Currently working on DMS1/DMP1 firmware analysis.
Managed to capture the DMS1 ROM and figure out the DMS1/DMP1 operation, including the encryption/decryption algorithm for the firmware objects.