SceSysmem: Difference between revisions

Revision as of 14:34, 25 July 2023

SceSysmem is a kernel module that acts as the heart of the kernel. It exports multiple libraries for various features. SceSysmem is the first module that is loaded in the kernel load sequence and its libraries are imported by almost all other modules. See Virtual Memory and Physical Memory for more details on the memory subsystem.

Module

This module exists in both non-secure and secure world. The non-secure world SELF can be found in os0:kd/sysmem.skprx. It also can be found in the Boot Image.

Version	World	Privilege
1.50-3.61	Non-secure	Kernel
1.69-1.80	Secure	Kernel

Libraries

Known NIDs

Version	Name	World	Visibility	NID
0.990-3.61	SceSysmemForKernel	Non-secure	Kernel	0x63A519E5
3.63-3.65	SceSysmemForKernel	Non-secure	Kernel	0x02451F0F
0.990-3.65	SceSysmemForDriver	Non-secure	Kernel	0x6F25E18A
0.990-1.692	SceSysmemForDebugger	Non-secure	Kernel	0xC7309957
1.80-3.74	SceSysmemForDebugger	Non-secure	Kernel	not present. Removed.
0.990-3.60	SceSysmem	Non-secure	User	0x37FE725A
0.990-3.65	SceDipsw	Non-secure	User	0xB36D5922
0.990-3.65	SceDipswForDriver	Non-secure	Kernel	0xC9E26388
0.990-3.61	SceUartForKernel	Non-secure	Kernel	0xC03DBE40
3.63-3.65	SceUartForKernel	Non-secure	Kernel	0x1CCD9BA3
0.990-3.740.011	SceCpu	Non-secure	User	0x45265161
0.990-3.61	SceCpuForKernel	Non-secure	Kernel	0x54BF2BAB
3.63-3.65	SceCpuForKernel	Non-secure	Kernel	0xA5195D20
0.990-3.65	SceCpuForDriver	Non-secure	Kernel	0x40ECDB0E
0.990-1.692	SceSysclibForKernel	Non-secure	Kernel	0x24878615
1.80-3.74	SceSysclibForKernel	Non-secure	Kernel	not present. Removed.
0.990-3.65	SceSysclibForDriver	Non-secure	Kernel	0x7EE45391
0.990-3.65	SceSysrootForKernel	Non-secure	Kernel	0x3691DA45
0.990-3.65	SceSysrootForDriver	Non-secure	Kernel	0x2ED7F97A
0.990-3.65	SceKernelUtilsForDriver	Non-secure	Kernel	0x496AD8B4
0.990-1.692	SceZlibForDriver	Non-secure	Kernel	0xE241534E
1.80-3.74	SceZlibForDriver	Non-secure	Kernel	not present. Moved to SceSblPostSsMgr#SceZlibForDriver.
0.990-3.65	SceKernelSuspendForDriver	Non-secure	Kernel	0x7290B21C
0.990-3.65	SceQafMgrForDriver	Non-secure	Kernel	0x4E29D3B6
0.990-3.65	ScePmMgrForDriver	Non-secure	Kernel	0xF13F32F9
0.990-3.65	SceSblAIMgrForDriver	Non-secure	Kernel	0xFD00C69A
0.990-3.65	SceProcEventForDriver	Non-secure	Kernel	0x887F19D0
0.990-3.65	SceDebugLed	Non-secure	User	0xAE004C0A
0.990-3.65	SceDebugLedForDriver	Non-secure	Kernel	0x7BC05EAD
0.990-3.61	SceDebugForKernel	Non-secure	Kernel	0x88C17370
3.63-3.65	SceDebugForKernel	Non-secure	Kernel	0x13D793B7
0.990-3.65	SceDebugForDriver	Non-secure	Kernel	0x88758561
0.931-3.60	SceSysmemForTZS	Secure	Kernel	0x08680060
0.931-3.60	SceDipswForTZS	Secure	Kernel	0x9DBF584C
0.931-3.60	SceUartForTZS	Secure	Kernel	0xA1D740D7
0.931-3.60	SceDebugForTZS	Secure	Kernel	0x028FFADB
0.931-3.60	SceCpuForTZS	Secure	Kernel	0xC516B23E
0.931-3.60	SceSysclibForTZS	Secure	Kernel	0xC839BB78
0.931-3.60	SceSysrootForTZS	Secure	Kernel	0xFEFF641D
0.931-3.60	SceQafMgrForTZS	Secure	Kernel	0x637069DD
0.931-3.60	ScePmMgrForTZS	Secure	Kernel	0x27F1AFD8
0.931-3.60	SceSblAIMgrForTZS	Secure	Kernel	0x60D19047

The SceCpu libraries provide wrappers for much ARM CP15 co-processor access as well as low level support of spinlocks and other synchronization primitives.

Types

typedef struct SceKernelVARange SceKernelVARange;
typedef struct SceKernelBootArgs SceKernelBootArgs;
typedef struct SceSysrootProcessHandler SceSysrootProcessHandler;
typedef struct SceSysrootModulemgrHandlers SceSysrootModulemgrHandlers;
typedef struct SceSysrootForKernel_D29BCA77_struct SceSysrootForKernel_D29BCA77_struct;
typedef struct SceSysrootForKernel_733C243E_struct SceSysrootForKernel_733C243E_struct;

typedef struct SceKernelMMUContext { // size is 0xC on FWs 0.931-3.60
  SceUInt32 TTBR1;
  SceUInt32 DACR;
  SceUInt32 CONTEXTIDR;
} SceKernelMMUContext;

typedef SceUInt32 SceCachedSecureModule;
#define SCE_CACHED_SECURE_MODULE_GCAUTHMGR 0            // os0:sm/gcauthmgr_sm.self
#define SCE_CACHED_SECURE_MODULE_RMAUTH 1               // os0:sm/rmauth_sm.self
#define SCE_CACHED_SECURE_MODULE_ENDEC_W_PORTABILITY 2  // os0:sm/encdec_w_portability_sm.self

typedef struct SceCachedSecureModuleInfo { // size is 0xC
	SceSize size;     // Size of this structure
	void *pSelfData;  // Virtual address of the SM
	SceSize selfSize; // Size of the SM
} SceCachedSecureModuleInfo;

typedef struct SceSysrootDbgpHandler { // size is 0x5C on FW 3.600.011
    SceSize size; // Size of this structure
    void (* unk_0x04)(int a1, int a2, int a3, int a4);
    void (* unk_0x08)(int a1, int a2, int a3, int a4);
    void (* unk_0x0C)(int a1);
    void (* unk_0x10)(int a1, int a2, int a3, int a4);
    void (* unk_0x14)(int a1, int a2, int a3, int a4);
    void (* unk_0x18)(SceUID pid, SceUID modid, int flags, uint64_t time);
    void (* unk_0x1C)(int a1, int a2, int a3);
    void (* unk_0x20)(int a1, int a2, int a3);
    void (* unk_0x24)(int a1, int a2, int a3);
    void (* unk_0x28)(SceUID pid, SceUID modid, uint64_t time);
    void (* unk_0x2C)(SceUID pid, SceUID modid, uint64_t time);
    int  (* unk_0x30)(SceUID pid);
    int  (* unk_0x34)(int a1, int a2, int a3);
    int  (* unk_0x38)(int a1, int a2, void *a3);
    int  (* unk_0x3C)(int a1, int a2, int a3);
    int  (* sceKernelGetPrxDebugFlag)(SceUID pid, int *pFlag); // This is a guessed name.
    int  (* unk_0x44)(SceUID pid, SceUID modid, int flags, uint64_t time);
    int  (* unk_0x48)(int a1, int a2, int a3);
    void (* unk_0x4C)(void);
    void (* unk_0x50)(void);
    int  (* unk_0x54)(int a1, int a2, int a3, int a4, int a5);
    int  (* unk_0x58)(int a1, int a2, int a3);
} SceSysrootDbgpHandler;

#define SCE_SYSROOT_INIT_CALLBACK_MAX_FUNC (9)
#define SCE_SYSROOT_INIT_CALLBACK_MAX_SLOT (8)

typedef struct SceUIDSysrootObject { // size is 0x41C on FW 3.60-3.65
	void *object;
	SceClass *sce_class;
	SceSize size; // Size of this structure
	SceUInt32 magic1;
	int cpu_intr;
	SceSize boot_alloc_memory_size; // 0x400
	void *boot_alloc_memory; // used by boot time malloc
	int unk_0x1C; // 0x4
	void *unk_0x20; // size is 0x80-bytes
	SceUInt32 boot_flags; // 0x10 for coldboot, 0x1 for secure state
	SceUInt32 status;
	SceCorelockContext corelock_context;

	// start ModulePrivate
	int unk_0x34;   // ex:0
	int unk_0x38;   // ex:0
	void *unk_0x3C; // size is 4 byte
	void *unk_0x40; // Related to SceHeap. Size is 0xDC byte.
	SceExcpmgrData *ExcpmgrData; // Same as value returned by sceKernelGetExcpDataForKernel
	void *unk_0x48; // ?SceKernelIntrMgr data VA?
	void *unk_0x4C;
	void *unk_0x50;
	int unk_0x54;   // ex:0
	void *unk_0x58;
	int unk_0x5C;   // ex:0
	int unk_0x60;   // ex:0
	int unk_0x64;   // ex:0
	int unk_0x68;   // Used by Tzs SceSblSmsched
	// end ModulePrivate

	SceKblParam *kbl_param;
	SceKernelBootArgs *boot_args;
	SceUInt32 soc_revision;
	SceUInt32 pervasive_unk_dword; // read from physical address 0xE3100004 (ScePervasiveMisc + 0x4). ex: 0
	SceUInt32 kermit_revision;
	SceUInt32 model_info;
	SceUInt32 model_capability;

	void *longtime5base;

	int cpu_intr_for_init_callback;
	SceUInt32 init_callback_registable_base_number;
	struct {
		int (* callback)(int a1, void *args);
		void *args;
	} init_callback_slot[SCE_SYSROOT_INIT_CALLBACK_MAX_FUNC][SCE_SYSROOT_INIT_CALLBACK_MAX_SLOT];

	int (* sceKernelSysrootThreadMgrStartAfterProcess)(void);
	int (* sceKernelSysrootIofilemgrStart)(void);
	void *unk_0x2DC;
	void *unk_0x2E0;
	char *sysroot_names[9];
	SceUID this_object_uid;
	void *unk_0x30C; // size is 0x2C-bytes, maybe guid entry heap object
	void *unk_0x310;
	void *unk_0x314;
	void *VBAR;
	void *MVBAR;
	void *unk_0x320;
	void **unk_func_0x324; // SceSblACMgr
#if SCE_SDK_VERSION >= 0x3630000
	int (* sceKernelSysrootAppMgrFunction1)(int a1, int a2, int a3, int a4, int a5, int a6); // SceAppMgr + 0x2795, SceAppMgrForDriver_324DD34E
	SceUID (* sceKernelSysrootGetShellPid)(void);
	// offset: 0x330
#endif
	SceUID (* sceKernelSysrootGetThreadId)(void);
	int (* sceKernelSysrootThreadFunction3)(void);                   // Temp name, SceKernelThreadMgr + 0xC79, SceThreadmgrForDriver_91382762
	SceUID (* sceKernelSysrootGetProcessId)(void);
	int (* sceKernelSysrootThreadFunction4)(void);                   // Temp name, SceKernelThreadMgr + 0x8D1
	int (* sceKernelSysrootThreadFunction5)(void);                   // Temp name, SceKernelThreadMgr + 0x8ED
#if SCE_SDK_VERSION >= 0x3630000
	// offset: 0x344
	SceSysrootModulemgrHandlers *modulemgr_handlers;
#endif
	int (* sceKernelSysrootThreadFunction6)(void);                   // Temp name, SceKernelThreadMgr + 0x90D
	void (* sceKernelSysrootThreadFunction7)(void);                  // Temp name, SceKernelThreadMgr + 0xE69
	int (* sceKernelSysrootThreadFunction8)(void);                   // Temp name, SceKernelThreadMgr + 0x8BD, SceThreadmgrForDriver_332E127C
	int (* sceKernelSysrootThreadFunction9)(int a1, int a2, int a3); // Temp name, SceKernelThreadMgr + 0x2541
	int (* sceKernelSysrootThreadFunction10)(int a1);                // Temp name, SceKernelThreadMgr + 0xC99, SceThreadmgrForDriver_AB977C72
#if SCE_SDK_VERSION < 0x3630000
	// offset: 0x350
	SceSysrootModulemgrHandlers *modulemgr_handlers;
#endif
	int unk_0x354; // ex:0xFFFFFFFF
	SceSysrootForKernel_D29BCA77_struct *processmgr_callbacks_1;
	SceSysrootForDriver_733C243E_struct *processmgr_callbacks_2;
#if SCE_SDK_VERSION < 0x3630000
	void *unk_func_0x360; // SceDeci4pSDfMgr
	int (* sceKernelSysrootGetBusError)(void *dst, SceSize len);
	int (* sceKernelSysrootAppMgrFunction1)(int a1, int a2, int a3, int a4, int a5, int a6); // SceAppMgr + 0x2795, SceAppMgrForDriver_324DD34E
	SceUID (* sceKernelSysrootGetShellPid)(void);
#endif
#if SCE_SDK_VERSION >= 0x3630000
	// offset: 0x368
	int (* sceKernelSysrootGetLicenseStatusForDriver)(void); // SceSblPostSsMgr + 0x9001, sceSblLicMgrGetLicenseStatusForDriver
	int (* unk_func_0x384)(void); // SceSblPostSsMgr + 0xB005, SceSblPostSsMgrForDriver_22599675, get flag
	int (* unk_func_0x388)(void); // SceSblPostSsMgr + 0xB011, SceSblPostSsMgrForDriver_9B49C249, get flag
	void *unk_func_0x360; // SceDeci4pSDfMgr
	int (* sceKernelSysrootGetBusError)(void *dst, SceSize len);
	// offset: 0x37C
#endif
	void *unk_func_0x370; // SceCoredump + 0x7109, SceCoredumpForDriver_A7D214A7
	void *unk_func_0x374; // SceCoredump + 0x74F9, SceCoredumpForDriver_340856F7
	void *unk_func_0x378; // SceCoredump + 0x132ED, SceCoredumpForDriver_EF20949F
	int unk_0x37C; // ex:0
#if SCE_SDK_VERSION < 0x3630000
	// offset: 0x380
	int (* sceKernelSysrootGetLicenseStatusForDriver)(void); // SceSblPostSsMgr + 0x9001, sceSblLicMgrGetLicenseStatusForDriver
	int (* unk_func_0x384)(void); // SceSblPostSsMgr + 0xB005, SceSblPostSsMgrForDriver_22599675, get flag
	int (* unk_func_0x388)(void); // SceSblPostSsMgr + 0xB011, SceSblPostSsMgrForDriver_9B49C249, get flag
#endif
	void *unk_func_0x38C;         // SceSblPostSsMgr + 0xB4ED, SceSblPostSsMgrForDriver_D8A2D465
	int (* sceKernelSysrootGetTrilithiumBufferForDriver)(void); // SceSblPostSsMgr + 0xB111, sceSblUtMgrGetTrilithiumBufferForDriver
	int (* sceKernelSysrootHasNpTestFlag)(void);
	void *unk_func_0x398; // SceSblUpdateMgr + 0x8B01
	int (* sceKernelSysrootLedSetMode)(int led, int mode, void *led_configuration);
	SceKernelVARange *cached_sm_info_ranges; // See SceCachedSecureModuleInfo
	int (* sceKernelSysrootGetFunctionNameByNIDForKernel)(SceNID funcnid, const char **name); // sceNidsymtblGetFunctionNameByNIDForDriver
	void *SceSysrootForKernel_47724459_func; // SceDeci4pSDfMgr or SceDeci4pDfMgr, set by SceSysrootForDriver_C5EAF5F7
	void *unk_0x3AC; // SceDeci4pSDfMgr
	void *unk_struct_0x3B0; // SceDeci4pDfMgr
	void *unk_0x3B4; // SceDeci4pTsmp
	void *unk_0x3B8; // SceDeci4pTsmp
	void *unk_0x3BC; // SceDeci4pTsmp
	void *unk_0x3C0; // SceDeci4pTsmp
	SceSysrootProcessHandler *process_handler; // maybe for SceDeci4p
	SceSysrootDbgpHandler    *dbgp_handler;    // maybe for SceDeci4p
	void *unk_func_0x3CC; // SceNetPs + 0x3E51, SceNetPsForDriver_83A12CCC
	void *unk_func_0x3D0; // SceNetPs + 0x3F4D, SceNetPsForDriver_C000CA8F
	void *unk_func_0x3D4; // SceDeci4pTmcp
	void *unk_func_0x3D8; // SceDeci4pSDbgp
	void *unk_func_0x3DC; // SceNetPs + 0x3E51, SceNetPsForDriver_83A12CCC
	void *unk_func_0x3E0; // SceNetPs + 0x3F4D, SceNetPsForDriver_C000CA8F
	int (* sceKernelSysrootAppMgrFunction3)(int a1, int a2); // SceAppMgr + 0x9F49
	int (* sceKernelSysrootAppMgrFunction4)(int a1, int a2); // SceAppMgr + 0x9EED
	int (* sceKernelSysrootAppMgrFunction5)(int a1);	 // SceAppMgr + 0x9D31
	void *unk_func_0x3F0; // ScePfsMgr + 0x1, ScePfsMgrForKernel_4C148288
	void *unk_struct_0x3F4; // SceBt
	void *unk_struct_0x3F8; // SceHid
	void *unk_struct_0x3FC; // SceDeci4pSDbgp
	void *unk_data_0x400; // SceDeci4pSDbgp
	void *unk_func_0x404; // SceDeci4pSDfCtl
	void *unk_func_0x408; // SceDeci4pSDfCtl
	void *unk_func_0x40C; // ScePamgr
	void *unk_func_0x410; // ScePamgr
	void *unk_func_0x414; // ScePamgr
	SceUInt32 magic2;
} SceUIDSysrootObject;

typedef SceUIDSysrootObject SceSysroot;

typedef struct SceSysrootForKernel_D29BCA77_struct_0940 { // size is 0x48 on FWs 0.940-0.945
	SceSize size; // Size of this structure
	void *get_dword_from_offset_0x184;
	void *get_dword_from_offset_0x188;
	void *get_dword_from_offset_0x18C;
	void *sceKernelAllocCurrentProcessHeap;
	void *sceKernelFreeCurrentProcessHeap;
	void *sceKernelAllocRemoteProcessHeap;
	void *sceKernelFreeRemoteProcessHeap;
	void *sceKernelGetProcessLibdb;
	void *sceKernelSetProcessLibdb;
	void *ProcessmgrModuleStart2;
	void *sceKernelRegisterKPLS;
	void *sceKernelGetRemoteKPLS;
	void *sceKernelGetCurrentKPLS;
	void *sceKernelInhibitProcEvent;
        void *sceKernelPermitProcEvent;
	void *sceKernelInsertProcessThreadList;
	void *sceKernelDeleteProcessThreadList;
} SceSysrootForKernel_D29BCA77_struct_0940;

typedef struct SceSysrootForKernel_D29BCA77_struct_0990 { // size is 0x44 on FWs 0.990-0.995
	SceSize size; // Size of this structure
	void *get_dword_from_offset_0x184;
	void *get_dword_from_offset_0x188;
	void *get_dword_from_offset_0x18C;
	void *sceKernelAllocCurrentProcessHeap;
	void *sceKernelFreeCurrentProcessHeap;
	void *sceKernelAllocRemoteProcessHeap;
	void *sceKernelFreeRemoteProcessHeap;
	void *sceKernelGetProcessLibdb;
	void *sceKernelSetProcessLibdb;
	void *ProcessmgrModuleStart2;
	void *sceKernelRegisterKPLS;
	void *sceKernelGetRemoteKPLS;
	void *sceKernelGetCurrentKPLS;
	void *sceKernelInhibitProcEvent;
	void *sceKernelPermitProcEvent;
	void *sceKernelGetProcessHeapID;
} SceSysrootForKernel_D29BCA77_struct_0990;

