SceAppMgr

From Vita Development Wiki
Jump to navigation Jump to search

Module

Version World Privilege
1.69-3.60 Non-secure Kernel

Libraries

Known NIDs

Version Name World Visibility NID
1.69-3.60 SceAppMgrForDriver Non-secure Kernel 0xDCE180F8
1.69-3.60 SceAppMgr Non-secure User 0x8AF17416
1.69-3.60 SceSharedFb Non-secure User 0x32A0442E
1.69 SceSharedFbForDriver Non-secure Kernel 0x9B443ECC

Types

AppId

Some functions take an AppId as argument.

ID Description
-1 Corresponds to pid 0
-2 Current app
-3 Unknown
-4 Unknown
-5 Unknown
-6 Unknown

App Run status

runStatus:
set: status & 0xfffff00f | runStatus_new
get: status & f

running: 2
suspended: 0x20
resumed: 0x10

debuggerRunStatus:
set: status & 0xfff0ffff | debuggerRunStatus_new
get: status & f0000

activeness:
set: status & 0xfffffff0 | activeness_new
get: status & 0xff0

anything (0x30, 2) -> 1
0x10 -> 0x11
0x200 -> 0

WaiterExistentFlag:
set: status | 0x1000
unset: & 0xffff0fff

TABLE:
0 nothing
1 SCE_APP_RUN_FLAG_DEACTIVATE
2 SCE_APP_RUN_FLAG_ACTIVATE
0x10 resumed
0x20 suspended
0x30 SCE_APP_RUN_FLAG_CREATED
0x100 SCE_APP_RUN_FLAG_NOEXIST
0x200 unk (activeness)
0x400 unk (activeness)
0x300 SCE_APP_RUN_FLAG_RESERVED
0x500 unk (activeness)
0x800 unk (runState)
0x1000 WaiterExistentFlag
0x10000 suspend debuggerRunStatus
0x20000 kill debuggerRunStatus

SceAppMgr Mount IDs

sceAppMgrPhotoMount
	0x64

sceAppMgrAppDataMount
	0x64
	0x65
	0x66
	0x67
	0x69
	0x6C
	0x6D
	0x6F
	0x70

sceAppMgrAppDataMountById
	0x68
	0x6A
	0x6B
	0x6E

sceAppMgrAppMount
	direct scePfsMount

sceAppMgrPspSaveDataRootMount
	0xCA

sceAppMgrWorkDirMount
	0xC8
	0xC9
	0xCA
	0xCB
	0xCC
	0xCE

sceAppMgrWorkDirMountById
	0xCD
	0xCF

sceAppMgrTrophyMount
	0x12C
	0x12D
	0x12E

sceAppMgrTrophyMountById
	0x12F
	0x130

sceAppMgrMmsMount
	0x190
	0x191
	0x192

sceAppMgrInstallDirMount
	0x1F4
	0x1F5
	0x1F8
	0x1F9

sceAppMgrLoopBackMount
	0x258

sceAppMgrGameDataMount
	0x3E8
	0x3E9

sceAppMgrAddContAddMount
	0x3EA

sceAppMgrAddContMount
	0x3EA
	0x3EB

sceAppMgrSaveDataAddMount
	0x3EC

sceAppMgrSaveDataMount
	direct scePfsMount
id src pfs mount mode key type default mount point
0x64 - 0x16 - ad%02x%02x%02x%02x%02x%02xd0:
0x65 - 0x16 - ad%02x%02x%02x%02x%02x%02xd0:
0x66 - 0x16 - ad%02x%02x%02x%02x%02x%02xd0:
0x67 - 0x16 - ad%02x%02x%02x%02x%02x%02xd0:
0x68 - 0x16 - ad%02x%02x%02x%02x%02x%02xd0:
0x69 - 0x16 - ad%02x%02x%02x%02x%02x%02xd0:
0x6A - 0x16 - ad%02x%02x%02x%02x%02x%02xd0:
0x6B - 0x15 - ad%02x%02x%02x%02x%02x%02xd0:
0x6C - 0x15 - ad%02x%02x%02x%02x%02x%02xd0:
0x6D - 0x16 - ad%02x%02x%02x%02x%02x%02xd0:
0x6E - 0x16 - ad%02x%02x%02x%02x%02x%02xd0:
0x6F - 0x15 - ad%02x%02x%02x%02x%02x%02xd0:
0x70 - 0x15 - ad%02x%02x%02x%02x%02x%02xd0:
0xC8 - 0x15 - td%02x%02x%02x%02x%02x%02xd0:
0xC9 - 0x15 - td%02x%02x%02x%02x%02x%02xd0:
0xCA - 0x15 - sceSblACMgrIsNotSandboxed(0) != 0 ? ms0: : ms%s%02x%02x%02x%02x%02x%02xd0:
0xCB - 0x15 - td%02x%02x%02x%02x%02x%02xd0:
0xCC - 0x15 - td%02x%02x%02x%02x%02x%02xd0:
0xCD - 0x15 - cache0:
0xCE - 0x15 - td%02x%02x%02x%02x%02x%02xd0:
0xCF - 0x15 - td%02x%02x%02x%02x%02x%02xd0:
0x12D - 6 Sealedkey trophy_dst0:
0x12E - 6 Sealedkey trophy_sys0:
0x12F - 6 Sealedkey trophy_dat0:
0x130 - 6 Sealedkey trophy_dbk0:
0x190 - 0x16 - ad%02x%02x%02x%02x%02x%02xd0:
0x191 - 0x16 - ad%02x%02x%02x%02x%02x%02xd0:
0x192 - 0x16 - ad%02x%02x%02x%02x%02x%02xd0:
0x1F4 - 4 Sealedkey ad%02x%02x%02x%02x%02x%02xd0:
0x1F5 - 4 Sealedkey ad%02x%02x%02x%02x%02x%02xd0:
0x1F8 - 6 Sealedkey sdimport0:
0x1F9 - 6 Sealedkey sdimport_tmp0:
0x258 - 6 Sealedkey lm%02x%02x%02x%02x%02x%02xd0:
0x3E8 - 2 (0x14 for external path) klicensee (none for external path) app0:
0x3E9 - 2 (0x14 for external path) klicensee (none for external path) app0:
0x3EA - 4 (0xC for gro0:) Sealedkey addcont0:
0x3EB - 4 (0xC for gro0:) Sealedkey addcont0:
0x3EC - 5 Sealedkey savedata0:
0x3ED - 0x15 - savedata0:
0x3EE - 0x14 - sd%02x%02x%02x%02x%02x%02xd0:
0x3EF - 0x14 - sd%02x%02x%02x%02x%02x%02xd0:
0x3F0 - 0x15 - ud%02x%02x%02x%02x%02x%02xd0:
MountId real path
(X is an incremental number)		 virtual mount point
(X is randomized)		 Function to call for mounting Used by
?0x3F? ux0:data/near/gift gift0: Seen in sceAppMgrAppDataMountByIdForDriver ?SceNear?
0x64 ux0:picture photo0: automounted
or sceAppMgrAppDataMount
or sceAppUtilPhotoMount		 SceEmailApp,
SceHostCollaboService,
ScePsp2Compat,
SceSettings,
SceWebBrowser,
SceWebUIPlugin, by NPXS10036
0x64 ? ? sceAppMgrPhotoMountForDriver
sceAppMgrPhotoMount
sceAppMgrAppDataMountForDriver
0x65 ur0:user/XX/psnfriend adXXXXXXXXXXXX: sceAppMgrAppDataMount SceFriend,
SceFriendListDialogPlugin,
SceInvitationDlgPlugin,
SceNpGameCustomDataDPlugin,
SceNpMessageDialogPlugin,
SceNpProfile2DialogPlugin,
ScePsnMail,
SceShell
0x66 ur0:user/XX/psnmsg adXXXXXXXXXXXX: sceAppMgrAppDataMount SceInvitationDlgImplPlugin,
SceMsgMiddleWare,
SceNpGameCustomDataDlgImpl,
SceNpMessage,
SceNpMessageDlgImplPlugin
0x67 ur0:user/XX/near adXXXXXXXXXXXX: sceAppMgrAppDataMount SceNear,
SceNearAutoCheckin,
SceNearAutoLocation,
SceNearProfile,
SceNearUtilService, by NPXS10036
0x68 ? ?
? ur0:user/XX/grpmsg adXXXXXXXXXXXX:
? ur0:contacts ?
0x69 ux0:music music0: automounted
or sceAppMgrAppDataMount
or sceAppUtilMusicMount		 SceAvMediaService,
SceHostCollaboService,
SceMusicBrowser,
SceShell
0x6A ? adXXXXXXXXXXXX: sceAppMgrAppDataMountById
0x6B ? adXXXXXXXXXXXX: sceAppMgrAppDataMountById
0x6C ux0:calendar adXXXXXXXXXXXX: sceAppMgrAppDataMount SceCalendar,
SceCalendarBg,
SceCalendarDialogPlugin,
SceEmailApp
0x6D ux0:video video0: sceAppUtilExtVideoMount
or sceAppMgrAppDataMount
0x6E ux0:appmeta/new (only while app promoting)
ux0:appmeta/<TITLEID>		 adXXXXXXXXXXXX: mounted when installing app / refreshing LiveArea of an app
0x6F tm0:nphome adXXXXXXXXXXXX: mounted by NPXS10010 when playing a video bought on PSStore, mounted by NPXS10036 when downloading a video bought on PSStore (NPXS10002). SceLibMarlin, SceLibMarlinPb
0x70 ux0:book ?adXXXXXXXXXXXX:? sceAppUtilBookMount Reader™ (PCSC80012)
0xC8 ur0:temp/sqlite tdXXXXXXXXXXXX: mounted by some system apps
0xC9 ur0:temp/attach tdXXXXXXXXXXXX: mounted by some games
0xCA ux0:pspemu ms0: sceAppMgrPspSaveDataRootMount mounted by NPXS19999 (SceShell) when asked by CMA or PspEmu or SceGameManual or Store
0xCB ? tdXXXXXXXXXXXX: sceAppMgrWorkDirMount
0xCC ur0:temp/checkout tdXXXXXXXXXXXX: mounted by NPXS10002 (SceStoreBrowser or SceCheckoutBrowser)
0xCD ux0:cache/<TITLEID> cache0: sceAppUtilCacheMount
or sceAppMgrWorkDirMountById
0xCE ur0:temp/webbrowser tdXXXXXXXXXXXX: mounted by NPXS10003 (SceWebBrowser)
0xCF ? tdXXXXXXXXXXXX: sceAppMgrWorkDirMountById ?
? ux0:mtp ? ? ?MTP?
0x12C ? ? sceAppMgrTrophyMount
sceAppMgrTrophyMountForDriver		 ?
0x12E ur0:user/XX/trophy/data/sce_trop trophy_sys0: ?sceNpTrophyCreateContext?
sceAppMgrTrophyMount
sceAppMgrTrophyMountForDriver		 mounted by NPXS19999 (SceShell) when asked by app or games
0x12F ur0:user/XX/trophy/data/<COMMID> trophy_dat0: sceAppMgrTrophyMountById
0x130 ?ur0:user/XX/trophy/data/db? trophy_dbk0: sceAppMgrTrophyMountById
0x190 ux0:mms/photo adXXXXXXXXXXXX: sceAppMgrMmsMount
sceAppMgrMmsMountForDriver		 mounted by NPXS10004, by NPXS10036
0x191 ux0:mms/music adXXXXXXXXXXXX: sceAppMgrMmsMount
sceAppMgrMmsMountForDriver		 ?mounted by NPXS10009?
0x192 ux0:mms/video adXXXXXXXXXXXX: sceAppMgrMmsMount
sceAppMgrMmsMountForDriver		 mounted by NPXS10010, by NPXS10036
0x1F4 ? ?
0x1F8 ? sdimport0:
0x1F9 ? sdimport_tmp0:
0x258 ? ? sceAppMgrLoopBackMount
0x384 ? ?
0x3E8 ux0:temp/fakepkg/expand/<TITLEID> (PKG installer promoting),
ux0:bgdl/t/XXXXXXXX/<TITLEID>/0000 (bgdl promoting),
vs0:app/<TITLEID>		 gpXXXXXXXXXXXX:,
app0:		 automounted ?
0x3E8
ux0:app/<TITLEID>,
gro0:app/<TITLEID>		 gpXXXXXXXXXXXd: sceAppMgrGameDataMountForDriver
0x3E9 ux0:temp/fakepkg/expand/<TITLEID> (PKG installer promoting),
ux0:bgdl/t/XXXXXXXX/<TITLEID>/0000 (bgdl promoting)		 gpXXXXXXXXXXXX:,
app0: (mounted over /app/ app0:)
0x3E9 ux0:patch/<TITLEID>,
grw0:patch/<TITLEID>		 gpXXXXXXXXXXXd: sceAppMgrGameDataMountForDriver
0x3EA ux0:temp/fakepkg/expand/<TITLEID> (PKG installer promoting),
ux0:bgdl/t/XXXXXXXX/<TITLEID>/0000 (bgdl promoting)		 gpXXXXXXXXXXXX:,
addcont0: - addcont1:		 automounted by SceAppMgr
or sceAppUtilAddcontMount
or sceAppUtilDrmOpen
or sceAppUtilAddcontForceAddcontMount
0x3EA gro0:addcont/<TITLEID> ? sceAppMgrAddContMount
0x3EA ux0:addcont/<TITLEID>,
grw0:addcont/<TITLEID>		 ? sceAppMgrAddContAddMount
sceAppMgrAddContMount
0x3EA gro0:acinst/<titleid> ? sceAppMgrAcInstGetAcdirParamForDriver
0x3EB ux0:addcont/<TITLEID>,
grw0:addcont/<TITLEID>		 ? sceAppMgrAddContMount
0x3EC ux0:theme/<CONTENTID> tmXXXXXXXXXXXX: sceAppMgrThemeDataMount
0x3ED ? savedata0: of ux0: or grw0: automounted by SceAppMgr (writable mount with pfs mount)
0x3ED ux0:user/XX/savedata/<TITLEID> savedata0:
?savedata1:?		 automounted by SceAppMgr
0x3ED ?any path? tsXXXXXXXXXXXX: sceAppMgrFakeSaveDataCreateMountForDriver
sceAppMgrGetSaveDataInfoForSpecialExport		 ?fake_package_installer?
?SceContentManager?
0x3ED ?any path? ? sceAppMgrLoadSaveDataSystemFile ?fake_package_installer?
0x3ED ux0:user/XX/savedata_plus/work/<TITLEID> tsXXXXXXXXXXXX: sceAppMgrCloudDataDstCreateMountForDriver
0x3ED ux0:/user/XX/savedata/<TITLEID> tsXXXXXXXXXXXX:
tsXXXXXXXXXXXXd		 sceAppMgrCloudDataSrcMountForDriver
sceAppMgrUpdateSaveDataParam
0x3ED grw0:savedata/<titleid> tsXXXXXXXXXXXX:
tsXXXXXXXXXXXXd		 sceAppMgrCloudDataSrcMountForDriver
sceAppMgrUpdateSaveDataParam
0x3ED ux0:/user/XX/savedata_vc/<titleid>,
ux0:/user/XX/savedata/<titleid>		 ? sceAppMgrSaveDataAddMount
0x3EE ? savedata0: of not ux0: and grw0: automounted by SceAppMgr (writable mount without pfs mount)
0x3EE ur0:user/XX/savedata/<TITLEID> savedata0:
?savedata1:?		 sceAppMgrSaveDataAddMount
or sceAppUtilSaveDataMount
0x3EF vs0:sys/external sdXXXXXXXXXXXX: automounted
0x3F0 vs0:data/external sdXXXXXXXXXXXX: automounted

