Unfortunately, I also got one in recently where the last data recovery company wiped the ROM. There really isn't much you can do within reasonable means. Supposedly is one or two guys in Eastern Europe who can do it, but it'll cost a small fortune.
Best bet is to have your customer call out the company on it and threaten a lawsuit if they don't release the code. That's what my client did (still waiting to hear what comes of it).