I now know some things about the version of uboot on the device but sadly the disassembler wasn't able to find a reference to a relevant string I could have used to figure out where to hexedit the default load address.
The default load address is 0x20000 and I want it to be 0x6000.
I'll be trying again but I have a question, does anyone know if it would still boot if I changed some bytes in the uboot code stored in the flash?
I have some old equipment I can use to replace the flash chip but I'm waiting on some things to arrive before I can do that.