SceSysmem

SceSysmem is a kernel module that acts as the heart of the kernel. It exports multiple libraries for various features. SceSysmem is the first module that is loaded in the kernel load sequence and its libraries are imported by almost all other modules. See Virtual Memory and Physical Memory for more details on the memory subsystem.

Module

This module exists in both non-secure and secure world. The non-secure world SELF can be found in os0:kd/sysmem.skprx. It also can be found in the Boot Image.

Known NIDs

Version	Name	World	Privilege	NID
1.50	SceSysmem	Non-secure	Kernel	0x78D8AA34
1.69	SceSysmem	Non-secure	Kernel	0xB93950C6
3.57	SceSysmem	Non-secure	Kernel	0x00CFDC77
3.60-3.61	SceSysmem	Non-secure	Kernel	0x3380B323
1.69	SceSysmem	Secure	Kernel	0x502BE0E5
1.80	SceSysmem	Secure	Kernel	0x72425377

Libraries

Known NIDs

Version	Name	World	Visibility	NID
1.50-3.60	SceSysmemForKernel	Non-secure	Kernel	0x63A519E5
1.50-3.60	SceSysmemForDriver	Non-secure	Kernel	0x6F25E18A
1.50-1.692	SceSysmemForDebugger	Non-secure	Kernel	0xC7309957
1.50-3.60	SceSysmem	Non-secure	User	0x37FE725A
1.50-3.60	SceDipsw	Non-secure	User	0xB36D5922
1.50-3.60	SceDipswForDriver	Non-secure	Kernel	0xC9E26388
1.50-3.60	SceUartForKernel	Non-secure	Kernel	0xC03DBE40
1.50-3.60	SceCpu	Non-secure	User	0x45265161
1.50-3.60	SceCpuForKernel	Non-secure	Kernel	0x54BF2BAB
1.50-3.60	SceCpuForDriver	Non-secure	Kernel	0x40ECDB0E
1.50-1.69	SceSysclibForKernel	Non-secure	Kernel	0x24878615
3.60	SceSysclibForKernel	Non-secure	Kernel	removed
1.50-3.60	SceSysclibForDriver	Non-secure	Kernel	0x7EE45391
1.50-3.60	SceSysrootForKernel	Non-secure	Kernel	0x3691DA45
1.50-3.60	SceSysrootForDriver	Non-secure	Kernel	0x2ED7F97A
1.50-3.60	SceKernelUtilsForDriver	Non-secure	Kernel	0x496AD8B4
1.50-3.60	SceZlibForDriver	Non-secure	Kernel	0xE241534E
1.50-3.60	SceKernelSuspendForDriver	Non-secure	Kernel	0x7290B21C
1.50-3.60	SceQafMgrForDriver	Non-secure	Kernel	0x4E29D3B6
1.50-3.60	ScePmMgrForDriver	Non-secure	Kernel	0xF13F32F9
1.50-3.60	SceSblAIMgrForDriver	Non-secure	Kernel	0xFD00C69A
1.50-3.60	SceProcEventForDriver	Non-secure	Kernel	0x887F19D0
1.50-3.60	SceDebugLed	Non-secure	User	0xAE004C0A
1.50-3.60	SceDebugLedForDriver	Non-secure	Kernel	0x7BC05EAD
1.50-3.60	SceDebugForKernel	Non-secure	Kernel	0x88C17370
1.50-3.60	SceDebugForDriver	Non-secure	Kernel	0x88758561
1.69-1.80	SceSysmemForTZS	Secure	Kernel	0x8680060
1.69-1.80	SceDipswForTZS	Secure	Kernel	0x9DBF584C
1.80	SceUartForTZS	Secure	Kernel	0xA1D740D7
1.80	SceDebugForTZS	Secure	Kernel	0x028FFADB
1.69-1.80	SceCpuForTZS	Secure	Kernel	0xC516B23E
1.69-1.80	SceSysclibForTZS	Secure	Kernel	0xC839BB78
1.69-1.80	SceSysrootForTZS	Secure	Kernel	0xFEFF641D
1.69-1.80	SceQafMgrForTZS	Secure	Kernel	0x637069DD
1.69-1.80	ScePmMgrForTZS	Secure	Kernel	0x27F1AFD8
1.69-1.80	SceSblAIMgrForTZS	Secure	Kernel	0x60D19047

Types

typedef int threadmgr_core_ctx;

struct tctx_holder
{
  int unk0;
  int unk4;
  int unk8;
  int unkC;
  int unk10;
  int unk14;
  int unk18;
  int unk1C;
  int unk20;
  int unk24;
  int unk28;
  int unk2C;
  int unk30;
  threadmgr_core_ctx *tctx_34;
};

struct callback_holder1
{
  int unk0;
  int (*unk4)(void);
  int (*unk8)(void);
  int (*unkC)(void);
  int unk10;
  int unk14;
  int unk18;
  int unk1C;
  int (*unk20)(void);
  int unk24;
  int unk28;
  int unk2C;
  int unk30;
  int unk34;
  int unk38;
  int (*unk3C)(void);
};

struct callback_holder2
{
  int size;
  int (__cdecl *unk4)(int result, int *a2);
  int (__cdecl *unk8)(SceUID *a1);
  int (__cdecl *unkC)(int, int *);
  int (__cdecl *sceKernelGetSelfAuthInfoForKernel)(SceUID pid, SceSelfAuthInfo* self_info);
  int (__cdecl *sceKernelGetProcessTitleIdForKernel)(SceUID pid, char *titleid, size_t len);
  int (__cdecl *unk18)(unsigned int a1);
  int (__cdecl *unk1c)(int a1);
};

struct callback_holder3
{
  int unk0;
  int (*unk4)(void);
  int (*unk8)(void);
  int (__fastcall *unkC)(int);
  int (__fastcall *unk10)(int);
  int (*unk14)(void);
};

struct sysbase_t
{
  tctx_holder *hldr[6];
  char unk[84];
  char *sysroot_buffer;
  int unk70;
  char unk74[616];
  char unk2dc[52];
  int unk310;
  int unk314;
  int unk318;
  int unk31C;
  int unk320;
  int unk324;
  int unk328;
  int unk32C;
  int unk330;
  int unk334;
  int unk338;
  int unk33C;
  int unk340;
  int (__cdecl *GetThreadAccessLevel)();
  int unk348;
  int (*unk34C_some_callback1)(void);
  callback_holder3 *unk350;
  int unk354;
  callback_holder1 *unk358;
  callback_holder2 *unk35C;
  int (*unk360)(void);
  int (*unk364)(void);
  int (__fastcall *unk368)(int, int, int);
  char unk36C[20];
  int (__cdecl *sceSblLicMgrGetLicenseStatusForDriver)();
  int (__cdecl *SceSblPostSsMgrForDriver_22599675)();
  int (__cdecl *SceSblPostSsMgrForDriver_9b49c249)();
  int (__cdecl *SceSblPostSsMgrForDriver_d8a2d465)(unsigned long long);
  int (__cdecl *SceSblPostSsMgrForDriver_abdd68cd)(void *);
  int (__cdecl *sceSblUtMgrHasNpTestFlagForDriver)();
  int (*SceSblUpdateMgr_smth)(void);
  int (*ScePower_smth)(void);
};

typedef int (*SceClassCallback)(void *item);

typedef struct SceClassInfo_0990 { // size is 0x10 on 0.990
	SceSize size; // Size of this structure
	struct SceClass *next;
	struct SceClass *root; // to confirm
	struct SceClass *prev; // to confirm
} SceClassInfo_0990;

typedef struct SceClass { // size is 0x2C
	struct SceClass *next;
	struct SceClass *root;
	struct SceClass *prev;
	const char *name;
	struct SceClass *uidclass;
	unsigned int attributes;
	unsigned short itemsize;
	unsigned short unk1A;
	unsigned int object_type;
	SceClassCallback create_cb;
	SceClassCallback destroy_cb;
	const unsigned int magic; /* 0xABCE9DA5 */
} SceClass;

typedef struct SceKernelObject { // size is at least 0x24
	void *pObject;			// 0
	SceClass pClass;		// 4
	uint32_t type;			// 8
	uint16_t lcount;		// C
	uint16_t ucount;		// E
	uint16_t ccount;		// 10
	uint32_t unk_12;		// 12 - 0x54c3
	uint16_t unk_16;		// 16
	uint32_t uid;			// 18
	char unk_1C[4];			// 1C
	const char *name;		// 20
	uint32_t indexRaw;		// 24
} SceKernelObject;

/** @name Memory types that can be specified with sceKernelAllocMemBlock
 */
/*@{*/

/**
 * @brief User readable / writable LPDDR2 memory
 *
 * This type secures a readable / writable memory block in user space.
 */
#define SCE_KERNEL_MEMBLOCK_TYPE_USER_RW			0x0c20d060U

#define SCE_KERNEL_MEMBLOCK_TYPE_USER_RWDATA			SCE_KERNEL_MEMBLOCK_TYPE_USER_RW

/**
 * @brief User readable / writable LPDDR2 non-cache memory
 *
 * A type to secure a memory block on LPDDR2 that is readable
 * and writable in user space and does not use cache.
 */
#define SCE_KERNEL_MEMBLOCK_TYPE_USER_NC_RW			0x0c208060U

/**
 * @brief An alias for SCE_KERNEL_MEMBLOCK_TYPE_USER_NC_RW.
 */
#define SCE_KERNEL_MEMBLOCK_TYPE_USER_RW_UNCACHE		SCE_KERNEL_MEMBLOCK_TYPE_USER_NC_RW

/**
 * @brief An alias for SCE_KERNEL_MEMBLOCK_TYPE_USER_NC_RW.
 */
#define SCE_KERNEL_MEMBLOCK_TYPE_USER_RWDATA_UNCACHE		SCE_KERNEL_MEMBLOCK_TYPE_USER_RW_UNCACHE

/**
 * @brief User readable and writable LPDDR2 physical continuous memory
 *
 * A type that can read and write in user space and secure
 * memory blocks from the physical continuous memory area.
 */
#define SCE_KERNEL_MEMBLOCK_TYPE_USER_MAIN_PHYCONT_RW		0x0c80d060U

/**
 * @brief User-readable and non-cacheable physical continuous memory
 *
 * A type for on-cacheable read / write in user space and to secure
 * memory blocks from the physical continuous memory area.
 */
#define SCE_KERNEL_MEMBLOCK_TYPE_USER_MAIN_PHYCONT_NC_RW	0x0d808060U

/**
 * @brief User-readable and non-cacheable CDRAM memory
 *
 * A type that can be read and written in user space and secures
 * memory blocks on CDRAM.
 */
#define SCE_KERNEL_MEMBLOCK_TYPE_USER_CDRAM_RW			0x09408060U

/**
 * @brief An alias for SCE_KERNEL_MEMBLOCK_TYPE_USER_CDRAM_RW.
 */
#define SCE_KERNEL_MEMBLOCK_TYPE_USER_CDRAM_RWDATA		SCE_KERNEL_MEMBLOCK_TYPE_USER_CDRAM_RW

/*@}*/

/**
 * @brief A type representing a memory type
 *
 * A type that represents the type of memory block secured by sceKernelAllocMemBlock.
 */
typedef int		SceKernelMemoryType;

/**
 * @brief Memory block information structure
 *
 * A structure for obtaining information about memory blocks. Size is 0x14 bytes on FW 0.990.
 */
typedef struct SceKernelMemBlockInfo0990 {
	SceSize				size;			/**< Size of the structure itself */
	void				*mappedBase;		/**< Map base address */
	SceSize				mappedSize;		/**< Mapped size */
	SceKernelMemoryType		memoryType;		/**< Memory type */
	SceUInt32			access;			/**< Access right */
} SceKernelMemBlockInfo0990;

/**
 * @brief Memory block information structure
 *
 * A structure for obtaining information about memory blocks. Size is 0x18 bytes on FW 0.996+.
 */
typedef struct SceKernelMemBlockInfo {
	SceSize				size;			/**< Size of the structure itself */
	void				*mappedBase;		/**< Map base address */
	SceSize				mappedSize;		/**< Mapped size */
	SceKernelMemoryType		memoryType;		/**< Memory type */
	SceUInt32			access;			/**< Access right */
	SceKernelMemBlockType		type;			/**< Memory block type */
} SceKernelMemBlockInfo;

/*----- memory access permission -----*/

/**
 * @brief readable memory
 */
#define SCE_KERNEL_MEMORY_ACCESS_R		0x04U

/**
 * @brief writable memory
 */
#define SCE_KERNEL_MEMORY_ACCESS_W		0x02U

/**
 * @brief executable memory (kernel only)
 */
#define SCE_KERNEL_MEMORY_ACCESS_X		0x01U

