How were these relocated Kickstart created when only an original binary is available. Any jump instruction from the original image would end up in the physical ROMs not the loaded Kickstart. But it seems to work, so I guess I miss something. But what makes it work in this respect ?