Many have been down that road of trying to reverse engineer. No one to my knowledge has achieved this and most fall back on scrapping the rs485 modules. proprietary protocol really fast and just not worth the time and effort. Especially if you don't do this daily would take forever to figure out.
I spend a fair amount of time debugging PMBUS and Intel SVID transactions. Both of these protocols have rigid structures that are well documented and I have the documents. I understand that this is different. I have the tools and the training, but maybe not the time. I will throw my high-speed scope on the signals while I am trying to figure the rest of it out. If anything shakes out of it, you will see it here.
Thanks!