Types

// invalid category (not gd) or invalid TITLE ID (e.g. "VITASHELL")
#define SCE_APPMGR_ERROR_INVALID_PARAM_SFO (0x80800015)

typedef char[0x10] SceTitleId;

typedef struct SceAppMgrLaunchParam { // size is 0x34
    SceSize size;    // Size of this structure
    SceUInt32 attr; // set to 0x80000000 to break on launch
    SceUInt32 initPriority;
    SceUInt32 unk_C;
    SceUInt32 unk_10;
    SceUInt32 unk_14;
    SceUInt32 budgetId;
    SceUInt32 unk_1C;
    SceUInt32 unk_20;
    SceUInt32 unk_24;
    SceUInt32 unk_28;
    SceUInt32 unk_2C;
    SceUInt32 unk_30;
} SceAppMgrLaunchParam;

// Linked list of these items is controlled by common function that is responsible for PFS mounting.
// This function (on FW 3.60, segment 0, offset 0x19B51) is used by all other mount functions in SceAppMgr.
// Linked list is used as lookup by callback that is set by sceIoSetPathMappingFunctionForDriver.
// Pointer of address of first entry is: on 3.60, segment 1, offset 0x3470C.
typedef struct pfs_mount_t { // size is 0x1D0 (known)
   int mount_id;
   char path[0x124]; // path used for PFS mount (like ux0:app/<TITLEID>)
   ScePfsRndDriveId pfs_rnd_drive_id; // PFS mount drive name - used internally by iofilemgr to connect to vfs_nodes through vfs_node_info?
   SceTitleId titleId;
   SceUInt64 auth_ids[0x10]; // array of auth ids
   pfs_mount_t *prev; // pointer to prev item in the list or 0
   pfs_mount_t *next; // pointer to next item in the list or 0
} pfs_mount_t;

struct appmgr_mount_t { // size is 0x24 (known)
   pfs_mount_t *this_pfs_mount;
   SceFiosOverlayID overlay_id; // overlay for redirecting <appmgr_rnd_drive_id> to <this_pfs_mount->pfs_rnd_drive_id>0: (if this_pfs_mount is not a 0x3E9 patch mount point )
                                 // or <mctx->prev_pfs_mount->pfs_rnd_drive_id>0: to <this_pfs_mount->pfs_rnd_drive_id>0: (if this_pfs_mount is a 0x3E9 patch mount point )
                                 // or <mctx->prev_pfs_mount->path> to <this_pfs_mount->path>

   ScePfsRndDriveId appmgr_rnd_drive_id; // used for appmgr mount - returned when executing appmgr mount function
   pfs_mount_t* prev_pfs_mount; // other pfs mount with same mount_id and appmgr_rnd_drive_id if mount_id is 0x3EA or 0x3E8
   appmgr_mount_t* prev; // pointer to prev item in the list or 0
   appmgr_mount_t* next; // pointer to next item in the list or 0
} appmgr_mount_t;

typedef struct appmgr_mount_holder_t {
   int unk0;
   appmgr_mount_t *first_virt_mount; // start of the list for appmgr mounts
} appmgr_mount_holder_t;

typedef struct titleId_item {
   SceTitleId titleId;
} titleId_item;

// most importantly contains rif_info and keystone
typedef struct phys_ctx_t { // size is 0x508 (known)
   int unk0[0x58];
   int flag_160;
   int unk164;
   int unk168;
   int unk16C;
   int unk170;
   char physical_mountpoint[0xC];
   int unk180[0x46];
   char prefix_298[4];
   int flag_29C;
   int unk2A0;
   int unk2A4;
   rif_info rif;
   char keystone_318[0x60];
   SceTitleId titleId_378;
   SceTitleId titleid_388;
   titleId_item addContTitleIds[8];
   titleId_item saveDataTitleIds[8];
   char unk498[0x70];
} phys_ctx_t;

typedef struct sub_ctx_23C2960_C {
   char unk0[0x128];
   int unk128;
   int unk12C;
   int unk130;
   int unk134;
   int unk138;
   int unk13C;
   char unk140[0x3F8];
   int unk538;
   int unk53C;
   char unk540;
   char unk541;
   char unk542;
   char unk543;
   int unk544;
   int unk548;
} sub_ctx_23C2960_C;

typedef struct sub_ctx_23C2960_558_548 {
   int unk0;
   int unk4;
   int unk8;
   int unkC;
   int unk10;
   int unk14;
   int unk18;
   int unk1C;
   int unk20;
   int unk24;
   int unk28;
   int unk2C;
} sub_ctx_23C2960_558_548;

// most importantly holds appmgr_mount_holder_t
// which is a root for appmgr mountpoints
typedef struct sub_ctx_23C2960_558 {
   char appName[32];
   SceUID pid;
   int unk24;
   appmgr_mount_holder_t mctx_hldr_28;
   phys_ctx_t phys_ctx_30;
   sub_ctx_23C2960_558_548 unk548;
} sub_ctx_23C2960_558;

typedef struct sub_ctx_23C2960_AFC_10A4 {
   int unk0;
   int unk4;
   char unk8;
   char unk9;
   char unkA;
   char unkB;
   char unkC;
   char unkD;
   char unkE;
   char unkF;
} sub_ctx_23C2960_AFC_10A4;

typedef struct sub_ctx_23C2960_AFC {
   char unk_0[4260];
   sub_ctx_23C2960_AFC_10A4 unk_10A4;
} sub_ctx_23C2960_AFC;

typedef struct sub_ctx_23C2960_1BC0_14_7EC {
   int unk0;
   int unk4;
   int unk8;
   int unkC;
   int unk10;
   int unk14;
   int unk18;
   int unk1C;
   int unk20;
   int unk24;
   int unk28;
   int unk2C;
   int unk30;
   int unk34;
   int unk38;
   int unk3C;
} sub_ctx_23C2960_1BC0_14_7EC;

typedef struct sub_ctx_23C2960_1BC0_14 {
   char unk0[2028];
   sub_ctx_23C2960_1BC0_14_7EC unk7EC;
} sub_ctx_23C2960_1BC0_14;

struct sub_ctx_23C2960_1BC0 {
   __int16 unk0;
   __int16 unk2;
   int unk4;
   int unk8;
   SceUID SceAppMgrAppMutex_uid;
   SceUID current_thread_10;
   sub_ctx_23C2960_1BC0_14 unk14;
} sub_ctx_23C2960_1BC0;

typedef struct sub_ctx_23C2960_2400 {
   int unk0;
   int unk4;
   int unk8;
   char unkC[4];
} sub_ctx_23C2960_2400;

typedef struct ctx_23C2960_SceAppInfoInternal360 { // size is 0x2410 (known)
   int appId;
   int unk4;
   int unk8;
   sub_ctx_23C2960_C unkC;
   sub_ctx_23C2960_558 unk_558;
   int flags_AC0;
   int unk_AC4;
   int is_this_process_AC8;
   int unk_ACC;
   int appmgr_0x10000001_event_indicator_AD0;
   int appmgr_0x10000002_event_indicator_AD4;
   int appmgr_0x10000003_event_indicator_AD8;
   int appmgr_0x20000001_event_indicator_ADC;
   int appmgr_0x20000004_event_indicator_AE0;
   int appmgr_0x10000101_0x10000102_event_indicator_AE4;
   int appmgr_0x10000004_event_indicator_AE8;
   int appmgr_0x10000006_event_indicator_AEC;
   int appmgr_0x10000005_event_indicator_AF0;
   int appmgr_0x20000010_event_indicator_AF4;
   int unk_AF8;
   sub_ctx_23C2960_AFC unk_AFC;
   int unk_1BB0;
   int unk_1BB4;
   __int64 timewide_1BB8;
   sub_ctx_23C2960_1BC0 unk_1BC0;
   sub_ctx_23C2960_2400 unk_2400;
} ctx_23C2960;

typedef ctx_23C2960 global_ctx_item;

typedef struct generic_mount_ctx {
  SceTitleId titleId;
  char passCode[32];
  char mountDrive[16];
} generic_mount_ctx;

#define SCE_APPMGR_MAX_APP_NAME_LENGTH		(31)		/* Maximum app name length */

/* System event ID */
#define SCE_APPMGR_SYSTEMEVENT_ON_RESUME			(0x10000003)
#define SCE_APPMGR_SYSTEMEVENT_ON_STORE_PURCHASE		(0x10000004)
#define SCE_APPMGR_SYSTEMEVENT_ON_NP_MESSAGE_ARRIVED		(0x10000005)
#define SCE_APPMGR_SYSTEMEVENT_ON_STORE_REDEMPTION		(0x10000006)

/* Event ID (old SDK) */
#define SCE_APP_EVENT_UNK0					(0x00000003)
#define SCE_APP_EVENT_ON_ACTIVATE				(0x10000001)
#define SCE_APP_EVENT_ON_DEACTIVATE				(0x10000002)
#define SCE_APP_EVENT_UNK1					(0x10000300)
#define SCE_APP_EVENT_REQUEST_QUIT				(0x20000001)
#define SCE_APP_EVENT_UNK2					(0x30000003)

/* Error number */
#define SCE_APPMGR_ERROR_BUSY			(0x80802000)	/* Busy */
#define SCE_APPMGR_ERROR_INTERNAL		(0x80802001)	/* Internal error */
#define SCE_APPMGR_ERROR_PARAM			(0x80802002)	/* The parameter is invalid. It is necessary to deal with it by the time of application development */
#define SCE_APPMGR_ERROR_STATE			(0x80802013)	/* Invalid state */
#define SCE_APPMGR_ERROR_NULL_POINTER		(0x80802016)	/* NULL pointer */
#define SCE_APPMGR_ERROR_INVALID		(0x8080201a)	/* Invalid parameter */
#define SCE_APPMGR_ERROR_INVALID_SELF_PATH	(0x8080201e)	/* Invalid SELF path */
#define SCE_APPMGR_ERROR_TOO_LONG_ARGV		(0x8080201d)	/* argv is too long */
#define SCE_APPMGR_ERROR_BGM_PORT_BUSY		(0x80803000)	/* The BGM port was occupied and could not be secured. Entered the queue */

/* Infobar state */
typedef enum SceAppMgrInfoBarVisibility {
	SCE_APPMGR_INFOBAR_VISIBILITY_INVISIBLE = 0,
	SCE_APPMGR_INFOBAR_VISIBILITY_VISIBLE   = 1
} SceAppMgrInfoBarVisibility;

typedef enum SceAppMgrInfoBarColor {
	SCE_APPMGR_INFOBAR_COLOR_BLACK  = 0,
	SCE_APPMGR_INFOBAR_COLOR_WHITE  = 1
} SceAppMgrInfoBarColor;

typedef enum SceAppMgrInfoBarTransparency {
	SCE_APPMGR_INFOBAR_TRANSPARENCY_OPAQUE      = 0,
	SCE_APPMGR_INFOBAR_TRANSPARENCY_TRANSLUCENT = 1
} SceAppMgrInfoBarTransparency;

#define SCE_APP_MGR_MAX_EVENT_PARM_LENGTH	(56)		/* Maximum event parameter length */

/* Event structure */
typedef struct SceAppMgrEvent { // size is 0x64
	int event;						/* Event ID */
	SceUID appId;						/* Application ID. Added when required by the event */
	char  param[SCE_APP_MGR_MAX_EVENT_PARM_LENGTH];		/* Parameters to pass with the event */
} SceAppMgrEvent;

