B1CE7 sceSysconReadScratchPadForDriver
0x91 ?0x3B? 0xE26488B9 sceSysconWriteScratchPadForDriver
0xA0 ?0x10 or 0x28? second_loader See Ernie Secure.
0xB0 0 0x058941D7 Probably a control command. Sends 2 bytes to Syscon.
0xB1 ? 0xDF8C6D2D sceSysconCtrlWirelessPowerDownForDriver
0xB2 0 0xDECCB2B4 sceSysconCtrlHostOutputViaDongleForDriver. Sends 2 bytes to Syscon.
0xB3 ? 0x33B5CDB3 ??
0xB4 ? 0xF6D4DDC4 ??
0xB5 0 0x00AE3AEB Probably a control command. Sends 2 bytes to Syscon.
0xB6 0 0x0D300158 Probably a control command. Sends 2 bytes to Syscon.
0xB7 ? 0x91EF4EC3 ??
0xC0 ?0x3E?
0xC1 0 0x94AB13CC sceSysconErnieShutdownForDriver. Sends 2 bytes to Syscon.
0xD0 ?0x2A or 0x28?
0xD1 ?0x2?
0xD2 ?0x30? second_loader, SNVS functions See Ernie Secure. SNVS RW.
0xD3 ?0x12?
0x100 0x4 0x145F59A4 sceSysconGetControlsInfoForDriver. Used in SceCtrlVblankHandler in SceCtrl.
0x101 0x8 sceSysconGetControlsInfo2ForDriver. Used in SceCtrlVblankHandler in SceCtrl. Uses Ernie version and Ernie DL version.
0x102 0xC
0x103 0x4 0x1503D6A0 sceSysconGetMultiCnInfoForDriver
0x104 0xC sceSysconGetControlsInfo3ForDriver. Used in SceCtrlVblankHandler in SceCtrl.
0x105 ? Uses string "PS" then "TUV".
0x106 ?
0x107 ?
0x108 ?
0x109 ?
0x110 ?
0x120 ? 0x76272CB9 ??
0x121 ?
0x130 0x4 module_start, 0xD6F6D472 Get USB OTG device electric info (maybe intensity). Used during SysconInit.
0x131 ?0x1? 0xF99BC858 ?? Added on a FW higher than 2.50.
0x140 ?
0x141 ?
0x142 ?
0x143 ?
0x144 ?
0x145 ?
0x146 ?
0x147 ?
0x148 ?
0x150 ?
0x151 ?
0x152 ?
0x153 ?
0x154 ?
0x155 ?
0x156 ?
0x157 ?
0x160 ?
0x161 ?
0x162 ?
0x163 ?
0x168 ?
0x170 ?
0x171 ?
0x172 ?
0x180 ? Set analog sampling. Sends 2 bytes to Syscon: 0 to disable, 1 to enable on Syscon version is < 0x90202, 3 to enable on Syscon version is >= 0x90202. Used in SceCtrlVblankHandler in SceCtrl.
0x181 0 0xCFCEE733 Sends 2 bytes to Syscon.
0x182 ?
0x183 0x10 0xFDB3AE9D Gets some info.
0x184 ?
0x185 ?
0x186 ?
0x187 ?
0x188 ?
0x189 ?
0x18A ?
0x18B ?
0x18C ?
0x18D ?
0x18E ?
0x18F ?
0x190 0 0x8AAB6308 sceSysconSetMultiCnPortForDriver. Sends 3 bytes to Syscon.
0x191 ?
0x192 ?
0x1A0 ?
0x1A1 ?
0x1B0 0 0xE7893732 Sends 3 bytes to Syscon.
0x1B2 ?
0x1C0 ?
0x1C1 ?
0x1C2 ?
0x1C3 ?
0x1C4 ?
0x1D0 ?
0x1D1 ?
0x1D2 ?
0x1D3 ?
0x1D4 ?
0x1D5 ?
0x1E0 ?
0x1E1 ?
0x1E2 ?
0x1E3 ?
0x300 ?
0x301 ?
0x303 ?
0x380 ? 0xF492E69E sceSysconGetTouchpanelDeviceInfoForDriver
0x38A ? 0xA1F1B973 ??
0x390 ? 0x030D447F sceSysconGetTouchpanelDeviceInfo2ForDriver
0x392 ? 0x48ED8981, 060E55C1
0x393 ? 0x9A28BEEF, 0x8874EF45 used in SceSblUpdateMgr
0x3A9 0 0x010F95D9 Sends 1 byte to Syscon.
0x3AB ? 0x357CC9D9
0x3AC ? 0x3664E2C0 ??