// Size of SceSysrootForKernel_D29BCA77_struct for FWs 0.996.070-0.996.090 is 0x58
// Size of SceSysrootForKernel_D29BCA77_struct for FWs 1.000.071-1.500.151 (maybe higher) is 0x5C
typedef struct SceSysrootForKernel_D29BCA77_struct_3600 { // size is 0x44 on FWs 3.60-3.65, 
	SceSize size; // Size of this structure
        //a1 might be process object (needs to be checked)
	SceInt32 (*get_dword_from_offset_0x1E4)(void* a1);
	SceInt32 (*get_dword_from_offset_0x1E8)(void* a1);
	SceInt32 (*get_dword_from_offset_0x1EC)(void* a1);
        //Allocations are made from current process' "Unique" heap
        //Fails if TPIDRPRW is NULL
	void *(*sceKernelAllocCurrentProcessHeap)(SceSize size, SceKernelHeapMemoryOpt* pOpt);
	SceInt32 (*sceKernelFreeCurrentProcessHeap)(void* addr);

	//Allocations are made from specified process' "Unique" heap
        //KERNEL_PID (0x10005), DummyProcessGame (0x10013) and DummyProcessSystem (0x10015) are accepted as PIDs
        void *(*sceKernelAllocRemoteProcessHeap)(ScePID pid, SceSize size, SceKernelHeapMemoryOpt* pOpt);
	SceInt32 (*sceKernelFreeRemoteProcessHeap)(ScePID pid, void* ptr);

	SceInt32 (*ProcessmgrModuleStart2)();

        //Equivalent to sceKernelWaitSema(processObject->EventLock_sema, 1, NULL);
	SceInt32 (*sceKernelInhibitProcEvent)(ScePID pid);
	//Equivalent to sceKernelSignalSema(processObject->EventLock_sema, 1);
        SceInt32 *(sceKernelPermitProcEvent)(ScePID pid);

        //info_type = 0 -> returns processObject->unk0x424
        //info_type = 1 -> returns processObject->MaxFHCount
        //other values -> return 0
        SceInt32 (*query_some_process_info)(ScePID pid, SceUInt32 info_type);

	SceInt32 (*sceKernelRegisterKPLS)(char* name, SceSize size);
        //Fails if TPIDRPRW is NULL
        void *(*sceKernelGetCurrentKPLS)(SceUInt32 key);
	SceInt32 (*sceKernelGetRemoteKPLS)(ScePID pid, SceUInt32 key, ScePVoid* pKPLS, SceBool create);

	SceInt32 (*sceKernelProcessDebugSuspend)(ScePID pid, int status);
        //Retreived from process object's SceLoadProcessParam
        SceInt32 (*sceKernelGetCompiledSdkVersionByPid)(ScePID pid, SceUInt32* pSdkVersion);
} SceSysrootForKernel_D29BCA77_struct;

typedef struct SceSysrootForKernel_733C243E_struct_old { // size is 0x28 on FW 0.990
	SceSize size; // Size of this structure
	SceUID (* sceKernelGetCurrentProcessId)(void);
	int (* sceKernelGetEntryHeap)(SceUID pid, int *pHeap);
	int (* SceProcessmgrForKernel_C77C2085)(SceUID pid);
	int (* sceKernelPIDtoAddressSpaceCB)(SceUID pid, void **pASCb);
	int (* FUN_81000000)(int* dst, int *src);
	int (* sceKernelGetProcessType)(SceUID pid);
	int (* sceKernelGetProcessSelfAuthInfo)(SceUID pid, SceSelfAuthInfo *self_auth_info);
	int (* sceKernelSetProcessSelfAuthInfo)(SceUID pid, SceSelfAuthInfo *self_auth_info);
	int (* sceKernelGetProcessAccessLevel)(SceUID pid);
} SceSysrootForKernel_733C243E_struct_old;

typedef struct SceSysrootForKernel_733C243E_struct { // size is 0x20 on FWs 3.60-3.65
	SceSize size; // Size of this structure
	SceInt32 (* funcGetProcessEntryHeapObject)(SceUID pid, void **entry_heap_obj);
	SceUID (* get_process_address_space_UID)(SceUID pid);
	SceInt32 (* funcGetProcessAddressSpaceCB)(SceUID pid, void **address_space_obj);
	SceInt32 (* sceKernelGetProcessSelfAuthInfo)(SceUID pid, SceSelfAuthInfo *self_auth_info);
	SceInt32 (* sceKernelGetProcessTitleId)(SceUID pid, char *title_id, SceSize len); // Copies processObject->list_entry->process_name to title_id - maybe this should be GetProcessName?
	SceInt32 (* sceKernelIncProcessResource)(SceUInt32 type); // Type must be < 0x3
	SceInt32 (* sceKernelDecProcessResource)(SceUInt32 type); //^
} SceSysrootForKernel_733C243E_struct;

typedef struct SceSysrootProcessHandler { // size is 0x28 on FW 3.60
	SceSize size;                                                       // Size of this structure
	void (* unk_4)(SceUID pid, SceUID modid, int flags, SceUInt64 time); //!< process start shared modules
	void (* exit)(SceUID pid, int flags, SceUInt64 time);
	void (* kill)(SceUID pid);                                          //!< by SceShell
	void (* unk_10)(SceUID pid, SceUID modid, SceUInt64 time);
	void (* unk_14)(SceUID pid, SceUID modid, SceUInt64 time);
	void (* unk_18)(SceUID pid, SceUID modid, int a3, void* maybe_process_info, SceUInt64 time);
	int (* on_process_created)(int maybe_pid, int maybe_modid, int a3);                 //!< called when process is created
	void (* unk_20)(SceUID pid, SceUID modid, SceUInt64 time);
	void (* unk_24)(SceUID pid, SceUID modid, int flags, SceUInt64 time);
} SceSysrootProcessHandler;

typedef struct SceSysrootModulemgrHandlers { // size is 0x18 on FW 3.60
	SceSize size; // Size of this structure
	int (* sceKernelGetProcessSyscallInfo)(SceUID pid, const void *module_addr, void *pInfo); // SceKernelModulemgr + 0x20D0 on FW 3.60
	int (* handler_2)(SceUID pid, const void *module_addr); // SceKernelModulemgr + 0x1F44 on FW 3.60
	void *sceKernelGetModuleInfoMinByAddr;
	void *sceKernelBacktraceInternal;
	void *sceKernelPrintBacktrace;
} SceSysrootModulemgrHandlers;

// ScePamgrCallbacks
typedef struct SceSysrootForDriver_C94C76FA_struct { // size is 0x10 on FW 3.60
	SceSize size; // Size of this structure
	int (__cdecl *unk_func_4)();
	int (__cdecl *unk_func_8)();
	int (__cdecl *unk_func_C)();
} SceSysrootForDriver_C94C76FA_struct;

typedef struct SceKernelFreeMemorySizeInfo {
	SceSize size;
	SceSize sizeMain;
	SceSize sizeCdram;
	SceSize sizePhycont;
} SceKernelFreeMemorySizeInfo;

//Constructor/destructor of a class item
//For classes inheriting another class, the constructors are called from the parent to the child
//while the destructors are called in reverse order (same as C++ cstr/dstr)
typedef int (*SceClassCallback)(void *item);

//What is this?
typedef struct SceClass_0990 { // size is 0x10 on FW 0.990
	SceSize size; // Size of this structure
	struct SceClass *next;
	struct SceClass *root; // to confirm
	struct SceClass *prev; // to confirm
} SceClass_0990;

// How is this structure wrong? So where is the valid SceClass for FW 3.60? See below
typedef struct SceClass_wrong { // size is 0x2C on FW 3.60
	struct SceClass *next;				// 0x00
	struct SceClass *root;				// 0x04
	struct SceClass *prev;				// 0x08
	const char *name;				// 0x0C
	struct SceClass *uid_class;			// 0x10
	unsigned int attr;				// 0x14
	unsigned short item_size;			// 0x18
	unsigned short unk_1A;				// 0x1A
	SceClassCallback constructor;			// 0x1C
	SceClassCallback destructor;			// 0x20
	const unsigned int magic;			// 0x24 - 0xABCE9DA5
	SceClassCallback allocMethod;			// 0x28
} SceClass_wrong;

typedef struct SceClass { //size is 0x28 on FW 0.990, 0x2C on FW 3.60
    struct SceClass *next;             //0x00 - pUserdata of SceKernelObject, pointer to next class in DLink list
    struct SceClass *pClass;           //0x04 - pClass of SceKernelObject, always points to SceUIDClass class
    struct SceClass *prev;             //0x08 - Pointer to previous class in DLink list
    const char* name;                  //0x0C - Pointer to class' name
    struct SceClass *parent;           //0x10 - Pointer to parent class
    SceUInt32 attr;                    //0x14 - Usage unknown (bottom 8 bits = some counter?)
    SceUInt16 itemSize;                //0x18 - Size of items of this class
    SceUInt16 itemAllocationSize;      //0x1A - Size of allocations used for items of this class (rounded up itemSize)
#if (/* firmware 3.60 */)
    SceUInt32 unk0x1C;                 //0x1C
#endif
    SceClassCallback constructor;      //0x1C / 0x20 - called after item is allocated
    SceClassCallback destructor;       //0x20 / 0x24 - called before item is freed
    SceUInt32 magic;                   //0x24 / 0x28 - magic value 0xABCD9DA5
    //NOTE: additional data can be stored here for use by the class
} SceClass;

// Aka SceObjectBase in vitasdk
typedef struct SceKernelObject {
	void *pObject;
	SceClass *pClass;
	uintptr_t data[];
} SceKernelObject;

// Here is a wrong structure for SceKernelObject, but this could be a SceUIDXxxClass structure
typedef struct SceKernelObject_wrong { // size is at least 0x24
	void *pObject;			// 0x0
	SceClass pClass;		// 0x4
	uint32_t type;			// 0x8
	uint16_t lcount;		// 0xC
	uint16_t ucount;		// 0xE
	uint16_t ccount;		// 0x10
	uint32_t unk_12;		// 0x12 - 0x54c3
	uint16_t unk_16;		// 0x16
	uint32_t uid;			// 0x18
	char unk_1C[4];			// 0x1C
	const char *name;		// 0x20
	uint32_t indexRaw;		// 0x24
} SceKernelObject_wrong;

/** @name Memory types that can be specified with sceKernelAllocMemBlock
 */
/*@{*/

/**
 * @brief User readable / writable LPDDR2 memory
 *
 * This type secures a readable / writable memory block in user space.
 */
#define SCE_KERNEL_MEMBLOCK_TYPE_USER_RW			0x0c20d060U

#define SCE_KERNEL_MEMBLOCK_TYPE_USER_RWDATA			SCE_KERNEL_MEMBLOCK_TYPE_USER_RW

/**
 * @brief User readable / writable LPDDR2 non-cache memory
 *
 * A type to secure a memory block on LPDDR2 that is readable
 * and writable in user space and does not use cache.
 */
#define SCE_KERNEL_MEMBLOCK_TYPE_USER_NC_RW			0x0c208060U

/**
 * @brief An alias for SCE_KERNEL_MEMBLOCK_TYPE_USER_NC_RW.
 */
#define SCE_KERNEL_MEMBLOCK_TYPE_USER_RW_UNCACHE		SCE_KERNEL_MEMBLOCK_TYPE_USER_NC_RW

/**
 * @brief An alias for SCE_KERNEL_MEMBLOCK_TYPE_USER_NC_RW.
 */
#define SCE_KERNEL_MEMBLOCK_TYPE_USER_RWDATA_UNCACHE		SCE_KERNEL_MEMBLOCK_TYPE_USER_RW_UNCACHE

/**
 * @brief User readable and writable LPDDR2 physical continuous memory
 *
 * A type that can read and write in user space and secure
 * memory blocks from the physical continuous memory area.
 */
#define SCE_KERNEL_MEMBLOCK_TYPE_USER_MAIN_PHYCONT_RW		0x0c80d060U

/**
 * @brief User-readable and non-cacheable physical continuous memory
 *
 * A type for on-cacheable read / write in user space and to secure
 * memory blocks from the physical continuous memory area.
 */
#define SCE_KERNEL_MEMBLOCK_TYPE_USER_MAIN_PHYCONT_NC_RW	0x0d808060U

/**
 * @brief User-readable and non-cacheable CDRAM memory
 *
 * A type that can be read and written in user space and secures
 * memory blocks on CDRAM.
 */
#define SCE_KERNEL_MEMBLOCK_TYPE_USER_CDRAM_RW			0x09408060U

/**
 * @brief An alias for SCE_KERNEL_MEMBLOCK_TYPE_USER_CDRAM_RW.
 */
#define SCE_KERNEL_MEMBLOCK_TYPE_USER_CDRAM_RWDATA		SCE_KERNEL_MEMBLOCK_TYPE_USER_CDRAM_RW

/*@}*/

/**
 * @brief A type representing a memory type
 *
 * A type that represents the type of memory block secured by sceKernelAllocMemBlock.
 */
typedef int		SceKernelMemoryType;

/**
 * @brief Memory block information structure
 *
 * A structure for obtaining information about memory blocks. Size is 0x14 bytes on FW 0.990.
 */
typedef struct SceKernelMemBlockInfo0990 {
	SceSize				size;			/**< Size of the structure itself */
	void				*mappedBase;		/**< Map base address */
	SceSize				mappedSize;		/**< Mapped size */
	SceKernelMemoryType		memoryType;		/**< Memory type */
	SceUInt32			access;			/**< Access right */
} SceKernelMemBlockInfo0990;

/**
 * @brief Memory block information structure
 *
 * A structure for obtaining information about memory blocks. Size is 0x18 bytes on FWs 0.996+.
 */
typedef struct SceKernelMemBlockInfo {
	SceSize				size;			/**< Size of the structure itself */
	void				*mappedBase;		/**< Map base address */
	SceSize				mappedSize;		/**< Mapped size */
	SceKernelMemoryType		memoryType;		/**< Memory type */
	SceUInt32			access;			/**< Access right */
	SceKernelMemBlockType		type;			/**< Memory block type */
} SceKernelMemBlockInfo;

typedef struct SceKernelMemBlockInfoExDetails {
	SceKernelMemBlockType type;
	SceUID memblk_uid;
	const char *name;
	void *mappedBase;
	SceSize mappedSize;
	SceSize memblock_some_size_or_alignment;
	int extraLow;
	int extraHigh;
	int unk20;
	SceUID unk24; // ex: 0x10045, maybe some pid
	SceKernelObject *SceUIDPhyMemPartClass_obj;
} SceKernelMemBlockInfoExDetails;

typedef struct SceKernelMemBlockInfoEx { // size is 0xAC on FW 0.990, 0xB8 on FW 3.60
	SceSize size; // Size of this structure
	SceKernelMemBlockInfoExDetails details;
	SceSize unk30; // paddr num
	SceSize unk34; // paddr size num?
	void *paddr_list[0x10];
	SceSize size_list[0x10];
} SceKernelMemBlockInfoEx;

typedef struct SceKernelMemBlockInfoSimple { // size is 0x24 on FW 0.990
	SceSize size; // Size of this structure
	SceKernelMemBlockType type;
	SceUID uid;
	char *name; // "SceNULL" by default
	char unk_0x10[0x14];
} SceKernelMemBlockInfoSimple;

/*----- memory access permission -----*/

/**
 * @brief readable memory
 */
#define SCE_KERNEL_MEMORY_ACCESS_R		0x04U

/**
 * @brief writable memory
 */
#define SCE_KERNEL_MEMORY_ACCESS_W		0x02U

/**
 * @brief executable memory (kernel only)
 */
#define SCE_KERNEL_MEMORY_ACCESS_X		0x01U

/*----- memory type -----*/

/**
 * @brief uncache normal memory
 */
#define SCE_KERNEL_MEMORY_TYPE_NORMAL_NC	0x80

/**
 * @brief cache normal memory
 */
#define SCE_KERNEL_MEMORY_TYPE_NORMAL		0xD0

/**
 * Optional parameter of sceKernelAllocMemBlock for FWs <=0.940.
 */
 typedef struct SceKernelAllocMemBlockOpt0940 { // size is 0x14 on FW 0.940-0.990
	SceSize		size;				/**< Size of this structure */
	SceUInt32	attr;				/**< Attributes field */
	SceSize		alignment;			/**< Specify alignment.
							SCE_KERNEL_ALLOC_MEMBLOCK_ATTR_HAS_ALIGNMENT must be set for the attr member. */
	SceUID		uidBaseBlock;			/**< Base memory block UID */
	const char	*strBaseBlockName;		/**< Base memory block UID name */
} SceKernelAllocMemBlockOpt0940;

/**
 * Option parameter of sceKernelAllocMemBlock
 */
 typedef struct SceKernelAllocMemBlockOpt { // size is 0x14/0x38/0x3C/0x40 on FW 3.60
	/**
	 * Size of this structure
	 */
	SceSize		size;

	/**
	 * Attributes field
	 */
	SceUInt32	attr;

	/**
	 * Specify alignment.
	 * SCE_KERNEL_ALLOC_MEMBLOCK_ATTR_HAS_ALIGNMENT must be set for the attr member.
	 */
	SceSize		alignment;

	/**
	 * reserved
	 */
	 SceUInt32	uidBaseBlock;

	/**
	 * reserved2
	 */
	const char	*strBaseBlockName;

#if 0
	/**
	 * mapped base address [out]
	 */
	void		*mappedBase;

	/**
	 * mapped size [out]
	 */
	SceSize		mappedSize;

	/**
	 * memory type [out]
	 */
	SceKernelMemoryType	memoryType;

	SceUInt32	access;
#endif
} SceKernelAllocMemBlockOpt;

/**
 * Option parameter of kernel sceKernelAllocMemBlock on old FWs (as seen on FWs 0.900-0.990)
 */
typedef struct SceKernelAllocMemBlockOptKernel_old { // size is 0x28 on 0.900, 0x2C on 0.910, 0x30 on 0.931-0.990, 0x34 on ?.??
	SceSize size;			// Size of this structure
	SceUInt32 unk_4;
	SceUInt32 attr;
	void *vbase;
	void *pbase;			// Physical address to use as base
	SceSize alignment;
	SceUInt32 extraLow;
	SceUInt32 extraHigh;
	void *base;
	SceUID pid;
	SceKernelPAVector *pPAV;
	SceSize roundupUnitSize;
	SceUInt32 unk_30;
} SceKernelAllocMemBlockOptKernel_old;

/**
 * Option parameter of kernel sceKernelAllocMemBlock on recent FWs (as seen on FW 3.60)
 */
typedef struct SceKernelAllocMemBlockOptKernel { // size is 0x58 on FW 3.60
	SceSize size;			// Size of this structure
	SceUInt32 unk_4;                // Never used?
	SceUInt32 attr;
	void *vbase;                    // Virtual address memblock should be mapped at
	void *pbase;			// Physical address to use as base
	SceSize alignment;
	SceSize extraLow;               // Size of extra area starting from memblock vbase
	SceSize extraHigh;              // Size of extra area starting "after" memblock - extra area is ?not mapped?
	SceUID baseMemBlock;            // UID of memblock this one is based on
	SceUID pid;
	SceKernelPAVector *pPAV;
	SceSize roundupUnitSize;        // Used to roundup memblock vsize
	SceUInt8 domain;
	SceUInt32 unk_34; // Related to SCE_KERNEL_ALLOC_MEMBLOCK_ATTR_HAS_0x20
	SceUInt32 unk_38; // Related to SCE_KERNEL_ALLOC_MEMBLOCK_ATTR_HAS_0x20
	SceUInt32 unk_3C; // Related to SCE_KERNEL_ALLOC_MEMBLOCK_ATTR_HAS_0x20
	SceUInt32 unk_40; // Related to SCE_KERNEL_ALLOC_MEMBLOCK_ATTR_HAS_0x20
	SceUInt32 unk_44; // Related to SCE_KERNEL_ALLOC_MEMBLOCK_ATTR_HAS_0x20
	SceUInt32 unk_48; // Related to SCE_KERNEL_ALLOC_MEMBLOCK_ATTR_HAS_0x20
	SceUInt32 unk_4C; // Related to SCE_KERNEL_ALLOC_MEMBLOCK_ATTR_HAS_0x20
	SceUInt32 unk_50; // Related to SCE_KERNEL_ALLOC_MEMBLOCK_ATTR_HAS_0x20
	SceUInt32 unk_54; // Related to SCE_KERNEL_ALLOC_MEMBLOCK_ATTR_HAS_0x20
} SceKernelAllocMemBlockOptKernel;

