DEM-3000X: Difference between revisions

From Vita Development Wiki
Jump to navigation Jump to search
No edit summary
 
(25 intermediate revisions by 5 users not shown)
Line 1: Line 1:
The DEM series are pre-production models used by Sony for development before the PDEL series (which resembles more closely to the production PCH-1XXX series). There is speculation that the DEM models use different keys than production models (both PDEL and PCH series use the same secure boot keys).
The DEM series are prototype models used by Sony for development (hence why D in DEM) before the PDEL series (which resembles more closely to the production PCH-1XXX series).


User Jerry Yin of AssemblerGames found a couple of working DEM-3000X units and gave a [https://assemblergames.com/threads/ps-vita-prototypes.69372/ teardown with photos of the process].
= Short description =


== Map ==
== Unknown white prototype model ==
 
* It runs a System Software version estimated older than 0.940 and was manufactured before 2011-01-28.
* See [https://www.youtube.com/watch?v=SrOZbmsKDDA video] from 0.990.030 PUP in vs0:vsh/initialsetup/movie01.mp4.
* It could be the unknown CEM-3000E3.
 
== DEM-3000G ==
 
* IRT-001
* GCP-001
* SGX543MP4+(ES2)
 
== DEM-3000H ==
 
* IRT-001
* GCP-001
* Kermit Revision=3.2
* CP board id 3
 
== DEM-3000JEC ==
 
* EC in DEM-3000JEC stands for Europe Compliance.
* There are three revisions of DEM-3000JEC, each one having same hardware as either DEM-300xK, DEM-300xL or DEM-300xP.
* [http://www.tele.soumu.go.jp/giteki/SearchServlet?pageID=jg01_01&PC=007&TC=N&PK=1&FN=299ul&SN=%94%46%8F%D8&LN=5&R1=*****&R2=***** 007WWCUL0634] March 23, 2011 (DEM-3000JEC)
 
== DEM-3000K ==
 
* IRT-002
* GCP-002
* Kermit Revision=3.2
* CP board id ?3 or 4?
 
== DEM-3000L ==
 
* IRT-002
* GCP-002
* SoC Revision=4.0
* CP board id 4
 
== DEM-3000P ==
 
Exact same hardware as PDEL-100x.
* IRT-002
* GCP-002
* SoC Revision=4.0
* CP board id 4
 
= Analysis =
 
== DEM-3000G ==
 
See [https://dem3000g.github.io].
 
== DEM-3000H ==
 
User Jerry Yin of AssemblerGames found a couple of DEM-3000H units and gave a [https://assembler-games.com/threads/ps-vita-prototypes.69372/ teardown with photos of the process (dead link)].
 
=== Map ===


[[File:DEM_3000_Front.jpg|thumb|800px|Front.]]
[[File:DEM_3000_Front.jpg|thumb|800px|Front.]]
Line 13: Line 70:
The following is an attempt to map key areas of interest on the DEM-3000X device. All items appear in PCH units (in different locations) unless otherwise specified.
The following is an attempt to map key areas of interest on the DEM-3000X device. All items appear in PCH units (in different locations) unless otherwise specified.


