OK, if anyone (besides myself) is still following this thread; I pulled mine apart to *almost* that point...unfortunately, it appears that during the "refurb" process, they glued together my battery connector, and glued+taped the battery to the metal backer behind it; so removal or the battery in order to release, & photograph the other side of, the PCB would require a dangerous amount of cutting/breaking, and some re-soldering...definitely NOT the safest thing to be trying.
Anywise, as a HAM operator with an infatuation with RF hardware design, I can verify entirely that the black wire IS connecting the antenna to the PCB (if you look closely at either end, see pic at http://www.robherc.c...ystem_Photo.JPG
, it is a COAX wire, with center conductor soldered in one place, and jacket ground/shield conductor soldered right next to it). The black plastic piece with the steel, crimped sheet metal strips attached to the other end of that black wire is your physical antenna. Also, the solder lines around the outside of the oscillator (silver rectangle, marked 32.768K), WiFi chip (silver square, "USI" brand), and nearby/associated bits & pieces are for a Faraday box, like the "metal cover marked with an "X" on the other side of the board, to help minimize interference & cross-talk between diff. circuits on the board (for RF reasons, mos of the copper is removed from the side of the board opposite RF-active chips [which includes processor chips, FYI], which makes the Faraday box necessary to "catch" stray signals).
Unfortunately, from what I found today, I can almost guarantee that the jz4760B main SOC that runs the device is on the OTHER side of the PCB, under the "metal cover marked with an 'X'" from the first post in this thread; so if the 4-pin header I marked in this pic: http://www.robherc.c...ctors_Photo.JPG
is *not* the factory-load serial header I believe it to be, then it'll be VERY dangerous, at least with my unit, to attempt to gain access to the jz4760B SOC in order to solder on a serial header to access that module directly. BTW, if anyone finds, or translates, English documentation for the t301's main board, the name for the 4-pin header in question (from the board) is "J24."
Hope someone finds this useful