/**
 * Attributes to enable some SceKernelAllocMemBlockOpt members.
 */
#define SCE_KERNEL_ALLOC_MEMBLOCK_ATTR_HAS_VBASE        0x00000001
#define SCE_KERNEL_ALLOC_MEMBLOCK_ATTR_HAS_PBASE        0x00000002
#define SCE_KERNEL_ALLOC_MEMBLOCK_ATTR_HAS_ALIGNMENT    0x00000004
#define SCE_KERNEL_ALLOC_MEMBLOCK_ATTR_HAS_EXTRA_LOW    0x00000008
#define SCE_KERNEL_ALLOC_MEMBLOCK_ATTR_HAS_EXTRA_HIGH   0x00000010
#define SCE_KERNEL_ALLOC_MEMBLOCK_ATTR_HAS_0x20         0x00000020
#define SCE_KERNEL_ALLOC_MEMBLOCK_ATTR_HAS_BASE         0x00000040
#define SCE_KERNEL_ALLOC_MEMBLOCK_ATTR_HAS_PID          0x00000080
#define SCE_KERNEL_ALLOC_MEMBLOCK_ATTR_HAS_BASENAME     0x00000200 // Only available for sceKernelAllocMemBlockForUser - kernel callers must use HAS_BASE instead
#define SCE_KERNEL_ALLOC_MEMBLOCK_ATTR_HAS_PPAV         0x00001000 // Official name may be HAS_PVECTOR
#define SCE_KERNEL_ALLOC_MEMBLOCK_ATTR_HAS_ROUNDUP      0x00002000
#define SCE_KERNEL_ALLOC_MEMBLOCK_ATTR_HAS_0x4000       0x00004000 // Some options when registering SceKernelBlock with guid
#define SCE_KERNEL_ALLOC_MEMBLOCK_ATTR_HAS_DOMAIN       0x00010000
#define SCE_KERNEL_ALLOC_MEMBLOCK_ATTR_NOPHYPAGE        0x00020000
#define SCE_KERNEL_ALLOC_MEMBLOCK_ATTR_DONT_MAP         0x00040000 // Do not map the memory block in the virtual address space (unofficial name)
#define SCE_KERNEL_ALLOC_MEMBLOCK_ATTR_PHYCONT	        0x00200000 // Memory area is physically continuous.
#define SCE_KERNEL_ALLOC_MEMBLOCK_ATTR_UNK              0x00400000
#define SCE_KERNEL_ALLOC_MEMBLOCK_ATTR_SHARE_VBASE      0x00800000 // Memblock shares vbase with base block - requires HAS_BASE
#define SCE_KERNEL_ALLOC_MEMBLOCK_ATTR_SHARE_PHYPAGE    0x01000000 // Memblock shares physical pages with base block - requires HAS_BASE
#define SCE_KERNEL_ALLOC_MEMBLOCK_ATTR_ALLOW_PARTIAL_OP 0x04000000 // Allow partial operation. ?What does that mean?

/**
 * UID is created by sceKernelOpen***()
 */
#define SCE_UID_ATTR_OPEN_FLAG			0x00080000U

typedef struct SceKernelHeapInfo { // size is 0xCC on FW 0.990
	SceSize size;			// Size of this structure
	char unk_4[0xC8];
} SceKernelHeapInfo;

typedef struct SceKernelHeapObject { // size is 0x40 on FW 0.990
	SceSize size;				// Size of this structure
	uint32_t unk_4;				// 0x4
	uint32_t unk_8;				// 0x8
	uint32_t unk_C;				// 0xC
	uint32_t unk_10;			// 0x10
	uint32_t unk_14;			// 0x14
	uint32_t unk_18;			// 0x18
	uint32_t unk_1C;			// 0x1C
	uint32_t unk_20;			// 0x20
	uint32_t unk_24;			// 0x24
	uint32_t unk_28;			// 0x28
	uint32_t unk_2C;			// 0x2C
	uint32_t unk_30;			// 0x30
	uint32_t magic;				// 0x34 - 0xD2BBDEC3
	uint32_t unk_38;			// 0x38
	uint32_t unk_3C;			// 0x3C
	uint32_t unk_40;			// 0x40
} SceKernelHeapObject;

typedef struct SceKernelFixedHeap { // size is 0x40 on FW 0.990
	SceSize size;				// Size of this structure
	SceClass pClass;			// 0x4
	uint32_t unk_8;				// 0x8
	uint32_t unk_C;				// 0xC
	uint32_t unk_10;			// 0x10
	uint32_t unk_14;			// 0x14
	uint32_t pageSize;			// 0x18 - min 0x1000 on FW 0.990
	uint16_t itemSize;			// 0x1C
	uint16_t unk_1E;			// 0x1E
	uint32_t unk_20;			// 0x20
	uint32_t unk_24;			// 0x24
	uint32_t magic;				// 0x28 - 0xFD9B28A6
	uint16_t sizeInWords;			// 0x2C
	uint16_t index;				// 0x2E
	SceKernelHeapObject *heapObject;	// 0x30
	uint32_t unk_34;			// 0x34
	uint32_t unk_38;			// 0x38
	uint16_t unk_3C;			// 0x3C
} SceKernelFixedHeap;

typedef struct SceKernelFixedHeapInfo_0990 { // size is 0x14 on FW 0.990
	SceSize size;			// Size of this structure
	uint32_t unk_4;			// = (uint32_t)*(uint16_t *)(pObject + 0x1C)
	uint32_t unk_8;			// = *(uint32_t *)(pObject + 0x18) + (uint32_t)*(uint16_t *)(pObject + 0x2E)
	uint32_t unk_C;			// = (uint32_t)*(uint16_t *)(pObject + 0x1E)
	uint32_t unk_10;		// = (uint32_t)*(uint16_t *)(pObject + 0x20)
} SceKernelFixedHeapInfo_0990;

typedef struct SceKernelFixedHeapInfo {
    SceSize size;  //size of this structure (0x90 on FW 3.65)
    SceSize objectSize;
    SceSize totalHeapSize;
    SceSize totalItemCount;
    SceSize totalFreeCount;
    SceUInt32 nUsedMax;
    SceUInt32 unk_18;
    //These two fields may be a single Highwater counter
    SceUInt16 nItemInPage;
    SceUInt16 nMaxItemInPage;
    SceUInt32 nListCount;
    struct {
        SceUInt16 unk_00;
        SceUInt16 nCount;
        SceUInt32 unk_04;
        SceUInt32 unk_08;
        SceUInt32 unk_0C;
    } cpuCache[4];
    SceUInt32 unk_64;
    SceUInt32 unk_68;
    SceUInt32 unk_6C;
    SceUInt32 unk_70;
    SceUInt32 nItem;
    SceUInt32 unk_78;
    SceUInt32 nPage;
    SceUInt32 unk_80;
    SceUInt32 unk_84;
    SceUInt32 unk_88;
    SceUInt32 unk_8C;
} SceKernelFixedHeapInfo;

typedef struct SceKernelHeapMemoryOpt { // size is 0x14 on FW 0.990-3.60
	SceSize size;			// Size of this structure
	uint32_t unk_4;			// ex: 0
	SceSize alignment;		// ex: 0x10, 0x40
	uint32_t unk_C;			// ex: 0, 0x20
	uint32_t unk_10;		// ex: 0
} SceKernelHeapMemoryOpt;

typedef struct SceKernelHeapCreateOpt { // size is 0x14 on FW 0.931-0.990, 0x1C on FW 3.60
  SceSize size;
	union { //<! Union for compatibility
		SceUInt32 attr;
		SceUInt32 uselock; //<! Do not use uselock as it will be deprecated. ex: 1, 0x100
	};
  SceUInt32 field_8; // ex: 0x8000
  SceUInt32 field_C;
  SceUInt32 block_type; // wrongly called memtype in vitasdk
  SceUInt32 field_14;
  SceUInt32 field_18;
} SceKernelHeapCreateOpt;

typedef struct SceKernelMMUL1Info { // size is 0xC in 0.990 - holds information about a single L1PT entry
    SceUIntVAddr vbase; // Start of the virtual address range mapped by L1PT entry
    SceUIntPAddr pbase; // Start of the physical address held in L1PT - paddr mapped for Section, paddr of L2PT for Page Table entry
    SceUInt32 entryType; // 0 = Invalid (fault on access), 1 = Section/Supersection, 2 = Page Table
} SceKernelMMUL1Info;

typedef struct SceAddressSpace { // size is at least 0xEC
	char unk[0x14];
	SceKernelMMUContext *context;
	char unk[0xC4];
	void *funcAlloc;
	char unk2[0x8];
	uint32_t magic;			// always 0x4D95AEEC
} SceAddressSpace;

typedef struct SceKernelAddressSpaceCallback {
	SceUInt32 index;
	void *(* funcMalloc)(SceUInt32 index, SceSize length);
	void (* funcFree)(SceUInt32 index, void *ptr);
	// maybe more
} SceKernelAddressSpaceCallback;

typedef struct SceKernelAddressSpace { // size is 0x10 bytes on FW 0.940-3.60
	SceSize size; // Size of this structure
	int flag;
	SceKernelAddressSpaceCallback *data_0x08; // info dst buff ptr, need AddrSpace.flag = 2;
	void *TTBR1; // info dst buff ptr, need AddrSpace.flag |= 4;
} SceKernelAddressSpace;

typedef struct SceKernelAddressSpaceInfo { // size is 0x654-bytes
	SceSize size;
	SceUID asid;
	SceUInt8 CONTEXTID;
	SceUInt8 paddinf[3];
	SceUInt32 nList;
	struct {
		SceSize size;
		SceUIDPartitionObject *pPart;
		SceUIntPtr vbase;
		SceSize vsize;
		SceUInt32 unk_0x10; // nBlock?
		SceSize vsizeRemain;
		const char *name;
		SceUInt32 unk_0x1C;
		SceUInt32 unk_0x20;
		SceUInt32 unk_0x24;
		SceUInt32 unk_0x28;
		SceUInt32 unk_0x2C;
	} list[0x20];
	SceUInt32 nPhyMemPart;
	SceUIDPhyMemPartObject *pPhyMemPart[0x10];
} SceKernelAddressSpaceInfo;

typedef struct SceKernelVARange {
	uint32_t addr;
	SceSize size;
} SceKernelVARange;

typedef struct SceKernelPARange {
	uint32_t addr;
	SceSize size;
} SceKernelPARange;

typedef struct SceKernelPAVector { // size is 0x14 on FW 0.990
	SceSize size;			// Size of this structure
	uint32_t pRanges_size;		// Ex: 8
	uint32_t nDataInVector;		// Must be <= 8
	uint32_t count;
	SceKernelPARange *pRanges;
} SceKernelPAVector;

#define SCE_KERNEL_PROCESS_ID_SELF 0 // Current running process ID is always 0.

typedef struct SceKernelPhyMemPart { // size is at least 0x9C on FWs 0.931-3.60
	uint32_t field_0x0;
	uint32_t field_0x4;
	uint32_t some_counter; // always positive
	uint32_t field_0xc;
	char *name;
	int type; // 0x10000 for Lpddr2Main, 0x30000 for Cdram
	int mutex;
	SceUIntPAddr pbase;
	SceSize totalSize;
	int field_0x24;
	void *pRoot;
	uint32_t field_0x2c;
	uint32_t field_0x30;
	uint32_t field_0x34;
	uint32_t field_0x38;
	int status;
	int pindex40; //1
	int field_0x44;
	int pindex48; //2
	int field_0x4c;
	int pindex50; //3
	int field_0x54;
	int pindex58; //4
	int field_0x5c;
	int pindex60; //5
	int field_0x64;
	int pindex68; //6
	int field_0x6c;
	int pindex70; //7
	int field_0x74;
	int pindex78; //8
	int field_0x7c;
	int pindex80; //9
	SceSize psize2;
	int min;
	int pindex8C; //10
	int field_0x90;
	SceUInt32 nClient;
	SceSize freeSize;
} SceKernelPhyMemPart;

typedef struct ScePhyMemPartInfoCore { // size is 0x10 on FWs 0.990-3.60
	SceUIntPAddr pbase; // same as SceKernelPhyMemPart field 0x1C
	SceSize totalSize;
	SceSize freeSize;
	SceUInt32 unk_C; // maybe some counter
} ScePhyMemPartInfoCore;

typedef struct SceKernelPhyMemLow { // size is 0x1C on 0.990
        SceUInt32 mutex;        // For use with sceKernelCpuLockSuspendIntrStoreLR
        SceUIntPAddr pbase;     // Base address of range managed by this instance
        SceSize psize;          // Size of range managed by this instance
        SceSize granularity;    // Minimum size that can be allocated from this instance (i.e. every allocation must be aligned to this)
        SceUInt32 unk10;        // Maybe backing memory type? Seen values: 0x20 (CDRAM)
        SceSize bitmapSize;     // Size of the bitmap array (in elements)
        SceUInt32* bitmap;      // Bitmap used to store which elements managed by this instance are in use - each bit represents a granularity-sized element. Status of element n can be found by looking at (bitmap[n / 32] >> (n % 32)): 0 means free, 1 means occupied  
} SceKernelPhyMemLow;

typedef struct ScePhyMemLowInfo { // size is 0x1C on 0.990
        SceSize size; // Size of this structure
        SceUIntPAddr pbase;
        SceSize psize;
        SceSize granularity;
        SceUInt32 unk10;       // unk14 from PhyMemLow
        SceSize bmArraySize;   // Size of the array pointed to by bitmap, IN ELEMENTS. Nothing is written here. Pass 0 if bitmap is NULL.
        SceUInt32* bitmap;     // Optional - array that receives a copy of the PhyMemLow bitmap
} ScePhyMemLowInfo;

//for 0.990
#define SCE_KERNEL_PHYMEMLOW_TYPE_LPDDR2MAIN 0x10001
#define SCE_KERNEL_PHYMEMLOW_TYPE_UNK 0x10002
#define SCE_KERNEL_PHYMEMLOW_TYPE_CDRAM 0x20001

typedef struct SceKernelVSlot { // size is at least 0x40 on FW 3.65
    char unk_0x0[0x18];
    void* base_addr_or_offset;
    char unk_0x1C[8];
    void* some_struct;
    char unk_0x28[0xC];
    SceSize alloc_phy_size;
    SceSize alloc_size;
    int unk;
} SceKernelVSlot;

typedef SceVoid(*SceKernelSysrootVeneziaRpcDebugFunc)(SceUInt32 debugCode, SceUInt32 argNum, ...);

typedef SceVoid(*SceKernelSysrootVipRpcDebugFunc)(SceUInt32 debugCode, SceUInt32 argNum, ...);

// This is a guessed type name
typedef SceUInt32 SceKernelLockMode;
#define SCE_KERNEL_LOCK_MODE_0x10 0x10
#define SCE_KERNEL_LOCK_MODE_0x20 0x20

typedef struct SceKernelModulePrivate9 { // size is 0xAC-bytes on FW 3.60
	SceClass SceUIDModuleClass;
	SceClass SceUIDLibraryClass;
	SceClass SceUIDLibStubClass;
	SceKernelProcessLibdb libdb;
	SceUID ScePsp2BootConfig_modid;
} SceKernelModulePrivate9;

Debug Types

typedef struct kernel_message_ctx { // size is 0x18 on FW 3.60
  SceUInt32 fileHash; // First 4 bytes of SHA1(__FILE__) - e.g. 0x123EC4E8 = "processmgr.c"
  SceUInt32 lineHash; // First 4 bytes of SHA1("%s:%d" % (__FILE__, __LINE__)) - e.g. 0x7D3F4B00 = "boot.c:1868"
  SceUInt32 funcHash; // First 4 bytes of SHA1(__FUNC__) - e.g. 0x197C5ED2 = "LedModuleStart"
  const char *pFile;  // Pointer to file name - can be NULL.
  int line; //Line in file - ignored if pFile is NULL.
  const char *pFunc; // Pointer to function name - ignored if pFile is NULL.
} kernel_message_ctx;

/**
 * An enumeration to represent the various logging levels which can be output by sceDbgLoggingHandler().
 */
typedef enum SceDbgLogLevel {
	SCE_DBG_LOG_LEVEL_ALWAYS = 0,
	SCE_DBG_LOG_LEVEL_TRACE,     /* An extremely verbose logging level, mostly useful for internal developers. */
	SCE_DBG_LOG_LEVEL_DEBUG,     /* A diagnostic logging level. */
	SCE_DBG_LOG_LEVEL_INFO,      /* An informational logging level. */
	SCE_DBG_LOG_LEVEL_WARNING,   /* A logging level that gives warnings of situations detrimental to proper execution. */
	SCE_DBG_LOG_LEVEL_ERROR,     /* A logging level that will report erroneous conditions in execution. */
	SCE_DBG_NUM_LOG_LEVELS       /* The number of logging levels available. */
} SceDbgLogLevel;

/*
Target Manager (Communication Processor) Logging levels.
These levels can be set using psp2ctrl set-logging-level <level>.
LOG_LEVEL_NONE (0)
LOG_LEVEL_ERROR (1)
LOG_LEVEL_WARNING (2)
LOG_LEVEL_SERVICE (3)
LOG_LEVEL_INFO (4)
LOG_LEVEL_INTERNAL (5)
LOG_LEVEL_MAX (6)
*/

typedef struct SceSyscallInfo { // size is 0x3C on FW 3.60
	SceSize size; // Size of this structure
	SceUInt32 moduleFingerprint;
	SceUInt32 maybeModuleAttr;
	char moduleName[0x20];
	char *libName;
	SceUInt32 maybeLibAttr;
	SceUInt32 libVer;
	SceUInt32 libNid;
} SceSyscallInfo;

typedef struct SceSyscallFrame { // size is at least 0x5C on FW 3.60
	SceUInt32 r0; // 0x00
	SceUInt32 r1; // 0x04
	SceUInt32 r2; // 0x08
	SceUInt32 r3; // 0x0C
	SceUInt32 r4; // 0x10
	SceUInt32 r5; // 0x14
	SceUInt32 r6; // 0x18
	SceUInt32 r7; // 0x1C
	SceUInt32 r8; // 0x20
	SceUInt32 r9; // 0x24
	SceUInt32 r10; // 0x28
	SceUInt32 r11; // 0x2C
	SceUInt32 r12; // 0x30
	SceUInt32 unk_34; // 0x34
	void *entry; // 0x38
	SceUInt32 unk_3C; // 0x3C
	SceUInt32 resultType; // 0x40, 0-3
	int unk_44[3]; // 0x44
	SceUInt32 SP; // 0x50
	SceUInt32 LR; // 0x54
	SceUInt32 PC; // 0x58
} SceSyscallFrame;

// process
typedef struct SceKernelDebugEventLog1 { // size is 0x1C
	int data_0x40;
	SceUID pid;
	int budget_type;
	int data_0x4C;    // 0xA
	char titleid[0xC];
} __attribute__((packed)) SceKernelDebugEventLog1;

// Related to network
typedef struct SceKernelDebugEventLog2 { // size is 0x4
	int data_0x40;    // 0 or 0x80412118?
} __attribute__((packed)) SceKernelDebugEventLog2;