/* System event structure */
typedef struct SceAppMgrSystemEvent { // size is 0x64
	int systemEvent;					/* Event ID */
	union {
		SceUInt8 reserved[60];
	} data;
} SceAppMgrSystemEvent;

typedef struct SceAppMgrAppState { // size is 128 bytes
	SceUInt32 systemEventNum;
	SceUInt32 appEventNum;
	SceBool isSystemUiOverlaid;

	SceUInt8 reserved[128 - sizeof(SceUInt32)*2 - sizeof(SceBool)];
} SceAppMgrAppState;

typedef struct SceAppMgrAppInfo { // size is 128 bytes
	char appName[32];

	SceUInt8 reserved[128 - 32];
} SceAppMgrAppInfo;

typedef struct SceAppMgrNetworkDisconnectionWarningDialogStateOptParam {
	SceUInt8 reserved[128];
} SceAppMgrNetworkDisconnectionWarningDialogStateOptParam;

typedef struct SceAppMgrLoadExecOptParam {
	int reserved[256/4];
} SceAppMgrLoadExecOptParam;

// First element is at offset 0x22110 on FW 0.990
typedef struct SceAppInfo_internal { // (size is 0xADC, 4 elements max) on FW 0.990
	SceUID appId;					// 0x0 - Application ID - (-1)
	char appName[32];				// 0x4
	char appPath[256];				// 0x24
	SceSize budgetSize;				// 0x124
	SceSize phycontSize;				// 0x128
	SceUInt32 budget_related;			// 0x12C
	SceUInt32 launchMode;				// 0x130 - (0)
	SceUInt32 budgetType;				// 0x134 - (0)
	SceUInt32 processAttr;				// 0x138 - (0)
	SceUInt32 unk_13C;				// 0x13C
	SceUInt32 unk_140;				// 0x140 - (0)
	SceUID processId;				// 0x144 - Process ID - (0)
	SceUInt32 state;				// 0x148 - (-1)
	SceUID evfId;					// 0x14C - Specify the identifier of the event flag. - (-1)
	SceUInt32 unk_150;				// 0x150 - (0)
	appmgr_mount_t *mount				// 0x154
	char buf_158[0x114];				// 0x158
	SceUInt32 unk_26C;				// 0x26C - (0)
	SceUInt32 unk_270;				// 0x270 - (0)
	SceUInt32 unk_274;				// 0x274
	SceUInt32 status;				// 0x278 - bgm_priority (& ?), runStatus (& 0xf), activeness (& ff0) - (0x101)
	SceUInt32 unk_27C;				// 0x27C - (0)
	SceUInt32 unk_280;				// 0x280
	SceUInt32 unk_284;				// 0x284 - (0)
	SceUInt32 firstCustomEventId_maybe;		// 0x288
	SceUInt32 lastCustomEventId_maybe;		// 0x28C
	SceAppMgrEvent *firstCustomEvent;		// 0x290 - heap memory address of size 0x14 (the 5 following events on FW 0.990)
	SceUInt32 event_on_activate;			// 0x294
	SceUInt32 event_on_deactivate;			// 0x298
	SceUInt32 systemevent_on_resume;		// 0x29C
	SceUInt32 systemevent_on_store_purchase;	// 0x2A0
	SceUInt32 systemevent_on_np_message_arrived;	// 0x2A4
	SceUInt32 appEventNum;				// 0x2A8
	SceAppMgrAppParam appParam			// 0x2AC
	SceUInt32 unk_6AC;				// 0x6AC
	SceUInt32 unk_6B0;				// 0x6B0
	SceUInt32 unk_6B4;				// 0x6B4
	char buf_6B8[0x400];				// 0x6B8
	SceUInt32 unk_AB8;				// 0xAB8 - (0)
	SceUID appMutexId;				// 0xABC - SceAppMgrAppMutex uid
	SceUInt32 currentBgmState;			// 0xAC0 - (0)
	SceUInt32 unk_AC4;				// 0xAC4 - (-1)
	SceUInt32 unk_AC8;				// 0xAC8
	SceUInt32 unk_ACC;				// 0xACC
	SceUInt32 callbackOnLaunch;			// 0xAD0 - (-1)
	SceUInt32 unk_AD4;				// 0xAD4 - (0)
	SceUInt32 unk_AD8;				// 0xAD8
} SceAppInfo_internal;

typedef struct SceAppMgrAppStatus { // size is 0x40 on FW 0.990
	SceUInt32 unk_0;				// 0x0
	SceUInt32 launchMode;				// 0x4
	SceUInt32 bgm_priority_or_status;		// 0x8
	char appName[32];				// 0xC
	SceUInt32 unk_2C;				// 0x2C
	SceUID appId;					// 0x30 - Application ID
	SceUID processId;				// 0x34 - Process ID
	SceUInt32 status_related_1;			// 0x38
	SceUInt32 status_related_2;			// 0x3C
} SceAppMgrAppStatus;

typedef struct SceAppMgrAppParam { // size is 0x400 on FW 0.990
	char data[0x400];
} SceAppMgrAppParam;

typedef struct SceAppMgrBootParam { // size is 0xC on FW 0.990
	SceUint unk_0;				// 0x0
	SceUint unk_4;				// 0x4
	SceUint unk_8;				// 0x8
} SceAppMgrBootParam;

typedef struct SceSharedFbCreate { // size is 0x18
    SceSize AllocMemSize;
    int unk_04;
    int unk_08;
    int unk_0C;
    int unk_10;
    int unk_14;
} SceSharedFbCreate;

typedef struct SceSharedFbInfo { // size is 0x58
    int unk_00;		// cdram base?
    int unk_04;		// ex: 0x500000
    int unk_08;		// cdram base?
    int unk_0C;
    void *unk_10;
    int unk_14;
    int unk_18;
    int unk_1C;
    int unk_20;
    int unk_24;		// 960
    int unk_28;		// 960
    int unk_2C;		// 544
    int unk_30;
    int unk_34;		// unk idx
    int unk_38;
    int unk_3C;
    int unk_40;
    int unk_44;
    int unk_48;
    int unk_4C;
    int unk_50;
    int unk_54;
} SceSharedFbInfo;

Data segment layout

On 3.60 :

Address Size Description
0x00000 0x4 SceUID SceAppMgrApp pool if size 0x1000
0x00004 0x4 SceUID SceAppMgrApp mutex
0x00008 0x4 SceUID SceAppMgrMount pool if size 0x10000
0x0000C 0x4 SceUID SceAppMgrMount mutex
0x00010 0x4 SceUID SceAppMgrSaveData pool if size 0xA000
0x00014 0x4 SceUID SceAppMgrSaveData mutex
0x00018 0x4 SceUID SceAppMgrPhoto mutex
0x0001C 0x4 int process local storage SceAppMgrSafeMemory of size 0x10000
0x00020 0x4 SceUID SceAppMgrSafeMemory mutex
0x00024 0x4 int process local storage SceAppMgrAppInfoCache of size 0x400
0x00028 0x4 unknown
0x0002C 0x4 unknown
0x00030 0x4 SceUID SceAppMgrDbgShellEventCount sema
0x00034 0x4 SceUID SceAppMgrBottomSema sema
0x00038 0x4 SceUID SceAppMgrLiveAreaOperation mutex
0x0003C 0x4 SceUID SceAppMgrLiveAreaOpeResultMx mutex
0x00040 0x4 SceUID SceAppMgrLiveAreaOpeResultCd mutex
0x00044 0x4 unknown
0x00048 0x4 unknown
0x0004C 0x4 unknown
0x00050 0x4 unknown
0x00054 0x4 unknown
0x00058 0x4 unknown
0x0005C 0x4 unknown
0x00060 0x4 unknown
0x00064 0x4 SceUID SceAppMgrUpdtNtfy sema
0x00068 0x4 SceUID SceAppMgrProcessStateUpdater thread
0x0006C 0x4 SceUID SceAppMgrGcListener thread
0x00070 0x434 unknown
0x004A4 0x4 SceUID SceAppMgrCore mutex
0x004A8 0x4 SceUID current thread
0x004AC 0x4 SceUID SceAppMgrCore2 mutex
0x004B0 0x4 unknown
0x004B4 0x4 SceUID SceAppMgrCoreKM mutex
0x004B8 0x48 unknown
0x00500 0x2D140 global_ctx_item[20] - array of global contexts most likely for each running app
0x2D640 0x1824 memset chunk
0x2EE64 0x4 unknown
0x2EE68 0x4 SceUID SceAppMgrAbort event flag
0x2EE6C 0x4 SceUID SceAppMgrCoredump event flag
0x2EE70 0x4 SceUID SceAppMgrAbortHandler thread
0x2EE74 0x4 unknown
0x2EE78 0xA78 memset chunk of size 0xA7C
0x2F8F0 0x4 SceUID SceAppMgrAudioUdt mutex (part of 0xA7C chunk)
0x2F8F4 0x14 unknown
0x2F908 0x4 SceUID SceAppMgrEv event flag
0x2F90C 0x4 0x01
0x2F910 0x4 0
0x2F914 0x4 SceUID SceAppMgrEv event flag
0x2F918 0x4 0x02
0x2F91C 0x4 0
0x2F920 0x4 SceUID SceAppMgrEv event flag
0x2F924 0x4 0x04
0x2F928 0x4 0
0x2F92C 0x4 SceUID SceAppMgrEv event flag
0x2F930 0x4 0x08
0x2F934 0x4 0
0x2F938 0x4 SceUID SceAppMgrEv event flag
0x2F93C 0x4 0x10
0x2F940 0x4 0
0x2F944 0x4 SceUID SceAppMgrEv event flag
0x2F948 0x4 0x20
0x2F94C 0x4 0
0x2F950 0x4 SceUID SceAppMgrEv event flag
0x2F954 0x4 0x40
0x2F958 0x4 0
0x2F95C 0x298 unknown
0x2FBF4 0x2D00 memset chunk
0x328F4 0x1640 unknown
0x33F34 4 int ux0: mount event id
0x33F38 0x120 unknown
0x34058 4 int grw0: mount event id
0x3405C 0x104 unknown
0x34160 4 int gro0: mount event id
0x34164 0x424 unknown
0x34588 0x20 some struct
0x345A8 0x164 unknown
0x3470C 0x4 pfs_mount_t* pointer to list of items
0x34710 0x6E0 unknown
0x34DF0 0x20 some struct
0x34E10 0x14 unknown
0x34E24 4 void* 0x720 buffer allocated from 0x22A0000 pool
0x34E28 0x30 unknown
0x34E58 4 void* 0x400 buffer allocated from 0x22A0010 pool
0x34E5C 4 void* 0x8000 buffer allocated from 0x22A0010 pool
0x34E60 0x54 unknown
0x34EB4 0x368 memset chunk of size 0x3AC
0x3521C 0x40 fast_mutex SceSharedFb (part of 0x3AC chunk)
0x3525C 0x4 unknown (part of 0x3AC chunk)
0x35260 0x42FC unknown

pfs_mount_t Parser

pfs_mount_t** first_entry_addr;
tai_module_info_t appmgr_info;
taiGetModuleInfoForKernel(KERNEL_PID, "SceAppMgr", &appmgr_info);
int res=1;
switch (appmgr_info.module_nid) {
	case 0xDBB29DB7: // 3.60 retail
		res = module_get_offset(KERNEL_PID, appmgr_info.modid, 1, 0x3470C, &first_entry_addr);
		break;
	default:
		break;
}
if (!res) {
	pfs_mount_t* entry = *first_entry_addr;
	log_write((char*)entry, sizeof(pfs_mount_t));
	while ((int)entry->next > 0) {
		entry = entry->next;
		log_write((char*)entry, sizeof(pfs_mount_t));
	}
}

How app, patch and addcont is mounted

Global mountpoint list in AppMgr

mounts

Explanation

AppMgr operates with such term as mount_id.

Different ids correspond to different paths and are described at SceAppMgr_Mount_IDs

There are many different mount functions in AppMgr which mount different paths with corresponding mount_id.

However on the bottom level there is only one single function that is responsible for all mount operations.

It is located in segment 0 at offset 0x19B51 on 3.60. 

int create_mountpoint_base(SceUID pid, appmgr_mount_holder_t *mount_ctx_holder, unsigned int mount_id, SceTitleId *title_id, char *physical_path, char *mount_drive, char *klicensee, char *mount_point_result);
  • pid - current process pid.
  • mount_ctx_holder - root holder of appmgr_mount_t (stored in segment 1).
  • mount_id - mount id to use for this mount operation.
  • title_id - title id of the application.
  • physical_path - path like ux0:app/<TITLEID>
  • mount_drive - virtual drive like app0:. This may be also randomly generated. This argument goes to appmgr_rnd_drive_id. This argument is optional. When empty - will be generated by create_mountpoint_base.
  • klicensee - klicensee for this mount operation. This argument is optional.
  • mount_point_result - mountpoint for the user. Returned from appmgr_rnd_drive_id.

AppMgr maintains two parallel lists in segment 1.

One of the lists contains appmgr_mount_t items.

These are the items that are exposed to user of AppMgr library.

appmgr_rnd_drive_id is what is returned as mount_point_result when user calls some mount functions in AppMgr.

appmgr_rnd_drive_id in many cases is randomly generated (but not always).

Other list is an internal list of pfs_mount_t items.

These items store arguments that are used for calling PFS mount.

Each item also has randomly generated pfs_rnd_drive_id in form of PDXXXXXXXXXXXXd.

