Readiness monitor patch

[turbo_bu]

I've been looking into the readiness checks and how they are done. I think that I found the ones that get used for a plug in check. I would to try this patch on a car that is getting checked to see if it works. Any P01 will work, and I have found the section in a few P59s too.

[kur4o]

Do you know the address of patching for 7603 OS. I might figure how to apply it to all OS with some searching.

[turbo_bu]

Yes, I have the addresses for 7603 os. There is a slight difference in the last part of the patch, appears it is a D6 vs D7 , verses the 2001 os. I don't have a disassembly for the 7603, but still believe that it will work. I can put together an XDF if you want.

[kur4o]

No need for xdf, just give me the 7603 address and I can figure it out. I already have a good 7603 diss and will be easy to trace what needs to be done.

[turbo_bu]

Address is 49EBC. I had to make a few changes to get it to work on my bench test. Could you share a copy of the disassembly?

[kur4o]

I find that it is actually hacking pid $01 4 bytes response.
The subroutine serves pid $01

How the response should look with good data.[passed]

Hacking this subroutine will be piece of cake. Write the needed data to d0 and return.

The addresses of subroutine can be taken from universal patcher. In the pid tab it will list pid 01 and its corresponding subroutine.

Here is some diss I have. You need ida to open it.

[turbo_bu]

Yes, it is pointing to PID 01. I have found the key is to get the 4 bytes correct and in order to make this work. Thanks for the disassembly. Do you happen to have it in a text .asm file?