Hey ericlewis - this is cool! Can I ask how you figured it out?!
Doing this for my PO-33 was on my bucket list.
I thought I might have to resort to voltage glitching to get a firmware dump, which is currently beyond my skills.
I am working on PO-33, doing EMFI.
I never got close to finishing or publishing anything. Awesome to see this released and I'll have to play with it!