0x3AF ? 0xB8F4F4E3
0x3B9 ? 0x42E599AC
0x3BB ? 0xCCA56A16
0x3BC ? 0x2E6D97CD ??
0x3BF ? 0x240A604E
0x3C2 ? 0x5946B29B, 0x10327C64 used in SceSblUpdateMgr
0x480 ? 0xD01E64FC ??
0x481 ? 0x9A7858B6 ??
0x800 ?0x4? 0xA2FE9BF9 SceSysconForDriver_A2FE9BF9. ScePower related.
0x801 0x0 ??
0x802 ?0x4? 0xC562AF3A sceSysconGetBatteryRemainCapacityForDriver. Replaced by Syscon command 0x900 on Syscon version > 0x70503.
0x803 0x4 0x03F11220 sceSysconGetBatteryVoltForDriver. Replaced by Syscon command 0x901 on Syscon version > 0x70503.
0x804 ? ??
0x805 ?0x0? 0xEF810687 sceSysconGetUsbDetStatusForDriver
0x806 ?0x1? 0xE7F5D3DC Reboots Vita?
0x807 0x2 0x253CC522 ??
0x820 0x0 0x727F985A sceSysconCtrlDolceLEDForDriver. PSTV LED on
0x821 0x0 0x727F985A sceSysconCtrlDolceLEDForDriver. PSTV LED blink slow
0x822 0x0 0x727F985A sceSysconCtrlDolceLEDForDriver. PSTV LED blink fast
0x840 ?0x1? 0x4FEC564C sceSysconGetManualChargeModeForDriver
0x841 ?0x1? 0x3C3B949C ??
0x842 ?0x1? 0x1C29C00E ??
0x843 ?0x1? 0x730E4725 ??
0x880 0x4 0xA039B563 ??
0x881 ? 0x9BF78047 ??
0x882 0x6 0x68E0031E sceSysconGetBatteryVersionForDriver. Replaced by Syscon command 0x980 on Syscon version > 0x70503.
0x883 0x8 0x175CE5A1 ??
0x884 ? 0x3FDD29D6 ??
0x885 ? 0x79E6DD8B ??
0x886 ?0x2? 0x62155962 sceSysconCtrlHdmiCecPowerForDriver
0x887 ? 0x063425AE maybe sceSysconCtrlMotionSensorPowerForDriver
0x888 ?0x2? 0xBE1ADE4F sceSysconCtrlSdPowerForDriver
0x889 ?0x2? 0x8D1D97E8 sceSysconCtrlAccPowerForDriver
0x88A ? 0x4FBDA504, 0xA2E85DB9 sceSysconCtrlWirelessPowerForDriver, sceSysconCtrlWirelessPower2ForDriver
0x88B ? 0x5A614349 ??
0x88C ? 0xB872E904 ??
0x88D ? 0xDD16ABD9 ??
0x88E ?0x2? 0x7F198FA2 Maybe related to clock frequency. See Ernie#CMD_0x088E.
0x88F ?0x2? 0x40FF3898 sceSysconCtrlDeviceResetForDriver. ?UsbEtherSmsc and WlanBt related?
0x890 ? 0x285594F8 ??
0x891 ?0x2? 0x04EC7579 sceSysconCtrlLEDForDriver
0x892 ?0? 0x596B17B7 SceSysconForDriver_596B17B7. ScePower related.
0x893 ?0? 0x2A4B0437 SceSysconForDriver_2A4B0437. ScePower related.
0x899 ?0? 0x5CDDA14D ?Guessed name: sceSysconCtrlHpremoteForDriver? SceHpremote related.
0x89A ?0? 0x59DC5938 sceSysconCtrlUsbStatusForDriver
0x89B ?0x2? 0x710A7CF0 sceSysconCtrlRMRPowerForDriver
0x89C ?0x2? 0xB1F88B11 sceSysconCtrlDevKitUsbPowerForDriver. SceUsbServ related.
0x89D ? 0x6F586D1A sceSysconConfigLEDForDriver
0x89E ? 0x9CA6EB70 ScePower related
0x89F ? 0xCB41B531 ??
0x8A0 ?0x4? 0x9070F139 sceSysconGetBatteryTempForDriver. Replaced by Syscon command 0x981 on Syscon version > 0x70503.
0x8A1 ?0x3B or 0x4? 0x00A65FC1 Replaced by Syscon command 0x982 on Syscon version > 0x70503. ScePower related.
0x8A2 0x2 0x0826BA07 sceSysconGetBatteryElecForDriver. Replaced by Syscon command 0x983 on Syscon version > 0x70503.