When create_mountpoint_base is called, it creates both appmgr_mount_t and pfs_mount_t items and links them with this_pfs_mount.

Each item is put in a corresponding list.

This mapping relation is important and shows how AppMgr mountpoint translates to PfsMgr mountpoint.

All basic relations are shown on a diagram example with black color.

However there is another prev_pfs_mount relation between items which is especially important for sceAppMgrGameDataMountForDriver.

This relation is illustrated on diagram with red color and applies to pairs of mount_ids: 0x3E8,0x3E9 or 0x3EA, 0x3EB.

Such relation is used to setup multiple mount levels. For example app (0x3E8) with patch (0x3E9) on top. Or addcont (ro) (0x3EA) with addcont (rw) (0x3EB) on top.

Additionally multiple mount levels are controlled using fios overlays, hence overlay_id in appmgr_mount_t.

Overlay is a concept of filesystem path redirection/remapping. Additional description is at SceFios2Kernel

Table below shows how overlays are created for 0x3E8, 0x3E9, 0x3EA, 0x3EB for given appmgr_mount_t

mount_id folder overlay_type src dst
0x3E8 app SCE_FIOS_OVERLAY_TYPE_OPAQUE <this_pfs_mount->pfs_rnd_drive_id>0: (0x3E8) appmgr_rnd_drive_id
0x3E9 patch SCE_FIOS_OVERLAY_TYPE_TRANSLUCENT <this_pfs_mount->pfs_rnd_drive_id>0: (0x3E9) <prev_pfs_mount->pfs_rnd_drive_id>0: (0x3E8)
0x3EA addcont (ro) SCE_FIOS_OVERLAY_TYPE_OPAQUE <this_pfs_mount->pfs_rnd_drive_id>0: (0x3EA) appmgr_rnd_drive_id
0x3EB addcont (rw) SCE_FIOS_OVERLAY_TYPE_TRANSLUCENT <this_pfs_mount->pfs_rnd_drive_id>0: (0x3EB) <prev_pfs_mount->pfs_rnd_drive_id>0: (0x3EA)

Overlay is created with sceFiosKernelOverlayAddForProcessForDriver

This results in a path remapping, where when user reads from appmgr_rnd_drive_id virtual drive, he will actually read from <this_pfs_mount->pfs_rnd_drive_id>0: (0x3E8).

However if patch directory was present, further path remapping will happen, so that user will read from <this_pfs_mount->pfs_rnd_drive_id>0: (0x3E9).

SceAppMgrForDriver

sceAppMgrAcInstGetAcdirParamForDriver

Version NID
3.60 0x474AABDF
  • mount PFS drive 0 to path gro0:acinst/<titleid> with mountid 0x3EA
  • read keystone from <mountpoint>:sce_sys/keystone into outputData
  • extract klicensee from gro0:license/addcont/<titleid>/<dlc_folder>/xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx.rif
  • execute pfs ioctl command 0x4402 with klicensee
  • execute pfs ioctl command 0x4403
  • read gro0:acinst/<titleid>/<dlc_folder>/sce_sys/param.sfo
  • read game title into outputData
typedef struct acinst_res {
  char keystone[0x60];
  char game_title[0x80];
} acinst_res;

int sceAppMgrAcInstGetAcdirParamForDriver(SceTitleId *titleId, const char *dlc_folder, acinst_res *outputData);

sceAppMgrAppDataMountByIdForDriver

Version NID
3.60 0x5E311F71

Only valid appmgr mount ids are: 0x68, 0x6A, 0x6B, 0x6E 

int sceAppMgrAppDataMountByIdForDriver(int mountId, SceTitleId *titleId, char *mountPoint);

sceAppMgrAppDataMountForDriver

Version NID
3.60 0xB1D3C287

Only valid appmgr mount ids are: 0x64, 0x65, 0x66, 0x67, 0x69, 0x6C, 0x6D, 0x6F, 0x70 

int sceAppMgrAppDataMountForDriver(int mountId, char *mountPoint);

sceAppMgrAppMountForDriver

Version NID
3.60 0xEF0C9533

sceAppMgrAppUmountForDriver

Version NID
3.60 0x1DE3B7C4

sceAppMgrBgdlSetQueueStatusForDriver

Version NID
3.60 0x5B1BE482

sceAppMgrCheckContentInstallPeriodForDriver

Version NID
3.60 0x193784A9 
int sceAppMgrCheckContentInstallPeriodForDriver(int a1);

sceAppMgrCheckPfsMountedForDriver

Version NID
3.60 0x0B1BEEE0 
int sceAppMgrCheckPfsMountedForDriver(int *result);

sceAppMgrCloudDataClearMcIdForDriver

Version NID
3.60 0xEC408FEF 
int sceAppMgrCloudDataClearMcIdForDriver(int a1);

sceAppMgrCloudDataCreateHeaderForDriver

Version NID
0.931.010-1.81 not present
2.000.081-3.740.011 0xED87F191

sceAppMgrCloudDataDstCreateMountForDriver

Version NID
3.60 0xB3816B42
  • check authid SceShell(0x2800000000000001), SceContentManager(0x280000000000002D)
  • do some ioctl check 0x3001
  • create directory ux0:user/XX/savedata_plus/work/<TITLEID>
  • create sealedkey
  • retrieve klicensee
  • pure mount PFS PDXXXXXXXXXXXX mountpoint to pfs mount ux0:user/XX/savedata_plus/work/<TITLEID> path and authid 0x2800000000000001 or 0x280000000000002D
  • create directory ux0:user/XX/savedata_plus/work/<TITLEID>/sce_sys
  • write file ux0:user/XX/savedata_plus/work/<TITLEID>/sce_sys/sealedkey
  • unmount PFS PDXXXXXXXXXXXX mountpoint
  • mount PFS tsXXXXXXXXXXXX: mountpoint to ux0:user/XX/savedata_plus/work/<TITLEID> path with mountid 0x3ED
int sceAppMgrCloudDataDstCreateMountForDriver(SceTitleId *titleId, char *mountPoint);

sceAppMgrCloudDataGetMcIdForDriver

Version NID
3.60 0x1286AF64

sceAppMgrCloudDataSetMcIdForDriver

Version NID
3.60 0x0B94BB90

sceAppMgrCloudDataSetupKeyForDriver

Version NID
3.60 0x2FAA6ABD

sceAppMgrCloudDataSrcMountForDriver

Version NID
3.60 0x6D4D6FFE
  • check auth id SceShell(0x2800000000000001), SceContentManager(0x280000000000002D), SceDailyCheckerBg(0x2800000000000039)
  • select path depending on mode: ux0:/user/XX/savedata/<titleid> or grw0:savedata/<titleid>
  • read sealedkey from ux0:/user/XX/savedata/<titleid>/sce_sys/sealedkey or grw0:savedata/<titleid>/sce_sys/sealedkey
  • mount PFS tsXXXXXXXXXXXX: mountpoint to ux0:/user/XX/savedata/<TITLEID> or grw0:savedata/<titleid> path with mountid 0x3ED
// mode probably allows values 1,2,3
// 1 probably selects ux0:
// 2, 3 probably selects grw0:
int sceAppMgrCloudDataSrcMountForDriver(int mode, SceTitleId *titleId, char *mountPoint);

sceAppMgrCloudDataVerifyHeaderForDriver

Version NID
3.60 0x55D48190

sceAppMgrDebugSettingNotifyUpdateForDriver

Version NID
3.60 0x7554330F 
int sceAppMgrDebugSettingNotifyUpdateForDriver(int a1);

sceAppMgrDrmCloseForDriver

Version NID
3.60 0x088670A6

sceAppMgrDrmOpenForDriver

Version NID
3.60 0xEA75D157 
typedef struct drm_opts {
	uint32_t size;
	char addcont_id[20];
	char mount_point[10];
} drm_opts;
int sceAppMgrDrmOpenForDriver(drm_opts *drmOpt);

sceAppMgrFakeSaveDataCreateMountForDriver

Version NID
3.60 0x12FC3FA8
  • check authid fake_package_installer(0x280000000000002E)
  • resolve overlay for <path>
  • create <path> directory
  • do some ioctl check 0x3001
  • create sealedkey
  • pure mount PFS PDXXXXXXXXXXXX mountpoint to pfs mount <path> path without klicensee and authid 0x280000000000002E
  • create directory <path>/sce_sys
  • write file <path>/sce_sys/sealedkey
  • write empty file <path>/sce_sys/keystone
  • unmount PFS PDXXXXXXXXXXXX mountpoint
  • mount PFS tsXXXXXXXXXXXX: mountpoint to <path> path with mountid 0x3ED
int sceAppMgrFakeSaveDataCreateMountForDriver(const char *path, const char *mountPoint);

sceAppMgrGameDataMountForDriver

Version NID
3.60 0xCE356B2D
  • read and parse <app_path>/sce_sys/param.sfo
  • check that path does not start from one of these host0:, ux0:data, vs0:
  • create <app_path>/sce_pfs folder if required
  • check if <app_path>/sce_sys/clearsign exists
  • get klicensee from rif (from fixed name at <app_path>/license/app/<titleid> or from <rif_file_path>)
  • check <app_path>/sce_sys/package/head.bin vs <app_path>/sce_sys/clearsign
  • mount PFS gpXXXXXXXXXXXd: mountpoint to <app_path> path with mountid 0x3E8
  • override with another mount PFS gpXXXXXXXXXXXd: mountpoint to <patch_path> path with 0x3E9 if <patch_path> exists
  • check that path does not start with ux0:data
  • create ux0:patch/<TITLEID> or grw0:patch/<TITLEID> path
  • override with another mount PFS gpXXXXXXXXXXXd: mountpoint to ux0:patch/<TITLEID> or grw0:patch/<TITLEID> path with 0x3E9 if path exists
int sceAppMgrGameDataMountForDriver(const char *app_path, const char *patch_path, const char *rif_path, char *mount_point);

sceAppMgrGetBootParamForDriver

Version NID
3.60 0xD2541B4A

sceAppMgrGetPfsProcessStatusForDriver

Version NID
3.60 0xE72D2A4A

sceAppMgrGetSystemDataFileForDriver

Version NID
1.69-3.60 0xAEC49533

sceAppMgrIsExclusiveProcessRunningForDriver

Version NID
3.60 0xA888C2DC 
// titleId: 10 bytes null-terminated string
int sceAppMgrIsExclusiveProcessRunningForDriver(const char* titleId);

sceAppMgrLaunchAppByPathForDriver

Version NID
0.990-3.60 0xB0A37065

Loads a SELF at a given path with optional arguments. Arguments is a null-separated string. Arguments are passed directly to the app as a list of strings (char * const argv[]).

Special arguments are listed below:

Argument Param Description
-budget one of "big", "game", "sys", "shell", "small", "mini" App budget (memory allocation size)
-memsize decimal number Memory size
-la_type "B" or "C" LiveArea type
-bg none Run in background
-nonsuspendable none Non-suspendable
-titleid string (8 chars, 9 bytes) TitleId
-phcontmemsize decimal number Physical contiguous memory size
-livearea_off none No LiveArea
-exit_to string (title id) App to resume upon exit
-param string Param
-usecdlg none Use CDRAM large
-port "1" Unknown, maybe BGM port

Maybe type is of type SceKernelProcessType like in SceProcessmgr#sceKernelStartProcessForKernel. 

/**
 * @brief       Launch an application for debugging
 * 
 * @param[in] path  Path to the executable to load
 * @param[in] args  Arguments to pass to the executable and to configure appmgr
 * @param[in] arg_size  Size of the args passed in
 * @param[in] type  Set to 0x80000000 for debugging launch
 * @param[in] param  Pointer to launch params
 * @param unk unknown, set to nullptr
 * 
 * @return   pid on success, else < 0.
 */
int sceAppMgrLaunchAppByPathForDriver(const char *path, const char *args, unsigned arg_size, unsigned int type, const SceAppMgrLaunchParam *pParam, void *unk);

Example: 

SceAppMgrLaunchParam param;
param.size = sizeof(param);
sceAppMgrLaunchAppByPathForDriver("ux0:temp/bootstrap.self", "-budget\0big\0-nonsuspendable\0-livearea_off\0", 0x2A, 0, param, NULL);

sceAppMgrLoadSafeMemoryForDriver

Version NID
1.69-3.60 0xFAF3DAAA

sceAppMgrLocalBackupGetOfflineIdForDriver

Version NID
3.60 0x61B13981

sceAppMgrLocalBackupVerifyOfflineHeaderForDriver

Version NID
3.60 0x62E98C42

sceAppMgrMmsMountForDriver

Version NID
3.60 0x13D54107 
int sceAppMgrMmsMountForDriver(int mountId, char *mountPoint);

sceAppMgrPhotoMountForDriver

Version NID
3.60 0x43A35729

Call sceAppMgrAppDataMountForDriver with mount_id 0x64. 