/*----- memory type -----*/

/**
 * @brief uncache normal memory
 */
#define SCE_KERNEL_MEMORY_TYPE_NORMAL_NC	0x80

/**
 * @brief cache normal memory
 */
#define SCE_KERNEL_MEMORY_TYPE_NORMAL		0xD0

/**
 * Optional parameter of sceKernelAllocMemBlock for FW <=0.940.
 */
 typedef struct SceKernelAllocMemBlockOpt0940 {
	SceSize		size;
	SceUInt32	attr;
	SceSize		alignment;			/**< alignment */
	SceUID		uidBaseBlock;			/**< base memory block */
	const char	*strBaseBlockName;
} SceKernelAllocMemBlockOpt0940;

/**
 * Option parameter of sceKernelAllocMemBlock
 */
 typedef struct SceKernelAllocMemBlockOpt {
	/**
	 * Size of this structure
	 */
	SceSize		size;

	/**
	 * Attributes field.
	 */
	SceUInt32	attr;

	/**
	 * Specify alignment.
	 * SCE_KERNEL_ALLOC_MEMBLOCK_ATTR_HAS_ALIGNMENT must be set for the attr member.
	 */
	SceSize		alignment;

	/**
	 * reserved
	 */
	 SceUInt32	reserved;

	/**
	 * reserved2
	 */
	const char	*strBaseBlockName;

#if 0
	/**
	 * mapped base address [out]
	 */
	void		*mappedBase;

	/**
	 * mapped size [out]
	 */
	SceSize		mappedSize;

	/**
	 * memory type [out]
	 */
	SceKernelMemoryType	memoryType;

	SceUInt32	access;
#endif
} SceKernelAllocMemBlockOpt;

/**
 * Option parameter of kernel sceKernelAllocMemBlock on old FWs
 */
typedef struct SceKernelAllocMemBlockOptKernel_old {
    SceSize size;			// 0x28 on 0.910, 0x2C on 0.910, 0x30 on 0.990, 0x34 on ?.??
    SceUInt32 field_4;
    SceUInt32 attr;
    SceUInt32 field_C;
    SceUInt32 paddr;
    SceSize alignment;
    SceUInt32 extraLow;
    SceUInt32 extraHigh;
    SceUInt32 base;
    SceUID pid;
    ScePAVector *paddr_list;
    SceUInt32 field_2C;
    SceUInt32 field_30;
} SceKernelAllocMemBlockOptKernel_old;

/**
 * Option parameter of kernel sceKernelAllocMemBlock on recent FWs (as seen on FW 3.60)
 */
typedef struct SceKernelAllocMemBlockOptKernel {
	SceSize size;			// 0x58 on 3.60
	SceUInt32 field_4;
	SceUInt32 attr;
	SceUInt32 field_C;
	SceUInt32 paddr;
	SceSize alignment;
	SceUInt32 extraLow;
	SceUInt32 extraHigh;
	SceUInt32 base;
	SceUID pid;
	ScePAVector *paddr_list;
	SceUInt32 field_2C;
	SceUInt32 field_30;
	SceUInt32 field_34;
	SceUInt32 field_38;
	SceUInt32 field_3C;
	SceUInt32 field_40;
	SceUInt32 field_44;
	SceUInt32 field_48;
	SceUInt32 field_4C;
	SceUInt32 field_50;
	SceUInt32 field_54;
} SceKernelAllocMemBlockOptKernel;

/**
 * Attributes to enable some SceKernelAllocMemBlockOpt members.
 */
#define SCE_KERNEL_ALLOC_MEMBLOCK_ATTR_HAS_PADDR		0x00000002 // to check
#define SCE_KERNEL_ALLOC_MEMBLOCK_ATTR_HAS_ALIGNMENT		0x00000004
#define SCE_KERNEL_ALLOC_MEMBLOCK_ATTR_HAS_BASE			0x00000040
#define SCE_KERNEL_ALLOC_MEMBLOCK_ATTR_HAS_PID			0x00000080 // to check
#define SCE_KERNEL_ALLOC_MEMBLOCK_ATTR_HAS_BASENAME		0x00000200
#define SCE_KERNEL_ALLOC_MEMBLOCK_ATTR_HAS_PADDR_LIST		0x00001000 // to check

/**
 * Memory area is physically continuous.
 */
#define SCE_KERNEL_ALLOC_MEMBLOCK_ATTR_PHYCONT			0x00200000

#define SCE_KERNEL_ALLOC_MEMBLOCK_ATTR_SHARE_PHYPAGE		0x01000000

/**
 * Allow partial operation. ?What does that mean?
 */
#define SCE_KERNEL_ALLOC_MEMBLOCK_ATTR_ALLOW_PARTIAL_OP		0x04000000

/**
 * UID is created by sceKernelOpen***()
 */
#define SCE_UID_ATTR_OPEN_FLAG			0x00080000U

typedef struct SceKernelHeapInfo {
	SceSize size;			// size of this structure (0xCC on 0.990)
	char unk_4[0xC8];
} SceKernelHeapInfo;

typedef struct SceKernelVARange {
	uint32_t vaddr;
	uint32_t length;
} SceKernelVARange;

typedef struct SceKernelPARange {
	uint32_t paddr;
	uint32_t length;
} SceKernelPARange;

typedef struct SceKernelPAVector {
	SceSize size;			// size of this structure (0x14 on 0.990)
	uint32_t pRanges_size;
	uint32_t unk_8;
	uint32_t count;
	SceKernelPARange *pRanges;
} SceKernelPAVector;

#define SCE_KERNEL_PROCESS_ID_SELF 0 // Current running process ID is always 0.

pOpt->attr bitmask

Bitmask	Uses
0x00000001	has_field_C
0x00000002	HAS_PADDR (10)
0x00000004	HAS_ALIGNMENT (14)
0x00000008	has_field_18
0x00000010	has_field_1C
0x00000040	HAS_BASE (20)
0x00000080	HAS_PID (24)
0x00000200	HAS_BASENAME (?)
0x00001000	HAS_PADDR_LIST (28)
0x00002000	has_field_2C
0x00010000	has_field_30

Memory Block Type

The type parameter indicates what kind of memory to allocate. Here is a mapping of type flags to ARM MMU flags. Higher bits are used for other options including where to allocate from. Not all flag values are valid, there is a table of valid types in the kernel. You cannot, for example, allocate RWX memory.

Mask	Value	Description
0x10000	0x10000	Global. `nG` bit NOT set
0xFF00	0x800	`B` bit set. Sharable device memory.
0xFF00	0x2000	`TEX[2]` and `TEX[0]` bit set. Outer cache Write-back, Write-Allocate. Inner cache non-cachable.
0xFF00	0x4000	`TEX[2]` and `B` bit set. Outer cache non-cachable. Inner cache Write-back, Write-Allocate
0xFF00	0x8000	`TEX[0]` bit set. `S` bit unset. Outer and inner non-cachable. Not sharable.
0xFF00	0xD000	`TEX[0]` bit set. `C,B` bits set. Outer and inner Write-back, Write-Allocate.
0xFF	0x4	`AP[2:0] = 5`, `XN=1`. Privileged RO, User NA.
0xFF	0x5	`AP[2:0] = 5`. Privileged RX, User NA.
0xFF	0x6	`AP[2:0] = 1`, `XN=1`. Privileged RW, User NA.
0xFF	0x7	`AP[2:0] = 1`. Privileged RWX, User NA. (Never used, 3.60 0x80024B01)
0xFF	0x50	`AP[2:0] = 7`. Privileged RX, User RX.
0xFF	0x60	`AP[2:0] = 3`, `XN=1`. Privileged RW, User RW.
0xFF	0x40	`AP[2:0] = 7`, `XN=1`. Privileged RO, User RO.

Mask	Value	Name
0x0F000000	0x09000000	SceKernelUserCdram
0x0F000000	0x0A000000	SceKernelUserShared
0x0F000000	0x0B000000	SceKernelUserIO
0x0F000000	0x0C000000	SceKernelUserMain
0x0F000000	0x0D000000	SceKernelUserUncache
0x0F000000	0x0E000000	SceKernelUserCDialog
0x0F000000	0x0F000000	SceKernelUserCDialogNC

type bits

mask
0x0000000F : only kernel
0x000000F0 : only user

RWXO bit
0 1 1 0
? R W X

RO type when both w bit and x bit are 0

memory device type(?)
mask : 0x00000F00
0x00000200 : SO
0x00000800 : DEVICE

memory cache type
mask : 0x0000F000
0x00002000 : No internal cache only
0x00004000 : No external cache only
0x00008000 : NORMAL_NC (uncache)
0x0000D000 : NORMAL (cache)

memory access type?
mask : 0x00F00000
0x00100000 : IO
0x00200000 : normal?
0x00400000 : CDRAM
0x00500000 : GAME
0x00800000 : PHYCONT
0x00A00000 : UNKNOWN
0x00F00000 : UNKNOWN

memory access type2?(only kernel)
mask : 0xF0000000
0x10000000 : normal?
0x20000000 : IO
0x40000000 : CDRAM
0x50000000 : CDRAM2
0x60000000 : TMP
0xA0000000 : GPU

SCE_KERNEL_MEMBLOCK_TYPE_USER_CDRAM_RW_UNCACHE_EXTERNAL 0x09404060
SCE_KERNEL_MEMBLOCK_TYPE_USER_CDRAM_RO_UNCACHE          0x09408040
SCE_KERNEL_MEMBLOCK_TYPE_USER_CDRAM_RW_UNCACHE          0x09408060
SCE_KERNEL_MEMBLOCK_TYPE_USER_CDRAM_RW                  0x09408060
SCE_KERNEL_MEMBLOCK_TYPE_USER_CDRAM_RWDATA              0x09408060

SCE_KERNEL_MEMBLOCK_TYPE_USER_DEVICE_RW                 0x0C200860
SCE_KERNEL_MEMBLOCK_TYPE_USER_NC_RW                     0x0C208060
SCE_KERNEL_MEMBLOCK_TYPE_USER_RW_UNCACHE                0x0C208060
SCE_KERNEL_MEMBLOCK_TYPE_USER_RWDATA_UNCACHE            0x0C208060
SCE_KERNEL_MEMBLOCK_TYPE_USER_RO                        0x0C20D040
SCE_KERNEL_MEMBLOCK_TYPE_USER_RW                        0x0C20D060
SCE_KERNEL_MEMBLOCK_TYPE_USER_RWDATA                    0x0C20D060
SCE_KERNEL_MEMBLOCK_TYPE_USER_GAME_RW                   0x0C50D060
SCE_KERNEL_MEMBLOCK_TYPE_USER_MAIN_PHYCONT_RW           0x0C80D060
SCE_KERNEL_MEMBLOCK_TYPE_USER_UNKNOWN_RW_UNCACHE        0x0CA08060
SCE_KERNEL_MEMBLOCK_TYPE_USER_UNKNOWN_RW                0x0CA0D060
SCE_KERNEL_MEMBLOCK_TYPE_USER_UNKNOWN2_RW               0x0CF0D060

SCE_KERNEL_MEMBLOCK_TYPE_USER_MAIN_PHYCONT_NC_RW        0x0D808060

SCE_KERNEL_MEMBLOCK_TYPE_USER_CDIALOG_RO_UNCACHE        0x0E208040
SCE_KERNEL_MEMBLOCK_TYPE_USER_CDIALOG_RX_UNCACHE        0x0E208050
SCE_KERNEL_MEMBLOCK_TYPE_USER_CDIALOG_RW_UNCACHE        0x0E208060
SCE_KERNEL_MEMBLOCK_TYPE_USER_CDIALOG_RO                0x0E20D040
SCE_KERNEL_MEMBLOCK_TYPE_USER_CDIALOG_RW                0x0E20D060

memory allocate test.

mem type	mem size	mem base
0x0C200860	0x200000	0x80100000
0x0C208060	0x200000	0x70000000
0x0C20D040	0x200000	0x85200000
0x0C20D060	0x200000	0x85200000
0x0C50D060	0x200000	0x85200000
0x0C80D060	0x200000	0x85200000
0x0CA08060	0x200000	0x70000000
0x0CA0D060	0x200000	0x85200000
0x0CF0D060	0x200000	error, Looks like a memory type to reserve a fairly large size memory
0x0D808060	0x200000	0x70000000
0x0E208040	0x200000	0x68000000
0x0E208050	0x200000	error, It seems that RX memory cannot be allocated from the user
0x0E208060	0x200000	0x68000000
0x0E20D040	0x200000	0xD0300000
0x0E20D060	0x200000	0xD0300000