// Related to network
typedef struct SceKernelDebugEventLog3 { // size is 0x54
	int data_0x40;    // 0?
	char ip1[0x10];
	char ip2[0x10];
	char ip3[0x10];
	char ip4[0x10];
	char ip5[0x10];
} __attribute__((packed)) SceKernelDebugEventLog3;

typedef struct SceKernelDebugEventLog {
	SceSize size;
	int data_0x04;    // 0xA, titleid size?
	char titleid[0xC];
	int flags;
	SceUID ppid;
	SceUID data_0x1C; // thid?
	int rsvd[4];
	SceUInt64 time;
	int data_0x38;
	SceSize item_size;
	union {
		SceKernelDebugEventLog1 type1;
		SceKernelDebugEventLog2 type2;
		SceKernelDebugEventLog3 type3;
	};
} __attribute__((packed)) SceKernelDebugEventLog;

GetPhyMemPartIndex

uint GetPhyMemPartIndex(uint param_1) {
  uint cpuId;
  
  if (param_1 == 0xea0d050) goto LAB_81009494;
  if (param_1 < 0xea0d051) {
    if (param_1 == 0x620d004) {
      return 6;
    }
    if (param_1 < 0x620d005) {
      if (param_1 != 0x3b0d060) {
        if (param_1 < 0x3b0d061) {
          if (param_1 != 0x3a0d060) {
            if (param_1 < 0x3a0d061) {
              if (param_1 == 0x3a0d040) goto LAB_81009494;
              if (param_1 == 0x3a0d050) {
                return 10;
              }
            }
            else {
              if (param_1 == 0x3b0d040) goto LAB_81009494;
              if (param_1 == 0x3b0d050) {
                return 0xb;
              }
            }
            goto LAB_81009402;
          }
        }
        else {
          if (param_1 != 0x3f0d060) {
            if (param_1 < 0x3f0d061) {
              if ((param_1 == 0x3f0d040) || (param_1 == 0x3f0d050)) goto LAB_81009494;
            }
            else {
              if (param_1 == 0x6208004) {
                return 6;
              }
              if (param_1 == 0x6208006) {
                return 6;
              }
            }
            goto LAB_81009402;
          }
        }
      }
LAB_81009494:
      return (param_1 << 8) >> 0x1c;
    }
    if (param_1 == 0xc208060) {
      return 0xb;
    }
    if (param_1 < 0xc208061) {
      if (param_1 == 0x9408060) {
        return 0xc;
      }
      if (param_1 < 0x9408061) {
        if (param_1 == 0x620d006) {
          return 6;
        }
        if (param_1 == 0x9404060) {
          return 0xc;
        }
      }
      else {
        if (param_1 == 0xb100860) {
          return 1;
        }
        if (param_1 == 0xc200860) {
          return 0xb;
        }
      }
    }
    else {
      if (param_1 == 0xea08040) goto LAB_81009494;
      if (param_1 < 0xea08041) {
        if (param_1 == 0xc20d050) {
          return 0xb;
        }
        if (param_1 == 0xc20d060) {
          return 0xb;
        }
      }
      else {
        if (param_1 == 0xea08060) goto LAB_81009494;
        if (param_1 == 0xea0d040) {
          return 10;
        }
      }
    }
  }
  else {
    if (param_1 == 0x20108004) {
      return 1;
    }
    if (param_1 < 0x20108005) {
      if (param_1 == 0x1020d006) {
        return 6;
      }
      if (param_1 < 0x1020d007) {
        if (param_1 == 0x10208004) {
          return 6;
        }
        if (param_1 < 0x10208005) {
          if (param_1 == 0xea0d060) goto LAB_81009494;
          if (param_1 == 0x10200806) {
            return 6;
          }
        }
        else {
          if (param_1 == 0x10208006) {
            return 6;
          }
          if (param_1 == 0x1020d004) {
            return 6;
          }
        }
      }
      else {
        if (param_1 == 0x20100206) {
          return 1;
        }
        if (param_1 < 0x20100207) {
          if (param_1 == 0x1050d006) {
            return 5;
          }
          if (param_1 == 0x20100204) {
            return 1;
          }
        }
        else {
          if (param_1 == 0x20100804) {
            return 1;
          }
          if (param_1 == 0x20100806) {
            return 1;
          }
        }
      }
    }
    else {
      if (param_1 == 0x60208006) {
        return 6;
      }
      if (param_1 < 0x60208007) {
        if (param_1 == 0x40404006) {
          return 0xc;
        }
        if (param_1 < 0x40404007) {
          if (param_1 == 0x20108006) {
            return 1;
          }
          if (param_1 == 0x2010d006) {
            return 1;
          }
        }
        else {
          if (param_1 == 0x40408006) {
            return 0xc;
          }
          if (param_1 == 0x60208004) {
            return 6;
          }
        }
      }
      else {
        if (param_1 == 0x6050d006) goto LAB_81009494;
        if (param_1 < 0x6050d007) {
          if (param_1 == 0x6020d004) {
            return 6;
          }
          if (param_1 == 0x6020d006) {
            return 6;
          }
        }
        else {
          if (0x70f0d003 < param_1) {
            if (param_1 < 0x70f0d007) goto LAB_81009494;
            if (param_1 == 0xa0408006) {
              return 0xc;
            }
          }
        }
      }
    }
  }
LAB_81009402:
  cpuId = sceKernelCpuIdForDriver();
  sceKernelPrintfLevelForDriver
            (1,
             "%d:address_space.c:%s:Warning:Using SCE_KERNEL_PHYMEMPART_LPDDR2MAIN_KERNEL_INDEX for0x%08x\n"
             , cpuId, "GetPhyMemPartIndex", param_1);
  return 6;
}

Memory Block Type

The type parameter indicates what kind of memory to allocate. Here is a mapping of type flags to ARM MMU flags. Higher bits are used for other options including where to allocate from. Not all flag values are valid, there is a table of valid types in the kernel. You cannot, for example, allocate RWX memory.

All memtype list for 3.60

// For usermode
#define SCE_KERNEL_MEMBLOCK_TYPE_USER_CDRAM_L1WBWA_RW    (0x09404060)
#define SCE_KERNEL_MEMBLOCK_TYPE_USER_CDRAM_R            (0x09408040)
#define SCE_KERNEL_MEMBLOCK_TYPE_USER_CDRAM_RW           (0x09408060)
#define SCE_KERNEL_MEMBLOCK_TYPE_USER_UNK_0C200860_RW    (0x0C200860)
#define SCE_KERNEL_MEMBLOCK_TYPE_USER_MAIN_R             (0x0C20D040)
#define SCE_KERNEL_MEMBLOCK_TYPE_USER_MAIN_RW            (0x0C20D060)
#define SCE_KERNEL_MEMBLOCK_TYPE_USER_MAIN_NC_RW         (0x0C208060)
#define SCE_KERNEL_MEMBLOCK_TYPE_USER_MAIN_GAME_RW       (0x0C50D060)
#define SCE_KERNEL_MEMBLOCK_TYPE_USER_MAIN_PHYCONT_RW    (0x0C80D060)
#define SCE_KERNEL_MEMBLOCK_TYPE_USER_MAIN_PHYCONT_NC_RW (0x0D808060)
#define SCE_KERNEL_MEMBLOCK_TYPE_USER_MAIN_CDIALIG_RW    (0x0CA0D060)
#define SCE_KERNEL_MEMBLOCK_TYPE_USER_MAIN_CDIALIG_NC_RW (0x0CA08060)
#define SCE_KERNEL_MEMBLOCK_TYPE_USER_MAIN_TOOL_RW       (0x0CF0D060)
#define SCE_KERNEL_MEMBLOCK_TYPE_USER_MAIN_TOOL_NC_RW    (0x0CF08060)
#define SCE_KERNEL_MEMBLOCK_TYPE_USER_CDIALOG_R          (0x0E20D040)
#define SCE_KERNEL_MEMBLOCK_TYPE_USER_CDIALOG_RW         (0x0E20D060)
#define SCE_KERNEL_MEMBLOCK_TYPE_USER_CDIALOG_NC_R       (0x0E208040)
#define SCE_KERNEL_MEMBLOCK_TYPE_USER_CDIALOG_NC_RW      (0x0E208060)

// For kernel
#define SCE_KERNEL_MEMBLOCK_TYPE_USER_SHARED_MAIN_R      (0x0320D040)
#define SCE_KERNEL_MEMBLOCK_TYPE_USER_SHARED_MAIN_RX     (0x0320D050)
#define SCE_KERNEL_MEMBLOCK_TYPE_USER_SHARED_MAIN_RW     (0x0320D060)
#define SCE_KERNEL_MEMBLOCK_TYPE_USER_SHARED_SHARED_R    (0x0390D040)
#define SCE_KERNEL_MEMBLOCK_TYPE_USER_SHARED_SHARED_RX   (0x0390D050)
#define SCE_KERNEL_MEMBLOCK_TYPE_USER_SHARED_SHARED_RW   (0x0390D060)
#define SCE_KERNEL_MEMBLOCK_TYPE_USER_SHARED_CDIALOG_R   (0x03A0D040)
#define SCE_KERNEL_MEMBLOCK_TYPE_USER_SHARED_CDIALOG_RX  (0x03A0D050)
#define SCE_KERNEL_MEMBLOCK_TYPE_USER_SHARED_CDIALOG_RW  (0x03A0D060)
#define SCE_KERNEL_MEMBLOCK_TYPE_USER_SHARED_TOOL_R      (0x03F0D040)
#define SCE_KERNEL_MEMBLOCK_TYPE_USER_SHARED_TOOL_RX     (0x03F0D050)
#define SCE_KERNEL_MEMBLOCK_TYPE_USER_SHARED_TOOL_RW     (0x03F0D060)
#define SCE_KERNEL_MEMBLOCK_TYPE_USER_TOOL_R             (0x08F0D040)
#define SCE_KERNEL_MEMBLOCK_TYPE_USER_TOOL_RX            (0x08F0D050)
#define SCE_KERNEL_MEMBLOCK_TYPE_USER_TOOL_RW            (0x08F0D060)
#define SCE_KERNEL_MEMBLOCK_TYPE_USER_TOOL_UNK_RW        (0x08F0D006)
#define SCE_KERNEL_MEMBLOCK_TYPE_USER_MAIN_RX            (0x0C20D050)
#define SCE_KERNEL_MEMBLOCK_TYPE_USER_MAIN_PHYCONT_R     (0x0C80D040)
#define SCE_KERNEL_MEMBLOCK_TYPE_USER_MAIN_PHYCONT_NC_R  (0x0D808040)
#define SCE_KERNEL_MEMBLOCK_TYPE_USER_MAIN_TOOL_RX       (0x0CF0D050)
#define SCE_KERNEL_MEMBLOCK_TYPE_USER_CDIALOG_RX         (0x0E20D050)
#define SCE_KERNEL_MEMBLOCK_TYPE_USER_UNK_0720D006_RW    (0x0720D006) /* SCE_KERNEL_ERROR_ILLEGAL_PARTITION_INDEX */
#define SCE_KERNEL_MEMBLOCK_TYPE_USER_UNK_0B100240_R     (0x0B100240)
#define SCE_KERNEL_MEMBLOCK_TYPE_USER_UNK_0B100260_RW    (0x0B100260)
#define SCE_KERNEL_MEMBLOCK_TYPE_USER_UNK_0B100840_R     (0x0B100840)
#define SCE_KERNEL_MEMBLOCK_TYPE_USER_UNK_0B100860_RW    (0x0B100860)

#define SCE_KERNEL_MEMBLOCK_TYPE_KERNEL_ROOT_SO_RW         (0x10200206)
#define SCE_KERNEL_MEMBLOCK_TYPE_KERNEL_ROOT_DEVICE_RW     (0x10200806)
#define SCE_KERNEL_MEMBLOCK_TYPE_KERNEL_ROOT_L1WBWA_RW     (0x10204006)
#define SCE_KERNEL_MEMBLOCK_TYPE_KERNEL_ROOT_NC_R          (0x10208004)
#define SCE_KERNEL_MEMBLOCK_TYPE_KERNEL_ROOT_NC_RW         (0x10208006)
#define SCE_KERNEL_MEMBLOCK_TYPE_KERNEL_ROOT_R             (0x1020D004)
#define SCE_KERNEL_MEMBLOCK_TYPE_KERNEL_ROOT_RX            (0x1020D005)
#define SCE_KERNEL_MEMBLOCK_TYPE_KERNEL_ROOT_RW            (0x1020D006)
#define SCE_KERNEL_MEMBLOCK_TYPE_KERNEL_ROOT_PHYCONT_R     (0x1080D004)
#define SCE_KERNEL_MEMBLOCK_TYPE_KERNEL_ROOT_PHYCONT_RW    (0x1080D006)
#define SCE_KERNEL_MEMBLOCK_TYPE_KERNEL_ROOT_PHYCONT_NC_R  (0x30808004)
#define SCE_KERNEL_MEMBLOCK_TYPE_KERNEL_ROOT_PHYCONT_NC_RW (0x30808006)
#define SCE_KERNEL_MEMBLOCK_TYPE_KERNEL_ROOT_GAME_RW       (0x1050D006)
#define SCE_KERNEL_MEMBLOCK_TYPE_KERNEL_ROOT_CDIALOG_R     (0x10A0D004)
#define SCE_KERNEL_MEMBLOCK_TYPE_KERNEL_ROOT_CDIALOG_RW    (0x10A0D006)
#define SCE_KERNEL_MEMBLOCK_TYPE_KERNEL_ROOT_UMAIN_NC_RW   (0x10C08006)
#define SCE_KERNEL_MEMBLOCK_TYPE_KERNEL_ROOT_UMAIN_RW      (0x10C0D006)
#define SCE_KERNEL_MEMBLOCK_TYPE_KERNEL_TOOL_R             (0x10F0D004)
#define SCE_KERNEL_MEMBLOCK_TYPE_KERNEL_TOOL_RX            (0x10F0D005)
#define SCE_KERNEL_MEMBLOCK_TYPE_KERNEL_TOOL_RW            (0x10F0D006)
#define SCE_KERNEL_MEMBLOCK_TYPE_KERNEL_TOOL_NC_R          (0x10F08004)
#define SCE_KERNEL_MEMBLOCK_TYPE_KERNEL_TOOL_NC_RW         (0x10F08006)
#define SCE_KERNEL_MEMBLOCK_TYPE_KERNEL_TMP_FS_GAME_R      (0x1220D004)
#define SCE_KERNEL_MEMBLOCK_TYPE_KERNEL_TMP_FS_GAME_RW     (0x1220D006)
#define SCE_KERNEL_MEMBLOCK_TYPE_KERNEL_TMP_FS_GAME_NC_R   (0x13208004)
#define SCE_KERNEL_MEMBLOCK_TYPE_KERNEL_TMP_FS_GAME_NC_RW  (0x13208006)
#define SCE_KERNEL_MEMBLOCK_TYPE_KERNEL_IO_SO_R            (0x20100204)
#define SCE_KERNEL_MEMBLOCK_TYPE_KERNEL_IO_SO_RW           (0x20100206)
#define SCE_KERNEL_MEMBLOCK_TYPE_KERNEL_IO_R               (0x20100804)
#define SCE_KERNEL_MEMBLOCK_TYPE_KERNEL_IO_RW              (0x20100806)
#define SCE_KERNEL_MEMBLOCK_TYPE_KERNEL_IO_NC_R            (0x20108004)
#define SCE_KERNEL_MEMBLOCK_TYPE_KERNEL_IO_NC_RW           (0x20108006)
#define SCE_KERNEL_MEMBLOCK_TYPE_KERNEL_CDRAM_L1WBWA_RW    (0x40404006)
#define SCE_KERNEL_MEMBLOCK_TYPE_KERNEL_CDRAM_RW           (0x40408006)
#define SCE_KERNEL_MEMBLOCK_TYPE_KERNEL_TMP_NC_R           (0x60208004)
#define SCE_KERNEL_MEMBLOCK_TYPE_KERNEL_TMP_NC_RW          (0x60208006)
#define SCE_KERNEL_MEMBLOCK_TYPE_KERNEL_TMP_R              (0x6020D004)
#define SCE_KERNEL_MEMBLOCK_TYPE_KERNEL_TMP_RW             (0x6020D006)
#define SCE_KERNEL_MEMBLOCK_TYPE_KERNEL_TMP_GAME_RW        (0x6050D006)
#define SCE_KERNEL_MEMBLOCK_TYPE_KERNEL_KMP_GAME_RW        (0xC050D006)
#define SCE_KERNEL_MEMBLOCK_TYPE_KERNEL_KMP_TOOL_RW        (0xC0F0D006)
#define SCE_KERNEL_MEMBLOCK_TYPE_KERNEL_UNK_11208006_NC_RW (0x11208006) // from ScePhyMemPartKD to SceKernelRootUncacheGpuGame
#define SCE_KERNEL_MEMBLOCK_TYPE_KERNEL_UNK_60208014_NC_R  (0x60208014)
#define SCE_KERNEL_MEMBLOCK_TYPE_KERNEL_UNK_60208016_NC_RW (0x60208016)

Note

The only commonly available memtypes are those that are publicly available.

sceKernelAllocMemblockInternal uses a list to translate it into an internal memtype.

So we can't create memtype with any bits and use that's.

memtype bit value

Mask	Value	Description
0xF000000	N/A	Partition index.
0xF00000	N/A	Src ScePhyMemPart.
0x10000	0x10000	Global. `nG` bit NOT set
0xFF00	0x800	`B` bit set. Sharable device memory.
0xFF00	0x2000	`TEX[2]` and `TEX[0]` bit set. Outer cache Write-back, Write-Allocate. Inner cache non-cachable.
0xFF00	0x4000	`TEX[2]` and `B` bit set. Outer cache non-cachable. Inner cache Write-back, Write-Allocate
0xFF00	0x8000	`TEX[0]` bit set. `S` bit unset. Outer and inner non-cachable. Not sharable.
0xFF00	0xD000	`TEX[0]` bit set. `C,B` bits set. Outer and inner Write-back, Write-Allocate.
0xFF	0x4	`AP[2:0] = 5`, `XN=1`. Privileged RO, User NA.
0xFF	0x5	`AP[2:0] = 5`. Privileged RX, User NA.
0xFF	0x6	`AP[2:0] = 1`, `XN=1`. Privileged RW, User NA.
0xFF	0x7	`AP[2:0] = 1`. Privileged RWX, User NA. (Never used, 3.60 0x80024B01)
0xFF	0x50	`AP[2:0] = 7`. Privileged RX, User RX.
0xFF	0x60	`AP[2:0] = 3`, `XN=1`. Privileged RW, User RW.
0xFF	0x40	`AP[2:0] = 7`, `XN=1`. Privileged RO, User RO.

This is based internal memtypes.

