Yeah, that's what Igor said. It's executing NOPs while dumping, so PL is incrementing in LFSR order and ROM is coming out in execution order.

I'm sure there are some pages that I'm still not getting, and I'm not 100% sure that all the pages are starting at the right place. I haven't found a "start of page" indicator, so all I can do is compare the dump right after ACL to the dump of page 55 and adjust the starting offset of each page based on that. After my latest tweaks, BX301 pages still start 8 bytes in, but ML102 pages start right at the beginning.