Types to reverse

from 0.931:

kernel memory types:
SCE_KERNEL_MEMBLOCK_TYPE_KERNEL_SO_RW: 0x10200206
SCE_KERNEL_MEMBLOCK_TYPE_KERNEL_R: 0x1020d004
SCE_KERNEL_MEMBLOCK_TYPE_KERNEL_R_UNCACHE: 0x10208004
SCE_KERNEL_MEMBLOCK_TYPE_KERNEL_RW: 0x1020d006
SCE_KERNEL_MEMBLOCK_TYPE_KERNEL_RW_UNCACHE: 0x10208006
SCE_KERNEL_MEMBLOCK_TYPE_KERNEL_DEVICE_RW: 0x10200806
SCE_KERNEL_MEMBLOCK_TYPE_KERNEL_RX: 0x1020d005
SCE_KERNEL_MEMBLOCK_TYPE_KERNEL_RW_GAME: 0x1050d006
SCE_KERNEL_MEMBLOCK_TYPE_KERNEL_IO_RO: 0x20100804
SCE_KERNEL_MEMBLOCK_TYPE_KERNEL_IO_RW: 0x20100806
SCE_KERNEL_MEMBLOCK_TYPE_KERNEL_IO_SO_RO: 0x20100204
SCE_KERNEL_MEMBLOCK_TYPE_KERNEL_IO_SO_RW: 0x20100206
SCE_KERNEL_MEMBLOCK_TYPE_KERNEL_IO_NC_RO: 0x20108004
SCE_KERNEL_MEMBLOCK_TYPE_KERNEL_IO_NC_RW: 0x20108006
SCE_KERNEL_MEMBLOCK_TYPE_KERNEL_BOOT_IMAGE: 0x1020d007
SCE_KERNEL_MEMBLOCK_TYPE_KERNEL_CDRAM_RW: 0x40408006
SCE_KERNEL_MEMBLOCK_TYPE_KERNEL_CDRAM2_RW: 0x50408006
SCE_KERNEL_MEMBLOCK_TYPE_KERNEL_TMP
SCE_KERNEL_MEMBLOCK_TYPE_KERNEL_TMP_RW: 0x6020d006
SCE_KERNEL_MEMBLOCK_TYPE_KERNEL_GPU_CDRAM_RW: 0xa0408006

user memory types:
SCE_KERNEL_MEMBLOCK_TYPE_USER_KTMP*****: 0x620d006
SCE_KERNEL_MEMBLOCK_TYPE_USER_TEXT: 0xc20d050
SCE_KERNEL_MEMBLOCK_TYPE_USER_DEVICE_RW: ok
SCE_KERNEL_MEMBLOCK_TYPE_USER_RW: 0xc20d060
SCE_KERNEL_MEMBLOCK_TYPE_USER_RW_UNCACHE: 0xc208060
SCE_KERNEL_MEMBLOCK_TYPE_USER_CDRAM_RW: 0x9408060
SCE_KERNEL_MEMBLOCK_TYPE_USER_CDRAM2_RW: 0x5408060

code memory types:
SCE_KERNEL_MEMBLOCK_CODE_MEMORY_TYPE_L1WBWA: 0x4000
SCE_KERNEL_MEMBLOCK_CODE_MEMORY_TYPE_L2WBWA: 0x2000
SCE_KERNEL_MEMBLOCK_CODE_MEMORY_TYPE_NORMAL_NC

alloc attributes:
SCE_KERNEL_MEMBLOCK_ALLOC_ATTR_HAS_PBASE

from 0.990:

SCE_KERNEL_MEMBLOCK_CODE_MEMORY_TYPE_L1WBWA
SCE_KERNEL_MEMBLOCK_CODE_MEMORY_TYPE_L2WBWA
SCE_KERNEL_MEMBLOCK_CODE_USER_CDRAM_L1WBWA_RW

CDIALOG:
SCE_KERNEL_MEMBLOCK_TYPE_CDIALOG_NC_R

FREE:
SCE_KERNEL_MEMBLOCK_TYPE_FREE

KERNEL:
SCE_KERNEL_MEMBLOCK_TYPE_KERNEL_BOOT_IMAGE
SCE_KERNEL_MEMBLOCK_TYPE_KERNEL_CDRAM2_RW
SCE_KERNEL_MEMBLOCK_TYPE_KERNEL_CDRAM_L1WBWA_RW
SCE_KERNEL_MEMBLOCK_TYPE_KERNEL_CDRAM_RW
SCE_KERNEL_MEMBLOCK_TYPE_KERNEL_DEVICE_RW
SCE_KERNEL_MEMBLOCK_TYPE_KERNEL_GPU_CDRAM_RW
SCE_KERNEL_MEMBLOCK_TYPE_KERNEL_IO_DEVICE_R
SCE_KERNEL_MEMBLOCK_TYPE_KERNEL_IO_DEVICE_RW
SCE_KERNEL_MEMBLOCK_TYPE_KERNEL_IO_NC_R
SCE_KERNEL_MEMBLOCK_TYPE_KERNEL_IO_NC_RO
SCE_KERNEL_MEMBLOCK_TYPE_KERNEL_IO_NC_RW
SCE_KERNEL_MEMBLOCK_TYPE_KERNEL_IO_RO
SCE_KERNEL_MEMBLOCK_TYPE_KERNEL_IO_RW
SCE_KERNEL_MEMBLOCK_TYPE_KERNEL_IO_SO_R
SCE_KERNEL_MEMBLOCK_TYPE_KERNEL_IO_SO_RO
SCE_KERNEL_MEMBLOCK_TYPE_KERNEL_IO_SO_RW
SCE_KERNEL_MEMBLOCK_TYPE_KERNEL_KMP_TOOL_RW
SCE_KERNEL_MEMBLOCK_TYPE_KERNEL_R
SCE_KERNEL_MEMBLOCK_TYPE_KERNEL_R_UNCACHE
SCE_KERNEL_MEMBLOCK_TYPE_KERNEL_ROOT_CDIALOG_R
SCE_KERNEL_MEMBLOCK_TYPE_KERNEL_ROOT_CDIALOG_RW
SCE_KERNEL_MEMBLOCK_TYPE_KERNEL_ROOT_DEVICE_RW
SCE_KERNEL_MEMBLOCK_TYPE_KERNEL_ROOT_GAME_RW
SCE_KERNEL_MEMBLOCK_TYPE_KERNEL_ROOT_NC_R
SCE_KERNEL_MEMBLOCK_TYPE_KERNEL_ROOT_NC_RW
SCE_KERNEL_MEMBLOCK_TYPE_KERNEL_ROOT_PHYCONT_NC_R
SCE_KERNEL_MEMBLOCK_TYPE_KERNEL_ROOT_PHYCONT_NC_RW
SCE_KERNEL_MEMBLOCK_TYPE_KERNEL_ROOT_PHYCONT_R
SCE_KERNEL_MEMBLOCK_TYPE_KERNEL_ROOT_PHYCONT_RW
SCE_KERNEL_MEMBLOCK_TYPE_KERNEL_ROOT_R
SCE_KERNEL_MEMBLOCK_TYPE_KERNEL_ROOT_RW
SCE_KERNEL_MEMBLOCK_TYPE_KERNEL_ROOT_RX
SCE_KERNEL_MEMBLOCK_TYPE_KERNEL_ROOT_SO_RW
SCE_KERNEL_MEMBLOCK_TYPE_KERNEL_ROOT_UMAIN_RW
SCE_KERNEL_MEMBLOCK_TYPE_KERNEL_RW
SCE_KERNEL_MEMBLOCK_TYPE_KERNEL_RW_GAME
SCE_KERNEL_MEMBLOCK_TYPE_KERNEL_RW_UNCACHE
SCE_KERNEL_MEMBLOCK_TYPE_KERNEL_RX
SCE_KERNEL_MEMBLOCK_TYPE_KERNEL_SO_RW
SCE_KERNEL_MEMBLOCK_TYPE_KERNEL_TMP_GAME_RW
SCE_KERNEL_MEMBLOCK_TYPE_KERNEL_TMP_NC_R
SCE_KERNEL_MEMBLOCK_TYPE_KERNEL_TMP_NC_RW
SCE_KERNEL_MEMBLOCK_TYPE_KERNEL_TMP_R
SCE_KERNEL_MEMBLOCK_TYPE_KERNEL_TMP_RW
SCE_KERNEL_MEMBLOCK_TYPE_KERNEL_TOOL_NC_R
SCE_KERNEL_MEMBLOCK_TYPE_KERNEL_TOOL_NC_RW
SCE_KERNEL_MEMBLOCK_TYPE_KERNEL_TOOL_R
SCE_KERNEL_MEMBLOCK_TYPE_KERNEL_TOOL_RW
SCE_KERNEL_MEMBLOCK_TYPE_KERNEL_TOOL_RX

USER:
SCE_KERNEL_MEMBLOCK_TYPE_USER_CDIALOG_NC_RW
SCE_KERNEL_MEMBLOCK_TYPE_USER_CDIALOG_R
SCE_KERNEL_MEMBLOCK_TYPE_USER_CDIALOG_RW
SCE_KERNEL_MEMBLOCK_TYPE_USER_CDIALOG_RX
SCE_KERNEL_MEMBLOCK_TYPE_USER_CDRAM2_RW
SCE_KERNEL_MEMBLOCK_TYPE_USER_CDRAM_NC_R
SCE_KERNEL_MEMBLOCK_TYPE_USER_CDRAM_NC_RW
SCE_KERNEL_MEMBLOCK_TYPE_USER_CDRAM_RW
SCE_KERNEL_MEMBLOCK_TYPE_USER_IO_DEVICE_RW
SCE_KERNEL_MEMBLOCK_TYPE_USER_IO_SO_RW
SCE_KERNEL_MEMBLOCK_TYPE_USER_KTMP*****
SCE_KERNEL_MEMBLOCK_TYPE_USER_KTMP_NC_R
SCE_KERNEL_MEMBLOCK_TYPE_USER_KTMP_NC_RW
SCE_KERNEL_MEMBLOCK_TYPE_USER_KTMP_R
SCE_KERNEL_MEMBLOCK_TYPE_USER_KTMP_RW
SCE_KERNEL_MEMBLOCK_TYPE_USER_MAIN_DEVICE_RW
SCE_KERNEL_MEMBLOCK_TYPE_USER_MAIN_GAME_RW
SCE_KERNEL_MEMBLOCK_TYPE_USER_MAIN_NC_RW
SCE_KERNEL_MEMBLOCK_TYPE_USER_MAIN_PHYCONT_NC_R
SCE_KERNEL_MEMBLOCK_TYPE_USER_MAIN_PHYCONT_NC_RW
SCE_KERNEL_MEMBLOCK_TYPE_USER_MAIN_PHYCONT_R
SCE_KERNEL_MEMBLOCK_TYPE_USER_MAIN_PHYCONT_RW
SCE_KERNEL_MEMBLOCK_TYPE_USER_MAIN_R
SCE_KERNEL_MEMBLOCK_TYPE_USER_MAIN_RW
SCE_KERNEL_MEMBLOCK_TYPE_USER_MAIN_RX
SCE_KERNEL_MEMBLOCK_TYPE_USER_MAIN_TOOL_NC_RW
SCE_KERNEL_MEMBLOCK_TYPE_USER_MAIN_TOOL_RW
SCE_KERNEL_MEMBLOCK_TYPE_USER_MAIN_TOOL_RX
SCE_KERNEL_MEMBLOCK_TYPE_USER_RW
SCE_KERNEL_MEMBLOCK_TYPE_USER_RW_UNCACHE
SCE_KERNEL_MEMBLOCK_TYPE_USER_SHARED_CDIALOG_R
SCE_KERNEL_MEMBLOCK_TYPE_USER_SHARED_CDIALOG_RW
SCE_KERNEL_MEMBLOCK_TYPE_USER_SHARED_CDIALOG_RX
SCE_KERNEL_MEMBLOCK_TYPE_USER_SHARED_MAIN_R
SCE_KERNEL_MEMBLOCK_TYPE_USER_SHARED_MAIN_RW
SCE_KERNEL_MEMBLOCK_TYPE_USER_SHARED_MAIN_RX
SCE_KERNEL_MEMBLOCK_TYPE_USER_SHARED_SHARED_R
SCE_KERNEL_MEMBLOCK_TYPE_USER_SHARED_SHARED_RW
SCE_KERNEL_MEMBLOCK_TYPE_USER_SHARED_SHARED_RX
SCE_KERNEL_MEMBLOCK_TYPE_USER_SHARED_TOOL_R
SCE_KERNEL_MEMBLOCK_TYPE_USER_SHARED_TOOL_RW
SCE_KERNEL_MEMBLOCK_TYPE_USER_SHARED_TOOL_RX
SCE_KERNEL_MEMBLOCK_TYPE_USER_TEXT

