Nice read but I would use rtl-sdr and SDR tools to reverse engineer this kind of stuff. There are lots of good tools can be used for this purpose in SDR community like this one:

http://www.rtl-sdr.com/waveconverter-an-open-source-rf-rever...