# Wifi/BT module. There exists an [ANATEL filing https://fccid.io/ANATEL/00692-14-01530] but nothing with the FCC since Sony decided to certify the entire PCH motherboard instead.
# Wifi/BT module. There exists an [https://fccid.io/ANATEL/00692-14-01530 ANATEL filing] but nothing with the FCC since Sony decided to certify the entire PCH motherboard instead.
# Power distribution network. Ceramic chip, analog logic assumed.
# Power distribution network. Ceramic chip, analog logic assumed.
# Decoupling network for [[Kermit]] as well as P1P40167 clock synthesizer IC and a 27MHz crystal.
# Decoupling network for [[Kermit]] as well as P1P40167 clock synthesizer IC and a 27MHz crystal.
Line 21: Line 78:
# Accelerometer. Kionix KXTC9
# Accelerometer. Kionix KXTC9
# Top: [http://www.st.com/en/microcontrollers/stm32f100-value-line.html ST32F100B6] microcontroller. On PCH units it's a slightly different model (ST32P10S0E, undocumented). Likely used to interface with the sensors and/or controller. Left: unknown, probably some sensor. Right: Gyroscope, ST 3GA51H model.
# Top: [http://www.st.com/en/microcontrollers/stm32f100-value-line.html ST32F100B6] microcontroller. On PCH units it's a slightly different model (ST32P10S0E, undocumented). Likely used to interface with the sensors and/or controller. Left: unknown, probably some sensor. Right: Gyroscope, ST 3GA51H model.
# MAX1161 analog to digital converter. Likely connected to #18 connector on the backside. Interface to prototype back panel maybe? Not found on PCH models.
# MAX11615EEE analog to digital converter? Maybe connected to #18 connector on the backside. Not found on PCH models but found in PDEL.
# Front panel connector. Slightly longer than PCH models likely due to different panels. Probably also contains front camera interface as well.
# Front panel connector. Slightly longer than PCH models likely due to different panels. Probably also contains front camera interface as well.
# Start/Select buttons. Not found on PCH models (it's on the side-board).
# Start/Select buttons. Not found on PCH models (it's on the side-board).
# Power management. Same network found on PCH units with extra chips for charging/battery fuel gague.
# Power management. Same network found on PCH units with extra chips for charging/battery fuel gague.
# Boot-up LEDs. Same as in PDEL units. Connected to GPIO.
# Boot-up LEDs. Same as in PDEL units. Connected to GPIO.
# [[Kermit]] SoC, pre-production version. Labeled "Toshiba T9ML6TLxxxx JAPAN 105xxxx A29590" (xxxx are unclear from picture). Earlier model than the FCC filing for PDEL which had a "T9ML7MBG-S".
# MIPI DSI 3 lanes for front panel.
# MIPI DSI 4 lanes for HDMI conversion IC (to #24). Only found on VitaTV and PDEL units.
# Unknown IC, cannot find mapping to PCH unit.
# Connector to back touchpad.
# Audio codec IC. Labeled "WM1803E 06ABRT4". On top right (outside box) is an IC related to the antennas.
# Unknown connector pads.
# Battery for CP.
# mini PCIe connector for CP daughterboard. Does not follow PCIe signal interface.
# Unknown transistor/logic network.
# MIPI DSI to HDMI translation chip. ADV7533 model.
# Mini HDMI connector
# mini-USB connector from the CP.
# eMMC storage for CP
# Left: EPSON RX-4581NB real-time clock (labeled "R4581 EK416C"). Right: PIC16F724-I/ML microcontroller (low power). Both likely powered by battery (#21) and are used to ensure CP RTC is never reset.
# Unknown IC
# Unknown network
# DRAM for CP. 256MB. Labeled "Samsung K4X2G323PC-8GD8"
# CP processor. Labeled "... 1028KU603 JAPAN ARM". PDEL units are labeled "KD77630AF1 EM1-S 1141KU601 JAPAN ARM". Both are likely the same chip from Renesas.
# Left: USB transceiver. SMSC USB3315 model. Right: USB hub. SMSC USB2512B model. Above that: crystal for USB. Allows CP USB port to export an interface to CP processor as well as Kermit.
# Unknown. Connected to USB hub IC.
== DEM-3000P ==
[[File:Main Board (front).png|frame|center|Main board (front)]]
[[File:Main Board (back).png|frame|center|Main board (back)]]
[[File:CP board (front).png|frame|center|CP board (front)]]
[[File:CP Board (back).png|frame|center|CP board (back)]]


[[Category:Devices]]
[[Category:Devices]]

Latest revision as of 02:43, 3 March 2023

The DEM series are prototype models used by Sony for development (hence why D in DEM) before the PDEL series (which resembles more closely to the production PCH-1XXX series).

Short description

Unknown white prototype model

  • It runs a System Software version estimated older than 0.940 and was manufactured before 2011-01-28.
  • See video from 0.990.030 PUP in vs0:vsh/initialsetup/movie01.mp4.
  • It could be the unknown CEM-3000E3.

DEM-3000G

  • IRT-001
  • GCP-001
  • SGX543MP4+(ES2)

DEM-3000H

  • IRT-001
  • GCP-001
  • Kermit Revision=3.2
  • CP board id 3

DEM-3000JEC

  • EC in DEM-3000JEC stands for Europe Compliance.
  • There are three revisions of DEM-3000JEC, each one having same hardware as either DEM-300xK, DEM-300xL or DEM-300xP.
  • 007WWCUL0634 March 23, 2011 (DEM-3000JEC)

DEM-3000K

  • IRT-002
  • GCP-002
  • Kermit Revision=3.2
  • CP board id ?3 or 4?