SceSysmemForKernel

sceGUIDGetEntryInfoAllForKernel

Version	NID
0.990-3.60	0x2A79C51C

int sceGUIDGetEntryInfoAllForKernel(SceUID uid, void *vectors, uint32_t nVector, void *out);

sceGUIDNameForKernel

Version	NID
0.990	0x250EE289

char *sceGUIDNameForKernel(SceUID uid);

sceKernelGetAddressSpaceMMUContextForKernel

Version	NID
0.990-3.60	0xFBEF93AA

int sceKernelGetAddressSpaceMMUContextForKernel(SceUID uid, void *context);

sceKernelAllocSimpleMemBlockForKernel

Version	NID
0.990-3.60	0xF81F4672

typedef struct SceKernelSimpleMemBlock {
	char unk_0[0x14];
	void *base;
	char unk_18[0x14];
	void *PhyPage;
	SceSize size;
} SceKernelSimpleMemBlock;

int sceKernelAllocSimpleMemBlockForKernel(const char *name, SceKernelMemBlockType type, SceSize vsize, SceKernelSimpleMemBlock *smb);

sceKernelGetSimpleMemBlockBaseForKernel

Version	NID
0.990-3.60	0x0A8D14EC

int sceKernelGetSimpleMemBlockBaseForKernel(SceKernelSimpleMemBlock *smb, void **base);

sceKernelAddressSpaceVARangeToPAVectorForKernel

Version	NID
0.990-3.60	0xF7250E6C

int sceKernelAddressSpaceVARangeToPAVectorForKernel(SceUID uid, const SceKernelVARange *vRange, SceKernelPAVector *pVector);

sceKernelGetPhyMemPartInfoByIDForKernel

Version	NID
0.990-3.60	0xF4FA0575

int sceKernelGetPhyMemPartInfoByIDForKernel(SceUID uid, void *info);

sceUIDDeleteEntryHeapForKernel

Version	NID
0.990-3.60	0xF0C3FCFC

int sceUIDDeleteEntryHeapForKernel(SceUID uid);

sceGUIDUnregisterForKernel

Version	NID
0.990	0xE79BBCF2

int sceGUIDUnregisterForKernel(SceUID uid);

sceGUIDGetEntryInfoClassForKernel

Version	NID
0.990-3.60	0xE90CFD62

int sceGUIDGetEntryInfoClassForKernel(SceUID uid, int a2, void *vectors, int nVector, void *out);

sceKernelGetPhyPageResetForKernel

Version	NID
0.990-3.60	0xEB350679

void *sceKernelGetPhyPageResetForKernel(void);

sceKernelNameHeapInsertForKernel

Version	NID
0.990-3.60	0x08AB3DAE

int sceKernelNameHeapInsertForKernel(char *name, uint32_t flags, uint32_t *out);

scePUIDReleaseObjectForKernel

Version	NID
3.60	0x3FCA782B

scePUIDGetInfoForKernel

Version	NID
3.60	0x12ED88AE

sceGUIDGetEntryForKernel

Version	NID
3.60	0x45F2A59C

sceGUIDGetVisibilityLevelForKernel

Version	NID
3.60	0xC69666C3

sceGUIDSetVisibilityLevelForKernel

Version	NID
3.60	0xCB8D03C0

sceGUIDFindByNameForKernel

Version	NID
3.60	0xCEBA8031

sceGUIDFindByNameAllForKernel

Version	NID
3.60	0x4B5C85AC

sceGUIDGetPIDForKernel

Version	NID
3.60	0xCF5A2311

sceGUIDSetCNOAForKernel

Version	NID
3.60	0x8D6AF468

sceGUIDSetForKernel

Version	NID
0.990-3.60	0xD7B323EB

sceUIDGetProcUIDVectorByClassForKernel

Version	NID
0.990	0x51C08396
3.60	not present

sceKernelGetPhyMemPartInfoForKernel

Version	NID
0.990	0x67849418
3.60	not present

sceUIDReferObjectWithLevelForKernel

Version	NID
0.990	0xF79B52B2
3.60	not present

sceKernelPhysicalMemReadForKernel

Version	NID
0.990	0xF96E3AE2
3.60	not present

Temp name was memcpy_from_paddr.

dst must be a vaddr and src must be a paddr. Return copied size on success.

int sceKernelPhysicalMemReadForKernel(void *dst, const void *src, SceSize dst_size, SceSize src_size);

sceKernelAllocPartitionMemBlockForKernel

Version	NID
0.990-3.60	0x5FFE4B79

Temp name was sceKernelAllocSystemCallTableForKernel.

SceUID sceKernelAllocPartitionMemBlockForKernel(SceUID pid, const char *name, SceKernelMemBlockType type, SceSize vsize, const struct SceKernelAllocMemBlockOptKernel *pOpt);

sceKernelUIDEntryHeapGetInfoForKernel

Version	NID
0.990	not present
3.60	0x686AA15C

sceUIDEntryHeapCloseAllPUIDForKernel

Version	NID
0.990-3.60	0xFAF96C1F

int sceUIDEntryHeapCloseAllPUIDForKernel(SceUID uid);

sceKernelNameHeapGetInfoForKernel

Version	NID
0.990	not present
3.60	0xE443253B

sceKernelGetFixedHeapInfoByPointerForKernel

Version	NID
0.990-3.60	0x219E90FD

sceKernelGetHeapInfoByPtrForKernel

Version	NID
0.990	not present
3.60	0x68451777

sceKernelGetHeapInfoForKernel

Version	NID
0.990-3.60	0x91733EF4

int sceKernelGetHeapInfoForKernel(SceUID uid, SceKernelHeapInfo *pInfo);

sceKernelFreeSimpleMemBlockForKernel

Version	NID
0.990-3.60	0xA1FFA2C9

sceKernelSysrootAllocUnsureForKernel

Version	NID
0.990-3.60	0xC0A4D2F3

void *sceKernelSysrootAllocUnsureForKernel(uint32_t size);

sceGUIDGetObjectWithClassForKernel

Version	NID
0.990-3.60	0x7ABFA9A7

int sceGUIDGetObjectWithClassForKernel(SceUID uid, SceClass *cls, SceKernelObject **obj);

SceSysmemForKernel_C38D61FC

Version	NID
0.990	0xC38D61FC

Calls SceSysmemForDriver_89A44858.

sceUIDGetObjectForKernel

Version	NID
0.990	0xC4893914

SceSysmemForKernel_620E00E7

Version	NID
0.990	0x620E00E7

SceSysmemForKernel_620E00E7(int a1, int global_id, _DWORD *out);

SceSysmemForKernel_7C797940

Version	NID
0.990	0x7C797940

Calls SceSysmemForKernel_620E00E7 or SceSysmemForDriver_0F5C84B7.

free

Version	NID
0.990-3.60	0xABAB0FAB

sceUIDtoObjectForKernel

Version	NID
0.990-3.60	0xED221825

Calls sceKernelGUIDGetObjectForDriver.

SceKernelObject *sceUIDtoObjectForKernel(SceUID uid);

sceGUIDKernelCreateWithAttrForKernel

Version	NID
0.990-3.60	0x53E1FFDE

sceGUIDOpenByGUIDForKernel

Version	NID
0.990-3.60	0xCF53EEE4

sceGUIDGetUIDVectorByClassForKernel

Version	NID
0.990-3.60	0xEC7D36EF

sceGUIDGetUIDVectorByClass2ForKernel

Version	NID
0.990	0xA2F03233
3.60	not present

It is simply a wrapper for sceGUIDGetUIDVectorByClassForKernel.

sceKernelCreateAddressSpaceForKernel

Version	NID
0.990-3.60	0x4A3737F0

sceKernelDeleteAddressSpaceForKernel

Version	NID
0.990-3.60	0xF2D7FE3A

sceKernelAddressSpaceFreeAllMemBlockForKernel

Version	NID
0.990-3.60	0x89CE1F31

sceKernelAddressSpaceSetPhyMemPartForKernel

Version	NID
0.990-3.60	0x67955EE9

sceKernelAddressSpaceUnmapForKernel

Version	NID
0.940-3.60	0xCE72839E

int sceKernelAddressSpaceUnmapForKernel(SceUID pid, int unk, uint32_t paddr, uint32_t size);

Example: in SceSysStateMgr:

sceKernelAddressSpaceUnmapForKernel(0x10007, 0xF7, 0x51000000, 0x1000000);
sceKernelAddressSpaceUnmapForKernel(0x10007, 0xF0, 0xE0000000, 0x8000000);
sceKernelAddressSpaceUnmapForKernel(0x10007, 0xF0, 0x1A000000, 0x100000);

sceKernelAddressSpaceVAtoPAForKernel

Version	NID
0.990-3.60	0xF2179820

sceKernelAddressSpaceGetMemoryTypeForKernel

Version	NID
0.990-3.60	0xCC7BB240

int sceKernelAddressSpaceGetMemoryTypeForKernel(uint32_t *memory_type);

sceKernelRxMemcpyKernelToUserForPidForKernel

Version	NID
1.69-3.60	0x30931572

Unrestricted memcpy to the virtual address space for process pid. Both dst and src must be in the address space of pid but src must also be accessible in the address space of the caller. This is normally used for resolving stubs in module loads. Same as write to RO but does a cache flush.

int sceKernelRxMemcpyKernelToUserForPidForKernel(SceUID pid, uintptr_t dst, const void *src, size_t len);

sceKernelFindClassByNameForKernel

Version	NID
3.60	0x62989905

int sceKernelFindClassByNameForKernel(const char *name, SceClass **class);

sceKernelGetMemBlockTypeForKernel

Version	NID
3.60	0x289BE3EC

/***
 * Gets the memory block type of a memory block
 *
 * @param[in] uid - SceUID of the memory block
 * @param[out] type - Type of the memory block identified by uid
 *
 * @return 0 on success, < 0 on error.
*/
int sceKernelGetMemBlockTypeForKernel(SceUID uid, unsigned int *type);

sceKernelCreateUidObjForKernel

Version	NID
3.60	0xDF0288D7

SceUID sceKernelCreateUidObjForKernel(SceClass *class, const char *name, SceCreateUidObjOpt *opt, SceKernelObject **obj);

sceKernelGetUidHeapClassForKernel

Version	NID
3.60	0x4CCA935D

SceClass *sceKernelGetUidHeapClassForKernel(void);

sceKernelGetUidMemBlockClassForKernel

Version	NID
3.60	0xAF729575

SceClass *sceKernelGetUidMemBlockClassForKernel(void);

sceKernelGetUidDLinkClassForKernel

Version	NID
0.990-3.60	0xC105604E

SceClass *sceKernelGetUidDLinkClassForKernel(void);

SceSysmemForDriver

sceKernelCopyFromUserForDriver

Version	NID
0.990	0xE08F3967
3.60	not present

int sceKernelCopyFromUserForDriver(void *dst, const void *src, SceSize size);

add_heap

Version	NID
0.990	0xB800123C
3.60	not present

int add_heap(SceUID uid, const char *name, SceClass *class);

compare_struct_0x10

Version	NID
0.990	0x6484D03E
3.60	not present

uint32_t compare_struct_0x10(char *a1, const char *a2);

sceGUIDNameForDriver

Version	NID
0.990	0xB2BB6216
3.60	not present

char *sceGUIDNameForDriver(SceUID id);

sceKernelGetMemBlockAllocSizeForDriver

Version	NID
0.990	0x63E5754B
3.60	not present

int sceKernelGetMemBlockAllocSizeForDriver(SceUID id, SceSize *size);

sceUIDGetClassInfoAllForDriver

Version	NID
0.990	0x3EF32C6C
3.60	not present

int sceUIDGetClassInfoAllForDriver(SceClassInfo_0990 *vector, uint32_t maxNumClass, uint32_t *pNumClassInBuf);

sceKernelUIDCloseForDriver

Version	NID
0.990	0x32C5F628
3.60	not present

a2 is addr or flags. (a2 & 0x40000000) == 0) means kernel uid else userland uid.

int sceKernelUIDCloseForDriver(SceUID uid, uint32_t a2);

sceKernelStrncpyToUserForDriver

Version	NID
0.990	0x369355F1
3.60	not present

int sceKernelStrncpyToUserForDriver(char **dst_str, const char *src_str, SceSize to_copy_size, SceSize *dst_size);

sceKernelUserStrncpyForDriver

Version	NID
0.990	0xE6D5EFE4
3.60	not present

sceKernelUserStrnlenForDriver

Version	NID
0.990	0xFF06898A
3.60	not present

SceSysmemForDriver_F09A7D09

Version	NID
0.990	0xF09A7D09
3.60	not present

Calls sceKernelGUIDCloseForDriver.

int SceSysmemForDriver_F09A7D09(SceUID uid);

Switch TTB For PID

Version	NID
1.69	0x6F2ACDAE
3.60	not present

Changes the TTBR to point to the tables for a given PID.

int switch_ttb_for_pid(SceUID pid);

sceKernelRoMemcpyKernelToUserForPidForDriver

Version	NID
1.69	0x571D2739
3.60	not present

int sceKernelRoMemcpyKernelToUserForPidForDriver(SceUID pid, void *dst, const void *src, SceSize size);

sceKernelAllocHeapMemoryForDriver

Version	NID
0.990-3.60	0x7B4CB60A

Temp name was sceKernelMemPoolAlloc.

