First things first, the E-Side factory test routines.

here's the first one:

F010
F010 ; =============== S U B R O U T I N E =======================================
F010
F010
F010 factory_test: ; CODE XREF: RESET_INIT2+19P
F010 CC 07 00 ldd #0x700
F013 BD F1 3A jsr analog_to_digi_plus_store_AndA_byte1F_to_1060 ; channel 7(MAP)
F016 81 05 cmpa #5
F018 22 5D bhi locret_F077
F01A CC 03 00 ldd #0x300 ; channel 3
F01D BD F1 3A jsr analog_to_digi_plus_store_AndA_byte1F_to_1060 ; channel 3 (TPS)
F020 81 FC cmpa #0xFC ; 'n'
F022 25 53 bcs locret_F077
F024 B6 10 64 ldaa byte_1064
F027 85 10 bita #0x10
F029 26 4C bne locret_F077
F02B CC 06 C0 ldd #0x6C0
F02E BD F1 3A jsr analog_to_digi_plus_store_AndA_byte1F_to_1060 ; mux channel C(CTS)
F031 81 05 cmpa #5
F033 22 42 bhi locret_F077
F035 CC 05 00 ldd #0x500
F038 BD F1 3A jsr analog_to_digi_plus_store_AndA_byte1F_to_1060 ; channel 5(IAT)
F03B 81 FC cmpa #0xFC ; 'n'
F03D 25 38 bcs locret_F077
F03F CE 03 03 ldx #0x303
F042 1D 00 80 bclr 0,x,#0x80 ; 'Ç'
F045 0E cli
F046 B6 10 08 ldaa byte_1008
F049 85 01 bita #1
F04B 27 03 beq loc_F050
F04D BD B5 55 jsr sub_B555
F050 ; ---------------------------------------------------------------------------
F050
F050 loc_F050: ; CODE XREF: factory_test+3Bj
F050 CE 0E 18 ldx #0xE18
F053
F053 loc_F053: ; CODE XREF: factory_test+50j
F053 EC 00 ldd 0,x
F055 1A 83 55 AA cpd #0x55AA
F059 26 0A bne loc_F065
F05B 08 inx
F05C 08 inx
F05D 8C 0E 20 cpx #0xE20
F060 25 F1 bcs loc_F053
F062 7E 0E 20 jmp unk_E20
F065 ; ---------------------------------------------------------------------------
F065
F065 loc_F065: ; CODE XREF: factory_test+49j
F065 FC 10 0E ldd word_100E
F068 C3 03 33 addd #0x333
F06B FD 10 18 std word_1018 ; TOC2 (160Hz interrupt)
F06E 7F 00 5E clr byte_5E ; C86: SPI Transfer buffer index
F071 7F 03 02 clr byte_302 ; SPI transfer error counter?
F074 BD F0 78 jsr FACTEST_1 ; a factory test routine
F077 ; ---------------------------------------------------------------------------
F077
F077 locret_F077: ; CODE XREF: factory_test+8j
F077 ; factory_test+12j ...
F077 39 rts
F077 ; End of function factory_test
F077
F078


I am not 100% sure that if I remove this, it won't break things I need. It *looks* like it's going through and pulling all the vital A/D inputs and comparing them to something, then at the end of the first section, either continues the test or jumps to subroutine B555. Next, it loads something at factory test 3B, and checks something for factory test 50, and either starts over or jumps to location UNK_E20. Next section, seems to test the SPI transfer bus, and then at the end jumps to "factory test routine 1" which I'll post next.