Xiaomi TV 4S IR Codes

nerom86 · Post by **nerom86** » Mon Dec 07, 2020 3:45 am

Subject: Xiaomi TV 4S IR Codes

1. Device: Xiaomi Mi TV 4S
2. Type of device: TV
3. Year: 2020
4. JP1/UEI Remote model: None
5. Do you have a JP1 cable? No
6. Still have original remote? Yes
7. Checked the file section? Yes
8. Checked Pronto file section (at R/C)? Yes
9. Partially working setup code? Yes, see below
10. Learning remote question? No
11. Have you tried the JP1 Lookup Tool? Yes, didn't find anything
12. If you have a OARUSB04G (or similar) remote, have you tried simpleset.com? n/a

Hi, im trying to find all codes for this Xiaomi TV 4S. It comes with a Bluetooth Remote but also has an IR-receiver.

Here's what I know. Some codes from the http://www.hifi-remote.com/forums/viewt ... p?t=100421 (Xiaomi Streaming Box) do work.
Those are the codes which i know to be working:

IR-PROTOCOL= XIAOMI IR (Which is a variant of RC-MM), which has a header and 20-bits
[HEADER][8-bit device code][8bit function code][xor-check 4 bit]
IRP: {36k,290,msb}<2,-2|2,-3|2,-4|2,-5>(1000u,-2,D:8,F:8,C:4,2,^30m)* {C=(D:4:4^D:4^F:4:4^F:4)} [D:0..255,F:0..255]

DEVICE CODE = 134 = 0x86

Code: Select all

Found IR codes (By bruteforce)
KEY ON REMOTE  | HEX | DECIMAL

1     = 0x86 0xc1 = 193
2     = 0x86 0xc2 = 194
3     = 0x86 0xc3 = 195
4     = 0x86 0xc4 = 196
5     = 0x86 0xc5 = 197
6     = 0x86 0xc6 = 198
7     = 0x86 0xc7 = 199
8     = 0x86 0xc8 = 200
9     = 0x86 0xc9 = 201
0     = 0x86 0xca = 202

UP    = 0x86 0x05 =   5
LEFT  = 0x86 0x0b =  11
OK    = 0x86 0x0d =  13
RIGHT = 0x86 0x0c =  12
DOWN  = 0x86 0x06 =   6

VOL+  = 0x86 0x0e =  15
VOL-  = 0x86 0x0f =  14
MUTE  = 0x86 0xa1 = 161

INPUT = 0x86 0x01 =   1
    
POWER = 0x3c 0xcc = 204 | note: different device code

FWD   = 0x86 0xa7 = 167 | note: not on original remote, secret found ;-)
REW   = 0x86 0xa8 = 168 | note: not on original remote, secret found ;-)

Now here comes the interesting part: Using the original Bluetooth remote and opening a shell on the TV using getevent i was able to gather all OBC for the keys on the REAL remote.
When I send the IR code 0x86 0x0e for example, the OBC event for key 0073 (DECIMAL 115) is triggered on the device and the VOLUME is being raised correctly.

So now the big question: Anyone know how to determine the missing codes for IR?

Or where i could find them on the device using the shell?

List follows:

Code: Select all

Table of key-events of bluetooth remote, which seems to be triggered on the correct IR as well

key   | hex | dec

green  00a1 = 161
red    00a6 = 166
blue   00d9 = 217
yellow 019a = 410

mikey  018f = 399
back   009e = 158
menu   00ac = 172

ok     0161 = 353
down   006c = 108
up     0067 = 103
left   0069 = 105
right  006a = 106

nflix  01a0 = 416
prime  00cf = 207

chlist 0189 = 393
sett.  0241 = 577

input  00a7 = 167
 
0      000b =  11
ttx    0088 = 136
7      0008 =   8
8      0009 =   9
9      000a =  10
4      0005 =   5
5      0006 =   6
6      0007 =   7
1      0002 =   2
2      0003 =   3
3      0004 =   4
assist 0246 = 582

vol+   0073 = 115
vol-   0072 = 114

Thanks!

Post by **The Robman** » Mon Dec 07, 2020 10:14 am

You say you're not using a JP1 remote, so could you provide more clarity as to what you are trying to do? You mention IR but I assume you don't mean the JP1 program called IR, so what are you referring to? You use the acronym ODC, which at first I assumed was a typo for OBC but you used it several times, so maybe it's not a typo, in which case what is an ODC.

