Ralf,
If you look at ubl_main.c, specifically the __low_level_init() function, you will see that VERY early in the reboot process, the code tests to see if the reboot was caused by a watchdog timeout. If so, it directly boots into the RC image application. You would need to modify this to get back to the boot-loader in your situation.
Doug