The firmware you speak of is proprietary copyright RDC firmware, I'm pretty sure... Anyone treading in this area should do so with caution and discretion. And I suspect any attempt to SELL the fruits of your labours would result in a swift visit from Jim's famously undefeated lawyers.
The only *licit* way to work in this area, hypothetically, would be to clean-room reverse-engineer the functionality of the firmware, not to rip it off and copy it! That would be non-trivial.
Mike