Mask	Value	Name
0x0F000000	0x00000000	root
0x0F000000	0x01000000	SceKernelRootUncacheGpuGame
0x0F000000	0x02000000	SceKernelTmpFsGame
0x0F000000	0x03000000	SceKernelTmpFsGame
0x0F000000	0x04000000	SceKernelTool
0x0F000000	0x05000000	SceKernelRootUncache?
0x0F000000	0x06000000	Unknown
0x0F000000	0x07000000	SCE_KERNEL_ERROR_ILLEGAL_PARTITION_INDEX
0x0F000000	0x08000000	SceKernelUserTool
0x0F000000	0x09000000	SceKernelUserCdram
0x0F000000	0x0A000000	SceKernelUserShared
0x0F000000	0x0B000000	SceKernelUserIO
0x0F000000	0x0C000000	SceKernelUserMain
0x0F000000	0x0D000000	SceKernelUserUncache
0x0F000000	0x0E000000	SceKernelUserCDialog
0x0F000000	0x0F000000	SceKernelUserCDialogNC

Available memory types

Types to reverse

from 0.990:

CDIALOG:
SCE_KERNEL_MEMBLOCK_TYPE_CDIALOG_NC_R

FREE:
SCE_KERNEL_MEMBLOCK_TYPE_FREE

KERNEL:
SCE_KERNEL_MEMBLOCK_TYPE_KERNEL_CDRAM_L1WBWA_RW

SCE_KERNEL_MEMBLOCK_TYPE_KERNEL_IO_DEVICE_R
SCE_KERNEL_MEMBLOCK_TYPE_KERNEL_IO_DEVICE_RW
SCE_KERNEL_MEMBLOCK_TYPE_KERNEL_IO_NC_R
SCE_KERNEL_MEMBLOCK_TYPE_KERNEL_IO_SO_R

SCE_KERNEL_MEMBLOCK_TYPE_KERNEL_KMP_TOOL_RW

SCE_KERNEL_MEMBLOCK_TYPE_KERNEL_ROOT_CDIALOG_R
SCE_KERNEL_MEMBLOCK_TYPE_KERNEL_ROOT_CDIALOG_RW
SCE_KERNEL_MEMBLOCK_TYPE_KERNEL_ROOT_DEVICE_RW
SCE_KERNEL_MEMBLOCK_TYPE_KERNEL_ROOT_GAME_RW
SCE_KERNEL_MEMBLOCK_TYPE_KERNEL_ROOT_NC_R
SCE_KERNEL_MEMBLOCK_TYPE_KERNEL_ROOT_NC_RW
SCE_KERNEL_MEMBLOCK_TYPE_KERNEL_ROOT_PHYCONT_NC_R
SCE_KERNEL_MEMBLOCK_TYPE_KERNEL_ROOT_PHYCONT_NC_RW
SCE_KERNEL_MEMBLOCK_TYPE_KERNEL_ROOT_PHYCONT_R
SCE_KERNEL_MEMBLOCK_TYPE_KERNEL_ROOT_PHYCONT_RW
SCE_KERNEL_MEMBLOCK_TYPE_KERNEL_ROOT_R
SCE_KERNEL_MEMBLOCK_TYPE_KERNEL_ROOT_RW
SCE_KERNEL_MEMBLOCK_TYPE_KERNEL_ROOT_RX
SCE_KERNEL_MEMBLOCK_TYPE_KERNEL_ROOT_SO_RW
SCE_KERNEL_MEMBLOCK_TYPE_KERNEL_ROOT_UMAIN_RW

SCE_KERNEL_MEMBLOCK_TYPE_KERNEL_TMP_GAME_RW
SCE_KERNEL_MEMBLOCK_TYPE_KERNEL_TMP_NC_R
SCE_KERNEL_MEMBLOCK_TYPE_KERNEL_TMP_NC_RW
SCE_KERNEL_MEMBLOCK_TYPE_KERNEL_TMP_R

SCE_KERNEL_MEMBLOCK_TYPE_KERNEL_TOOL_NC_R
SCE_KERNEL_MEMBLOCK_TYPE_KERNEL_TOOL_NC_RW
SCE_KERNEL_MEMBLOCK_TYPE_KERNEL_TOOL_R
SCE_KERNEL_MEMBLOCK_TYPE_KERNEL_TOOL_RW
SCE_KERNEL_MEMBLOCK_TYPE_KERNEL_TOOL_RX

USER:
SCE_KERNEL_MEMBLOCK_TYPE_USER_CDIALOG_NC_RW
SCE_KERNEL_MEMBLOCK_TYPE_USER_CDIALOG_R
SCE_KERNEL_MEMBLOCK_TYPE_USER_CDIALOG_RW
SCE_KERNEL_MEMBLOCK_TYPE_USER_CDIALOG_RX

SCE_KERNEL_MEMBLOCK_TYPE_USER_CDRAM_NC_R
SCE_KERNEL_MEMBLOCK_TYPE_USER_CDRAM_NC_RW

SCE_KERNEL_MEMBLOCK_TYPE_USER_IO_DEVICE_RW
SCE_KERNEL_MEMBLOCK_TYPE_USER_IO_SO_RW

SCE_KERNEL_MEMBLOCK_TYPE_USER_KTMP_NC_R
SCE_KERNEL_MEMBLOCK_TYPE_USER_KTMP_NC_RW
SCE_KERNEL_MEMBLOCK_TYPE_USER_KTMP_R
SCE_KERNEL_MEMBLOCK_TYPE_USER_KTMP_RW

SCE_KERNEL_MEMBLOCK_TYPE_USER_MAIN_DEVICE_RW
SCE_KERNEL_MEMBLOCK_TYPE_USER_MAIN_GAME_RW
SCE_KERNEL_MEMBLOCK_TYPE_USER_MAIN_NC_RW
SCE_KERNEL_MEMBLOCK_TYPE_USER_MAIN_PHYCONT_NC_R
SCE_KERNEL_MEMBLOCK_TYPE_USER_MAIN_PHYCONT_NC_RW
SCE_KERNEL_MEMBLOCK_TYPE_USER_MAIN_PHYCONT_R
SCE_KERNEL_MEMBLOCK_TYPE_USER_MAIN_PHYCONT_RW
SCE_KERNEL_MEMBLOCK_TYPE_USER_MAIN_R
SCE_KERNEL_MEMBLOCK_TYPE_USER_MAIN_RW
SCE_KERNEL_MEMBLOCK_TYPE_USER_MAIN_RX
SCE_KERNEL_MEMBLOCK_TYPE_USER_MAIN_TOOL_NC_RW
SCE_KERNEL_MEMBLOCK_TYPE_USER_MAIN_TOOL_RW
SCE_KERNEL_MEMBLOCK_TYPE_USER_MAIN_TOOL_RX

SCE_KERNEL_MEMBLOCK_TYPE_USER_SHARED_CDIALOG_R
SCE_KERNEL_MEMBLOCK_TYPE_USER_SHARED_CDIALOG_RW
SCE_KERNEL_MEMBLOCK_TYPE_USER_SHARED_CDIALOG_RX
SCE_KERNEL_MEMBLOCK_TYPE_USER_SHARED_MAIN_R
SCE_KERNEL_MEMBLOCK_TYPE_USER_SHARED_MAIN_RW
SCE_KERNEL_MEMBLOCK_TYPE_USER_SHARED_MAIN_RX
SCE_KERNEL_MEMBLOCK_TYPE_USER_SHARED_SHARED_R
SCE_KERNEL_MEMBLOCK_TYPE_USER_SHARED_SHARED_RW
SCE_KERNEL_MEMBLOCK_TYPE_USER_SHARED_SHARED_RX
SCE_KERNEL_MEMBLOCK_TYPE_USER_SHARED_TOOL_R
SCE_KERNEL_MEMBLOCK_TYPE_USER_SHARED_TOOL_RW
SCE_KERNEL_MEMBLOCK_TYPE_USER_SHARED_TOOL_RX

SceSysmemForKernel

SceSysmemForKernel_A7D44B50

Version	NID
0.931.010-1.692.000	0xA7D44B50
1.800.071-3.740.011	not present

A guessed name is sceKernelSetSysmemFuncForKernel.

Used by SceKernelSSProxy's module_start to register a function that just calls SMC 0x10E (BusErrorClear).

The registered function is used internally by #sceKernelPhysicalMemReadForKernel and #sceKernelPhysicalMemWriteForKernel.

int SceSysmemForKernel_A7D44B50(void* pBusErrorClearFunc);

sceKernelSysmemModuleStartAfterProcessmgrForKernel

Version	NID
3.60-3.61	0xE7938BFB
3.63	0x4E74DA48

Temp name was sceKernelInitProcessMemoryForKernel.

Used by SceProcessmgr.

int sceKernelSysmemModuleStartAfterProcessmgrForKernel(void);

sceKernelSysmemCleanerForKernel

Version	NID
3.60-3.61	0x43E81C4B
3.63	0x50980298

?Implemented in internal system software.? Not implemented in external system software.

sceKernelStrnlenFromUserForKernel

Version	NID
0.931	0x9BC3DEAC
3.60	not present

SceSize sceKernelStrnlenFromUserForKernel(const char *s, SceSize maxlen);

sceKernelPhysicalMemWriteForKernel

Version	NID
0.931.010-1.060.031	0x4B86A751
1.50-3.740.011	not present

Writes to physical address pdest using a pre-allocated memblock. Destination must belong into a hardcoded table describing physical ranges.

SceSSize sceKernelPhysicalMemWriteForKernel(SceUIntPAddr pdest, const void *src, SceSize size);

sceKernelPhysicalMemReadForKernel

Version	NID
0.931.010-1.060.031	0xF96E3AE2
1.50-3.740.011	not present

Temp name was memcpy_from_paddr.

Dest must be a virtual address and src must be a physical address. Returns copied size on success.

int sceKernelPhysicalMemReadForKernel(void *dest, const void *src, SceSize dest_size, SceSize src_size);

sceKernelCopyFromUser32DomainForKernel

Version	NID
0.931	0xD530399A
3.60	not present

int sceKernelCopyFromUser32DomainForKernel(SceUID pid, void *dst, const void *src, SceSize size);

sceKernelCopyToUserProcTextDomainForKernel

Version	NID
0.931-3.60	0x30931572
3.65	0x2995558D

Temp name was sceKernelRxMemcpyKernelToUserForPidForKernel, sceKernelProcCopyToUserRxForKernel.

Same as sceKernelCopyToUserProcDomain, but performs a DCache clean after the copy. Use this function if you want to write code in user pages.

This function is usually called when resolving stubs during a module loads. In 3.60, DACR is set to 0x15450FC3 instead of 0xFFFFFFFF.

SceInt32 sceKernelCopyToUserProcTextDomainForKernel(SceUID pid, void *uaddr, const void *kaddr, SceSize size);

sceKernelCopyToUserProcTextDomainForDBGPForKernel

Version	NID
3.60-3.61	0xE65EA709
3.63	0x4345C61F

sceKernelCopyToUserTextDomainForKernel

Version	NID
3.60	0x67BAD5B4
3.65	0x5EF1DAAF

This is a guessed name. Temp names were sceKernelMemcpyToUserRxForKernel, sceKernelCopyToUserRxForKernel.

Similar to sceKernelCopyToUserProcTextDomain, but performed in the current address space.

In FW 3.60, sceKernelCopyToUserProcTextDomain calls this function to perform the copy after changing address space.

SceInt32 sceKernelCopyToUserTextDomainForKernel(void *dst, const void *src, SceSize len);

sceKernelCopyToUserDomainForKernel

Version	NID
0.931	Not present
3.60-3.61	0xA6F95838
3.63	0x499A9FFF

This is a guessed name. Temp names were sceKernelMemcpyToUserRoForKernel, sceKernelCopyToUserRoForKernel.

Similar to sceKernelCopyToUserTextDomain, but doesn't perform any DCache clean.

Uses the same DACR, 0x15450FC3, for the copy.

int sceKernelCopyToUserDomainForKernel(void *dst, const void *src, SceSize len);

sceKernelRegisterClassForKernel

Version	NID
0.990	0x11761B77
3.60	not present

sceKernelFindClassByNameForKernel

Version	NID
3.60	0x62989905
3.65	0x7D87F706

int sceKernelFindClassByNameForKernel(const char *name, SceClass **class);

sceUIDRegisterForKernel

Version	NID
0.931-0.990	0x59162CD7
3.60	not present

Calls #sceGUIDRegisterForKernel.

int sceUIDRegisterForKernel(SceClass *pClass, const char *name, SceKernelObject *pObject);

sceUIDObjectSetClassForKernel

Version	NID
0.931-0.990	0x226DE851
3.60	not present

int sceUIDObjectSetClassForKernel(SceKernelObject *pObject, SceClass *pClass);

sceKernelGetUIDHeapClassForKernel

Version	NID
3.60-3.61	0x4CCA935D
3.63	0x7C878E94

SceClass *sceKernelGetUIDHeapClassForKernel(void);

sceKernelGetUIDMemBlockClassForKernel

Version	NID
3.60-3.61	0xAF729575
3.63	0x86681B64

SceClass *sceKernelGetUIDMemBlockClassForKernel(void);

sceKernelGetUIDDLinkClassForKernel

Version	NID
0.990-3.610.011	0xC105604E
3.630.011-3.740.011	0xE4193EB6

SceClass *sceKernelGetUIDDLinkClassForKernel(void);

sceUIDGetUIDVectorByClassForKernel

Version	NID
0.931.010-1.060.031	0xA2F03233
1.500.151-3.740.011	not present

Calls #sceGUIDGetUIDVectorByClassForKernel.

sceUIDGetProcUIDVectorByClassForKernel

Version	NID
0.990.000-1.060.031	0x51C08396
1.500.151-3.740.011	not present

scePUIDGetUIDVectorByClassForKernel

Version	NID
0.990.000-3.610.011	0xB16D5136
3.630.000-3.740.011	0x08C05493

int scePUIDGetUIDVectorByClassForKernel(SceUID pid, SceClass *pClass, SceUInt32 vis_level, SceUID *pVector, SceUInt32 nVector, SceUInt32 *ret_num);

sceKernelGetKernelAddressSpaceForKernel

Version	NID
1.500.151-3.610.011	0xC38B4D52
3.630.011-3.740.011	0x2E5CC243

void* sceKernelGetKernelAddressSpaceForKernel(void);

sceKernelCreateAddressSpaceForKernel

Version	NID
0.990-3.60	0x4A3737F0
3.65	0x8EE89D2C

// type: 0x10000001 (user AS)
// name: maybe titleid
SceUID sceKernelCreateAddressSpaceForKernel(SceUID pid, const char *name, SceUInt32 type, SceKernelAddressSpace *pAS);

sceKernelDeleteAddressSpaceForKernel

Version	NID
0.931-3.60	0xF2D7FE3A
3.65	0x4A2E421D

int sceKernelDeleteAddressSpaceForKernel(SceUID guid);

sceKernelAddressSpaceSetNameForKernel

Version	NID
0.990-1.50	not present
3.60	0x7BD56D6D
3.65	0xCEBC4963

Used by SceProcessmgr.

int sceKernelAddressSpaceSetNameForKernel(SceUID guid, const char *name);

sceKernelAddressSpaceSetPhyMemPartForKernel

Version	NID
0.931-3.60	0x67955EE9
3.65	0x7DF07D60

int sceKernelAddressSpaceSetPhyMemPartForKernel(SceUID guid, int a2, SceKernelPhyMemPart *pPhyMemPart);

sceKernelAddressSpaceCtrSetObjectHeapForKernel

Version	NID
3.60-3.61	0xFC74A355
3.63	0xFA348CB1

sceKernelAddressSpaceFreeAllMemBlockForKernel

Version	NID
0.931-3.60	0x89CE1F31
3.65	0x36159CF5

int sceKernelAddressSpaceFreeAllMemBlockForKernel(SceUID guid);

sceKernelAddressSpaceUnmapForKernel

Version	NID
0.931-3.61	0xCE72839E
3.63	0x73C38695

# For FW 0.931:
int sceKernelAddressSpaceUnmapForKernel(SceUID uid, int maybe_ttbr0, void* addr, SceSize size);
# For FW 3.60:
int sceKernelAddressSpaceUnmapForKernel(SceUID uid, int maybe_ttbr0, SceUInt32 some_offset, void* addr, SceSize size);

Example: 0.990 SceSysStateMgr:

sceKernelAddressSpaceUnmapForKernel(0x10007, 0xF7, 0x51000000, 0x1000000);
sceKernelAddressSpaceUnmapForKernel(0x10007, 0xF0, 0xE0000000, 0x8000000);
sceKernelAddressSpaceUnmapForKernel(0x10007, 0xF0, 0x1A000000, 0x100000);

Example: 3.60 SceSysStateMgr:

sceKernelAddressSpaceUnmapForKernel(0x10007, 0xF7, 0xC, 0x51000000, 0x1000000);
sceKernelAddressSpaceUnmapForKernel(0x10007, 0xF0, 0xC, 0xE0000000, 0x8000000);
sceKernelAddressSpaceUnmapForKernel(0x10007, 0xF0, 0xC, 0x1A000000, 0x100000);

sceKernelAddressSpaceSetProcessForKernel

Version	NID
0.990-3.61	0x2476B90F
3.63	0x5E772E19

int sceKernelAddressSpaceSetProcessForKernel(SceUID address_space, SceUID pid);

sceKernelAddressSpaceChangeMMUContextForKernel

Version	NID
0.931-3.61	0x653B0849
3.63	0x20D01AFA

Changes to the MMU context (CONTEXTIDR.ASID + DACR + TTBR1) of target address space.

SceInt32 sceKernelAddressSpaceChangeMMUContextForKernel(SceUID address_space);

sceKernelAddressSpaceGetMMUContextForKernel

Version	NID
0.990	not present
3.10-3.61	0x9894B9E1
3.63	0xA7C91D62

This is a guessed name.

int sceKernelGetAddressSpaceMMUContextForKernel(SceUID address_space, SceKernelMMUContext **ppCtx);

SceSysmemForKernel_FBEF93AA

Version	NID
0.931	not present
0.990-3.01	0xFBEF93AA
3.10-3.74	not present

Maybe gets MMU context. Maybe was replaced by #sceKernelAddressSpaceGetMMUContextForKernel.

int SceSysmemForKernel_FBEF93AA(SceUID address_space, void* pOut);

sceKernelAddressSpaceGetTimerVbaseForKernel

Version	NID
0.990	not present
0.996.090-3.610.011	0x7D92B2D3
3.630.011-3.740.011	0xFA1A73DD

int sceKernelAddressSpaceGetTimerVbaseForKernel(SceUID address_space, void **ppBase);

SceSysmemForKernel_4492421F

Version	NID
0.990.000-3.610.011	0x4492421F
3.630.011-3.740.011	0xC3EF4055

Gets address space information.

int SceSysmemForKernel_4492421F(SceUID address_space, SceKernelAddressSpaceInfo *pInfo);

sceKernelAddressSpaceGetMMUL1InfoForKernel

Version	NID
0.931-0.990	0x671A3444
3.60	not present

Gets information about a L1PT entry in the translation table of an address space. Pass the virtual address of the target entry maps as addr.

