Try again 
http://kapsi.fi/~jpa/stuff/other/LOGICAPP.HEX
But this is a very very nasty CPU bug. The original firmware manages to avoid it only by doing things in a quite inefficient way. In fact, there are some signs of them trying to use DMA at first, but I guess they had to give up because it is buggy.