You have to understand, you've posted in a JP1 forum where we usually help people with their JP1 remotes, so if you're going to ask for help with something else, you need to give us some context.

nerom86 · Post by **nerom86** » Mon Dec 07, 2020 10:25 am

Sorry Rob, I thought it is called ODC, so i corrected it to OBC.

I dont personally have a JP1 remote, but i'm using LIRC to send the event from an Infrared enabled device.

But the "theory" should be the same. Basically im looking for the IR code of the missing buttons, however without actually having a real IR remote.

Or other words: Is it possible to "calculate" the bits for the IR protocol just using the OBC ?

For the reference a sample of one code:

Post by **The Robman** » Mon Dec 07, 2020 11:26 am

We have a JP1 upgrade with all the known buttons in it here:
http://www.hifi-remote.com/forums/dload ... e_id=14383

The OBCs for the known functions are:
3 F10
4 Menu
5 Menu Up
6 Menu Down
7 Back
8 Home
11 Menu Left
12 Menu Right
13 OK
14 Volume Up
15 Volume Down
17 F11
48 Page Up
51 Page Down
53 + (Plus sign)
54 F12
56 - (Minus sign)
204 Power
234 Power Off

What format do you need them in? You say that you've tried some of the functions from the other thread and they work, so what exactly did you try?

nerom86 · Post by **nerom86** » Mon Dec 07, 2020 11:35 am

Yes those are all working, and i've added also some other buttons like 0-9 in the first table.

Now i also found (by trying)

SETTINGS: 0x86 0xA4 = 164 decimal

Now only 8 are missing, 1 essential

channel list (essential for live tv)
ttx (essential, but not important function)
netflix (not essential as it can be reached via menu)
prime video (not essential as it can be reached via menu)

red (hbbtv)
green(hbbtv)
yellow(hbbtv)
blue(hbbtv)

Note that the remote has more buttons than the one for the regular Mi-TV.

Maybe when we found all codes a new JP1 file could be created for the Mi TV 4S (Not only Mi Box), so even if i dont own a JP1 i migiht have helped someone in future[/img]

Post by **The Robman** » Mon Dec 07, 2020 6:49 pm

Thank you for the additional codes that you have found, I have added them to the JP1 upgrade. How did you find those codes, was it by trying all the possible OBCs using device code 134? If so, the fact that you didn't find these other buttons either means they don't exist in the IR codeset, or your TV wasn't in the right mode for you to recognize them.

I did try comparing the Bluetooth codes with the IR codes, and I don't see a correlation.

GoC · Post by **GoC** » Thu May 27, 2021 10:51 am

Hi, I am trying to configure a broadlink rm mini 4 device to be able to change channels as if pressing the buttons on the remote. I am desperate and I can't find the way but I have found this post that apparently compiles the IR encoding of the KEYPAD but I would not know how to implement it in the configuration of my Broadlink device. Could you help?

Post by **The Robman** » Thu May 27, 2021 5:42 pm

GoC wrote:Hi, I am trying to configure a broadlink rm mini 4 device to be able to change channels as if pressing the buttons on the remote. I am desperate and I can't find the way but I have found this post that apparently compiles the IR encoding of the KEYPAD but I would not know how to implement it in the configuration of my Broadlink device. Could you help?

Your post is the first mention of Broadlink in this thread, so what was it about this thread that makes you think it would help with your BRoadlink?

GoC · Post by **GoC** » Fri May 28, 2021 2:24 am

The Robman wrote:
GoC wrote:Hi, I am trying to configure a broadlink rm mini 4 device to be able to change channels as if pressing the buttons on the remote. I am desperate and I can't find the way but I have found this post that apparently compiles the IR encoding of the KEYPAD but I would not know how to implement it in the configuration of my Broadlink device. Could you help?
Your post is the first mention of Broadlink in this thread, so what was it about this thread that makes you think it would help with your BRoadlink?

Desperation, because I can't find a way to program certain functions on this platform and the only thing I have given has been with this information

Post by **The Robman** » Fri May 28, 2021 7:35 am

Did someone give you a link to this thread, or did you find it in a Google search? If it was a search, what were the key words you were searching for?

I'm struggling to find a connection between your request and this thread, or even this forum to be honest.

Barf · Post by **Barf** » Fri May 28, 2021 9:48 am

@GoC: If you know the signals you want to send, you can use this project to send them from the command line (or a python program) to your BroadLink. Don't know if that is what you are looking for, though.