The datasheet for the S5L8700X series can be downloaded here, but I (cmwslw) will try to get it hosted on my site soon. The datasheet describes every pin (page 1-5) and instruction (page 3-1) in detail. The pin locations described in the datasheet are not the actual locations for the 232-pin FBGA version. The FBGA version pin locations can be found here, respectively. We could use the datasheet to find the locations of the JTAG pins, but finding where the traces go would be very challenging and require a high-res X-ray of the board. If we could use the datasheet to find a way of reading the 50KB embedded ROM, we would be able to figure out how the firmware is decrypted.