0x8A3 ?0x4? 0xB841C141 sceSysconGetBatteryLifeTimeForDriver. Replaced by Syscon command 0x984 on Syscon version > 0x70503.
0x8A4 ?0x4? 0x91D3B7A3 sceSysconGetBatterySOHForDriver. Replaced by Syscon command 0x985 on Syscon version > 0x70503.
0x8B0 ? 0x2CEF078E / 0x4946538A sceSysconBatteryStartBLModeForDriver. Replaced by Syscon command 0x9B0 on Syscon version > 0x70503. Since FW 0.940, it is also sceSysconEnableHibernateIOForDriver independently of Syscon version.
0x8B1 ? 0xE4AE7852 sceSysconBatteryStopBLModeForDriver. Replaced by Syscon command 0x9B1 on Syscon version > 0x70503.
0x8B2 ? 0xE4F29744 sceSysconBatterySetBLCommandForDriver. Replaced by Syscon command 0x9B2 on Syscon version > 0x70503.
0x8B3 ? 0x74B2AB55 sceSysconBatteryExecBLCommandForDriver. Replaced by Syscon command 0x9B3 on Syscon version > 0x70503.
0x8B4 ? 0x448DAFF1 sceSysconBatteryReadBLCommandForDriver. Replaced by Syscon command 0x9B4 on Syscon version > 0x70503.
0x8C0 ? 0xC6A2C9EF sceSysconCtrlManualChargeModeForDriver
0x8C5 ?0x2? 0x3274A925 sceSysconCtrlDolceUsbPowerForDriver. SceUsbServ and SceUsbEtherSmsc related.
0x8C6 ? 0xDFB024C4 SceSblUpdateMgr related
0x8C7 ? 0x87FF8041 ??
0x8C8 ? 0x7BFA95DA ??
0x8C9 ? 0x451C1662 ??
0x8CA ? 0x79074DE4 ??
0x8CB ? 0x7D25F6D2 ??
0x8CC ? 0xD2ADABCA ??
0x8CE 0x10 0x3B354824 sceSysconGetTemperatureLog
0x8CF 0 0x3843D657 sceSysconClearTemperatureLog. Sends 2 bytes to syscon.
0x8D0 ? 0xF87679EE ??
0x900 ?0x4? 0xC562AF3A sceSysconGetBatteryRemainCapacityForDriver. Replaces Syscon command 0x802 on Syscon version > 0x70503.
0x901 0x4 0x03F11220 sceSysconGetBatteryVoltForDriver. Replaces Syscon command 0x803 on Syscon version > 0x70503.
0x902 ?0x4? 0xAD0A8275 sceSysconGetBatteryLifePercentForDriver
0x903 0x2 0x26F9D729 sceSysconGetBatteryRemainLevelForDriver. Added on a FW higher than 2.50 and Syscon version >= 0x1040105.
0x904 ? 0x9ADC9936 sceSysconGetBatteryCalibDataForDriver
0x910 ?
0x911 ?
0x912 ?
0x913 ?
0x914 ?
0x915 ?
0x916 ?
0x917 ?
0x932 ?
0x944 ?
0x945 ?
0x952 ? Uses string "PC" then "TUV".
0x953 ?
0x954 ?
0x961 ?
0x962 ?
0x963 ?
0x964 ?
0x965 ?
0x966 ?
0x967 ?
0x968 ?
0x969 ?
0x980 0x6 0x68E0031E sceSysconGetBatteryVersionForDriver. Replaces Syscon command 0x882 on Syscon version > 0x70503.
0x981 ?0x4? 0x9070F139 sceSysconGetBatteryTempForDriver. Replaces Syscon command 0x8A0 on Syscon version > 0x70503.
0x982 ?0x4? 0x00A65FC1 Replaces Syscon command 0x8A1 on Syscon version > 0x70503. ScePower related.
0x983 0x2 0x0826BA07 sceSysconGetBatteryElecForDriver. Replaces Syscon command 0x8A2 on Syscon version > 0x70503.
0x984 ?0x4? 0xB841C141 sceSysconGetBatteryLifeTimeForDriver. Replaces Syscon command 0x8A3 on Syscon version > 0x70503.
0x985 ?0x4? 0x91D3B7A3 sceSysconGetBatterySOHForDriver. Replaces Syscon command 0x8A4 on Syscon version > 0x70503.
0x989 ? 0x87DA378D sceSysconBatterySWResetForDriver
0x98A ?0x4? 0xF93CF833 sceSysconGetBatteryFullCapacityForDriver
0x98B ? 0xE1885F68 ??
