JTAG points are on the 4001. VERY neat soldering required, but thats life, I'm afraid.
If you look at the 208pin processor (HD6417709) between the big pace chip (or altera flex on some models) and the battery, on the rear row of pins, the jtag points are as follows:
Pin 136 =TRST
Pin 137 =TMS
Pin 138 =TDI
Pin 139 =TCK
Pin 120 =TDO
You ned to find a 3v supply and Gnd seperately on the board- but thats easier than pie (they are verywhere).
The memory address locations of nvram, flash, loader etc can be found in engineers menu
not my work
If you look at the 208pin processor (HD6417709) between the big pace chip (or altera flex on some models) and the battery, on the rear row of pins, the jtag points are as follows:
Pin 136 =TRST
Pin 137 =TMS
Pin 138 =TDI
Pin 139 =TCK
Pin 120 =TDO
You ned to find a 3v supply and Gnd seperately on the board- but thats easier than pie (they are verywhere).
The memory address locations of nvram, flash, loader etc can be found in engineers menu
not my work