memory addresses for Scene models?

[CytricAcid]

The memory addresses for the scene models in Spyro 1 seem to be in the F85xxxxx range, which is far out of the range of the PSX memory, even accounting for address mirroring. the reasoning is I'm working on Spyro 1 corruptions for Vinesauce and determining memory locations of specific data structures is a huge help in doing stuff that DOESNT crash. The corruptor takes all the other addresses fine, as the 00xxxxxx address space is mirrored into the 80xxxxxx space, but I can't figure out where the scene models are located that can be pinned down in the first 0x200000. Thanks!