It's in emptool, specifically in lib/protocol/upgrader.cpp. The complicated bits are in lines 445-516 in my copy.

I considered rewriting it in (e.g.) Python, but it was getting late, so I just ordered a USB-mSATA adapter instead.