DEM-3000L

  • IRT-002
  • GCP-002
  • SoC Revision=4.0
  • CP board id 4

DEM-3000P

Exact same hardware as PDEL-100x.

  • IRT-002
  • GCP-002
  • SoC Revision=4.0
  • CP board id 4

Analysis

DEM-3000G

See [1].

DEM-3000H

User Jerry Yin of AssemblerGames found a couple of DEM-3000H units and gave a teardown with photos of the process (dead link).

Map

Front.
Back.
CP daughterboard.

The following is an attempt to map key areas of interest on the DEM-3000X device. All items appear in PCH units (in different locations) unless otherwise specified.

  1. Wifi/BT module. There exists an ANATEL filing but nothing with the FCC since Sony decided to certify the entire PCH motherboard instead.
  2. Power distribution network. Ceramic chip, analog logic assumed.
  3. Decoupling network for Kermit as well as P1P40167 clock synthesizer IC and a 27MHz crystal.
  4. Back camera connector.
  5. eMMC storage, 4GiB.
  6. Syscon and related crystals. Chip is labeled "D79F0109 ES1.0 10301M001 MALAYSIA" and is likely a Renesas IC with a custom RISC based CPU core.
  7. Accelerometer. Kionix KXTC9
  8. Top: ST32F100B6 microcontroller. On PCH units it's a slightly different model (ST32P10S0E, undocumented). Likely used to interface with the sensors and/or controller. Left: unknown, probably some sensor. Right: Gyroscope, ST 3GA51H model.
  9. MAX11615EEE analog to digital converter? Maybe connected to #18 connector on the backside. Not found on PCH models but found in PDEL.
  10. Front panel connector. Slightly longer than PCH models likely due to different panels. Probably also contains front camera interface as well.
  11. Start/Select buttons. Not found on PCH models (it's on the side-board).
  12. Power management. Same network found on PCH units with extra chips for charging/battery fuel gague.
  13. Boot-up LEDs. Same as in PDEL units. Connected to GPIO.
  14. Kermit SoC, pre-production version. Labeled "Toshiba T9ML6TLxxxx JAPAN 105xxxx A29590" (xxxx are unclear from picture). Earlier model than the FCC filing for PDEL which had a "T9ML7MBG-S".
  15. MIPI DSI 3 lanes for front panel.
  16. MIPI DSI 4 lanes for HDMI conversion IC (to #24). Only found on VitaTV and PDEL units.
  17. Unknown IC, cannot find mapping to PCH unit.
  18. Connector to back touchpad.
  19. Audio codec IC. Labeled "WM1803E 06ABRT4". On top right (outside box) is an IC related to the antennas.
  20. Unknown connector pads.
  21. Battery for CP.
  22. mini PCIe connector for CP daughterboard. Does not follow PCIe signal interface.
  23. Unknown transistor/logic network.
  24. MIPI DSI to HDMI translation chip. ADV7533 model.
  25. Mini HDMI connector
  26. mini-USB connector from the CP.
  27. eMMC storage for CP
  28. Left: EPSON RX-4581NB real-time clock (labeled "R4581 EK416C"). Right: PIC16F724-I/ML microcontroller (low power). Both likely powered by battery (#21) and are used to ensure CP RTC is never reset.
  29. Unknown IC
  30. Unknown network
  31. DRAM for CP. 256MB. Labeled "Samsung K4X2G323PC-8GD8"
  32. CP processor. Labeled "... 1028KU603 JAPAN ARM". PDEL units are labeled "KD77630AF1 EM1-S 1141KU601 JAPAN ARM". Both are likely the same chip from Renesas.
  33. Left: USB transceiver. SMSC USB3315 model. Right: USB hub. SMSC USB2512B model. Above that: crystal for USB. Allows CP USB port to export an interface to CP processor as well as Kermit.
  34. Unknown. Connected to USB hub IC.

DEM-3000P

Main board (front)
Main board (back)
CP board (front)
CP board (back)
Retrieved from "http://wiki.henkaku.xyz/index.php?title=DEM-3000X&oldid=19237"