There is one small part of Yifan's LoadCode.S that I can not understand, I think it has to do with how the GPU sees the memory verses the CPU. It loads the code to 0x19592000 with gspwn, then jumps to 0x009D2000. How does this execute the code exactly? Am I missing a part of the memory mapping, some rop gadget 0x009D2000? Any help would be greatly appreciated!