SceInt32 sceKernelAddressSpaceGetMMUL1InfoForKernel(SceUID address_space, const void *addr, SceKernelMMUL1Info *pInfo);

sceKernelAddressSpaceGetMMUL2InfoForKernel

Version	NID
0.931	0xCB6E1C80
3.60	not present

int sceKernelAddressSpaceGetMMUL2InfoForKernel(SceUID address_space, const void *addr, void *pInfo);

sceKernelAddressSpaceGetMMUL1AllInfoForKernel

Version	NID
0.931-0.990	0x1A898F2E
3.60	not present

typedef struct SceKernelAddressSpaceMMUL1AllInfo { // size is 0x400C on FW 0.931
  SceSize size; // Size of this structure
  char unk[0x4008];
} SceKernelAddressSpaceMMUL1AllInfo;

int sceKernelAddressSpaceGetMMUL1AllInfoForKernel(SceUID address_space, SceKernelAddressSpaceMMUL1AllInfo *pInfo);

sceKernelAddressSpaceGetMMUL2AllInfoForKernel

Version	NID
0.931	0x1E1AA29B
3.60	not present

typedef struct SceKernelAddressSpaceMMUL2AllInfo { // size is 0x404 on FW 0.931
  SceSize size; // Size of this structure
  char unk[0x400];
} SceKernelAddressSpaceMMUL2AllInfo;

int sceKernelAddressSpaceGetMMUL2AllInfoForKernel(SceUID address_space, const void *addr, SceKernelAddressSpaceMMUL2AllInfo *pInfo);

sceKernelAddressSpaceGetMemoryTypeForKernel

Version	NID
0.990-3.61	0xCC7BB240
3.63	0x0B5A3E93

int sceKernelAddressSpaceGetMemoryTypeForKernel(uint32_t *memory_type);

sceKernelAddressSpaceVAtoPAForKernel

Version	NID
0.990-3.61	0xF2179820
3.63	0x1BAF8C0B

int sceKernelAddressSpaceVAtoPAForKernel(SceAddressSpace *pAS, uint32_t mode, void *pVA, void **pPA);

sceKernelAddressSpaceVARangeToPAVectorForKernel

Version	NID
0.990-3.61	0xF7250E6C
3.63	0xA541E0CF

int sceKernelAddressSpaceVARangeToPAVectorForKernel(SceUID address_space, const SceKernelVARange *vRange, SceKernelPAVector *pPAV);

sceKernelGetUIDAddressSpaceClassForKernel

Version	NID
3.60-3.61	0xAF180A3F
3.63	0x99D3BF76

This is a guessed name.

sceKernelAddressSpaceGetPhyMemPartByIndexForKernel

Version	NID
3.60-3.61	0x3F74E45C
3.63	0x47C55DCC

int sceKernelAddressSpaceGetPhyMemPartByIndexForKernel(SceUInt32 index, void **result);

sceKernelCreatePhyMemPartForKernel

Version	NID
0.931-3.61	0x2E36E0C4
3.63	0xA2DFA383

Calls #sceKernelCreatePhyMemPartByPbaseForKernel with pbase = 0.

int sceKernelCreatePhyMemPartForKernel(const char *name, int type, SceSize psize, SceKernelPhyMemPart *pPhyMemPart);

sceKernelCreatePhyMemPartByPbaseForKernel

Version	NID
0.931-3.61	0x63D83911
3.63	0x5CC56F87

/*
type

ORed values:
0x00002 : Shell
0x00004 : Game
0x00005 : PhyCont
0x00060 : CDialog
0x10000 : Lpddr2Main
0x30000 : Cdram

seen values:
0x10002 : ShellLpddr2Main (shared)
0x10004 : GameLpddr2Main
0x10005 : PhyContLpddr2Main
0x10064 : GameCDialogLpddr2Main

0x30002 : ShellCdram
0x30004 : GameCdram
*/

int sceKernelCreatePhyMemPartByPbaseForKernel(const char *name, int type, void *pbase, SceSize psize, SceKernelPhyMemPart **ppPhyMemPart);

sceKernelDeletePhyMemPartForKernel

Version	NID
0.931-3.61	0x2AEA9E09
3.63	0x3F72B2E7

int sceKernelDeletePhyMemPartForKernel(SceKernelPhyMemPart *pPhyMemPart);

sceKernelGetPhyMemPartAllForKernel

Version	NID
0.931-3.61	0x2F6F9C2C
3.63	0x021053DD

int sceKernelGetPhyMemPartAllForKernel(int param_1, int param_2, void *pCountInBuffer);

sceKernelGetPhyMemPartInfoForKernel

Version	NID
0.931-0.990	0x67849418
3.60	not present

int sceKernelGetPhyMemPartInfoForKernel(SceKernelPhyMemPart *pPhyMemPart, SceKernelPhyMemPartInfo *pInfo);

sceKernelGetPhyMemPartInfoByIDForKernel

Version	NID
0.931-3.61	0xF4FA0575
3.63	0x029F5989

typedef struct SceKernelPhyMemPartInfo { // size is 0x44 on FW 0.931-0.990
  SceSize size;   // Size of this structure
  uint32_t unk_4; // some size or address
  uint32_t unk_8; // some size or address
  char unk1[0xC];
  char *name; // name, maybe pointer or array
  char unk2[0x24];
} SceKernelPhyMemPartInfo;

int sceKernelGetPhyMemPartInfoByIDForKernel(SceUID id, SceKernelPhyMemPartInfo *pInfo);

sceKernelGetPhyMemPartInfoCoreForKernel

Version	NID
0.931	not present
0.990-3.61	0x3650963F
3.63-3.65	0xB9B69700

int sceKernelGetPhyMemPartInfoCoreForKernel(SceKernelPhyMemPart *pPhyMemPart, ScePhyMemPartInfoCore *pInfo);

sceKernelGetPhyMemPartInfoForDebuggerForKernel

Version	NID
0.990-1.50	not present
3.60-3.61	0x54E85275
3.63	0x73E03A38

info size is 0xB0-bytes.

int sceKernelGetPhyMemPartInfoForDebuggerForKernel(SceKernelPhyMemPart *pPhyMemPart, void *pInfo);

sceKernelGrowPhyMemPartForKernel

Version	NID
0.990-3.61	0x6B3F4102
3.63	0x5B434019

Calls sceKernelGrowPhyMemPartWithFlagsForKernel with flags = 0.

int sceKernelGrowPhyMemPartForKernel(SceKernelPhyMemPart *pPhyMemPart, SceSize psize);

sceKernelGrowPhyMemPartByPbaseForKernel

Version	NID
0.990	not present
3.60-3.61	0x775AA5E3
3.63	0x36FDA794

Temp name was sceKernelGrowPhyMemPartWithFlagsForKernel.

Grows physical memory partition with pbase.

int sceKernelGrowPhyMemPartByPbaseForKernel(SceKernelPhyMemPart *pPMP, SceUIntPtr pbase, SceSize psize);

sceKernelGetGrownPhyMemPartSizeForKernel

Version	NID
0.990	not present
3.60-3.61	0x4D809B47
3.63	0xBC36755F

This is a guessed name.

Returns a global variable. This global variable is either a size or offset or address and is incremented by sceKernelGrowPhyMemPartWithFlagsForKernel.

int sceKernelGetGrownPhyMemPartSizeForKernel(void);

SceSysmemForKernel_153A08A0

Version	NID
0.990-3.61	0x153A08A0
3.63	0x6D563733

Adds 1 to pPhyMemPart->nClient using SceSysmem#sceKernelCpuAtomicAddAndGet32ForDriver, and returns its new value.

SceUInt32 SceSysmemForKernel_153A08A0(SceKernelPhyMemPart* pPhyMemPart);

sceKernelPhyMemPartAllocPhyPageForKernel

Version	NID
3.60-3.61	0xD449547B
3.63	0xB488C82E

This is a guessed name.

sceKernelResetPhyMemPartForKernel

Version	NID
3.60	0xEEB85560
3.65	0x9B7E673F

Used by SceProcessmgr#sceKernelResetGameBudgetForKernel.

Called with same argument as #sceKernelSetPhyPartGameForKernel.

int sceKernelResetPhyMemPartForKernel(SceKernelPhyMemPart *pPhyMemPart);

sceKernelShowPhyMemPartForKernel

Version	NID
3.60-3.61	0x5C257482
3.63-3.65	0x8F0B5536

Prints information about a Physical Memory Partition.

This function is only implemented in internal system software. In external system software, it is replaced with a stub that does nothing.

SceInt32 sceKernelShowPhyMemPartForKernel(SceKernelPhyMemPart* pPMP);

sceKernelAllocKernelHeapForKernel

Version	NID
0.931-0.990	0x432EADA6
3.60	not present

int sceKernelAllocKernelHeapForKernel(SceSize size);

sceKernelGetHeapInfoForKernel

Version	NID
0.931-3.61	0x91733EF4
3.63	0x17DB1A0A

// 0.931-0.990:
int sceKernelGetHeapInfoForKernel(SceUID heapid, SceKernelHeapInfo *pInfo);

// 3.60:
int sceKernelGetHeapInfoForKernel(SceUID heapid, SceUInt32 level, SceKernelHeapInfo *pInfo);

sceKernelGetHeapInfoAllChunkForKernel

Version	NID
0.931-0.990	0xAC4C0EB1
3.60	not present

int sceKernelGetHeapInfoAllChunkForKernel(SceUID heapid, SceKernelHeapInfo *pInfo);

sceKernelGetHeapInfoByPtrForKernel

Version	NID
0.931-0.990	not present
3.60-3.61	0x68451777
3.63	0x80A75187

Temp name was sceKernelGetHeapInfoByPointerForKernel.

int sceKernelGetHeapInfoByPtrForKernel(void *pObject, SceKernelHeapInfo *pInfo);

sceKernelGetFixedHeapInfoForKernel

Version	NID
3.60-3.61	0x4FA4A624
3.63	0x890D9160

int sceKernelGetFixedHeapInfoForKernel(SceUID heapid, SceKernelFixedHeapInfo *pInfo);

sceKernelGetFixedHeapInfoByPointerForKernel

Version	NID
0.990-3.61	0x219E90FD
3.63	0xA24D2C8D

int sceKernelGetFixedHeapInfoByPointerForKernel(SceUIDFixedHeapObject *pFixedHeap, SceKernelFixedHeapInfo *pInfo);

sceKernelFixedHeapSetHookForKernel

Version	NID
3.60-3.61	0x8C8E2DD1
3.63	0xD4511A52

int sceKernelFixedHeapSetHookForKernel(SceUID heapid, void *hookdata);

sceKernelNameHeapInsertForKernel

Version	NID
0.990-3.61	0x08AB3DAE
3.63	0xB628B46B

int sceKernelNameHeapInsertForKernel(char *name, uint32_t flags, uint32_t *out);

sceKernelNameHeapGetInfoForKernel

Version	NID
0.990	not present
3.60-3.61	0xE443253B
3.63	0x01194C2E

sceKernelCreateObjectHeapForKernel

Version	NID
3.60-3.61	0x36830F46
3.63	0x9D8F3BE8

int sceKernelCreateObjectHeapForKernel(SceUID pid, SceBool a2, SceFixedHeapHook *pHeapHook, SceKernelObjectHeap **ppObjectHeap);

sceKernelObjectHeapAllocForKernel

Version	NID
3.60-3.61	0x7FDF483A
3.63	0xEBFC8E10

void *sceKernelObjectHeapAllocForKernel(SceKernelObjectHeap *pObjectHeap, SceSize size);

sceKernelObjectHeapSetResourceLimitForKernel

Version	NID
3.60-3.61	0x98E6905B
3.63	0xDFA1EB57

sceKernelObjectHeapSetResourceLimitAllForKernel

Version	NID
3.60-3.61	0x5409397F
3.63	0x067F2550

int sceKernelObjectHeapSetResourceLimitAllForKernel(int a1, int a2, int a3);

sceUIDCreateEntryHeapForKernel

Version	NID
0.990-3.60	0x19CAEF35
3.65	0x89BEF058

int sceUIDCreateEntryHeapForKernel(void);

sceUIDDeleteEntryHeapForKernel

Version	NID
0.990-3.60	0xF0C3FCFC
3.65	0xF6D09BD9

int sceUIDDeleteEntryHeapForKernel(SceUID uid);

sceUIDEntryHeapCloseAllPUIDForKernel

Version	NID
0.931-3.60	0xFAF96C1F
3.65	0x133024A5

int sceUIDEntryHeapCloseAllPUIDForKernel(SceUID uid);

sceKernelUIDEntryHeapGetInfoForKernel

Version	NID
0.990	not present
3.60-3.61	0x686AA15C
3.63	0xCCD47B97

Official name may also be sceUIDEntryHeapGetInfoForKernel (seen in 4.00).

typedef struct SceUIDEntryHeapInfo {
    SceSize size; //<! Size of this structure (0x18)
    SceSize objectSize;
    SceSize totalHeapSize;
    SceSize totalItemCount;
    SceSize unk10;
    SceSize unk14;
} SceUIDEntryHeapInfo;

SceInt32 sceKernelUIDEntryHeapGetInfoForKernel(SceUID entryHeapId, SceUIDEntryHeapInfo* pInfo);

sceUIDEntryHeapSetHookForKernel

Version	NID
3.60-3.61	0xCD985AEB
3.63	0x666C878F

?Implemented in internal system software.? Not implemented in external system software.

sceKernelPrintHeapSegmentListForKernel

Version	NID
3.60-3.61	0x2EE50533
3.63	0x82059651

?Implemented in internal system software.? Not implemented in external system software.

sceGUIDRegisterForKernel

Version	NID
0.990-3.61	0xAF42AAD5
3.63	0x6DB44A42

int sceGUIDRegisterForKernel(SceClass *pClass, const char *name, SceKernelObject *pObject);

sceGUIDUnregisterForKernel

Version	NID
0.931-0.990	0xE79BBCF2
3.60	not present

int sceGUIDUnregisterForKernel(SceUID uid);

sceGUIDOpenByGUIDForKernel

Version	NID
0.990-3.61	0xCF53EEE4
3.63	0x89D33DF0

sceGUIDNameForKernel

Version	NID
0.990.000-1.060.031	0x250EE289
1.50-3.740.011	not present

char *sceGUIDNameForKernel(SceUID uid);

sceGUIDtoClassForKernel

Version	NID
0.990-3.61	0x66636970
3.63	0x368F1C36

SceClass *sceGUIDtoClassForKernel(SceUID uid);

sceGUIDGetObjectWithClassForKernel

Version	NID
0.990-3.61	0x7ABFA9A7
3.63	0x0E43E113

Possible name are sceUIDGetObjectWithClassForKernel or sceUIDtoProcessForKernel.

int sceGUIDGetObjectWithClassForKernel(SceUID uid, SceClass *pClass, SceKernelObject **obj);

sceGUIDGetUIDVectorByClassForKernel

Version	NID
0.931.010-3.600.011	0xEC7D36EF
3.630.011-3.740.011	0x52137FA3

Copy UIDs to pVector by referring to all objects created by pClass.

/*
 * nVector - maximum number of copied UIDs
 * ret_num - number of retrieved UIDs
 */
int sceGUIDGetUIDVectorByClassForKernel(SceClass *pClass, SceUInt32 vis_level, SceUID *pVector, SceUInt32 nVector, SceUInt32 *ret_num);

sceGUIDGetUIDVectorWeakByClassForKernel

Version	NID
0.931.010-1.060.031	not present
1.500.151-3.610.011	0x59F577E8
3.630.011-3.740.011	0xE9957329

Copy UIDs to pVector by referring to all objects created by pClass.

/*
 * nVector - maximum number of copied UIDs
 * ret_num - number of retrieved UIDs
 */
int sceGUIDGetUIDVectorWeakByClassForKernel(SceClass *pClass, SceUInt32 vis_level, SceUID *pVector, SceUInt32 nVector, SceUInt32 *ret_num);

sceGUIDGetEntryForKernel

Version	NID
3.60-3.61	0x45F2A59C
3.63	0xFF464A49

int sceGUIDGetEntryForKernel(SceUID guid, SceGUIDEntry **ppEntry);

sceGUIDGetEntryInfoAllForKernel

Version	NID
0.990.000-3.610.011	0x2A79C51C
3.630.011-3.740.011	0x3BF0DE65

int sceGUIDGetEntryInfoAllForKernel(SceUInt32 vis_level, SceUID guid, SceUID *pVector, SceUInt32 nVector, void *pInfo);

sceGUIDGetEntryInfoClassForKernel

Version	NID
0.990.000-3.610.011	0xE90CFD62
3.630.011-3.740.011	0x71E934DB

int sceGUIDGetEntryInfoClassForKernel(SceUID uid, SceClass *pClass, SceUInt32 vis_level, SceUID *pVector, SceUInt32 nVector, void *pInfoClass);

scePUIDGetEntryInfoAllForKernel

Version	NID
0.931.010-1.692.000	not present
1.800.071-3.610.011	0x2770A7D7
3.630.011-3.740.011	0x3C3005EE

int scePUIDGetEntryInfoAllForKernel(SceUID pid, SceClass *pClass, SceUInt32 vis_level, SceUID *pVector, SceUInt32 nVector, void *pInfo);

sceKernelGetPhyPartKernelForKernel

Version	NID
0.931-3.61	0x4D38F861
3.63-3.65	0x0164D817

return gpPhyPartKernel;

void *sceKernelGetPhyPartKernelForKernel(void);

sceKernelGetPhyPartToolForKernel

Version	NID
0.990-3.61	0xF8E95A5A
3.63-3.65	0x0B1B4ACA

void *sceKernelGetPhyPartToolForKernel(void);

sceKernelGetPhyPartGameForKernel

Version	NID
3.60-3.61	0xB60568F9
3.63-3.65	0x62800A6B

void *sceKernelGetPhyPartGameForKernel(void);

sceKernelSetPhyPartGameForKernel

Version	NID
3.60-3.61	0x77876A8D
3.63-3.65	0x3753C584

void sceKernelSetPhyPartGameForKernel(void *pPhyPart);

sceKernelPhyMemLowAllocForKernel

Version	NID
0.931-3.61	0x5E169FEF
3.63	0xEA98CCE1

Allocate a range of physically contiguous "pages" from a PhyMemLow object.

// type must be one of SCE_KERNEL_PHYMEMLOW_TYPE (0x10001, 0x10002 or 0x20001)
// size and alignment must be aligned to the target PHYMEMLOW granularity
// On success, *pOut contains the base physical address of a range with the provided size
SceInt32 sceKernelPhyMemLowAllocForKernel(SceUInt32 type, SceSize size, SceSize alignment, SceUIntPAddr* pOut);

sceKernelPhyMemLowPA2VAForKernel

Version	NID
0.931-3.61	0x0FD6B756
3.63	0x2CFD8C9A

// type must be 0x10002
int sceKernelPhyMemLowPA2VAForKernel(int type, void *PA, void **pVA);

sceKernelGetPhyMemLowInfoForKernel

Version	NID
0.931-0.990	0x06A4DA6C
3.60	not present

// type must be one of SCE_KERNEL_PHYMEMLOW_TYPE (0x10001, 0x10002 or 0x20001)
SceInt32 sceKernelGetPhyMemLowInfoForKernel(SceUInt32 type, SceKernelPhyMemLowInfo *info);

sceKernelPhyMemLowFreeForKernel

Version	NID
0.931-3.61	0x18B99FDD
3.63	0x844DF3DA

Free a range of physical "pages" from a PhyMemLow object.

// type must be one of SCE_KERNEL_PHYMEMLOW_TYPE (0x10001, 0x10002 or 0x20001)
SceInt32 sceKernelPhyMemLowFreeForKernel(SceUInt32 type, SceUIntPAddr pbase, SceSize size);

sceKernelAllocMemBlockByCommandForKernel

Version	NID
3.60-3.61	0xCA91B9D5
3.63	0x455B0A4C

typedef struct SceKernelMemBlockAllocCommand { // size is 0x94 on FW 3.65
   SceSize size; // Size of this structure
   SceUInt32 code;
   char* name;
   char unk_8[0x74];
   void* typeInfo;
   char unk_0x84[0x10];
} SceKernelMemBlockAllocCommand;

int sceKernelAllocMemBlockByCommandForKernel(SceKernelMemBlockAllocCommand *pCommand);

sceKernelAllocSimpleMemBlockForKernel

Version	NID
0.990-3.61	0xF81F4672
3.63	0x814CDCC5

typedef struct SceKernelSimpleMemBlock {
	char unk_0[0x14];
	void *base;
	char unk_18[0x14];
	void *PhyPage;
	SceSize size;
} SceKernelSimpleMemBlock;

int sceKernelAllocSimpleMemBlockForKernel(const char *name, SceKernelMemBlockType type, SceSize vsize, SceKernelSimpleMemBlock *smb);

sceKernelGetSimpleMemBlockBaseForKernel

Version	NID
0.990-3.61	0x0A8D14EC
3.63	0x39D5A3B7

int sceKernelGetSimpleMemBlockBaseForKernel(SceKernelSimpleMemBlock *smb, void **base);

sceKernelGetMemBlockInfoAllForKernel

Version	NID
3.60-3.61	0xFEF54604
3.63	0x1D19C864

int sceKernelGetMemBlockInfoAllForKernel(void *pPart, int level, void *pInfoBuffer);

sceKernelGetMemBlockInfoSimpleForKernel

Version	NID
0.990-3.61	0x2364A170
3.63	0xBA441FD0

int sceKernelGetMemBlockInfoSimpleForKernel(SceUID uid, SceKernelMemBlockInfoSimple *pInfo);

sceKernelGetMemBlockTypeForKernel

Version	NID
3.60-3.61	0x289BE3EC
3.63	0xD44FE44B

/***
 * Gets the memory block type of a memory block
 *
 * @param[in] uid - SceUID of the memory block
 * @param[out] type - Type of the memory block identified by uid
 *
 * @return 0 on success, < 0 on error.
*/
int sceKernelGetMemBlockTypeForKernel(SceUID uid, unsigned int *type);

sceKernelFreeSimpleMemBlockForKernel

Version	NID
0.990-3.61	0xA1FFA2C9
3.63	0xA4DB88E1

sceKernelAllocPartitionMemBlockForKernel

Version	NID
0.931-3.60	0x5FFE4B79
3.65	0x6DB46017

Temp name was sceKernelAllocSystemCallTableForKernel.

