I installed this disassembler:

https://github.com/Arakula/f9dasm

and had a first go at disassembling.

It is a pretty powerful tool.

Much of the ROM seems to be arrays of words, making me wonder if there if they used some kind of FORTH interpreter to get the code density up. 

I don't have time to reverse engineer FORTH code!