typedef struct sceAppMgrPhotoMountParam {
  SceSize size;
  char unk4[128];
} sceAppMgrPhotoMountParam;

int sceAppMgrPhotoMountForDriver(sceAppMgrPhotoMountParam *opt);

sceAppMgrRegisterPathForDriver

Version NID
3.60 0xB53FB98E

sceAppMgrSaveDataGetQuotaForDriver

Version NID
3.60 0xE104C37E

sceAppMgrSaveDataLocalBackupTargetGetListForDriver

Version NID
3.60 0x9B3F7D66

sceAppMgrSaveDataLocalBackupTargetRemoveItemForDriver

Version NID
3.60 0xC4EF95BB

sceAppMgrSaveDataMountForDriver

Version NID
3.60 0xE73C9516

sceAppMgrSaveDataNotifyBackupFinishedForDriver

Version NID
3.60 0x6989B258

sceAppMgrSaveDataSlotCreateForDriver

Version NID
3.60 0xE6F389B8

sceAppMgrSaveDataSlotDeleteForDriver

Version NID
3.60 0xB544F2A0

sceAppMgrSaveDataSlotGetParamForDriver

Version NID
3.60 0xD137D486

sceAppMgrSaveDataSlotGetStatusForDriver

Version NID
3.60 0xEC9D5A35

sceAppMgrSaveDataSlotInitForDriver

Version NID
3.60 0x2277F736

sceAppMgrSaveDataSlotSetParamForDriver

Version NID
3.60 0x7E247E47

sceAppMgrSaveDataSlotSetStatusForDriver

Version NID
3.60 0x9ADB00FA

sceAppMgrSaveDataUmountForDriver

Version NID
3.60 0x2B080268

sceAppMgrSaveSafeMemoryForDriver

Version NID
1.69-3.60 0xD366AA44

sceAppMgrSystemParamDateTimeSetConfForDriver

Version NID
3.60 0xA9AA3A68

sceAppMgrTrophyMountForDriver

Version NID
3.60 0xE977A833 
int sceAppMgrTrophyMountForDriver(int mountId, SceUID pid, char *mountPoint);

sceAppMgrUmountForDriver

Version NID
3.60 0xA714BB35

derived from _sceAppMgrUmount

The following mount points can be derived from the code:

  • "photo0:" (0x64)
  • "music0:" (0x69)
  • "video0:" (0x6D)
  • "addcont0:"
  • "addcont1:"
int sceAppMgrUmountForDriver(const char *mount_point);

sceAppMgrUpdateRifInfoForDriver

Version NID
3.60 0x894BDCB8

sceAppMgrWorkDirMountForDriver

Version NID
3.60 0x3A0A9B82

only valid appmgr mount ids are: 0xC8, 0xC9, 0xCA, 0xCB, 0xCC, 0xCE 

int sceAppMgrWorkDirMountForDriver(int mountId, char *mountPoint);

sceAppMgrGetUserDirPathForDriver

Version NID
0.990-3.60 0x0813AFCA

derived from _sceAppMgrGetUserDirPath 

// partition_id: 1 (ur0:) or 2 (ux0:)
int sceAppMgrGetUserDirPathForDriver(int partition_id, char *userDirPath, SceSize path_maxlen);

sceAppMgrAppParamGetIntForDriver

Version NID
3.60 0x12CE29F7

sceAppMgrGetShellPidForDriverForDriver

Version NID
0.990-3.60 0x2FEACA9F

sceAppMgrSpawnProcessForDriver

Version NID
0.990-3.60 0x324DD34E

This is a guessed name. 

SceUID sceAppMgrSpawnProcessForDriver(const char *name, SceKernelProcessType type, const char *path, SceSize argSize, const void *pArgBlock, void *pOpt);

sceAppMgrKillAppByNameForDebuggerForDriver

Version NID
3.60-3.65 0x0C5D65F1

sceAppMgrRdrfpMountForDriver

Version NID
3.60 0x1574E1A4 
int sceAppMgrRdrfpMountForDriver(SceUInt32 id, const char *path, const void *passcode, char *mountpoint);

sceAppMgrLaunchAppByNameForDebuggerForDriver

Version NID
3.60 0x1B6C2FED

sceAppMgrGetPidByNameForDebuggerForDriver

Version NID
3.60 0x21BE167A

sceAppMgrSuspendAppForDebuggerForDriver

Version NID
0.990-3.60 0x29421DCD 
int sceAppMgrSuspendAppForDebuggerForDriver(SceUID id);

sceAppMgrSaveDataDataSaveForDriver

Version NID
3.60 0x30947DF4

sceAppMgrLiveAreaOperationByNameForLoadpForDriver_1

Version NID
3.60 0x3B4F305B

sceAppMgrLiveAreaOperationByNameForLoadpForDriver_2

Version NID
3.60 0xDD5BEEE3

sceAppMgrGetAppIdByNameForDebuggerForDriver

Version NID
3.60 0x4FA62A46

sceAppMgrLaunchAppForTest2ForDriver

Version NID
3.60 0x504023C8

Used by SceDeci4pLoadp.

Requires sceSblACMgrHasUserDebugFlagForDriver to return true.

sceAppMgrLaunchAppByNameInternalForDriver

Version NID
3.60 0x99AA37C1

sceAppMgrSpawnProcessExtForDriver

Version NID
0.990-3.60 0xC4924946

Call sceKernelSpawnProcessExtForKernel. 

int sceAppMgrSpawnProcessExtForDriver(int a1, int a2, int a3, int a4, int a5, int a6, int a7);

sceAppMgrKillAppForDebuggerForDriver

Version NID
0.990-3.60 0xD80566DB

Temp name was sceAppMgrKillProcessForDriver. 

/**
 * @brief       Kill an app process.
 * @param[in]   id The app to kill.
 * @return      Zero on success, else < 0.
 */
int sceAppMgrKillAppForDebuggerForDriver(SceUID id);

SceAppMgrForDriver_DC13160A

Version NID
3.60 0xDC13160A

Gets App Status by App Id. 

int SceAppMgrForDriver_DC13160A(SceInt32 appId, void* pAppStatus);

sceAppMgrRdrfpUmountForDriver

Version NID
3.60 0xE8DB7942

sceAppMgrSaveDataDataRemoveForDriver

Version NID
3.60 0xEBFE1BE2

sceAppMgrResumeAppByNameForDebuggerForDriver

Version NID
3.60 0xEE6047CA

sceAppMgrSuspendAppByNameForDebuggerForDriver

Version NID
3.60 0xF3B1D42E

sceAppMgrResumeAppForDebuggerForDriver

Version NID
0.990-3.60 0xF9A61E94 
int sceAppMgrResumeAppForDebuggerForDriver(SceUID id);

sceAppMgrDestroyOtherAppByPidForDriver

Version NID
3.60 0xFC89D33D

sceAppMgrPhotoUmountForDriver

Version NID
0.990-3.60 0xDCADB9FE 
int sceAppMgrPhotoUmountForDriver(void);

SceAppMgrForDriver_BDD1FBD1

Version NID
0.990 0xBDD1FBD1

SceAppMgrForDriver_3C7B4B77

Version NID
0.990 0x3C7B4B77

SceAppMgr

__sceAppMgrGetAppState

Version NID
0.990-3.60 0x210C0046

exported to user by SceDriverUser 

int _sceAppMgrGetAppState(SceAppMgrAppState *appState, SceUInt32 sizeofSceAppMgrAppState, SceUInt32 buildVersion);

_sceAppMgrAcidDirSet

Version NID
1.69-3.60 0x6CBCBE1A

exported to user by SceDriverUser

_sceAppMgrAcquireSoundOutExclusive3

Version NID
1.69-3.60 0x13ED8FFD

exported to user by SceDriverUser

_sceAppMgrAddContAddMount

Version NID
3.60 0x581DB1BE

exported to user by SceDriverUser

  • verify that titleid belongs to one of currently running titleids
  • mount PFS to ux0:addcont/<titleid> or grw0:addcont/<titleid> path with mountid 0x3EA
  • read keystone from <mountpoint>:sce_sys/keystone
  • verify keystone passcode
int _sceAppMgrAddContAddMount(generic_mount_ctx *data, int force_mount_ux);

_sceAppMgrAddContMount

Version NID
1.69-3.60 0x0667E10A

exported to user by SceDriverUser

  • if path is gro0:
    • produce path gro0:addcont/<titleid>
  • else
    • obtain path ux0:addcont/<titleid> or grw0:addcont/<titleid>
  • mount PFS to one of 3 paths with mountid 0x3EA
  • if first mount succeeded
    • check that mount drive is addcont0:
    • read keystone form <mountpoint>:sce_sys/keystone
    • verify keystone content
    • if path is gro0:
      • obtain path ux0:addcont/<titleid> or grw0:addcont/<titleid>
      • mount PFS to one of 2 paths with mountid 0x3EB
      • check that mount drive is addcont0:
      • read keystone form <mountpoint>:sce_sys/keystone
      • verify keystone content
  • if first mount failed:
    • if path is gro0:
      • obtain path ux0:addcont/<titleid> or grw0:addcont/<titleid>
      • mount PFS to one of 2 paths with mountid 0x3EA
      • check that mount drive is addcont0:
      • read keystone form <mountpoint>:sce_sys/keystone
      • verify keystone content
  • check that mounted drive is indeed addcont0:
int _sceAppMgrAddContMount(SceUID pid, generic_mount_ctx *mctx);

_sceAppMgrAppDataMountById

Version NID
1.69-3.60 0x9275414A

exported to user by SceDriverUser

Only valid appmgr mount ids are: 0x68, 0x6A, 0x6B, 0x6E 

typedef struct sceAppMgrAppDataMountByIdOpt {
  int reserved1;
  int reserved2;
} sceAppMgrAppDataMountByIdOpt;

int _sceAppMgrAppDataMountById(int mountId, generic_mount_ctx *mctx, char *mountPoint, sceAppMgrAppDataMountByIdOpt *opt);

_sceAppMgrAppDataMount

Version NID
1.69-3.60 0xF07B816E

exported to user by SceDriverUser

Use sceAppMgrUmount to unmount this.

Only valid appmgr mount ids are: 0x64, 0x65, 0x66, 0x67, 0x69, 0x6C, 0x6D, 0x6F, 0x70 

int _sceAppMgrAppDataMount(int mountId, char *mountPoint);

_sceAppMgrAppMount

Version NID
1.69-3.60 0xCF1C0C0C

exported to user by SceDriverUser

_sceAppMgrAppParamGetInt

Version NID
1.69-3.60 0xDC7F8DE5

exported to user by SceDriverUser

_sceAppMgrAppParamGetString

Version NID
1.69-3.60 0xEF34CA42

exported to user by SceDriverUser

This is used to retrieve SFO information. The cmd probably corresponds to and index of SFO entries. See the examples for which entries they may be. Example from store_checkout_plugin. 

typedef struct sceAppMgrAppParamGetString_opt { // size is 0x10 on 3.60
   SceSize size;
   int32_t unk_4;
   int32_t unk_8;
   int32_t unk_C;
} sceAppMgrAppParamGetString_opt;

// example: 
// sceAppMgrAppParamGetString_opt opt;
// opt.size = 0x10;
// sceAppMgrAppParamGetString(pid, 0xC, &buffer, &opt);

int _sceAppMgrAppParamGetString(int pid, int param, char *string, sceAppMgrAppParamGetString_opt *opt);

On WebKit:

0xC - return current process application name

0x8 - gda


On PSM Dev:

Cmd Output
0x6 IP9100-PCSI00007_00-PSSUITEDEV000000
0x7
0x8 gd
0x9 PlayStationArMobile Development Assistant
0xA PSM Dev
0xC PCSI00007
0x64 IP9100-PCSI00007_00-PSSUITEDEV000000
0x65 PlayStationArMobile Development Assistant

_sceAppMgrAppParamSetString

Version NID
3.60 0x5957390F

exported to user by SceDriverUser

_sceAppMgrAppUmount

Version NID
1.69-3.60 0x2FB40418

exported to user by SceDriverUser

_sceAppMgrBgdlGetQueueStatus

Version NID
1.69-3.60 0x5075AE28

exported to user by SceDriverUser

_sceAppMgrCaptureFrameBufDMACByAppId

Version NID
1.69-3.60 0xC698385C

exported to user by SceDriverUser

_sceAppMgrCaptureFrameBufIFTUByAppId

Version NID
1.69-3.60 0xF29E0732

exported to user by SceDriverUser

_sceAppMgrCheckRifGD

Version NID
1.69-3.60 0x15D7CA34

exported to user by SceDriverUser

Checks game data rif from \license\app\. 

typedef struct _sceAppMgrCheckRifGD_opt { // size is 0x8 on FW 3.60
  uint32_t unk_0;
  uint32_t unk_4;
} _sceAppMgrCheckRifGD_opt;

// path is a temporary mount point acquired with _sceAppMgrGameDataMount
// dest should be buffer of size 0x70
int _sceAppMgrCheckRifGD(const char *path, void *dest, _sceAppMgrCheckRifGD_opt *opt);

_sceAppMgrContentInstallPeriodStart

Version NID
1.69-3.60 0xDC478FB1

exported to user by SceDriverUser

Example from store_checkout_plugin. Parameters are uncertain. 

int sceAppMgrContentInstallPeriodStart();

_sceAppMgrContentInstallPeriodStop

Version NID
1.69-3.60 0xC9854E6E

exported to user by SceDriverUser

Example from store_checkout_plugin.

  • calls non exported function equal to kernel level of sceAppMgrAddContMount
  • clears flag 0x1000000 if it is set (in internal structure of one of mountpoints in list in AppMgr )
int sceAppMgrContentInstallPeriodStop();

_sceAppMgrConvertVs0UserDrivePath

Version NID
1.69-3.60 0x19B76D11

Exported to user by SceDriverUser.

Pass in a non-restricted vs0: path and an empty buffer and the buffer will be filled with the path of a temporary mount point.

Example from libssl. 

// example:
// char sys_external_path[16];
// memset(sys_external_path, 0, sizeof(sys_external_path));
// _sceMgrConvertVs0userDrivePath("vs0:sys/external", &sys_external_path, 1024);.

