It's not a far step from having the firmware binaries and doing analysis with ghidra, etc.