Calls sceKernelAllocHeapMemoryWithOptionForDriver with a3 = 0.

void* sceKernelAllocHeapMemoryForDriver(SceUID uid, SceSize size);

sceKernelAllocHeapMemoryFromGlobalHeapForDriver

Version	NID
3.60	0x7750CEA7

Calls sceKernelAllocHeapMemoryForDriver with uid = -1 (global pool uid).

void* sceKernelAllocHeapMemoryFromGlobalHeapForDriver(SceSize size);

sceKernelAllocHeapMemoryFromGlobalHeapWithOptForDriver

Version	NID
0.990-3.60	0x0B4ED16A

Calls sceKernelAllocHeapMemoryWithOptionForDriver with uid = -1 (global pool uid).

typedef struct ctx_49D4DD9B
{
   int unk0;
   int unk4;
   int unk8;
   int unkC;
   int unk10;
};

void* sceKernelAllocHeapMemoryFromGlobalHeapWithOptForDriver(SceSize size, ctx_49D4DD9B *unk);

sceKernelAllocHeapMemoryWithOpt1ForDriver

Version	NID
3.60	0xB415B5A8

Same as sceKernelAllocHeapMemoryForDriver but uses unk2.

void* sceKernelAllocHeapMemoryWithOpt1ForDriver(SceUID uid, SceSize size, ctx_49D4DD9B *unk2);

sceKernelAllocHeapMemoryWithOptionForDriver

Version	NID
3.60	0x49D4DD9B

Was named sceKernelAllocHeapMemoryWithOpt2ForDriver.

Same as sceKernelAllocHeapMemoryForDriver but uses unk2.

void* sceKernelAllocHeapMemoryWithOpt2ForDriver(SceUID uid, SceSize size, ctx_49D4DD9B *unk2);

sceKernelAllocMemBlockWithInfoForDriver

Version	NID
3.60	0xD44F464D

Temp name was sceKernelAllocMemBlockExtForDriver. According to logs, maybe it was "sceKernelAllocMemBlockWithInfoForKernel" on FWs pre-0.990.

SceUID sceKernelAllocMemBlockWithInfoForDriver(const char *name, SceKernelMemBlockType type, SceSize vsize, const struct SceKernelAllocMemBlockOptKernel *pOpt, ScePAVector *out_paddr_list);

sceKernelAllocMemBlockForDriver

Version	NID
1.50	0x59F3159C
1.69-3.60	0xC94850C9

SceUID sceKernelAllocMemBlockForDriver(const char *name, SceKernelMemBlockType type, SceSize vsize, const struct SceKernelAllocMemBlockOptKernel *pOpt);

The interface is the same as the userland version of this function, however more types can be specified and more options are in the pOpt argument.

To allocate a kernel RW block of memory, specify type = SCE_KERNEL_MEMBLOCK_TYPE_KERNEL_TMP_RW.

To allocate a block of memory with a specific physical address, specify type = SCE_KERNEL_MEMBLOCK_TYPE_KERNEL_IO_SO_RW or type = SCE_KERNEL_MEMBLOCK_TYPE_KERNEL_IO_RW, pOpt->attr = 2, and pOpt->paddr = physical address.

To allocate a block of memory that is kernel executable, specify type = SCE_KERNEL_MEMBLOCK_TYPE_KERNEL_RX.

To allocate a block of memory that is physically contiguous, specify type = 0x30808006, pOpt->attr = 0x200004 and an alignment to pOpt->alignment.

To allocate a block of memory inside the CDRAM, specify type = 0x40404006.

sceKernelCreateClassForDriver

Version	NID
3.60	0x61317102

int sceKernelCreateClassForDriver(SceClass *cls, const char *name, struct SceClass *uid_class, size_t item_size, SceClassCallback create, SceClassCallback destroy);

sceKernelCreateHeapForDriver

Version	NID
1.69-3.60	0x9328E0E8

struct SceKernelHeapCreateOpt
{
  SceSize size; //28
  SceUInt32 uselock;
  SceUInt32 field_8;
  SceUInt32 field_C;
  SceUInt32 block_type;
  SceUInt32 field_14;
  SceUInt32 field_18;
};

int sceKernelCreateHeapForDriver(const char *name, SceSize size, SceKernelHeapCreateOpt *opt); // opt can be NULL

The heap pool is thread safe.

sceKernelCreateUidObjForDriver

Version	NID
3.60	0x56A13E90

SceUID sceKernelCreateUidObjForDriver(SceClass *cls, const char *name, SceKernelObject **obj);

sceKernelCreateUidObjForUidForDriver

Version	NID
0.990-3.60	0x89A44858

Calls SceSysmemForKernel_ED221825.

SceUID sceKernelCreateUidObjForUidForDriver(SceClass *cls, const char *name, SceUID uid, SceKernelObject **obj);

scePUIDOpenByGUIDWithFlagsForDriver

Version	NID
0.990-3.60	0xCED1547B

Temp name was sceKernelCreateUserUidForClassForDriver.

SceUID scePUIDOpenByGUIDWithFlagsForDriver(SceUID pid, SceUID uid, uint32_t flags);

sceKernelCreateUserUidForDriver

Version	NID
3.60	0xBF209859

SceUID sceKernelCreateUserUidForDriver(SceUID pid, SceUID uid);

sceKernelCreateUserUidForNameForDriver

Version	NID
3.60	0x513B9DDD

SceUID sceKernelCreateUserUidForNameForDriver(SceUID pid, char *name);

sceKernelCreateUserUidForNameWithClassForDriver

Version	NID
3.60	0x8DA0BCA5

SceUID sceKernelCreateUserUidForNameWithClassForDriver(SceUID pid, char *name, SceClass *cls);

sceKernelDeleteHeapForDriver

Version	NID
1.69-3.60	0xD6437637

int sceKernelDeleteHeapForDriver(SceUID pool_uid);

sceKernelGUIDCloseForDriver

Version	NID
0.990-3.60	0x047D32F2

Temp name was sceKernelDeleteUidForDriver.

int sceKernelGUIDCloseForDriver(SceUID uid);

sceKernelPUIDCloseForDriver

Version	NID
0.990-3.60	0x84A4AF5E

Temp name was sceKernelDeleteUserUidForDriver.

int sceKernelPUIDCloseForDriver(SceUID uid);

sceKernelGetMemBlockMemtypeByAddrForDriver

Version	NID
0.990-3.60	0xF3BBE2E1

Temp name was sceKernelFindMemBlockByAddrForDefaultSizeForDriver.

SceKernelMemoryType sceKernelGetMemBlockMemtypeByAddrForDriver(const void *addr);

sceKernelFindMemBlockByAddrForDriver

Version	NID
1.69-3.60	0x8A1742F6

SceUID sceKernelFindMemBlockByAddrForDriver(const void *addr, SceSize size);

sceKernelFindProcMemBlockByAddrForDriver

Version	NID
0.990-3.60	0x857F1D5A

Temp name was sceKernelFindMemBlockByAddrForPidForDriver.

SceUID sceKernelFindProcMemBlockByAddrForDriver(SceUID pid, const void *addr, SceSize size);

sceKernelFindMemBlockForDriver

Version	NID
3.57	not present, added on 3.60
3.60	0x9C78064C

SceUID sceKernelFindMemBlockForDriver(int flags, void *addr, SceSize size);

sceKernelFindMemBlockProcForDriver

Version	NID
3.60	0x9F6E45E3

Temp name was sceKernelFindMemBlockForPidForDriver.

SceUID sceKernelFindMemBlockProcForDriver(SceUID pid, int flags, void *addr, SceSize size);

sceKernelFirstDifferentBlock32UserForDriver

Version	NID
3.60	0xBDA6E42B

int sceKernelFirstDifferentBlock32UserForDriver(unsigned int *ptr, int value, int byte_size);

sceKernelFirstDifferentBlock32UserForPidForDriver

Version	NID
1.69-3.60	0x8334454F

Looks for an integer in userspace.

int sceKernelFirstDifferentBlock32UserForPidForDriver(SceUID pid, unsigned int *ptr, int value, int byte_size);

sceKernelFirstDifferentBlock64UserForDriver

Version	NID
3.60	0xBB3B02C2

int sceKernelFirstDifferentBlock64UserForDriver(unsigned long long *ptr, int unused, unsigned long long value, int byte_size);

sceKernelFirstDifferentBlock64UserForPidForDriver

Version	NID
3.60	0xE83855FD

int sceKernelFirstDifferentBlock64UserForPidForDriver(SceUID pid, unsigned long long *ptr, unsigned long long value, int byte_size);

sceKernelFreeHeapMemoryForDriver

Version	NID
0.990-3.60	0x3EBCE343

Other name sceKernelMemPoolFree.

int sceKernelFreeHeapMemoryForDriver(SceUID pool_uid, void *ptr);

sceKernelFreeHeapMemoryFromGlobalHeapForDriver

Version	NID
3.60	0xFB817A59

int sceKernelFreeHeapMemoryFromGlobalHeapForDriver(void *ptr);

sceKernelFreeMemBlockForDriver

Version	NID
3.60	0x009E1C61

int sceKernelFreeMemBlockForDriver(SceUID uid);

sceKernelPUIDGetClassForDriver

Version	NID
0.990-3.60	0xE9728A12

Temp name was sceKernelGetClassForPidForUidForDriver.

int sceKernelPUIDGetClassForDriver(SceUID pid, SceUID uid, SceClass **cls);

sceKernelGUIDGetClassForDriver

Version	NID
0.990-3.60	0xC74B0152

Temp name was sceKernelGetClassForUidForDriver.

int sceKernelGUIDGetClassForDriver(SceUID uid, SceClass **cls);

sceKernelGetMemBlockPARangeForDriver

Version	NID
0.990-3.60	0x98C15666

Previous name was sceKernelGetMemBlockAddrPairForUidForDriver

Returns the paddr and size (pRange) of the memory block if it is physically continuous.

int sceKernelGetMemBlockPARangeForDriver(SceUID uid, SceKernelPARange *pRange);

sceKernelGetMemBlockBaseForDriver

Version	NID
1.69-3.60	0xA841EDDA

int sceKernelGetMemBlockBaseForDriver(SceUID uid, void **basep);

sceKernelGetMemBlockVBaseForDriver

Version	NID
3.60	0xB81CF0A3

Wrongly named sceKernelGetMemBlockKernelPageForDriver.

int sceKernelGetMemBlockVBaseForDriver(SceUID uid, void **kernel_page);

sceKernelGetMemBlockMappedBaseForDriver

Version	NID
3.60	0x0B1FD5C3

int sceKernelGetMemBlockMappedBaseForDriver(SceUID uid, void **basep);

sceKernelGetMemBlockPAVectorForDriver

Version	NID
0.990-3.60	0x19A51AC7

Temp name was sceKernelGetMemBlockPaddrListForUidForDriver.

int sceKernelGetMemBlockPAVectorForDriver(SceUID uid, ScePAVector *pVector);

sceKernelPUIDGetEntryHeapNameForDriver

Version	NID
0.990-3.60	0x09896EB7

Temp name was sceKernelGetNameForPidByUidForDriver. Real name might be sceKernelPUIDGetEntryHeapNameForDriver.

int sceKernelPUIDGetEntryHeapNameForDriver(SceUID pid, SceUID uid, char **name);

sceKernelGetNameForUid2ForDriver

Version	NID
3.60	0xE655852F

const char* sceKernelGetNameForUid2ForDriver(SceUID uid);

sceKernelGetNameForUidForDriver

Version	NID
3.60	0xA78755EB

int sceKernelGetNameForUidForDriver(SceUID uid, char **name);

sceUIDtoObjectForDriver

Version	NID
0.990	0xAB7AC3D1

Calls sceUIDtoObjectForKernel.