// path_maxlen must be <= 1024
int _sceAppMgrConvertVs0UserDrivePath(const char *path, char *converted_path, SceSize path_maxlen);

_sceAppMgrDeclareShellProcess2

Version NID
1.69-3.60 0xBDF15BDC

Exported to user by SceDriverUser. 

// name: 32 bytes null-terminated string, maybe process name
// unused: 8 bytes buffer, unused on FW 3.60
int _sceAppMgrDeclareShellProcess2(const char* name, void* unused);

_sceAppMgrDestroyAppByName

Version NID
1.69-3.60 0xEB318002

exported to user by SceDriverUser

_sceAppMgrDrmClose

Version NID
1.69-3.60 0xE4CE4A0C

exported to user by SceDriverUser

_sceAppMgrDrmOpen

Version NID
1.69-3.60 0xAA5B3A37

exported to user by SceDriverUser

_sceAppMgrForceUmount

Version NID
1.69-3.60 0x2598EC8A

exported to user by SceDriverUser 

// id: seen 600
int _sceAppMgrForceUmount(int id);

_sceAppMgrGameDataMount

Version NID
1.69-3.60 0x454EB183

exported to user by SceDriverUser 

typedef struct _sceAppMgrGameDataMount_opt { // size is 0x18 on FW 3.60
  char* mount_point;
  uint32_t unk_4;
  uint32_t unk_8;
  uint32_t unk_C;
  uint32_t unk_10;
  uint32_t unk_14;
} _sceAppMgrGameDataMount_opt;

int _sceAppMgrGameDataMount(char *app_path, char *patch_path, char *rif_file_path, _sceAppMgrGameDataMount_opt *opt)

__sceAppMgrGetAppInfo

Version NID
0.990 0xCA7AF469

_sceAppMgrGetAppInfo

Version NID
1.69-3.60 0x6E65D746

exported to user by SceDriverUser 

int _sceAppMgrGetAppInfo(SceAppMgrAppInfo *pAppInfo, SceUInt32 infoSize, SceUInt32 buildVersion);

_sceAppMgrGetAppMgrState

Version NID
0.990-3.60 0x55C60D20

exported to user by SceDriverUser 

int _sceAppMgrGetAppMgrState(SceAppMgrAppMgrState *AppMgrState);

_sceAppMgrGetAppParam2

Version NID
1.69-3.60 0x26D43923

exported to user by SceDriverUser

_sceAppMgrGetAppParam

Version NID
0.990-3.60 0x258C3E3C

exported to user by SceDriverUser 

typedef struct _sceAppMgrGetAppParam_opt { // size is 0x8 on FW 0.990
	SceSize appParamSize;
	SceUint32 reserved0;
} _sceAppMgrGetAppParam_opt;

int _sceAppMgrGetAppParam(SceAppMgrAppParam *appParam, _sceAppMgrGetAppParam_opt *opt);

_sceAppMgrGetBootParam

Version NID
0.990-3.60 0xEEFBC756

exported to user by SceDriverUser 

typedef struct _sceAppMgrGetBootParam_opt { // size is 0x8 on FW 0.990
	SceSize bootParamSize;		// 0x0
	SceUint unk_8;			// 0x4
} _sceAppMgrGetBootParam_opt;

int _sceAppMgrGetBootParam(uint32_t a1, SceAppMgrBootParam *bootParam, _sceAppMgrGetBootParam_opt *opt);

_sceAppMgrGetBudgetInfo

Version NID
1.69-3.60 0xEACF2237

exported to user by SceDriverUser

Example from webcore 

SceAppMgrUser_5F00F261(&struct_of_size_0x88);

_sceAppMgrGetCoredumpStateForShell

Version NID
1.69-3.60 0x03DD7E65

exported to user by SceDriverUser

_sceAppMgrGetCurrentBgmState2

Version NID
1.69-3.60 0x3F7B9BB5

exported to user by SceDriverUser

_sceAppMgrGetCurrentBgmState

Version NID
0.990-3.60 0x81569A58

exported to user by SceDriverUser 

int _sceAppMgrGetCurrentBgmState(void **currentBgmId, void **currentBgmState);

_sceAppMgrGetDevInfo

Version NID
1.69-3.60 0x52766019

exported to user by SceDriverUser

Example from store_checkout_plugin. 

_sceAppMgrGetDevInfo("ux0:", buffer, resultbuf);

_sceAppMgrGetFgAppInfo

Version NID
1.69-3.60 0xAC9968B7

exported to user by SceDriverUser

_sceAppMgrGetIdByName

Version NID
0.990-3.60 0xC311CC17

exported to user by SceDriverUser 

typedef struct _sceAppMgrGetIdByName_opt { // size is 0x8 on FW 0.990
	SceSize appNameSize;
	SceUint32 reserved0;
} _sceAppMgrGetIdByName_opt;

int _sceAppMgrGetIdByName(SceUID *id, const char *appName, _sceAppMgrGetIdByName_opt *opt);

_sceAppMgrGetMediaTypeFromDriveByPid

Version NID
1.69-3.60 0xC7566C46

exported to user by SceDriverUser

_sceAppMgrGetMediaTypeFromDrive

Version NID
1.69-3.60 0xC8D32206

exported to user by SceDriverUser

_sceAppMgrGetMountProcessNum

Version NID
3.60 0x1A844716

exported to user by SceDriverUser

_sceAppMgrGetNameById

Version NID
0.990-3.60 0x08E93582

exported to user by SceDriverUser 

typedef struct _sceAppMgrGetNameById_opt { // size is 0x8 on FW 0.990
	SceSize appNameSize;
	SceUint32 reserved0;
} _sceAppMgrGetNameById_opt;

int _sceAppMgrGetNameById(SceUID id, char *appName, _sceAppMgrGetNameById_opt *opt);

_sceAppMgrGetPfsDrive

Version NID
1.69-3.60 0x46B208D4

exported to user by SceDriverUser

_sceAppMgrGetPidListForShell

Version NID
1.69-3.60 0x29AC9DF0

exported to user by SceDriverUser

This function has two IsShell checks, AuthId and pid check

_sceAppMgrGetRawPathOfApp0ByAppIdForShell

Version NID
1.69-3.60 0x7D210054

exported to user by SceDriverUser

appId possible values 

/**
 * Get the real/resolved path of app0: (where it's actually mounted)
 * 
 * @param[in] appId
 * @param[out] resolved_path - Buffer that will hold the resolved path. It should have enough room to hold 292 characters or it will buffer overflow (noname120).
 * 
 * @return 0 on success.
 */
int _sceAppMgrGetRawPathOfApp0ByAppIdForShell(int appId, char resolved_path[292]);

_sceAppMgrGetRawPathOfApp0ByPidForShell

Version NID
1.69-3.60 0x550422F9

exported to user by SceDriverUser

_sceAppMgrGetRawPath

Version NID
1.69-3.60 0x9FB3E2C8

exported to user by SceDriverUser 

/**
 * Resolve a path to the corresponding true path (uses ::sceFiosKernelOverlayResolveSyncForDriver underneath). 
 *
 * @param[in] path - Path to convert (e.g. app0:)
 * @param[out] resolved_path - True resolved path
 * @param[in] unk - Unknown, provide an empty buffer
 *
 * @return 0 on success, < 0 on error.
 */
int _sceAppMgrGetRawPath(char *path, char *resolved_path, int resolved_path_size, char unk[16]);

_sceAppMgrGetRecommendedScreenOrientation

Version NID
3.60 0x37E94672

exported to user by SceDriverUser

_sceAppMgrGetRunningAppIdListForShell

Version NID
3.60 0xDA66AE0E

exported to user by SceDriverUser

_sceAppMgrGetSaveDataInfoForSpecialExport

Version NID
3.60 0xDC815429

exported to user by SceDriverUser

  • check that current app auth id is SceContentManager (0x280000000000002D)
  • check some flag set by SceSblPostSsMgr#SceSblPostSsMgrForDriver (related to utoken_sm.self)
  • read sealedkey from <path>/sce_sys/sealedkey to restore klicensee
  • mount PFS tsXXXXXXXXXXXX: mountpoint to <path> path with mount ID 0x3ED
  • get ACCOUNT_ID from <path>/sce_sys/param.sfo
typedef struct _sceAppMgrGetSaveDataInfoForSpecialExport_opt { // size is 0x8 on FW 3.60
  int reserved0;
  int reserved1;
} _sceAppMgrGetSaveDataInfoForSpecialExport_opt;

int _sceAppMgrGetSaveDataInfoForSpecialExport(char *path, char *account_id, _sceAppMgrGetSaveDataInfoForSpecialExport_opt *opt);

_sceAppMgrGetSaveDataInfo

Version NID
1.69-3.60 0x6C52A377

exported to user by SceDriverUser 

typedef struct _sceAppMgrGetSaveDataInfo_res {
  int enum_flag_0;
  int enum_flag_4;
  int enum_flag_8;
  int unkC;
  int unk10;
  int open_psid_related_14;
  int ioctl_related_18;
} _sceAppMgrGetSaveDataInfo_res;

typedef struct _sceAppMgrGetSaveDataInfo_opt { // size is 0x10 on FW 3.60
  _sceAppMgrGetSaveDataInfo_res *res;
  int unk_4;
  int unk_8;
  int unk_C;
} _sceAppMgrGetSaveDataInfo_opt;

int _sceAppMgrGetSaveDataInfo(char *path, SceTitleId *titleid, int force_mount_ux, _sceAppMgrGetSaveDataInfo_opt *opt);

_sceAppMgrGetStatusByAppId

Version NID
1.69-3.60 0xBF4213A3

exported to user by SceDriverUser 

int _sceAppMgrGetStatusByAppId(int appId, SceAppMgrAppStatus *appStatus);

_sceAppMgrGetStatusById

Version NID
0.990-3.60 0x211D9558

exported to user by SceDriverUser 

typedef struct _sceAppMgrGetStatusById_opt { // size is 0x8 on FW 0.990
	SceSize appStatusSize;
	uint32_t reserved1;
} _sceAppMgrGetStatusById_opt;

int _sceAppMgrGetStatusById(SceUID id, SceAppMgrAppStatus *appStatus, _sceAppMgrGetStatusById_opt *opt);

_sceAppMgrGetStatusByName

Version NID
0.990-3.60 0x46998AFC

exported to user by SceDriverUser 

typedef struct _sceAppMgrGetStatusByName_opt { // size is 0x10 on FW 0.990
	SceSize appNameSize;			// max value is 32
	SceSize appStatusSize;
	uint32_t reserved1;
	uint32_t reserved2;
} _sceAppMgrGetStatusByName_opt;

int _sceAppMgrGetStatusByName(const char* appName, SceAppMgrAppStatus *appStatus, sceAppMgrGetStatus_opt *opt);

_sceAppMgrGetSystemDataFilePlayReady

Version NID
3.60 0x7C44FE5D

exported to user by SceDriverUser

_sceAppMgrGetUserDirPathById

Version NID
3.60 0x617D78DA

exported to user by SceDriverUser

_sceAppMgrGetUserDirPath

Version NID
0.990-3.60 0x84B138BF

exported to user by SceDriverUser 

typedef struct _sceAppMgrGetUserDirPath_opt { // size is 0x8 on FW 0.990
	SceSize path_maxlen;		// Must be <= 1024
	SceUint32 reserved1;
} _sceAppMgrGetUserDirPath_opt;

// partition_id: 1 (ur0:), 2 (ux0:)
int _sceAppMgrGetUserDirPath(int partition_id, char *userDirPath, SceSize path_maxlen, _sceAppMgrGetUserDirPath_opt *opt);

_sceAppMgrGetVs0UserDataDrive

Version NID
0.990-3.60 0xC361C084

exported to user by SceDriverUser

Get drive for mountId 0x3EF. 

int _sceAppMgrGetVs0UserDataDrive(ScePfsRndDriveId *rnd_drive_id);

_sceAppMgrGetVs0UserModuleDrive

Version NID
0.990-3.60 0x85589E87

exported to user by SceDriverUser

Get drive for mountId 0x3EE. 

int _sceAppMgrGetVs0UserModuleDrive(ScePfsRndDriveId *rnd_drive_id);

_sceAppMgrInitSafeMemoryById

Version NID
3.60 0x03FA4036

exported to user by SceDriverUser

_sceAppMgrInstallDirMount

Version NID
1.69-3.60 0xED37D810

exported to user by SceDriverUser

_sceAppMgrIsCameraActive

Version NID
1.69-3.60 0x7F0C9410

exported to user by SceDriverUser

_sceAppMgrLaunchAppByName2ForShell

Version NID
1.69-3.60 0xC6BA9596

exported to user by SceDriverUser

_sceAppMgrLaunchAppByName2

Version NID
1.69-3.60 0xAEF06983

exported to user by SceDriverUser

_sceAppMgrLaunchAppByName2ndStage

Version NID
1.69-3.60 0xDEDD2AED

exported to user by SceDriverUser

_sceAppMgrLaunchAppByNameForShell

Version NID
1.69-3.60 0x4C3B5BB8

exported to user by SceDriverUser

_sceAppMgrLaunchAppByName

Version NID
1.69-3.60 0xDAC0AF12

exported to user by SceDriverUser

_sceAppMgrLaunchAppByPath4

Version NID
1.69-3.60 0x8FE4F651

exported to user by SceDriverUser

_sceAppMgrLaunchAppByUri2

Version NID
1.69-3.60 0x4B45EAC0

exported to user by SceDriverUser 

typedef struct SceAppMgrLaunchAppByUri2Param { // Size is 0x40 on FW 3.60
   SceSize size; // Size of this structure
   SceUInt32 unk_4; // ex: 0
   SceUInt32 unk_8; // ex: -1
   SceUInt32 unk_C;
   SceUInt32 unk_10;
   SceUInt32 unk_14; // ex: -1
   SceUInt8 reserved[0x28];
} SceAppMgrLaunchAppByUri2Param;

int _sceAppMgrLaunchAppByUri2(const char *uri, SceAppMgrLaunchAppByUri2Param *pParam);

_sceAppMgrLaunchAppByUri

Version NID
1.69-3.60 0x37CE3984

exported to user by SceDriverUser

_sceAppMgrLaunchVideoStreamingApp

Version NID
3.60 0x29650EE6

exported to user by SceDriverUser

Note: Can only be run from SceShell or Webkit context or 0x8080201F is returned. 

