I took both of your advice, and downloaded XSE 1.1.1 and downloaded Free Space Finder. Using FSF, I found a free offset, and plugged it into the following code
Then I compiled the script, copied the @start offset into Advance Map, and booted the ROM. This time, I have no idea what's happening...