SceUID sceKernelAllocPartitionMemBlockForKernel(SceUID part, const char *name, SceKernelMemBlockType type, SceSize size, const struct SceKernelAllocMemBlockOptKernel *pOpt);

sceKernelPartitionGetInfoForKernel

Version	NID
3.60-3.61	0x7BE4D3D1
3.63	0xFB101B86

int sceKernelPartitionGetInfoForKernel(SceUID part_id, void *pInfo);

sceKernelGetPhyPageResetForKernel

Version	NID
0.990-3.61	0xEB350679
3.63	0x8FD11E02

void *sceKernelGetPhyPageResetForKernel(void);

sceKernelFreePhyPageForKernel

Version	NID
0.990-3.61	0x00BC5B4A
3.63	0x193A9D2F

int sceKernelFreePhyPageForKernel(uint32_t a1, int pPage, uint32_t a3, uint32_t a4);

sceGUIDKernelCreateForKernel

Version	NID
0.990	0xE6FAD50A
3.60	not present

Create a GUID with default attribute (0x30000).

int sceGUIDKernelCreateForKernel(SceClass *pClass, const char *name, SceKernelObject **ppEntry);

sceGUIDKernelCreateWithAttrForKernel

Version	NID
0.990-3.61	0x53E1FFDE
3.63	0x6D26B066

Create a GUID with the specified attribute.

int sceGUIDKernelCreateWithAttrForKernel(SceClass *pClass, const char *name, SceUInt32 attr, SceKernelObject **ppEntry);

sceGUIDKernelCreateWithOptForKernel

Version	NID
0.990-0.995	not present
0.996-3.60	0xDF0288D7
3.65	0xFB6390CE

This is a guessed name. Temp name was sceKernelCreateUidObjForKernel, scePUIDKernelCreateWithAttrForKernel.

typedef struct SceGUIDKernelCreateOpt { // size is at least 0x20 on FW 3.60
	SceUInt32 attr;
	SceUInt32 field_4;
	SceUID uid;
	SceUID pid;
	SceUInt32 field_10;
	SceUInt32 classAttr;
	SceUInt32 uidAttr;
	SceUID pid2;
} SceGUIDKernelCreateOpt;

SceUID sceGUIDKernelCreateWithOptForKernel(SceClass *pClass, const char *name, SceGUIDKernelCreateOpt *pOpt, SceKernelObject **ppEntry);

SceSysmemForKernel_BD33EDDF

Version	NID
0.931	0xBD33EDDF
3.60	not present

Gets thread's name. Returns 0 on success.

int SceSysmemForKernel_BD33EDDF(int maybe_thid, char **pThreadName);

scePUIDGetAttrForKernel

Version	NID
3.60-3.61	0x86E83C0D
3.63	0x96BD47D1

int scePUIDGetAttrForKernel(SceUID pid, SceUID uid, void *pAttr);

scePUIDReleaseObjectForKernel

Version	NID
0.990-3.61	0x3FCA782B
3.63	0xCE561224

int scePUIDReleaseObjectForKernel(SceUID pid, SceUID puid);

scePUIDGetInfoForKernel

Version	NID
0.990	not present
3.60-3.61	0x12ED88AE
3.63	0x857701D4

// pInfo size is 0x14 bytes
int scePUIDGetInfoForKernel(SceUID pid, SceUID puid, void *pInfo);

sceGUIDGetVisibilityLevelForKernel

Version	NID
3.60-3.61	0xC69666C3
3.63	0x4E923101

sceGUIDSetVisibilityLevelForKernel

Version	NID
3.60-3.61	0xCB8D03C0
3.63	0xE8CC2166

Sets visibilityLevel into guid's GUIDEntry.

int sceGUIDSetVisibilityLevelForKernel(SceUID guid, int visibilityLevel);

sceGUIDFindByObjectForKernel

Version	NID
0.990-3.61	0x95ABFDC3
3.63	0xEC90AA11

// return value: to reverse, should be either SceUID guid or void* pObj
int sceGUIDFindByObjectForKernel(uint32_t uid_or_ptr);

sceGUIDFindByNameForKernel

Version	NID
3.60-3.61	0xCEBA8031
3.63	0xBDE00106

// return value: to reverse, should be either SceUID guid or void* pObj
int sceGUIDFindByNameForKernel(const char* name);

SceSysmemForKernel_942D15FC

Version	NID
3.60-3.61	0x942D15FC
3.63	0xEB48682E

Computes MurmurHash.

Used to get GUID by name.

SceUInt32 SceSysmemForKernel_942D15FC(const char *key, SceSize len, SceUInt32 seed);

sceGUIDFindByNameAllForKernel

Version	NID
3.60-3.61	0x4B5C85AC
3.63	0xF49C0BE8

// return value: to reverse, should be either SceUID guid or void* pObj
int sceGUIDFindByNameAllForKernel(const char* name);

sceGUIDGetPIDForKernel

Version	NID
3.60-3.61	0xCF5A2311
3.63	0xBD42A0FC

Returns Process ID for guid.

SceUID sceGUIDGetPIDForKernel(SceUID guid);

sceGUIDSetPIDForKernel

Version	NID
3.60-3.61	0x812E7A53
3.63	0x46DF8C8A

Sets Process ID for guid.

int sceGUIDSetPIDForKernel(SceUID guid, SceUID pid);

sceGUIDSetCNOAForKernel

Version	NID
3.60-3.61	0x8D6AF468
3.63	0x5EDDEEB5

Setting Class Name Object Attr.

sceGUIDSetForKernel

Version	NID
0.931-3.61	0xD7B323EB
3.63	0xBF275C5A

Re setting the GUID on an object that already has a uid assigned may cause the system to malfunction.

int sceGUIDSetForKernel(SceUID guid, SceClass *pClass, const char *name, SceKernelObject *pObject);

sceUIDReferObjectWithLevelForKernel

Version	NID
0.990	0xF79B52B2
3.60	not present

int sceUIDReferObjectWithLevelForKernel(SceUID uid, SceUInt32 level, SceKernelObject **ppEntry);

sceGUIDReferForKernel

Version	NID
3.60-3.61	0xB3E2AA7A
3.63	0x188C8742

int sceGUIDReferForKernel(SceUID pid, int guid);

sceKernelAllocForKernel

Version	NID
0.990-3.60	0xC0A4D2F3
3.65	0x85571907

void *sceKernelAllocForKernel(SceSize len);

sceKernelAllocWithOptForKernel

Version	NID
3.60-3.61	0xA2CD1697
3.63	0xCF3C3F7A


typedef struct SceAllocOpt {
    SceSize size;   // 0x14
    SceSize data04; // maybe len align?
    SceSize align;
    int data0C;
    int data10; 
} SceAllocOpt;

void *sceKernelAllocWithOptForKernel(SceSize len, SceAllocOpt *pOpt);

sceKernelFreeForKernel

Version	NID
0.990-3.60	0xABAB0FAB
3.65	0x4233C16D

void sceKernelFreeForKernel(void *ptr);

SceSysmemForKernel_C38D61FC

Version	NID
0.990	0xC38D61FC
3.60	not present

Calls #SceSysmemForDriver_89A44858.

sceUIDGetObjectForKernel

Version	NID
0.931-0.990	0xC4893914
3.60	not present

Calls #sceGUIDGetObjectForDriver.

int sceUIDGetObjectForKernel(SceUID uid, SceKernelObject **ppEntry);

scePUIDReferObjectForKernel

Version	NID
0.990-3.61	0x620E00E7
3.63	0x2C15615F

int scePUIDReferObjectForKernel(SceUID pid, SceUID puid, SceObject **ppObject);

SceSysmemForKernel_7C797940

Version	NID
0.931-0.990	0x7C797940
3.60	not present

Calls #SceSysmemForKernel_620E00E7 or #sceGUIDReferObjectForDriver.

sceUIDtoObjectForKernel

Version	NID
0.990-3.60	0xED221825
3.65	0xFA6C098C

Calls SceSysmem#sceGUIDGetObjectForDriver.

SceKernelObject *sceUIDtoObjectForKernel(SceUID uid);

sceKernelVSlotMapProcMemoryForKernel

Version	NID
3.60-3.61	0xFAD03241
3.63	0x14D3807B

int sceKernelVSlotMapProcMemoryForKernel(SceUID pid, void* addr, SceSize size, SceUInt32 flag, SceKernelVSlot *pVslot, int *pBaseAddrOrOffset);

sceKernelVSlotUnmapProcMemoryForKernel

Version	NID
3.60-3.61	0x789CD5BF
3.63	0x4EEF69C7

int sceKernelVSlotUnmapProcMemoryForKernel(SceKernelVSlot* pVslot);

SceSysmemForKernel_48D87E17

Version	NID
0.990-3.61	0x48D87E17
3.63	0x1380E144

SceSysmemForKernel_9C7B62AB

Version	NID
0.990-3.61	0x9C7B62AB
3.63	0x634D0D0C

// name max length is 31 characters
int SceSysmemForKernel_9C7B62AB(const char *name, SceUInt32 flag);

sceFixedHeapAllocObjectForKernel

Version	NID
3.60-3.61	0xC8672A3D
3.63	0xABA5313C

This is a guessed name.

void *sceFixedHeapAllocObjectForKernel(SceUIDFixedHeapObject *pFixedHeap);

SceSysmemForKernel_01DE3AB7

Version	NID
3.60-3.61	0x01DE3AB7
3.63	0xF57A97A0

Return 0.

SceSysmemForKernel_07FEBBCA

Version	NID
3.60-3.61	0x07FEBBCA
3.63	0xDCEF10B2

SceSysmemForKernel_080BA2F3

Version	NID
3.60-3.61	0x080BA2F3
3.63	0x2F526AB8

SceSysmemForKernel_114E6476

Version	NID
3.60-3.61	0x114E6476
3.63	0x5FD15C6E

SceSysmemForKernel_FDC0EA11

Version	NID
3.60-3.61	0xFDC0EA11
3.63	0x8EE8B917

SceSysmemForKernel_F1433852

Version	NID
3.60-3.61	0xF1433852
3.63	0x0B36F7F9

SceSysmemForKernel_ECF9435A

Version	NID
3.60-3.61	0xECF9435A
3.63	0xFCB5745A

Writes nWords times the 4-byte ch starting at usermode address u_dst. Write is performed with the STRT instruction and DACR=0x15450FC3 (same as |sceKernelCopyToUserTextDomain - required because NID tables are in RX segments).

Used by SceKernelModulemgr to overwrite NID tables once a module's imports are bound with a random value from Bigmac RNG. This overwrite was called "NID Poisoning" by Team Molecule.

int SceSysmemForKernel_ECF9435A(void *u_dst, SceUInt32 ch, SceUInt32 nWords);

SceSysmemForKernel_ECC68E7B

Version	NID
3.60-3.61	0xECC68E7B
3.63	0x05822B82

SceSysmemForKernel_EC1293D2

Version	NID
3.60-3.61	0xEC1293D2
3.63	0x40965FD1

SceSysmemForKernel_E68A9F1B

Version	NID
3.60-3.61	0xE68A9F1B
3.63	0x1DE4953F

sceKernelCheckOpenVMDomainForKernel

Version	NID
2.000.081-3.610.011	0xD514BB56
3.630.000-3.740.011	0x4E6D8BC3

Returns 2 if Virtual Machine is open, 0 else. Returns 0x80027101 on error.

SceUInt32 sceKernelCheckOpenVMDomainForKernel(void);

SceSysmemForKernel_131CEF52

Version	NID
3.60-3.61	0x131CEF52
3.63	0x17D3D4BD

void *SceSysmemForKernel_131CEF52(SceKernelObjectHeap *pObjectHeap, SceSize size);

SceSysmemForKernel_17F1AA22

Version	NID
3.60-3.61	0x17F1AA22
3.63	0x31FA81B5

Return 0.

SceSysmemForKernel_1E11F41D

Version	NID
3.60-3.61	0x1E11F41D
3.63	0x6DBDA03B

Return 0.

SceSysmemForKernel_210DB518

Version	NID
3.60-3.61	0x210DB518
3.63	0x1F84FE44

SceUIDPartitionObject *SceSysmemForKernel_1F84FE44(void *pAS, int pindex);

SceSysmemForKernel_21285F40

Version	NID
3.60-3.61	0x21285F40
3.63	0x7CDB7655

SceSysmemForKernel_22708F14

Version	NID
3.60-3.61	0x22708F14
3.63	0x456ECB54

SceSysmemForKernel_22A26637

Version	NID
3.60-3.61	0x22A26637
3.63	0xAD19285A

SceSysmemForKernel_22F79E82

Version	NID
3.60-3.61	0x22F79E82
3.63	0x201E970B

SceSysmemForKernel_2658EE0A

Version	NID
3.60-3.61	0x2658EE0A
3.63	0x2C7B8D65

Return 0.

SceSysmemForKernel_C6F04370

Version	NID
3.60-3.61	0xC6F04370
3.63	0x02DAD732

SceSysmemForKernel_C2F7D8A4

Version	NID
3.60-3.61	0xC2F7D8A4
3.63	0x797C858B

SceSysmemForKernel_C0BF149E

Version	NID
3.60-3.61	0xC0BF149E
3.63	0x100B4029

scePUIDGetPUIDVectorByGUIDForKernel

Version	NID
0.931.010-2.06	not present
2.100.081-3.610.011	0xBF04FC83
3.630.011-3.740.011	0xCE16AD91

int scePUIDGetPUIDVectorByGUIDForKernel(SceUID pid, SceUID guid, SceUInt32 vis_level, SceUID *pVector, SceUInt32 nVector, SceUInt32 *ret_num);

SceSysmemForKernel_BF0294E4

Version	NID
3.60-3.61	0xBF0294E4
3.63	0x791D6205

SceSysmemForKernel_BC2E2B2B

Version	NID
3.60-3.61	0xBC2E2B2B
3.63	0x42834422

Return 0.

SceSysmemForKernel_B8D769C6

Version	NID
3.60-3.61	0xB8D769C6
3.63	0xDBEACE2C

int SceSysmemForKernel_B8D769C6(SceKernelObjectHeap *pObjectHeap, void *info);

SceSysmemForKernel_B543A23C

Version	NID
3.60-3.61	0xB543A23C
3.63	0x9F1A9AA6

SceSysmemForKernel_B339A865

Version	NID
3.60-3.61	0xB339A865
3.63	0x320E907F

Returns 0.

SceSysmemForKernel_AD5A83E3

Version	NID
3.60-3.61	0xAD5A83E3
3.63	0xBF70207B

SceSysmemForKernel_A88F6D88

Version	NID
3.60-3.61	0xA88F6D88
3.63	0x441E6BE9

SceSysmemForKernel_A504BA60

Version	NID
3.60-3.61	0xA504BA60
3.63	0xCAB15F74

SceSysmemForKernel_9C53F457

Version	NID
3.60-3.61	0x9C53F457
3.63	0x9C23DFF7

SceSysmemForKernel_8FB73A29

Version	NID
3.60-3.61	0x8FB73A29
3.63	0x17F12DCE

SceSysmemForKernel_8B07BB52

Version	NID
3.60-3.61	0x8B07BB52
3.63	0x16A54BFE

SceSysmemForKernel_876A7F44

Version	NID
3.60-3.61	0x876A7F44
3.63	0xF3DB2D71

SceSysmemForKernel_7FD757FE

Version	NID
3.60-3.61	0x7FD757FE
3.63	0x660DC18A

int SceSysmemForKernel_7FD757FE(SceKernelObjectHeap *pObjectHeap, SceUID pid, SceUID heapid);

SceSysmemForKernel_7DC46969

Version	NID
3.60-3.61	0x7DC46969
3.63	0x8450BFF7

Returns 1.

SceSysmemForKernel_72E7BFAC

Version	NID
3.60-3.61	0x72E7BFAC
3.63	0x93D0A183

SceSysmemForKernel_71869119

Version	NID
3.60-3.61	0x71869119
3.63	0x6E82D5A0

SceSysmemForKernel_6BB6AF94

Version	NID
3.60-3.61	0x6BB6AF94
3.63	0x03A2CAF0

SceSysmemForKernel_68CB9266

Version	NID
3.60-3.61	0x68CB9266
3.63	0x3717C322

Could be named sceKernelGetKernelFixedHeapForKernel.

SceSysmemForKernel_6427560F

Version	NID
3.60-3.61	0x6427560F
3.63	0xB591E49F

SceSysmemForKernel_64133268

Version	NID
3.60-3.61	0x64133268
3.63	0x40870E74

SceSysmemForKernel_61C2AA52

Version	NID
3.60-3.61	0x61C2AA52
3.63	0x48D2E408

SceSysmemForKernel_60735311

Version	NID
3.60-3.61	0x60735311
3.63	0xD124075A

sceFixedHeapFreeObjectForKernel

Version	NID
3.60-3.61	0x571660AA
3.63	0x93344755

This is a guessed name.

int sceFixedHeapFreeObjectForKernel(SceUIDFixedHeapObject *pFixedHeap, void *pObject);

SceSysmemForKernel_53A2E272

Version	NID
3.60-3.61	0x53A2E272
3.63	0x1FF2749A

SceSysmemForKernel_48750A5A

Version	NID
3.60-3.61	0x48750A5A
3.63	0x7F7D5C4A

SceSysmemForKernel_46A5CB84

Version	NID
3.60-3.61	0x46A5CB84
3.63	0xC3F9607E

SceSysmemForKernel_43DFCE89

Version	NID
3.60-3.61	0x43DFCE89
3.63	0xBD625136

sceKernelFixedHeapSetHookByPointerForKernel

Version	NID
3.60-3.61	0x3EC2345B
3.63	0x811C452B

This is a guessed name.

int sceKernelFixedHeapSetHookByPointerForKernel(SceUIDFixedHeapObject *pFixedHeap, void *a2);

SceSysmemForKernel_3B75CBED

Version	NID
3.60-3.61	0x3B75CBED
3.63	0x857408DA

SceSysmemForKernel_3203AE64

Version	NID
3.60-3.61	0x3203AE64
3.63	0x66489B4B

SceSysmemForKernel_2791F109

Version	NID
3.60-3.61	0x2791F109
3.63	0x5C0FC6BE

SceSysmemForDriver

sceKernelProcessGetContextForDriver

Version	NID
1.80-3.74	0x2ECF7944

This is a guessed name.

int sceKernelProcessGetMMUContextForDriver(SceUID pid, SceKernelMMUContext **ppCtx);

sceKernelProcessSwitchContextForDriver

Version	NID
0.990-3.74	0x2D711589

This is a guessed name.

int sceKernelProcessSwitchMMUContextForDriver(SceKernelMMUContext *new_context, SceKernelMMUContext *prev_context);

scePUIDOpenByGUIDForDriver

Version	NID
0.931-3.60	0xBF209859

Temp name was sceKernelCreateUserUidForDriver.

SceUID scePUIDOpenByGUIDForDriver(SceUID pid, SceUID uid);

scePUIDOpenByGUIDWithFlagsForDriver

Version	NID
0.990-3.60	0xCED1547B

Temp name was sceKernelCreateUserUidForClassForDriver.

SceUID scePUIDOpenByGUIDWithFlagsForDriver(SceUID pid, SceUID guid, SceUInt32 flags);

scePUIDOpenByNameForDriver

Version	NID
0.931-3.60	0x513B9DDD

Temp name was sceKernelCreateUserUidForNameForDriver.