/**
 * @brief       Open the video player app
 * @param[in]   buf Arguments for the video player (format is unknown, max size is 0x1824)
 * @param[in]   buf_size Size of the buf array.
 * @param[in]   opt Optional parameters, you can pass NULL.
 * @return      Zero on success, else < 0.
 */
int _sceAppMgrLaunchVideoStreamingApp(char *buf, size_t buf_size, void *opt);

_sceAppMgrLoadExec

Version NID
1.69-3.60 0xDC2F23E0

exported to user by SceDriverUser 

/* Relaunch app using other ELF */
int _sceAppMgrLoadExec(const char *appPath,				/* Path of SELF file. SELF file must be put immediatly under app0: */
			char *const argv[],				/* Array of arguments pass the entry function of new SELF */
			const SceAppMgrLoadExecOptParam *optParam	/* Not used in usermode. Must be NULL */
	);

_sceAppMgrLoadSaveDataSystemFile

Version NID
3.60 0xA630BC5D

exported to user by SceDriverUser

  • check auth id SceShell(0x2800000000000001), fake_package_installer(0x280000000000002E)
  • resolve overlay for <path>
  • create <path> directory if required
  • create <path>/sce_pfs directory if required
  • mount PFS to <path> path with mountid 0x3ED
  • read <path>/sce_sys/param.sfo
struct sceAppMgrLoadSaveDataSystemFileOpt
{
  int reserved0;
  int reserved1;
};

int _sceAppMgrLoadSaveDataSystemFile(char *path, int param_sfo_data, int authid_related, sceAppMgrLoadSaveDataSystemFileOpt *opt);

_sceAppMgrLoopBackFormat

Version NID
1.69-3.60 0xEA307D2C

exported to user by SceDriverUser

_sceAppMgrLoopBackMount

Version NID
1.69-3.60 0x3493CDFA

exported to user by SceDriverUser 

typedef struct sceAppMgrLoopBackMountOpt {
  int reserved0;
  int reserved1;
} sceAppMgrLoopBackMountOpt;

// part_name: name of the emulated partition image
int _sceAppMgrLoopBackMount(int mountId, char *part_name, char *mountPoint, sceAppMgrLoopBackMountOpt *opt);

_sceAppMgrMmsMount

Version NID
1.69-3.60 0xE56A2E1B

exported to user by SceDriverUser 

int _sceAppMgrMmsMount(int mountId, char *mountPoint);

_sceAppMgrOverwriteLaunchParamForShell

Version NID
1.69-3.60 0xFDE9A3E3

exported to user by SceDriverUser

_sceAppMgrPeekLaunchParamForShell

Version NID
1.69-3.60 0x8CC3DC46

exported to user by SceDriverUser

_sceAppMgrPhotoMount

Version NID
1.69-3.60 0xE98E9C52

exported to user by SceDriverUser 

struct sceAppMgrPhotoMountParam
{
  int size;
  char unk4[0x80];
};

struct sceAppMgrPhotoMountOpt
{
  int size;
  int reserved0;
};

int _sceAppMgrPhotoMount(sceAppMgrPhotoMountParam *param, sceAppMgrPhotoMountOpt *opt);

_sceAppMgrPhotoUmount

Version NID
1.69-3.60 0xB2EA376F

exported to user by SceDriverUser

_sceAppMgrPspSaveDataGetParams

Version NID
3.60 0x77A51E82

exported to user by SceDriverUser

_sceAppMgrPspSaveDataRead

Version NID
3.60 0xE535161F

exported to user by SceDriverUser

_sceAppMgrPspSaveDataRootMount

Version NID
3.60 0xA77DF8BA

exported to user by SceDriverUser 

int _sceAppMgrPspSaveDataRootMount(char *mountPoint);

_sceAppMgrReceiveEventNum

Version NID
0.990-3.60 0x3EEEC172

exported to user by SceDriverUser 

/* Get the number of events from AppMgr */
int _sceAppMgrReceiveEventNum(int *eventNum		/* Number of events in the queue */
);

_sceAppMgrReceiveEvent

Version NID
1.69-3.60 0xA90546F4

exported to user by SceDriverUser 

/* Get events from AppMgr */
int _sceAppMgrReceiveEvent(SceAppMgrEvent *appEvent);

_sceAppMgrReceiveNotificationRequestForShell

Version NID
1.69-3.60 0x21A86141

exported to user by SceDriverUser

_sceAppMgrReceiveShellEvent

Version NID
1.69-3.60 0xE0DADF51

exported to user by SceDriverUser

_sceAppMgrReceiveSystemEvent

Version NID
1.69-3.60 0x7240375B

exported to user by SceDriverUser 

int _sceAppMgrReceiveSystemEvent(SceAppMgrSystemEvent *systemEvent);

_sceAppMgrSaveDataAddMount

Version NID
3.60 0xD1391ACE

exported to user by SceDriverUser

  • verify that titleid belongs to one of currently running titleids
  • create ux0:/user/XX/savedata_vc/<titleid> or ux0:/user/XX/savedata/<titleid> directory if required
  • mount PFS to ux0:/user/XX/savedata_vc/<titleid> or ux0:/user/XX/savedata/<titleid> path with mountid 0x3ED
  • read keystone from <mountpoint>:sce_sys/keystone
  • verify keystone passcode
int _sceAppMgrSaveDataAddMount(generic_mount_ctx *opt);

_sceAppMgrSaveDataDataRemove2

Version NID
3.60 0x435E0BCB

exported to user by SceDriverUser

_sceAppMgrSaveDataDataRemove

Version NID
1.69-3.60 0xA579A39E

exported to user by SceDriverUser

_sceAppMgrSaveDataDataSave2

Version NID
3.60 0xFDACCA65

exported to user by SceDriverUser

_sceAppMgrSaveDataDataSave

Version NID
1.69-3.60 0xB81777B7

exported to user by SceDriverUser

_sceAppMgrSaveDataGetQuota

Version NID
1.69-3.60 0xF28A426B

exported to user by SceDriverUser

_sceAppMgrSaveDataMount

Version NID
1.69-3.60 0x95A6B1BF

exported to user by SceDriverUser

_sceAppMgrSaveDataSlotCreate

Version NID
1.69-3.60 0xC48833AA

exported to user by SceDriverUser

_sceAppMgrSaveDataSlotDelete

Version NID
1.69-3.60 0x191CF6B1

exported to user by SceDriverUser

_sceAppMgrSaveDataSlotFileClose

Version NID
3.60 0xFE821175

exported to user by SceDriverUser

_sceAppMgrSaveDataSlotFileGetParam

Version NID
3.60 0x667CC149

exported to user by SceDriverUser

_sceAppMgrSaveDataSlotFileOpen

Version NID
3.60 0x855CDAA4

exported to user by SceDriverUser

_sceAppMgrSaveDataSlotGetParam

Version NID
1.69-3.60 0x74D789E2

exported to user by SceDriverUser

_sceAppMgrSaveDataSlotGetStatus

Version NID
1.69-3.60 0xAF8258D4

exported to user by SceDriverUser

_sceAppMgrSaveDataSlotInit

Version NID
1.69-3.60 0x79689A1D

exported to user by SceDriverUser

_sceAppMgrSaveDataSlotSetParam

Version NID
1.69-3.60 0x0E216486

exported to user by SceDriverUser

_sceAppMgrSaveDataSlotSetStatus

Version NID
1.69-3.60 0x030C0CA4

exported to user by SceDriverUser

_sceAppMgrSaveDataUmount

Version NID
1.69-3.60 0x53623420

exported to user by SceDriverUser

_sceAppMgrSendNotificationRequest

Version NID
1.69-3.60 0xF42E27AD

exported to user by SceDriverUser

_sceAppMgrSendParam

Version NID
3.60 0xD29236AD

exported to user by SceDriverUser

_sceAppMgrSendSystemEvent2

Version NID
1.69-3.60 0xD70D5EEC

exported to user by SceDriverUser

_sceAppMgrSendSystemEvent

Version NID
1.69-3.60 0xCEAF12B6

exported to user by SceDriverUser

Example from store_checkout_plugin. 

_sceAppMgrSendSystemEvent(0, 0x10000006);

_sceAppMgrSendSystemEvent(0, 0x10000004);

_sceAppMgrSetBackRenderPortOwner

Version NID
1.69-3.60 0xE8357021

exported to user by SceDriverUser

_sceAppMgrSetBgmProxyApp

Version NID
1.69-3.60 0xF6B093BC

exported to user by SceDriverUser

_sceAppMgrSetNetworkDisconnectionWarningDialogState

Version NID
3.60 0xD4B0CDB4

exported to user by SceDriverUser 

/* Set network disconnection warning dialog state */
int _sceAppMgrSetNetworkDisconnectionWarningDialogState(SceBool enable, const SceAppMgrNetworkDisconnectionWarningDialogStateOptParam *optParam);

_sceAppMgrSetPowerSaveMode

Version NID
1.69-3.60 0xB0ECB9C2

exported to user by SceDriverUser

_sceAppMgrSetRecommendedScreenOrientationForShell

Version NID
3.60 0xD14D39F5

exported to user by SceDriverUser

_sceAppMgrSetShellScreenOrientation

Version NID
3.60 0x10E23253

exported to user by SceDriverUser

_sceAppMgrSetSystemDataFilePlayReady

Version NID
3.60 0x8964E793

exported to user by SceDriverUser

_sceAppMgrSetSystemDataFile

Version NID
3.60 0x78F5AF66

exported to user by SceDriverUser

_sceAppMgrSystemParamDateTimeGetConf

Version NID
1.69-3.60 0xB7F95389

exported to user by SceDriverUser

_sceAppMgrSystemParamGetInt

Version NID
3.60 0x18EB1DAC

exported to user by SceDriverUser

_sceAppMgrSystemParamGetString

Version NID
1.69-3.60 0xAF5F9497

exported to user by SceDriverUser

_sceAppMgrThemeDataMount

Version NID
3.60 0xD9B7A5AF

exported to user by SceDriverUser

  • check that program-authority-id is SceShell(0x2800000000000001) or SceSettings (0x2800000000000010)
  • read ux0:theme/<CONTENTID>/sce_sys/param.sfo or <theme_path>/<CONTENTID>/sce_sys/param.sfo (in case of debug custom theme)
  • check in param.sfo that CATEGORY = ac and get TITLEID
  • get klicensee from rif (from fixed name at path ux0:license/theme/<CONTENTID> or from <rif_file_path>)
  • check ux0:theme/<CONTENTID>/sce_sys/package/head.bin vs ux0:theme/<CONTENTID>/sce_sys/clearsign or <theme_path>/<CONTENTID>/sce_sys/package/head.bin vs <theme_path>/<CONTENTID>/sce_sys/clearsign
  • mount PFS tmXXXXXXXXXXXd: mountpoint to ux0:theme/<CONTENTID> or <theme_path>/<CONTENTID> path with mountid 0x3EC and TITLEID
struct sceAppMgrThemeDataMountOpt
{
  char *mount_point;
  int reserved0;
  int reserved1;
  int reserved2;
  int reserved3;
  int reserved4;
};

int _sceAppMgrThemeDataMount(SceTitleId *titleid, const char *theme_path, const char *rif_file_path, sceAppMgrThemeDataMountOpt *opt);

_sceAppMgrTrophyMountById

Version NID
1.69-3.60 0x3DFC9410

exported to user by SceDriverUser 

struct sceAppMgrTrophyMountByIdOpt
{
  int reserved0;
  int reserved1;
};

int _sceAppMgrTrophyMountById(int mountId, SceTitleId *titleId, char *mountPoint, sceAppMgrTrophyMountByIdOpt *opt);

_sceAppMgrTrophyMount

Version NID
1.69-3.60 0xF8B80AC2

exported to user by SceDriverUser 

int _sceAppMgrTrophyMount(int mountId, SceUID pid, char *mountPoint);

_sceAppMgrUmountByPid

Version NID
1.69-3.60 0x0A419BC8

exported to user by SceDriverUser

_sceAppMgrUmount

Version NID
1.69-3.60 0xFFCA54E0

Exported to user by SceDriverUser.

This is the unmount command for the mount point created with _sceAppMgrWorkDirMount.

This unmount command is also called in pair with _sceAppMgrGameDataMount from SceShell. 

