I never actually figured it out myself, I just stumbled on the hex while I was perusing the internets one day and applied it to my exe. I think Jackalope might have figured it out, they mentioned it a couple days ago in IRC.
Fun fact: pttune can be opened by pxtone collage with the aid of a small hack, and the only thing they are missing is the names of the instruments and voices (since they're not "supposed" to be accessible)