SceUID scePUIDOpenByNameForDriver(SceUID pid, const char *name);

scePUIDOpenByNameWithClassForDriver

Version	NID
0.931-3.60	0x8DA0BCA5

Equivalent to scePUIDOpenByNameForDriver, but object's class is checked to be a subclass of provided pClass before opening.

SceUID scePUIDOpenByNameWithClassForDriver(ScePID pid, const char *name, SceClass *pClass);

scePUIDOpenByNameWithExactClassForDriver

Version	NID
0.990.000-3.010.031	0xB800123C
3.10-3.740.011	not present

This is a guessed name. Temp name was add_heap.

Equivalent to scePUIDOpenByNameWithClass, but the object's class must match exactly the provided pClass.

SceUID scePUIDOpenByNameWithExactClassForDriver(ScePID pid, const char *name, const SceClass *pClass);

scePUIDCloseForDriver

Version	NID
0.990-3.60	0x84A4AF5E

Temp name was sceKernelDeleteUserUidForDriver.

int scePUIDCloseForDriver(SceUInt32 pid, SceUID uid);

scePUIDSetNameForDriver

Version	NID
0.990-3.60	0x12624884

Temp name was sceKernelSetNameForPidForUidForDriver.

int scePUIDSetNameForDriver(SceUID pid, SceUID uid, const char *name);

scePUIDGetObjectForDriver

Version	NID
0.990-3.60	0xFE6D7FAE

Temp name was sceKernelGetObjectForPidForUidForDriver.

int scePUIDGetObjectForDriver(SceUID pid, SceUID uid, SceKernelObject **ppEntry);

scePUIDtoGUIDForDriver

Version	NID
0.990-3.60	0x45D22597

Temp name was sceKernelKernelUidForUserUidForDriver.

Process UID to Global UID.

SceUID scePUIDtoGUIDForDriver(SceUID pid, SceUID uid);

scePUIDtoGUIDWithClassForDriver

Version	NID
0.990	not present
3.60	0x184172B1

Temp name was sceKernelKernelUidForUserUidForClassForDriver.

SceUID scePUIDtoGUIDWithClassForDriver(SceUID pid, SceUID uid, SceClass *pClass);

scePUIDGetEntryHeapNameForDriver

Version	NID
0.990-3.60	0x09896EB7

Real name might be scePUIDGetEntryHeapNameForDriver. Temp name was sceKernelGetNameForPidByUidForDriver.

int scePUIDGetEntryHeapNameForDriver(SceUID pid, SceUID uid, char **pName);

scePUIDGetClassForDriver

Version	NID
0.990-3.60	0xE9728A12

Temp name was sceKernelGetClassForPidForUidForDriver.

int scePUIDGetClassForDriver(SceUID pid, SceUID uid, SceClass **ppClass);

sceUIDKernelCreateForDriver

Version	NID
0.990.000-1.060.031	0x7FC849B1
1.50-3.740.011	not present

Calls #sceGUIDKernelCreateForKernel.

Create a UID with default attribute (0x30000).

int sceUIDKernelCreateForDriver(SceClass *pClass, const char *name, SceKernelObject **ppEntry);

sceGUIDKernelCreateForDriver

Version	NID
0.931-0.990	not present
1.000.071-3.740.011	0x56A13E90

Temp name was sceUIDKernelCreate2ForDriver, sceKernelCreateUidObj2ForDriver.

Create a UID with default attribute (0x30000).

SceUID sceGUIDKernelCreateForDriver(SceClass *pClass, const char *name, SceKernelObject **ppEntry);

sceUIDOpenByNameForDriver

Version	NID
0.931-0.990	0x796881D6
3.60	not present

Calls #sceGUIDOpenByNameForDriver.

SceUID sceUIDOpenByNameForDriver(const char *name);

sceUIDCloseForDriver

Version	NID
0.990	0x32C5F628
3.60	not present

if (flag_or_addr_or_pid & 0x40000000) == 0 calls #sceGUIDCloseForDriver else #scePUIDCloseForDriver.

int sceUIDCloseForDriver(SceUID uid, SceUInt32 flag_or_addr_or_pid);

SceSysmemForDriver_F09A7D09

Version	NID
0.990	0xF09A7D09
3.60-3.74	not present

Calls #sceGUIDCloseForDriver.

int SceSysmemForDriver_F09A7D09(SceUID uid);

sceUIDGetDefaultClassForDriver

Version	NID
0.931-0.990	0xFE28F5EB
3.60	not present

SceClass *sceUIDGetDefaultClassForDriver(void);

sceUIDtoObjectForDriver

Version	NID
0.990	0xAB7AC3D1

This is a guessed name.

Calls #sceUIDtoObjectForKernel.

SceKernelObject *sceUIDtoObjectForDriver(SceUID uid);

sceUIDtoClassForDriver

Version	NID
0.990	0x65B9B393
3.60	not present

Calls #sceGUIDtoClassForKernel.

SceClass *sceUIDtoClassForDriver(SceUID uid);

sceUIDClassInitForDriver

Version	NID
0.931-0.990	0xE6D75E99
3.60	not present

int sceUIDClassInitForDriver(SceClass *pClass, const char *name, uint32_t uid_class, SceSize item_size, void *constructor, void *destructor);

sceUIDGetClassInfoAllForDriver

Version	NID
0.990	0x3EF32C6C
3.60	not present

int sceUIDGetClassInfoAllForDriver(SceClassInfo_0990 *vector, uint32_t maxNumClass, uint32_t *pNumClassInBuf);

sceGUIDCreateForDriver

Version	NID
0.990-3.60	0x89A44858

Temp name was sceKernelCreateUidObjForUidForDriver.

Create a GUID with default attribute (0x30000) for the specified UID.

SceUID sceGUIDCreateForDriver(SceClass *pClass, const char *name, SceUID guid, SceKernelObject **ppEntry);

sceGUIDOpenByNameForDriver

Version	NID
0.931-3.60	0xD76E7452

Temp name was sceKernelOpenUidForNameForDriver.

SceUID sceGUIDOpenByNameForDriver(const char *name);

sceGUIDCloseForDriver

Version	NID
0.990-3.60	0x047D32F2

Temp name was sceKernelDeleteUidForDriver.

int sceGUIDCloseForDriver(SceUID uid);

sceGUIDGetClassForDriver

Version	NID
0.990-3.60	0xC74B0152

Temp name was sceKernelGetClassForUidForDriver.

int sceGUIDGetClassForDriver(SceUID uid, SceClass **ppClass);

sceGUIDSetNameForDriver

Version	NID
1.50-3.60	0x4CFA4100

Temp name was sceKernelSetObjectForUidForDriver. Wrongfully named scePUIDSetNameForDriver.

Calls the same routine as sceGUIDSetForKernel, but passes NULL for pClass and pObject.

SceInt32 sceGUIDSetNameForDriver(SceUID guid, const char *name);

sceGUIDNameForDriver

Version	NID
0.990	0xB2BB6216
3.60	not present

char* sceGUIDNameForDriver(SceUID id);

sceGUIDGetNameForDriver

Version	NID
3.60	0xA78755EB

This is a guessed name, but near. Temp name was sceKernelGetNameForUidForDriver.

int sceGUIDGetNameForDriver(SceUID guid, char **pName);

sceGUIDGetName2ForDriver

Version	NID
3.60	0xE655852F

This is a guessed name, but near. Temp name was sceKernelGetNameForUid2ForDriver.

const char* sceGUIDGetName2ForDriver(SceUID guid);

sceGUIDGetObjectForDriver

Version	NID
0.990-3.60	0x0FC24464

Temp name was sceKernelGUIDGetObjectForDriver.

int sceGUIDGetObjectForDriver(SceUID uid, SceKernelObject **ppEntry);

sceGUIDReferObjectForDriver

Version	NID
3.60	0x0F5C84B7

Temp name was sceKernelGetObjectForUidForDriver.

int sceGUIDReferObjectForDriver(SceUID uid, SceKernelObject **ppEntry);

sceGUIDReferObjectWithLevelForDriver

Version	NID
0.990	not present
3.60	0xF6DB54BA

Temp name was sceKernelGetObjectForUidForAttrForDriver.

int sceGUIDReferObjectWithLevelForDriver(SceUID uid, SceUInt32 level, SceKernelObject **pEntry);

sceGUIDReferObjectWithClassLevelForDriver

Version	NID
0.990-3.60	0x77066FD1

int sceGUIDReferObjectWithClassLevelForDriver(SceUID guid, SceClass *pClass, SceUInt32 level, SceKernelObject **ppEntry);

sceGUIDReferObjectWithClassForDriver

Version	NID
0.990-3.60	0x00ED6C14

Temp name was sceKernelGetObjForUidForDriver.

int sceGUIDReferObjectWithClassForDriver(SceUID uid, SceClass *pClass, SceKernelObject **ppEntry);

sceGUIDReferObjectWithSubclassForDriver

Version	NID
0.990-3.60	0x72A98D17

Temp name was sceKernelGetObjectForUidForClassTreeForDriver.

int sceGUIDReferObjectWithSubclassForDriver(SceUID uid, SceClass *pClass, SceKernelObject **ppEntry);

sceGUIDReleaseObjectForDriver

Version	NID
0.990-3.60	0x149885C4

Temp name was sceKernelUidReleaseForDriver.

int sceGUIDReleaseObjectForDriver(SceUID uid);

sceKernelGetUIDClassForDriver

Version	NID
3.60	0x85336A1C

This is a guessed and bad name.

SceClass *sceKernelGetUIDClassForDriver(void);

sceKernelIsSubclassForDriver

Version	NID
0.990	0x6484D03E
3.60	not present

SceBool sceKernelIsSubclassForDriver(SceClass *parentClass, SceClass *class);

SceSysmemForDriver_6F2ACDAE

Version	NID
1.69	0x6F2ACDAE
1.80-3.74	not present

Temp name was switch_ttb_for_pid.

Changes the TTBR to point to the tables for a given PID.

int SceSysmemForDriver_6F2ACDAE(SceUID pid);

sceKernelAllocMemBlockForDriver

Version	NID
0.931-3.65	0xC94850C9

The interface is the same as the usermode version of this function, however more types can be specified and more options are in the pOpt argument.

To allocate a kernel RW block of memory, specify type = SCE_KERNEL_MEMBLOCK_TYPE_KERNEL_TMP_RW.

To allocate a block of memory with a specific physical address, specify type = SCE_KERNEL_MEMBLOCK_TYPE_KERNEL_IO_SO_RW or type = SCE_KERNEL_MEMBLOCK_TYPE_KERNEL_IO_RW, pOpt->attr = 2, and pOpt->pbase = physical address.

To allocate a block of memory that is kernel executable, specify type = SCE_KERNEL_MEMBLOCK_TYPE_KERNEL_RX.

To allocate a block of memory that is physically contiguous, specify type = 0x30808006, pOpt->attr = 0x200004 and an alignment to pOpt->alignment.

To allocate a block of memory inside the CDRAM, specify type = 0x40404006.

SceUID sceKernelAllocMemBlockForDriver(const char *name, SceKernelMemBlockType type, SceSize vsize, const struct SceKernelAllocMemBlockOptKernel *pOpt);

sceKernelAllocMemBlockForDebuggerForDriver

Version	NID
0.940-1.50	0x59F3159C

Same as #sceKernelAllocMemBlockForDriver but authorizes null pOpt.

SceUID sceKernelAllocMemBlockForDebuggerForDriver(const char *name, SceKernelMemBlockType type, SceSize vsize, SceKernelAllocMemBlockOptKernel *pOpt);

sceKernelAllocMemBlockWithInfoForDriver

Version	NID
0.990-3.60	0xD44F464D

Temp name was sceKernelAllocMemBlockExtForDriver.

SceUID sceKernelAllocMemBlockWithInfoForDriver(const char *name, SceKernelMemBlockType type, SceSize vsize, const struct SceKernelAllocMemBlockOptKernel *pOpt, SceKernelMemBlockInfo *pInfo);

sceKernelFreeMemBlockForDriver

Version	NID
0.931-3.65	0x009E1C61

int sceKernelFreeMemBlockForDriver(SceUID uid);

sceKernelFindMemBlockByAddrForDriver

Version	NID
0.990-3.60	0x8A1742F6

SceUID sceKernelFindMemBlockByAddrForDriver(const void *addr, SceSize size);

sceKernelFindProcMemBlockByAddrForDriver

Version	NID
0.990-3.60	0x857F1D5A

Temp name was sceKernelFindMemBlockByAddrForPidForDriver.

SceUID sceKernelFindProcMemBlockByAddrForDriver(SceUID pid, const void *addr, SceSize size);

sceKernelGetMemBlockAllocSizeForDriver

Version	NID
0.990.000-2.120.011	0x63E5754B
2.500.071-3.740.011	not present

This function was replaced since System Software version 2.500.071 by #sceKernelGetMemBlockAllocMapSizeForDriver.

int sceKernelGetMemBlockAllocSizeForDriver(SceUID memid, SceSize *pAllocSize);

sceKernelGetMemBlockAllocMapSizeForDriver

Version	NID
0.931.010-2.120.011	not present
2.500.071-3.740.011	0x78337B62

Temp name was sceKernelMemBlockGetSomeSizeForDriver.

This function is a replacement since System Software version 2.500.071 of #sceKernelGetMemBlockAllocSizeForDriver.

int sceKernelGetMemBlockAllocMapSizeForDriver(SceUID memid, SceSize *pAllocMapSize);

sceKernelGetMemBlockMemtypeByAddrForDriver

Version	NID
0.990-3.60	0xF3BBE2E1

Temp name was sceKernelFindMemBlockByAddrForDefaultSizeForDriver.

SceKernelMemoryType sceKernelGetMemBlockMemtypeByAddrForDriver(const void *addr);

sceKernelGetMemBlockPARangeForDriver

Version	NID
0.990-3.60	0x98C15666

Temp name was sceKernelGetMemBlockAddrPairForUidForDriver.

Returns the physical address and size (pRange) of the memory block if it is physically continuous.

int sceKernelGetMemBlockPARangeForDriver(SceUID uid, SceKernelPARange *pRange);

sceKernelGetMemBlockBaseForDriver

Version	NID
0.990-3.74	0xA841EDDA

/**
 * @brief Get mapped base address of memory block.
 *
 * Get base address of memory block.
 * @param[in]	uid		block id
 * @param[out]	ppBase		base address of memory block
 * @retval	SCE_OK		success
 * @retval	<SCE_OK		Error
 */
int sceKernelGetMemBlockBaseForDriver(SceUID uid, void **ppBase);

sceKernelGetMemBlockVBaseForDriver

Version	NID
3.60	0xB81CF0A3

Temp name was sceKernelGetMemBlockKernelPageForDriver.

int sceKernelGetMemBlockVBaseForDriver(SceUID uid, void **kernel_page);

sceKernelGetMemBlockMappedBaseForDriver

Version	NID
3.60	0x0B1FD5C3

int sceKernelGetMemBlockMappedBaseForDriver(SceUID uid, void **basep);

sceKernelGetMemBlockPAVectorForDriver

Version	NID
0.990-3.60	0x19A51AC7

Temp name was sceKernelGetMemBlockPaddrListForUidForDriver.

int sceKernelGetMemBlockPAVectorForDriver(SceUID uid, SceKernelPAVector *pPAV);

sceKernelGetMemBlockInfoForDriver

Version	NID
0.990-3.60	0xA73CFFEF

Temp name was sceKernelMemBlockGetInfoExForVisibilityLevelForDriver.

int sceKernelGetMemBlockInfoForDriver(SceUID uid, uint32_t level, SceKernelMemBlockInfoEx *pInfo);

sceKernelGetMemBlockInfoExForDriver

Version	NID
3.60	0x24A99FFF

This is a guessed name.

int sceKernelGetMemBlockInfoExForDriver(SceUID uid, SceKernelMemBlockInfoEx *pInfo);

sceKernelDecRefCountMemBlockForDriver

Version	NID
0.990-3.60	0xF50BDC0C

Temp name was sceKernelMemBlockDecRefCounterAndReleaseUidForDriver.

int sceKernelDecRefCountMemBlockDriver(SceUID uid);

sceKernelIncRefCountMemBlockForDriver

Version	NID
0.990-3.60	0xEAF3849B

Temp name was sceKernelMemBlockIncRefCounterAndReleaseUidForDriver.

int sceKernelIncRefCountMemBlockForDriver(SceUID uid);

sceKernelMemBlockType2MemtypeForDriver

Version	NID
0.931-3.60	0x20C811FA

int sceKernelMemBlockType2MemtypeForDriver(SceKernelMemBlockType type);

sceKernelMemBlockTypeGetPrivilegesForDriver

Version	NID
3.60	0x6A0792A3

int sceKernelMemBlockTypeGetPrivilegesForDriver(SceKernelMemBlockType type);

sceKernelMemBlockTypeGetUnknownForDriver

Version	NID
0.990-3.60	0xCB0F3A33

int sceKernelMemBlockTypeGetUnknownForDriver(SceKernelMemBlockType type);

sceKernelPartitionMapMemBlockForDriver

Version	NID
0.990-3.60	0x58D21746

Temp name was sceKernelMapBlockUserVisibleForDriver.

int sceKernelPartitionMapMemBlockForDriver(SceUID uid);

sceKernelRemapMemBlockForDriver

Version	NID
0.931-1.05	0x8D332AE1 (in ForKernel?)
1.50-3.60	not present

This can be used to remap RW memory as RX. To do this, first allocate a memory block of type SCE_KERNEL_MEMBLOCK_TYPE_KERNEL_RW. After you are done writing, call sceKernelRemapMemBlockForDriver with type SCE_KERNEL_MEMBLOCK_TYPE_KERNEL_RX.

int sceKernelRemapMemBlockForDriver(SceUID uid, SceKernelMemBlockType type);

sceKernelPartialRemapMemBlockForDriver

Version	NID
0.990-1.06	not present
1.500.151-3.740.011	0xDFE2C8CB

Temp name was sceKernelRemapBlockForDriver, sceKernelRemapMemBlockForDriver.

This can be used to remap RW memory as RX. To do this, first allocate a memory block of type SCE_KERNEL_MEMBLOCK_TYPE_KERNEL_RW. After you are done writing, call sceKernelPartialRemapMemBlockForDriver with type SCE_KERNEL_MEMBLOCK_TYPE_KERNEL_RX.

int sceKernelPartialRemapMemBlockForDriver(SceUID uid, SceKernelMemBlockType type);

sceKernelUnmapMemBlockForDriver

Version	NID
3.60	0xFFCD9B60

int sceKernelUnmapMemBlockForDriver(SceUID uid);

sceKernelGetPhysicalMemoryTypeForDriver

Version	NID
0.990-3.60	0x0AAA4FDD

Temp name was sceKernelVaddrMaybeGetSectionTypeForDriver

int sceKernelGetPhysicalMemoryTypeForDriver(void *vaddr);

sceKernelGetPhyMemInfoForDriver

Version	NID
0.931-3.60	0x89475192

typedef struct SceKernelPhyMemInfo { // Size is 0xC on 0.931-3.60
  SceSize size;  // Size of this structure
  void* pbase;   // Base physical address
  SceSize psize; // Physical size
} SceKernelPhyMemInfo;

// as of FW 0.931-0.990, pindex must be one of these values: 1 PhyPartKernel, 8 PageVenezia, 9 PageVIP
#define SCE_KERNEL_PHYMEMPART_KERNEL_INDEX 1
#define SCE_KERNEL_PHYMEMPART_LPDDR2MAIN_KERNEL_INDEX 6
#define SCE_KERNEL_PAGE_VENEZIA_INDEX 8
#define SCE_KERNEL_PAGE_VIP_INDEX 9

SceInt32 sceKernelGetPhyMemInfoForDriver(SceUInt32 pindex, SceKernelPhyMemInfo *pInfo);