// max size of mount_point is 0x10 bytes including null
int _sceAppMgrUmount(const char *mount_point);

_sceAppMgrUpdateSaveDataParam

Version NID
1.69-3.60 0xF4703412

exported to user by SceDriverUser

  • resolve overlay for <path>
  • if <overlay path> is ux0:/user/XX/savedata or grw0:/savedata/
    • mount PFS tsXXXXXXXXXXXXd mountpoint to <overlay path> path with mountid 0x3ED
    • verify open psid
  • if <overlay path> is ux0:/ or grw0:/
    • mount PFS tsXXXXXXXXXXXXd mountpoint to <overlay path>/user/XX/savedata path with mountid 0x3ED
    • verify open psid
struct sceAppMgrUpdateSaveDataParamOpt
{
  int reserved0;
  int reserved1;
};

int _sceAppMgrUpdateSaveDataParam(char *path, sceAppMgrUpdateSaveDataParamOpt *opt);

_sceAppMgrWorkDirMountById

Version NID
1.69-3.60 0x58E4CC90

exported to user by SceDriverUser

only valid appmgr mount ids are:

  • 0xCD: ux0:cache/<TITLEID>
  • 0xCF: ?
struct sceAppMgrWorkDirMountByIdOpt
{
  int reserved0;
  int reserved1;
};

int _sceAppMgrWorkDirMountById(int mountId, generic_mount_ctx* data, char *mount_point, sceAppMgrWorkDirMountByIdOpt *opt);

_sceAppMgrWorkDirMount

Version NID
1.69-3.60 0x0C49659E

exported to user by SceDriverUser

For example used by store_checkout_plugin, sqlite_vsh.

This creates a mount point that can be used as a filesystem.

Only valid appmgr mount ids are:

  • 0xC8: ur0:temp/sqlite
  • 0xC9: ur0:temp/attach
  • 0xCA: ux0:pspemu
  • 0xCB: ?
  • 0xCC: ur0:temp/checkout
  • 0xCE: ur0:temp/webbrowser
int _sceAppMgrWorkDirMount(int mountId, char *mountPoint);

sceAppMgrAcquireBgmPortForMusicPlayer

Version NID
1.69-3.60 0x44EC36FA

sceAppMgrAcquireBgmPortWithPriority

Version NID
1.69-3.60 0xAAED7419

sceAppMgrAcquireBgmPort

Version NID
1.69-3.60 0xAFCEAB96 
/* Get BGM port and sound BGM even when not in front */
int sceAppMgrAcquireBgmPort(void);

sceAppMgrAcquireBtrm

Version NID
1.69-3.60 0xD752695D

sceAppMgrAcquireSoundOutExclusive2

Version NID
1.69-3.60 0xB9365442

sceAppMgrAcquireSoundOutExclusive

Version NID
1.69-3.60 0xACB48075

sceAppMgrActivateApp

Version NID
1.69-3.60 0x43631508 
int sceAppMgrActivateApp(int appId);

sceAppMgrDeactivateApp

Version NID
1.69-3.60 0xFFA093D9

sceAppMgrDeclareSystemChatApp

Version NID
1.69-3.60 0x77EE891D

sceAppMgrDestroyAppByAppId

Version NID
1.69-3.60 0x54368A0B

sceAppMgrDestroyOtherAppByAppIdForShell

Version NID
1.69-3.60 0xDC70C5F7

sceAppMgrDestroyOtherAppByPidForShell

Version NID
1.69-3.60 0x5420D23C

sceAppMgrDestroyOtherApp

Version NID
1.69-3.60 0x3EF143BF

sceAppMgrDump

Version NID
1.69-3.60 0x527795E8

sceAppMgrEnableCoredumpForTest

Version NID
1.69-3.60 0x32FD0B99

sceAppMgrEnableDuckingOnSystemChat

Version NID
1.69-3.60 0x5AB230DE

sceAppMgrEnablePrioritizingSystemChat

Version NID
1.69-3.60 0x3E1FAB92

sceAppMgrExitToLiveboardForGameApp

Version NID
1.69-3.60 0x89D1DA55

sceAppMgrFinishCoredumpForShell

Version NID
1.69-3.60 0x52FF63D1

sceAppMgrGetAppIdByAppId

Version NID
1.69-3.60 0x332C9D98

sceAppMgrGetExtraAppParam

Version NID
3.60 0x94A722BC

sceAppMgrGetProcessIdByAppIdForShell

Version NID
1.69-3.60 0x63FAC2A9

sceAppMgrGetSystemDataFile

Version NID
1.69-3.60 0xAEC49533

sceAppMgrGrowMemory3

Version NID
3.60 0x4401EDCD

sceAppMgrGrowMemory

Version NID
1.69-3.60 0x842FCE8C

sceAppMgrIsDevelopmentMode

Version NID
1.69-3.60 0x7D4F8F83

sceAppMgrIsGameBudgetAppPresent

Version NID
1.69-3.60 0xE134F5A0

sceAppMgrIsGameProgram

Version NID
1.69-3.60 0xFFF8F7F0

sceAppMgrIsNonGameProgram

Version NID
3.60 0x5F22E192

sceAppMgrIsOtherAppPresent

Version NID
1.69-3.60 0x371F6F81

sceAppMgrIsPidShellAndCrashed

Version NID
3.60 0xC648EA9B

sceAppMgrIsPsNowClient

Version NID
3.60 0x972EA7BA

sceAppMgrLaunchAppCancel

Version NID
1.69-3.60 0x5369BC0A

sceAppMgrLoadSafeMemory

Version NID
1.69-3.60 0xFAF3DAAA

sceAppMgrNotifyLiveBoardModeForShell

Version NID
1.69-3.60 0x389F048D

sceAppMgrQuitApp

Version NID
1.69-3.60 0x0DD747FB

sceAppMgrQuitForNonSuspendableApp

Version NID
1.69-3.60 0xE3F719A0

sceAppMgrReceiveShellEventNum

Version NID
1.69-3.60 0xFB67BABD

sceAppMgrReleaseBgmPort

Version NID
1.69-3.60 0xF3717E37 
/* Open the acquired BGM port */
int sceAppMgrReleaseBgmPort(void);

sceAppMgrReleaseBtrm

Version NID
1.69-3.60 0xACDCE4DB

sceAppMgrReleaseSoundOutExclusive2

Version NID
1.69-3.60 0x2BB68701

sceAppMgrReleaseSoundOutExclusive3

Version NID
3.60 0x626C339D

sceAppMgrReleaseSoundOutExclusive

Version NID
1.69-3.60 0x3BA41199

sceAppMgrRestoreBgmSettingForShell

Version NID
1.69-3.60 0xD9BCC50C

sceAppMgrRestoreDisplaySettingForShell

Version NID
1.69-3.60 0xE455922D

sceAppMgrResumeBgAppByShell

Version NID
3.60 0x64DD4321

sceAppMgrReturnLiveAreaOperationResultForShell

Version NID
3.60 0x5CF3BA39

sceAppMgrSaveDataGetCachedRequiredSizeKiB

Version NID
3.60 0x56EDE09A

sceAppMgrSaveSafeMemory

Version NID
1.69-3.60 0xD366AA44

sceAppMgrSendLiveBoardMode

Version NID
1.69-3.60 0x3E4AC082

sceAppMgrSetAppProtectionModeOnMemoryShortage

Version NID
1.69-3.60 0xAF8C7FFB

sceAppMgrSetBgmSubPriorityForSystemChat

Version NID
1.69-3.60 0x90E42B4D

sceAppMgrSetBgmSubPriority

Version NID
1.69-3.60 0x7333C2F1

sceAppMgrSetDisplayMergeConf

Version NID
3.60 0x0789D501

sceAppMgrSetFakeSettingBug51800

Version NID
3.60 0xF46C81F3

sceAppMgrSetInfobarStateForCommonDialog

Version NID
1.69-3.60 0xD6758B4E

sceAppMgrSetInfobarStateForShellByAppId

Version NID
1.69-3.60 0xF7DFE96E

sceAppMgrSetInfobarStateForShellByPid

Version NID
1.69 0xA3314B2B

sceAppMgrSetInfobarState

Version NID
1.69-3.60 0xAD9022A1 
/* Set infobar state */
int _sceAppMgrSetInfobarState(SceAppMgrInfoBarVisibility visibility, SceAppMgrInfoBarColor color, SceAppMgrInfoBarTransparency transparency);

sceAppMgrSetRecommendedScreenOrientationActivated

Version NID
3.60 0x75876896

sceAppMgrSetSystemImposeState2

Version NID
3.60 0x2163759A

sceAppMgrSetSystemImposeState

Version NID
1.69-3.60 0xD16B91B5

sceAppMgrSuspendBgAppByShell

Version NID
3.60 0x5BCF6927

sceAppMgrSuspendUntilActivated

Version NID
1.69-3.60 0xECEC7F90

_sceAppMgrCaptureFrameBuf

Version NID
1.69 0xFA21A020
3.60 NOT PRESENT

_sceAppMgrCaptureFrameBufByAppId

Version NID
0.990-1.69 0xD3787750
3.60 NOT PRESENT

_sceAppMgrCaptureFrameBufDMAC

Version NID
1.69 0x34170882
3.60 NOT PRESENT

_sceAppMgrCaptureFrameBufIFTU

Version NID
1.69 0x4799F0F7
3.60 NOT PRESENT

_sceAppMgrCheckSaveDataMounted

Version NID
1.69 0x947A95CA
3.60 NOT PRESENT

_sceAppMgrGameDataMountWithPatch

Version NID
1.69 0x7A239EDC
3.60 NOT PRESENT

_sceAppMgrGetParam

Version NID
1.69 0x5FF430E8
3.60 NOT PRESENT 
int _sceAppMgrGetParam(int app_id, char *param_buffer);

_sceAppMgrSendEvent

Version NID
0.990-1.69 0x5432E51D
3.60 NOT PRESENT

_sceAppMgrReleaseSoundOutExclusive3

Version NID
1.69 0x82C924AD
3.60 NOT PRESENT

sceAppMgrDestroyApp

Version NID
1.69 0xD18F8DDD
3.60 NOT PRESENT

sceAppMgrGetActivateApp

Version NID
1.69 0x4C1183C2
3.60 NOT PRESENT

sceAppMgrGrowMemory2

Version NID
1.69 0xE4CE2CB5
3.60 NOT PRESENT

sceAppMgrInfoBarClose

Version NID
1.69 0x9A60BED4
3.60 NOT PRESENT

sceAppMgrInfoBarOpen

Version NID
1.69 0x97B80C01
3.60 NOT PRESENT

sceAppMgrSetEnablePrioritizeSystemChat

Version NID
1.69 0xD4078CC0
3.60 NOT PRESENT

_sceAppMgrAssignVoicePortByPid

Version NID
0.990 0xC10C53D7

_sceAppMgrAssignVoicePortByAppId

Version NID
0.990 0x83B3F1BE

_sceAppMgrGetRunStatus

Version NID
0.990 0x563C494F 
int _sceAppMgrGetRunStatus(void);

_sceAppMgrDump

Version NID
0.990 0xEEDDB508 
int _sceAppMgrDump(void);

_sceAppMgrIsGameProgram

Version NID
0.990 0x13C5CB3D

_sceAppMgrActivateApp

Version NID
0.990 0x86B07AD5 
int _sceAppMgrActivateApp(SceUID appId);

_sceAppMgrDestroyApp

Version NID
0.990 0x14945ECE

Returns 0 on success. 

int _sceAppMgrDestroyApp(SceUID appId);

_sceAppMgrInfoBarClose

Version NID
0.990 0x1819E285 
int _sceAppMgrInfoBarClose(void);

SceSharedFb

sceSharedFbOpen

Version NID
0.990 0xD2B27255

_sceSharedFbOpen

Version NID
1.69-3.60 0xB358E1B6 

a1 - set 1

SceUID _sceSharedFbOpen(int a1, int sysver);

sceSharedFbBegin

Version NID
0.990-3.60 0x72067C6B

note : If do not call sceSharedFbEnd after calling sceSharedFbBegin, you cannot return to the home 


int sceSharedFbBegin(SceUID shared_fb_id, SceSharedFbInfo *info);

sceSharedFbClose

Version NID
0.990-3.60 0x33DA3428 

int sceSharedFbClose(SceUID shared_fb_id);

sceSharedFbCreate

Version NID
0.990-3.60 0xD6C643B5 

a1 - set 1

SceUID sceSharedFbCreate(int a1, SceSharedFbCreate *create_param);

sceSharedFbDelete

Version NID
0.990-3.60 0xBE5A1A81

sceSharedFbEnd

Version NID
0.990-3.60 0xFC5A62B6 

int sceSharedFbEnd(SceUID shared_fb_id);

sceSharedFbGetInfo

Version NID
0.990-3.60 0x819954FB 

int sceSharedFbGetInfo(SceUID shared_fb_id, SceSharedFbInfo *info);

sceSharedFbGetRenderingInfo

Version NID
0.990-3.60 0x61FEEDFA

sceSharedFbGetShellRenderPort

Version NID
0.990-3.60 0xAC49FC1D 

int sceSharedFbGetShellRenderPort(void);

sceSharedFbUpdateProcessBegin

Version NID
0.990-3.60 0xF9754AD9 

a2 buf size is 0x40
a3 buf size is 4?

int sceSharedFbUpdateProcessBegin(SceUID shared_fb_id, void *a2, void *a3);

sceSharedFbUpdateProcessEnd

Version NID
0.990-3.60 0x565A9AB6 

int sceSharedFbUpdateProcessEnd(SceUID shared_fb_id);

sceSharedFbUpdateProcess

Version NID
0.990-3.60 0x3889ACF8 

int sceSharedFbUpdateProcess(void);

sceSharedFbSetShellRenderPort

Version NID
0.990-1.69 0x0B81B10F

sceSharedFbSetRenderingOrderForTest

Version NID
0.990-1.69 0x0D2B21AE

SceSharedFbForDriver

Retrieved from "http://wiki.henkaku.xyz/index.php?title=SceAppMgr&oldid=20816"