It's likely that this would now require actually reverse engineering the circuit subcomponents, but that is an entire rabbit hole I do not have time to go down at this point.

This is the route I ended up going! I posted my own writeup here: https://pradyun.net/blog/reverse_engineering.html