0x98C ?0x4? 0xCD73079D sceSysconGetBatteryCycleCountForDriver
0x9B0 ? 0x2CEF078E sceSysconBatteryStartBLModeForDriver. Replaces Syscon command 0x8B0 on Syscon version > 0x70503.
0x9B1 ? 0xE4AE7852 sceSysconBatteryStopBLModeForDriver. Replaces Syscon command 0x8B1 on Syscon version > 0x70503.
0x9B2 ? 0xE4F29744 sceSysconBatterySetBLCommandForDriver. Replaces Syscon command 0x8B2 on Syscon version > 0x70503.
0x9B3 ? 0x74B2AB55 sceSysconBatteryExecBLCommandForDriver. Replaces Syscon command 0x8B3 on Syscon version > 0x70503.
0x9B4 ? 0x448DAFF1 sceSysconBatteryReadBLCommandForDriver. Replaces Syscon command 0x8B4 on Syscon version > 0x70503.
0xA00 0x0 ??
0xA82 ? 0x7BAFE083 ??
0x1080 ?0x0 or 0x2? 0x81A6060D sceSysconNvsSetRunModeForDriver
0x1081 ?0x0 or 0x2? 0x2EC6D55D sceSysconNvsSetUnkModeForDriver
0x1082 ? 0xACAFA2B8 sceSysconNvsReadDataForDriver
0x1083 ?0x2? 0x10C9657A sceSysconNvsWriteDataForDriver
0x1100 0x4 0xD2F456DC sceSysconGetErnieDLVersionForDriver
0x1101 0x4
0x1180 ? 0x9B00BC7F sceSysconUpdaterSetSegmentForDriver
0x1181 ? 0x356B9696, 0x734544E4 sceSysconUpdaterLoadSegmentForDriver, sceSysconUpdaterLoadSegment2ForDriver
0x1182 ? 0x69AD76E4 sceSysconUpdaterExecProgrammingForDriver
0x1183 ? 0xB487C2FB sceSysconUpdaterSetRunModeForDriver
0x1184 ? 0xC7747A63 sceSysconUpdaterExecFinalizeForDriver
0x1185 ? 0xCBA836FF SceSysconForDriver_CBA836FF
0x1300 0x8 ??
0x1310 0x1 0x351946B0 ??
0x1382 ? 0xA4968B8C sceSysconBeginConfigstorageTransactionForDriver
0x1383 ? 0xFCC3E8EE sceSysconEndConfigstorageTransactionForDriver
0x1384 ? 0x7B9B3617 sceSysconCommitConfigstorageTransactionForDriver
0x1385 ? 0x89C5CFD6 sceSysconLoadConfigstorageScriptForDriver
0x1386 (called from ARM Kernel but not implemented in Syscon FW) ? 0xCC6F90A8 sceSysconVerifyConfigstorageScriptForDriver
0x1392 ? 0xFD65FFCB ??
0x1393 ? 0x02350352 ??
0x1394 ? 0x7DE84CE3 ??
0x2080 ? 0x44A173F5 sceSysconJigOpenPortForDriver
0x2081 ? 0x483FAE05 sceSysconJigClosePortForDriver
0x2082 ? 0xD24BF916 sceSysconJigSetConfigForDriver
0x2083 ?
0x2084 ?
0x2085 ?


All the following exports have this function prototype: int sceSysconSet*Callback(void (*func)(int enable, void *argp), void *argp);.

Maybe we will find more same as on PSP: SilverSpring's PSP Syscon callbacks enum.

NID Function Description
0x129EA022 ?? ??
0x14730196 ?? ??
0x2D471528 ?? ??. Set by ScePower. Very similar to SYSCON_CB_LOW_BATTERY.
0x32418370 sceSysconSetAlarmCallbackForDriver SYSCON_CB_ALARM. Set by ScePower.
0x3F0DB7C0 sceSysconSetLowBatteryCallbackForDriver SYSCON_CB_LOW_BATTERY. Set by ScePower.
0x474A9EA7 sceSysconSetCallback_474A9EA7ForDriver ??
0x4A42712F sceSysconSetAccCallbackForDriver ??
0x67A4CB9F sceSysconSetMiniUsbOtgCallbackForDriver ??
0x773B8126 sceSysconSetThermalAlertCallbackForDriver SYSCON_CB_THERMAL_ALERT. Set by ScePower.
0x80D6E061 ?? ??. Set by ScePower.
0x9F8340FF ?? ??
0xA26586B2 sceSysconSetMultiCnOtgCallbackForDriver ??