there are other m3606 based receivers out there,I would try their firmware.
The s16 firmware isn't encrypted,which allows for some custom tweaks.