Last summer, I showcased some research on the use of Modbus protocol 0x5A function by Schneider PLCs.
You can watch the video here:
https://www.youtube-nocookie.com/embed/A_B69Rifu1g?rel=0
The slides are on Google Slides.
The tools are located on my Github.