I forgot to mention that- it dumped 512 bytes of 0s as well. So I guess they only needed 1/2 the space? I disassembled the code and didn't notice anything obviously wrong (like calls to the other half of the address space), but if there are issues, I can decap the chip and check it out.
