keep at it! nobody in public has really tried to understand this ECM, it's been restricted to commercial developers.

since $EE is so well understood, you should get ahold of kur4o's disassembly of $EE since there is no way they don't share some code or methodology, there's no way they did a ground up rewrite.. all of the attached sensors and devices are identical and they use very similar internal hardware. no need to reinvent the wheel and figure it all out from scratch. when i was working with $EE i used some other P66 disassemblies and got lots of clues to fill in the gaps, helped a lot