SceKernelObject *sceUIDtoObjectForDriver(SceUID uid);

sceKernelGetObjectForPidForUidForDriver

Version	NID
0.990-3.60	0xFE6D7FAE

int sceKernelGetObjectForPidForUidForDriver(SceUID pid, SceUID uid, SceKernelObject **obj);

sceKernelGetObjectForUidForAttrForDriver

Version	NID
3.60	0xF6DB54BA

int sceKernelGetObjectForUidForAttrForDriver(SceUID uid, unsigned int attr, SceKernelObject **obj);

sceGUIDReferObjectWithClassLevelForDriver

Version	NID
0.990-3.60	0x77066FD1

Temp name was sceKernelGetObjectForUidForClassForAttrForDriver.

int sceGUIDReferObjectWithClassLevelForDriver(SceUID uid, SceClass *cls, unsigned int attr, SceKernelObject **obj);

sceKernelGetObjectForUidForClassForDriver

Version	NID
3.60	0x00ED6C14

int sceKernelGetObjectForUidForClassForDriver(SceUID uid, SceClass *cls, SceKernelObject **obj);

sceKernelGUIDReferObjectClassForDriver

Version	NID
0.990-3.60	0x72A98D17

Temp name was sceKernelGetObjectForUidForClassTreeForDriver. Actual name might be sceKernelGUIDReferObjectClassForDriver.

int sceKernelGUIDReferObjectClassForDriver(SceUID uid, SceClass *cls, SceKernelObject **obj);

sceKernelGUIDGetObjectForDriver

Version	NID
0.990-3.60	0x0FC24464

Temp name was sceKernelGetObjectForUidForDefaultClassForDriver.

int sceKernelGUIDGetObjectForDriver(SceUID uid, SceKernelObject **pEntry);

sceKernelGetObjectForUidForDriver

Version	NID
3.60	0x0F5C84B7

int sceKernelGetObjectForUidForDriver(SceUID uid, SceKernelObject **obj);

sceKernelVAtoPAForDriver

Version	NID
1.69-3.60	0x8D160E65

Wrongly named sceKernelGetPaddrForDriver.

This will write the physical address for a virtual address vaddr to memory pointed to by result.

Returns <0 on error, values >=0 indicate success.

int sceKernelVAtoPAForDriver(void *vaddr, void **result);

sceKernelProcVAtoPAForDriver

Version	NID
0.990	0xC51934BD

int sceKernelProcVAtoPAForDriver(SceUID pid, void *pVA, void **pPA);

sceKernelProcModeVAtoPAForDriver

Version	NID
0.990-3.60	0x61A67D32

Temp name was sceKernelGetPaddrForPidForDriver.

int sceKernelProcModeVAtoPAForDriver(SceUID pid, uint32_t mode, void *pVA, void **pPA);

sceKernelVARangeToPAVectorForDriver

Version	NID
0.940-3.60	0xE68BEEBD

Temp name was sceKernelGetPaddrListForDriver.

This function writes into pVector->output_buffer an array of vRange that encompasses the block of memory specified in the input. pVector->ret_count will contain the number of entries written. If pVector->output_buffer is null, it will just write the count.

int sceKernelVARangeToPAVectorForDriver(const SceKernelVARange *vRange, SceKernelPAVector *pVector);

sceKernelGetPaddrListForLargePageForDriver

Version	NID
3.60	0x08A8A7E8

int sceKernelGetPaddrListForLargePageForDriver(const SceVARange *vRange, ScePAVector *pVector);

sceKernelGetPaddrListForSmallPageForDriver

Version	NID
3.60	0x16844CE6

int sceKernelGetPaddrListForSmallPageForDriver(const SceVARange *vRange, ScePAVector *pVector);

sceKernelVARangeToPARangeForDriver

Version	NID
0.940-3.60	0xAE36C775

Temp name was sceKernelGetPaddrPairForDriver.

int sceKernelVARangeToPARangeForDriver(const SceKernelVARange *vRange, SceKernelPARange *pRange);

sceKernelGetPaddrPairForLargePageForDriver

Version	NID
3.60	0x32257A24

int sceKernelGetPaddrPairForLargePageForDriver(SceVARange *pair, ScePARange *result_pair);

sceKernelGetPaddrPairForSmallPageForDriver

Version	NID
3.60	0xB3575090

int sceKernelGetPaddrPairForSmallPageForDriver(SceVARange *pair, ScePARange *result_pair);

sceKernelAddressSpaceVAtoPABySWForDriver

Version	NID
0.990-3.60	0x65419BD3

Previous name was sceKernelGetPaddrWithSectionTypeCheckForDriver

int sceKernelAddressSpaceVAtoPABySWForDriver(void *vaddr, void **paddr);

sceKernelGetPidContextForDriver

Version	NID
3.60	0x2ECF7944

struct SceKernelProcessContext
{
  SceUInt32 TTBR1;
  SceUInt32 DACR;
  SceUInt32 CONTEXTIDR;
};

int sceKernelGetPidContextForDriver(SceUID pid, SceKernelProcessContext **ctx);

sceKernelGetUidClassForDriver

Version	NID
3.60	0x85336A1C

SceClass *sceKernelGetUidClassForDriver();

sceKernelGetUnknownValidPhysAddressSpaceForDriver

Version	NID
3.60	0xC9928F5E

int sceKernelGetUnknownValidPhysAddressSpaceForDriver(void **start, void **end);

sceKernelIsPaddrWithinSameSectionForUidForDriver

Version	NID
3.60	0xF4AD89D8

int sceKernelIsPaddrWithinSameSectionForUidForDriver(SceUID pid, int permission_type, void *vaddr, unsigned int len);

sceKernelIsPaddrWithinUnknownValidPhysAddressSpaceForDriver

Version	NID
3.60	0xA7C0D1FC

int sceKernelIsPaddrWithinUnknownValidPhysAddressSpaceForDriver(void *vaddr);

sceKernelKernelUidForUserUidForClassForDriver

Version	NID
3.60	0x184172B1

SceUID sceKernelKernelUidForUserUidForClassForDriver(SceUID pid, SceUID user_uid, SceClass *cls);

scePUIDtoGUIDForDriver

Version	NID
3.60	0x45D22597

Temp name was sceKernelKernelUidForUserUidForDriver.

Process UID to Global UID.

SceUID scePUIDtoGUIDForDriver(SceUID pid, SceUID uid);

sceKernelMapBlockUserVisibleForDriver

Version	NID
3.60	0x58D21746

int sceKernelMapBlockUserVisibleForDriver(SceUID uid);

sceKernelMapBlockUserVisibleWithFlagForDriver

Version	NID
3.60	0x04059C4B

int sceKernelMapBlockUserVisibleWithFlagForDriver(SceUID uid, int some_flag);

sceKernelUserMapForDriver

Version	NID
0.990-3.60	0x278BC201

Wrongly named sceKernelMapUserBlockDefaultTypeForDriver.

Assigns type 0.

int sceKernelUserMapForDriver(char *name, int permission, void *user_buf, int size, void **kernel_page, int *kernel_size, int *kernel_offset);

sceKernelProcUserMapForDriver

Version	NID
3.60	0x0091D74D

Wrongly named sceKernelMapUserBlockForDefaultTypeForPidForDriver. sceKernelProcUserMapForDriver is certainly real name.

Assigns type 0.

int sceKernelProcUserMapForDriver(SceUID pid, const char *name, int permission, void *user_buf, int size, void **kernel_page, int *kernel_size, int *kernel_offset);

sceKernelMapUserBlockForDriver

Version	NID
1.69-3.60	0x7D4F8B5F

Permission is either "1" for read only, no execute or "2"/"3" for read write, no execute. Type is either 0, 1, or 17 and affects the block type. 0 is default. This will allocate kernel memory starting at kernel_page. To get the same memory as the user pointer, add the kernel_offset. kernel_size is how much is allocated.

//this signature is for 1.69
int sceKernelMapUserBlockForDriver(int permission, int type, void *user_buf, int size, void **kernel_page, int *kernel_size, int *kernel_offset);

//this signature is for 3.60 - now allows to give a name
int sceKernelMapUserBlockForDriver(char *name, int permission, int type, void *user_buf, int size, void **kernel_page, int *kernel_size, int *kernel_offset);

sceKernelDecRefCountMemBlockForDriver

Version	NID
0.990-3.60	0xF50BDC0C

Temp name was sceKernelMemBlockDecRefCounterAndReleaseUidForDriver.

int sceKernelDecRefCountMemBlockDriver(SceUID nMasterClient);

sceKernelMemBlockGetInfoExForDriver

Version	NID
3.60	0x24A99FFF

typedef struct SceKernelMemBlockInfoExDetails {
  SceKernelMemBlockType type;
  int unk4;
  char *name;
  int unkC;
  int unk10;
  int memblock_some_size;
  int extraLow;
  int extraHigh;
  int unk20;
  int unk24;
  SceKernelObject *SceUIDPhyMemPartClass_obj;
} SceKernelMemBlockInfoExDetails;

typedef struct SceKernelMemBlockInfoEx {
  int size;
  SceKernelMemBlockInfoExDetails details;
  int unk30;
  int unk34;
  int unk38;
  int unk3C;
  int unk40;
  int unk44;
  int unk48;
  int unk4C;
  int unk50;
  int unk54;
  int unk58;
  int unk5C;
  int unk60;
  int unk64;
  int unk68;
  int unk6C;
  int unk70;
  int unk74;
  int unk78;
  int unk7C;
  int unk80;
  int unk84;
  int unk88;
  int unk8C;
  int unk90;
  int unk94;
  int unk98;
  int unk9C;
  int unkA0;
  int unkA4;
  int unkA8;
  int unkAC;
  int unkB0;
  int unkB4;
} SceKernelMemBlockInfoEx;

int sceKernelMemBlockGetInfoExForDriver(SceUID uid, SceKernelMemBlockInfoEx *info);

sceKernelMemBlockGetInfoExForVisibilityLevelForDriver

Version	NID
3.60	0xA73CFFEF

int sceKernelMemBlockGetInfoExForVisibilityLevelForDriver(SceUID uid, int vis_level, SceKernelMemBlockInfoEx *opt);

sceKernelMemBlockGetSomeSizeForDriver

Version	NID
3.60	0x78337B62

int sceKernelMemBlockGetSomeSizeForDriver(SceUID uid, int *some_size);

sceKernelIncRefCountMemBlockForDriver

Version	NID
0.990-3.60	0xEAF3849B

Temp name was sceKernelMemBlockIncRefCounterAndReleaseUidForDriver.

int sceKernelIncRefCountMemBlockForDriver(SceUID nMasterClient);

sceKernelUserUnmapForDriver

Version	NID
0.990-3.60	0x00575B00

Temp name was sceKernelMemBlockReleaseForDriver.

int sceKernelUserUnmapForDriver(SceUID uid);

sceKernelMemBlockType2MemtypeForDriver

Version	NID
0.990-3.60	0x20C811FA

int sceKernelMemBlockType2MemtypeForDriver(SceKernelMemBlockType type);

sceKernelMemBlockTypeGetPrivilegesForDriver

Version	NID
3.60	0x6A0792A3

int sceKernelMemBlockTypeGetPrivilegesForDriver(SceKernelMemBlockType type);

sceKernelMemBlockTypeGetUnknownForDriver

Version	NID
3.60	0xCB0F3A33

int sceKernelMemBlockTypeGetUnknownForDriver(SceKernelMemBlockType type);

sceKernelMemRangeReleaseForDriver

Version	NID
3.60	0x75C70DE0

int sceKernelMemRangeReleaseForDriver(void *addr, SceSize size);

sceKernelMemRangeReleaseForPidForDriver

Version	NID
3.60	0xA8525B06

int sceKernelMemRangeReleaseForPidForDriver(SceUID pid, void *addr, SceSize size);

sceKernelMemRangeReleaseWithPermForDriver

Version	NID
3.60	0x22CBE925

Decrease references to pages.

int sceKernelMemRangeReleaseWithPermForDriver(SceKernelMemoryRefPerm perm, void *addr, SceSize size);

sceKernelMemRangeRetainForDriver

Version	NID
3.60	0x59A4402F

int sceKernelMemRangeRetainForDriver(void *addr, SceSize size);

sceKernelMemRangeRetainForPidForDriver

Version	NID
3.60	0x659586BF

int sceKernelMemRangeRetainForPidForDriver(SceUID pid, void *addr, SceSize size);

sceKernelMemRangeRetainWithPermForDriver

Version	NID
3.60	0xBC0A1D60

Increase references to pages.

int sceKernelMemRangeRetainWithPermForDriver(SceKernelMemoryRefPerm perm, void *addr, SceSize size);

sceKernelCopyToUserForDriver

Version	NID
0.990-3.60	0x6D88EF8A

Temp name was sceKernelMemcpyKernelToUserForDriver.

int sceKernelCopyToUserForDriver(void *dst, const void *kern_src, SceSize len);

sceKernelCopyoutProcForDriver

Version	NID
0.990-3.60	0x6B825479

Temp name was sceKernelMemcpyKernelToUserForPidForDriver.

