The user+service manuals are available online from various sources. Part 2 is a bit harder to find but still possible to google up. The ROMs were dumped by the uploader, all information should be in the file name. Several CPLDs and PALs are also present in the device but I don't currently have any way of dumping them. The RF unit EEPROM would also be nice to have a copy of; but this is pretty tedious to read since it's only available through some I/O expanders.