But we still don't have code execution.

但是我们仍然没有代码执行。

You always had to buy a gaming console, hack it first, get code execution there to get an idea what this thing looks like on the inside.

你总是需要买一个游戏机，先破解它，在那里执行代码，以了解它的内部结构。

You already have kernel code execution due to some other hack, and you can just set this PMC scratch register and reboot, and then the ROM sees this and just goes into the RCM path.

由于其他一些 hack，您已经执行了内核代码，您只需设置此 PMC 暂存寄存器并重新启动，然后 ROM 会看到它并进入 RCM 路径。