This will not crash on invalid user pointers, but instead return error.

int sceKernelCopyoutProcForDriver(SceUID pid, void *dst, const void *src, SceSize size);

sceKernelMemcpyKernelToUserForPidUncheckedForDriver

Version	NID
1.69-3.60	0xFED82F2D

int sceKernelMemcpyKernelToUserForPidUncheckedForDriver(SceUID pid, void *dst, const void *kern_src, SceSize size);

sceKernelCopyFromUserForDriver

Version	NID
0.990-3.60	0xBC996A7A

Temp name was sceKernelMemcpyUserToKernelForDriver.

int sceKernelCopyFromUserForDriver(void *kern_dst, const void *src, SceSize len);

sceKernelMemcpyUserToKernelForPidForDriver

Version	NID
3.60	0x605275F8

int sceKernelMemcpyUserToKernelForPidForDriver(SceUID pid, void *kern_dst, uintptr_t src, SceSize len);

Same as sceKernelMemcpyUserToKernelForDriver, but copies from the specified process.

sceKernelMemcpyUserToUserForDriver

Version	NID
3.60	0x1BD44DD5

int sceKernelMemcpyUserToUserForDriver(void *dst, const void *src, SceSize size);

sceKernelMemcpyUserToUserForPidForDriver

Version	NID
1.69-3.60	0x8E086C33

int sceKernelMemcpyUserToUserForPidForDriver(SceUID pid, void *dst, const void *src, SceSize size);

sceKernelOpenUidForNameForDriver

Version	NID
3.60	0xD76E7452

SceUID sceKernelOpenUidForNameForDriver(char *name);

sceKernelRemapBlockForDriver

Version	NID
1.05	0x8D332AE1
1.69-3.60	0xDFE2C8CB

int sceKernelRemapBlockForDriver(SceUID uid, SceKernelMemBlockType type);

This is used to remap RW memory as RX. To do this, first allocate a memory block of type 0x1020D006. After you are done writing, call this with type set to 0x1020D005.

sceKernelSetNameForPidForUidForDriver

Version	NID
3.60	0x12624884

int sceKernelSetNameForPidForUidForDriver(SceUID pid, SceUID uid, const char *name);

sceKernelSetObjectForUidForDriver

Version	NID
3.60	0x4CFA4100

int sceKernelSetObjectForUidForDriver(SceUID uid, char *name);

sceKernelStrnlenUserForDriver

Version	NID
1.69-3.60	0xB429D419

int sceKernelStrnlenUserForDriver(uintptr_t usr_addr, SceSize maxlen);

sceKernelStrnlenUserForPidForDriver

Version	NID
1.69-3.60	0x9929EB07

int sceKernelStrnlenUserForPidForDriver(SceUID pid, uintptr_t usr_addr, SceSize size);

sceKernelStrncpyKernelToUserForDriver

Version	NID
1.69-3.60	0x80BD6FEB

int sceKernelStrncpyKernelToUserForDriver(char* usr_dst, const void *kern_src, SceSize maxlen);

sceKernelStrncpyKernelToUserForPidForDriver

Version	NID
1.69-3.60	0x75AAF178

int sceKernelStrncpyKernelToUserForPidForDriver(SceUID pid, char *usr_dst, const char *kern_src, SceSize size);

sceKernelStrncpyUserToKernelForDriver

Version	NID
1.69-3.60	0xDB3EC244

int sceKernelStrncpyUserToKernelForDriver(void *kern_dst, uintptr_t usr_src, SceSize maxlen);

sceKernelSwitchPidContextForDriver

Version	NID
3.60	0x2D711589

int sceKernelSwitchPidContextForDriver(SceKernelProcessContext *new_context, SceKernelProcessContext *prev_context);

sceKernelUidReleaseForDriver

Version	NID
3.60	0x149885C4

int sceKernelUidReleaseForDriver(SceUID uid);

sceKernelUnmapMemBlockForDriver

Version	NID
3.60	0xFFCD9B60

int sceKernelUnmapMemBlockForDriver(SceUID uid);

sceKernelGetPhysicalMemoryTypeForDriver

Version	NID
0.990-3.60	0x0AAA4FDD

Temp name was sceKernelVaddrMaybeGetSectionTypeForDriver

int sceKernelGetPhysicalMemoryTypeForDriver(void *vaddr);

some_memblock_operation

Version	NID
3.60	0x13805CA8

int some_memblock_operation(SceUID uid, int a2, int a3, int a4);

some_memblock_operation

Version	NID
3.60	0x16713BE8

Same as above but with different flags.

int some_memblock_operation(SceUID uid, int a2, int a3, int a4);

some_memblock_operation

Version	NID
3.60	0x16713BE8

Same as above but with different flags.

int some_memblock_operation(SceUID uid, int a2, int a3, int a4);

some_memblock_operation

Version	NID
3.60	0x4C584B29

Same as above but with different flags.

int some_memblock_operation(SceUID uid, int a2, int a3, int a4);

some_memblock_operation

Version	NID
3.60	0x6C76AD89

Same as above but with different flags.

int some_memblock_operation(SceUID uid, int a2, int a3, int a4);

some_memblock_operation

Version	NID
3.60	0x8C43B052

Same as above but with different flags.

int some_memblock_operation(SceUID uid, int a2, int a3, int a4);

sceKernelGetMemBlockProcessForDriver

Version	NID
0.990-3.60	0x1EFC96EA

int sceKernelGetMemBlockProcessForDriver(SceUID uid);

memblock_related_operation

Version	NID
3.60	0x64DBE472

int memblock_related_operation(SceUID uid, int a2);

memblock_related_operation

Version	NID
3.60	0x987EE587

struct result_987ee587
{
  int unk0;
  int unk4;
  int unk8;
  int unkC;
  int unk10;
};

int memblock_related_operation(SceUID uid, result_987ee587 *result);

SceSysmemForDriver_856fa2e3

Version	NID
3.60	0x856FA2E3

int SceSysmemForDriver_856fa2e3(SceUID uid);

sceKernelGetPhyMemInfoForDriver

Version	NID
0.990-3.60	0x89475192

typedef struct SceKernelPhyMemInfo { // Size is 0xC on 0.990-3.60
  SceSize size; // Size of this structure
  uint32_t unk4;
  uint32_t unk8;
} SceKernelPhyMemInfo;

// as of FW 0.990, pindex must be one of these values: 1 gpPhyPartKernel, 8 gpPageVenezia, 9 gpPageVIP

int sceKernelGetPhyMemInfoForDriver(uint32_t pindex, SceKernelPhyMemInfo *opt);

sceKernelVerifyHeapForDriver

Version	NID
0.990-3.60	0xC50A9C0D

int sceKernelVerifyHeapForDriver(SceUID uid, int a2);

SceSysmemForDebugger

This library was removed somewhere between 1.692 and 3.60.

sceKernelIsAccessibleRangeProcForDebugger

Version	NID
0.990-1.50	0x01DFC193
3.60	not present

In 1.50 call sceKernelFindMemBlockForPidForDriver.

int sceKernelIsAccessibleRangeProcForDebugger(SceUID pid, uint32_t mode, const void *vaddr, SceSuze size);

sceKernelIsAccessibleRangeForDebugger

Version	NID
0.990-1.50	0xD027761F
3.60	not present

In 1.50 call sceKernelFindMemBlockForDriver.

int sceKernelIsAccessibleRangeForDebugger(uint32_t mode, const void *vaddr, SceSuze size);

SceSysmem

The SceSysmem library is responsible for both low-level and high-level memory management. There are functions for allocating raw blocks of memory (similar to Linux sbrk) as well as functions for maintaining a heap-like structure (similar to malloc) for kernel, however SceLibKernel implements a proper heap and that is used for user code.

sceKernelMapMemBlockForUser

Version	NID
0.990-1.69	0x7B763A21
3.60	not present

sceKernelRemapMemBlock

Version	NID
1.69	0x3B29E0F5
3.60	not present

sceKernelPartialMapMemBlock

Version	NID
1.69	0xC0A59868
3.60	not present

sceKernelUnmapMemBlock

Version	NID
1.69	0xEE30D976
3.60	not present

sceKernelPartialUnmapMemBlock

Version	NID
1.69	0xCA99929B
3.60	not present

sceKernelGetMemBlockInfoByRange

Version	NID
0.996-3.60	0x006F3DB4

/**
 * @brief Get memory block informaton by virtual address range

 * @param[in]		vbase	base address
 * @param[in]		vsize   size
 * @param[inout]	pInfo	information structure
 */
int sceKernelGetMemBlockInfoByRange(void *vbase, SceSize vsize, SceKernelMemBlockInfo *pInfo);

sceKernelGetMemBlockInfoByAddrForUser

Version	NID
0.990-3.60	0x4010AD65

/**
 * @brief Get memory block information.
 *
 * Get information about a memory block.
 * @param[in]		vbase	Base address
 * @param[inout]	pInfo	Information structure
 */
int sceKernelGetMemBlockInfoByAddrForUser(void *vbase, SceKernelMemBlockInfo *pInfo);

sceKernelGetSubbudgetInfo

Version	NID
1.69-3.60	0x832B4A65

struct SceSubbudgetInfo
{
  int size;
  int unk4;
  int unk8;
};

int sceKernelGetSubbudgetInfo(int index, SceSubbudgetInfo *info);

sceKernelGetFreeMemorySize

Version	NID
1.69-3.60	0x87CC580B

int sceKernelGetFreeMemorySize(SceKernelFreeMemorySizeInfo *info);

sceKernelOpenMemBlock

Version	NID
1.69-3.60	0x8EB8DFBB

SceUID sceKernelOpenMemBlock(const char *name, int flags);

sceKernelFindMemBlockByAddrForUser

Version	NID
0.990-3.60	0xA33B99D1

/**
 * Find memory block by virtual range (base address and size)
 * If size == 0, API returns a memory block which contains 'start'
 * If size > 0, API returns a memory block just fit range [start, start + size].
 * @param[in]	vaddr		base address
 * @param[in]	size		address size
 * @retval	>=SCE_OK	block id
 * @retval	<SCE_OK		error
 */
SceUID sceKernelFindMemBlockByAddr(void *vaddr, SceSize size);

sceKernelFreeMemBlock

Version	NID
0.990-3.60	0xA91E15EE

/**
 * Free memory block.
 *
 * @param[in]	uid		block uid
 * @retval	SCE_OK		Success
 * @retval	<SCE_OK		Error code
 */
int sceKernelFreeMemBlock(SceUID uid);

sceKernelFreeMemBlockForVM

Version	NID
3.60	0x4EA13FEA

int sceKernelFreeMemBlockForVM(SceUID uid);

sceKernelCloseMemBlock

Version	NID
1.69-3.60	0xB680E3A0

int sceKernelCloseMemBlock(SceUID uid);

sceKernelGetMemBlockBase

Version	NID
0.996-3.60	0xB8EF5818

/**
 * @brief Get mapped base address of memory block.
 *
 * Get base address of memory block.
 * @param[in]	uid		block id
 * @param[out]	ppBase		base address of memory block
 * @retval	SCE_OK		success
 * @retval	<SCE_OK		Error
 */
int sceKernelGetMemBlockBase(SceUID uid, void **ppBase);

sceKernelAllocMemBlockForUser

Version	NID
0.990-3.60	0xB9D5EBDE

/**
 * Reserve a new memory block.
 *
 * The memory types that can be specified for type are as follows.
 * - SCE_KERNEL_MEMBLOCK_TYPE_USER_RW
 * - SCE_KERNEL_MEMBLOCK_TYPE_USER_RW_UNCACHE
 * - SCE_KERNEL_MEMBLOCK_TYPE_USER_MAIN_PHYCONT_RW
 * - SCE_KERNEL_MEMBLOCK_TYPE_USER_MAIN_PHYCONT_NC_RW
 * - SCE_KERNEL_MEMBLOCK_TYPE_USER_CDRAM_RW
 *
 * Allocate a memory block.
 *
 * @param[in]		name		Memory block name
 * @param[in]		vsize		Memory block virtual size
 * @param[in]		flags		Options
 * @retval		id		UID of memory block
 * @retval		<SCE_OK		Error code
 */
SceUID sceKernelAllocMemBlockForUser(const char *name, SceKernelMemBlockType type, SceSize vsize, const struct SceKernelAllocMemBlockOpt *pOpt);

sceKernelAllocUnmapMemBlock

Version	NID
3.60	0xEC636BCB

int sceKernelAllocUnmapMemBlock(char *name, SceSize size);

sceKernelOpenVMDomain

Version	NID
1.69-3.60	0x9CA3EB2B

int sceKernelOpenVMDomain();

sceKernelSyncVMDomain

Version	NID
1.69-3.60	0x19D2A81A

int sceKernelSyncVMDomain(SceUID uid, void *data, SceSize size);

sceKernelCloseVMDomain

Version	NID
1.69-3.60	0xD6CA56CA

int sceKernelCloseVMDomain();

sceKernelAllocMemBlockForVM

Version	NID
1.69-3.60	0xE2D7E137

SceUID sceKernelAllocMemBlockForVM(const char *name, SceSize vsize);

sceKernelCheckModelCapability

Version	NID
3.60	0x0144FBD9

int sceKernelCheckModelCapability(int bit);

sceKernelGetModelForCDialog

Version	NID
3.60	0xA2CB322F

int sceKernelGetModelForCDialog();

sceKernelGetModel

Version	NID
3.60	0xD0D4F729

int sceKernelGetModel();

sceKernelIsPSVitaTV

Version	NID
3.60	0x1453A5E5

int sceKernelIsPSVitaTV();

