I have discovered some additional commands.
You can use portmon
to capture the ASCII stream (up to 230 char per line) between the application and the emulated comport.
Then convert the logfile using a small vbscript to something more readable, and look into it to discover what happens, e.g after doing some reconfiguring, etc and relate the discovered data to what you did.
The script is on github
, just get it there. It filters the protocol commands between de start and end sequences (trows away he rest), and as an after touch tries to format 'known' comands in a more readable form. The logfile location is hardcoded, but easy to change.
Suggested additions: optionally filter the 0012/0013 or 0023/0024 (both realtime scanning) and/or 0048/0049 (getting unread archived data), as that mainly clutters the more interesting datastream.
In the command-decoder function, many commands are there, but there is stil allot to discover (e.g. the flag-dword in the 0000 reply)
NB. this threath
on this forum is interesting too, more discussions about the commands.