SceDipsw

sceKernelCheckDipsw

Version	NID
1.69-3.60	0x1C783FB2

sceKernelClearDipsw

Version	NID
1.69-3.60	0x800EDCC1

sceKernelSetDipsw

Version	NID
1.69-3.60	0x817053D4

SceDipswForDriver

sceKernelCheckDipswForDriver

Version	NID
3.60	0xA98FC2FD

sceKernelCheckDipswForDriver(int bit);

sceKernelGetDipswInfoForDriver

Version	NID
3.60	0xB2AD48BE

return *(int *)(dipsw_addr + 4 * info_id);

0 0x40 0x4 DevKit CP timestamp 1

1 0x44 0x2 DevKit CP Version

2 0x46 0x2 DevKit CP Build ID

3 0x48 0x4 DevKit CP timestamp 2 (strangely also set on Retail and TesKit)

int sceKernelGetDipswInfoForDriver(int info_id);

sceKernelClearDipswForDriver

Version	NID
3.60	0xF1F3E9FE

sceKernelClearDipswForDriver(int bit);

sceKernelSetDipswForDriver

Version	NID
3.60	0x82E45FBF

sceKernelSetDipswForDriver(int bit);

SceUartForKernel

sceUartWriteForKernel

Version	NID
3.60	0x41973874

int sceUartWriteForKernel(int device, unsigned char data);

sceUartReadAvailableForKernel

Version	NID
3.60	0x38DB7629

Returns the number of words available to read from the read FIFO.

int sceUartReadAvailableForKernel(int device);

sceUartReadForKernel

Version	NID
3.60	0x9BBF1255

int sceUartReadForKernel(int device);

sceUartInitForKernel

Version	NID
3.60	0xA9C74212

It initializes the clock generator registers for the device. The default baud rate is 115200 for devices 0-5 and 250000 for the device 6.

int sceUartInitForKernel(int device);

SceCpu

This library provides wrapper for much ARM CP15 co-processor access as well as low level support of spinlocks and other synchronization primitives.

sceKernelCpuGetCpuId

Version	NID
1.69-3.60	0x2704CFEE

Return the CPU ID of the current core.

int sceKernelCpuGetCpuId(void);

SceCpuForKernel

sceKernelVMRead8ForKernel

Version	NID
0.990	0xA2F0FE9D
3.60	not present

int sceKernelVMRead8ForKernel(uint8_t *dst, uint8_t *psrc);

sceKernelVMRead16ForKernel

Version	NID
0.990	0xF31D4D10
3.60	not present

int sceKernelVMRead8ForKernel(uint16_t *dst, uint16_t *psrc);

sceKernelVMRead32ForKernel

Version	NID
0.990	0x316574B1
3.60	not present

int sceKernelVMRead8ForKernel(uint32_t *dst, uint32_t *psrc);

sceKernelMMUMapSmallPagesForKernel

Version	NID
0.990	0xB953E022
3.60	not present

int sceKernelMMUMapSmallPagesForKernel(uint32_t vbase, uint32_t voffset, uint32_t vsize, uint32_t pbase);

sceKernelMMUMapSmallPageForKernel

Version	NID
0.990	0xCC7C16F8
3.60	not present

int sceKernelMMUMapSmallPageForKernel(uint32_t vbase, uint32_t voffset, uint32_t vsize, uint32_t pbase);

sceKernelCpuSaveContextForKernel

Version	NID
0.00	0x211B89DA
3.60	not present

sceKernelCpuRestoreContextForKernel

Version	NID
0.00	0x0A4F0FB9
3.60	not present

sceKernelCpuGetCONTEXTIDRForKernel

Version	NID
3.60	0x5B6B3274

The CONTEXTIDR, bits [31:0] contain the process ID number.

  return (unsigned __int8)__mrc(15, 0, 13, 0, 1); // Read CONTEXTIDR (Context ID Register)

void sceKernelCpuGetCONTEXTIDRForKernel(void);

sceKernelCpuUpdateSCTLRForKernel

Version	NID
3.60	0x04008CF7

  int result;
  result = __mrc(15, 0, 1, 0, 0) | 0x1806; // Read SCTLR (System Control Register)
  __mcr(15, 0, result, 1, 0, 0); // Write SCTLR (System Control Register)
  return result;

void sceKernelCpuUpdateSCTLRForKernel(void); // SCTLR (System Control Register)

sceKernelCpuBranchPredictorInvalidateAllISForKernel

Version	NID
3.60	0x1BB2BB8D

void sceKernelCpuBranchPredictorInvalidateAllISForKernel(void); // BPIALLIS, Branch predictor invalidate all (IS)

sceKernelCpuBranchPredictorInvalidateAllForKernel

Version	NID
3.60	0x4C4C7D6B

void sceKernelCpuBranchPredictorInvalidateAllForKernel(void); // BPIALL, Branch predictor invalidate all

sceKernelCpuDcacheInvalidateMVACForKernel

Version	NID
3.60	0x470EAE1E

void sceKernelCpuDcacheInvalidateMVACForKernel(int mva); // DCIMVAC, Data cache invalidate by MVA (PoC)

sceKernelCpuDcacheInvalidateMVACRangeForKernel

Version	NID
3.60	0x583F30D1

void sceKernelCpuDcacheInvalidateMVACRangeForKernel(void *addr, unsigned int size); // DCIMVAC, Data cache invalidate by MVA (PoC)

sceKernelCpuDcacheCleanInvalidateMVACRangeForKernel

Version	NID
3.60	0x6BA2E51C

void sceKernelCpuDcacheCleanInvalidateMVACRangeForKernel(void *addr, unsigned int size); // DCCIMVAC, Data cache clean and invalidate by MVA (PoC)

sceKernelCpuDcacheInvalidateSWForKernel

Version	NID
3.60	0x2F3BF020

void sceKernelCpuDcacheInvalidateSWForKernel(void); // DCISW, Data cache invalidate by set/way (all the cache)

sceKernelCpuDcacheCleanSWForKernel

Version	NID
3.60	0x73A30DB2

void sceKernelCpuDcacheCleanSWForKernel(void); // DCCSW, Data cache clean by set/way (all the cache)

sceKernelCpuDcacheCleanInvalidateSWForKernel

Version	NID
3.60	0x76DAB4D0

void sceKernelCpuDcacheCleanInvalidateSWForKernel(void); // DCCISW, Data cache clean and invalidate by set/way (all the cache)

sceKernelCpuDcacheCleanMVACForKernel

Version	NID
3.60	0xF7159B55

void sceKernelCpuDcacheCleanMVACForKernel(int mva); // DCCMVAC, Data cache clean by MVA (PoC)

sceKernelCpuDcacheCleanMVACRangeForKernel

Version	NID
3.60	0xC5C1EE4E

void sceKernelCpuDcacheCleanMVACRangeForKernel(void *addr, unsigned int size); // DCCMVAC, Data cache clean by MVA (PoC)

sceKernelCpuDcacheCleanInvalidateMVACForKernel

Version	NID
3.60	0xC8E8C9E9

void sceKernelCpuDcacheCleanInvalidateMVACForKernel(int mva); // DCCIMVAC, Data cache clean and invalidate by MVA (PoC)

sceKernelCpuIcacheInvalidateAllUISForKernel

Version	NID
3.60	0x264DA250

void sceKernelCpuIcacheInvalidateAllUISForKernel(void); // ICIALLUIS, Instruction cache invalidate all (PoU, IS)

sceKernelCpuIcacheInvalidateAllUForKernel

Version	NID
3.60	0xAEE0B489

void sceKernelCpuIcacheInvalidateAllUForKernel(void); // ICIALLU, Instruction cache invalidate all (PoU)

sceKernelCpuIcacheInvalidateMVAURangeForKernel

Version	NID
3.60	0xF4C7F578

void sceKernelCpuIcacheInvalidateMVAURangeForKernel(void *addr, unsigned int size); // ICIMVAU, Instruction cache invalidate by MVA (PoU)

sceKernelCpuIcacheAndL2InvalidateMVAURangeForKernel

Version	NID
3.60	0x19F17BD0
3.65-3.68	0x73E895EA

int sceKernelCpuIcacheAndL2InvalidateMVAURangeForKernel(void *addr, unsigned int size);

sceKernelCpuPreloadEngineKill

Version	NID
3.60	0xD0D85FF8

NSACR (Non-Secure Access Control Register)
Test bit NS access to the Preload Engine resources
[>] PLEFF (Preload Engine FIFO flush operation)
[>] PLEKC (Preload Engine kill channel operation)
[<] PLEASR (Preload Engine Activity Status Register)

int sceKernelCpuPreloadEngineKill(void);

sceKernelCpuUnrestrictedMemcpyForKernel

Version	NID
1.69-3.60	0x8C683DEC

Unrestricted memcpy by first setting the DACR register to 0xFFFF0000 and then doing a memcpy.

int sceKernelCpuUnrestrictedMemcpyForKernel(void *dst, const void *src, size_t len);

sceKernelMMUVAtoPAWithModeForKernel

Version	NID
0.990-3.60	0x67343A07

Temp name was sceKernelCpuGetPaddrWithMaskForKernel.

mode (maskPAR) is usually 0x33, sometimes 2.

int sceKernelMMUVAtoPAWithModeForKernel(int mode, void *vaddr, void **result);

sceKernelCpuGetPaddrForKernel

Version	NID
3.60	0x2A46E800

Uses maskPAR 0x33.

int sceKernelCpuGetPaddrForKernel(void *vaddr, void **result);

sceKernelCpuForKernel_9B8173F4

Version	NID
3.60	0x9B8173F4

Might be get_vaddr_memory_type.

Return value can be:

2
8
0x40
0x80
0xD0
0x80022007 (SCE_KERNEL_ERROR_VA2PA_FAULT)

int sceKernelCpuForKernel_9B8173F4(void *vaddr);

SceCpuForKernel_A5C9DBBA

Version	NID
3.60	0xA5C9DBBA

Uses sceKernelCpuGetCpuIdForDriver, sceKernelCpuAtomicGetAndSub16ForDriver and sceKernelCpuUnlockStoreLRForDriver.

int SceCpuForKernel_A5C9DBBA(void *addr);

SceCpuForKernel_9D72DD1B

Version	NID
3.60	0x9D72DD1B

Uses sceKernelCpuGetCpuIdForDriver and sceKernelCpuLockStoreLRForDriver.

int SceCpuForKernel_9D72DD1B(void *addr);

SceCpuForKernel_4CD4D921

Version	NID
3.60	0x4CD4D921

*(uint32_t *)addr = 1;
*((uint16_t *)addr + 2) = 4;
*((uint16_t *)addr + 3) = 4;
return result;

aka write 01 00 00 00 04 00 04 00 at addr.

int SceCpuForKernel_4CD4D921(void *addr);