JP1 Remotes

I need ir code to use on sharp hdd/dvd recorder which will enable hidden service menu. I read that one need to purchase a custom remote control to send these codes. However, there is some info on the web and I wonder if someone can see what they mean and convert to rmdu file for me.
It seems there are three possible ir codes to enter service menu. One of them will work for certain models.

Please take a look and see if it makes any sense to you.

Thanks.

カラーバー（RC1） 0xAA 5A 8F 30 F5 01

カラーバー（RC2） 0xAA 5A 8F 31 F5 11

カラーバー（RC3） 0xAA 5A 8F 32 F5 21

http://yokamaro.blog130.fc2.com/blog-entry-447.html


ooharak@air ~
$ perl cro.pl AA 5A 8F 30 F5 01
"00,04,22,26,04,00,26,04,00,26,04,00,73,0c,00,34,21,00,9a,10,00,26,04,00,6c,dc,02,20,10,10,10,10,10,11,01,01,11,10,00,10,00,01,10,01,01,01,11,11,00,00,00,03,fe,32,"

ooharak@air ~
$ perl cro.pl AA 5A 8F 31 F5 11
"00,04,22,26,04,00,26,04,00,26,04,00,73,0c,00,34,21,00,9a,10,00,26,04,00,6c,dc,02,20,10,10,10,10,10,11,01,01,11,10,00,11,00,01,10,01,01,01,11,11,00,01,00,03,fe,32,"

ooharak@air ~
$ perl cro.pl AA 5A 8F 32 F5 21
"00,04,22,26,04,00,26,04,00,26,04,00,73,0c,00,34,21,00,9a,10,00,26,04,00,6c,dc,02,20,10,10,10,10,10,11,01,01,11,10,00,10,10,01,10,01,01,01,11,11,00,00,10,03,fe,32,"






http://d.hatena.ne.jp/ooharak/touch/20140327/1395913778

https://photos.app.goo.gl/n5oFK8EStmzgFpe37

this seems to be the format for the mentioned ir code.

http://systemaoi.blog.fc2.com/blog-entry-203.html

as I read on other japanese web site the code seems to start with c1 followed by those 12 digits, it is a aeha protocol.

I also found the aeha protocol detail:
https://photos.app.goo.gl/5SrbvvnxZqn1XmB69

I hope this helps.

http://dsas.blog.klab.org/archives/52097996.html

So I assume that of those 12 digitas, the first four digits ( 2 bytes) are custom code, then next one digit is parity, then one digit for data code, followed by 6 digits ( 3 bytes) of data.
So for example, the first ir code goes like

AA 5A 8F 30 F5 01
AA 5A is acustom code, 8 is parity, F is data code, 30 F5 01 is the data.
it says that 0 is (T,T) and 1 is (T,3T) where T is 350 to 550.
lead in is 8T on, 4T off, and lead out is T on and 8000 off.

I hope I interpret the code right.



http://einstlab.web.fc2.com/Remocon2/Remocon2.html

Do you have this DVD player yourself? My guess is that these "secret" functions use the same protocol as the standard functions, so if we could see the normal signals as learned signals, that would help.

It works for many sharp dvd hdd recorders.
I have one sharp stb that should accept one of the three codes. I am able to capture sharp bd-hdw25 with my harmony which I will post here soon.

here is sharp bd-hdw25 ict file.

https://www.hifi-remote.com/forums/dload ... e_id=25510


I captured number 1 to 6.
I also noticed that its irp format is the same as aeha protocol I posted above.
With 1 (T,3T) and 0 (T,T) and lead in (8T,4T) and lead out (T, -23k) where T=432 uSec.

I was able to create a simple manual protocol with the above setting and with device (85,90,241) and OBC (12,96,131), I was able to captured the resulting signal and decoded as sharpDVD (8,48) and obc 1, which is the same as that from my captured ict file with a sharp bd-hdw25 remote.

However, when I tried to use the value given from the above post, カラーバー（RC1） AA 5A 8F 30 F5 01, and enter device code 170, 90, 143, and command code 48, 245, 1, irscope failed to decode it as sharpDVD protocol.
But its irp is the same as AA 5A 8F 30 F5 01.


I tested further the AA 5A 8F 30 F5 01 signal with slingbox loaded with the manual protocol on my sharp an-ip100, but it didn't enter service menu. I don't know if it was due to that an-ip100 does not have internal hdd and thus service menu is not enabled, which enables us to swap new hdd.


Please help me and see if my above test process makes sense. I will ask my friend who has sharp hdd recorder to test if you think my logic and process makes sense.


Thanks.

Here's the 3 mystery commands:
AA 5A 8F 30 F5 01 - RC1
AA 5A 8F 30 F5 11 - RC2
AA 5A 8F 30 F5 21 - RC3

And here's the six buttons that you learned:
AA 5A 8F 30 01 B1 - #1
AA 5A 8F 30 02 81 - #2
AA 5A 8F 30 03 91 - #3
AA 5A 8F 30 04 E1 - #4
AA 5A 8F 30 05 F1 - #5
AA 5A 8F 30 06 C1 - #6

These are all SharpDVD with dev 8, sub-device 48. The 5th byte is the OBC, where the mystery commands all have "F5", which is OBC 245, but the checksum is different for each of them. So, I think to make this work, we'd need to create an upgrade using the Kaseikyo protocol (instead of SharpDVD) and manually set the checksum byte.

SharpDVD
UEI protocol: 00F8
IRP notation: {38k,400}<1,-1|1,-3>(8,-4,170:8,90:8,15:4,D:4,S:8,F:8,E:4,C:4,1,-48)+ {E=1,C=D^S:4:0^S:4:4^F:4:0^F:4:4^E:4}
EFC translation: LSB comp
SharpDVD is the member of the Kaseikyo family with OEM_code1=170 and OEM_code2=90.

Thanks for the info.
I think for rc1, rc2, and rc3, the sub device should be 48, 49, and 50 respectively as the hex read 30, 31, and 32.

I just went on and create rmdu files with kaseikyo 170,90,8,48 and 245, 1 for rc1. 170,90,8,49, and 245,17 for rc2, and 170,90,8,50, and 245, 33 for rc3.


I hope it will work. Is there a way to verify like check my rmdu file in remotemaster and AA 5A 8F 30 F5 01 - RC1 to see if they somehow match?

Yeah maybe, I see I grabbed the codes from one of the sites that you linked to, where the only difference is the checksum, but those codes are different to what you posted, where the difference is the sub-device.

Other than trying it on the device, you could learn what you program and inspect the learned data. First off, it should display as SharpDVD with 8.48 or 8.49 or 8.50, but if you want to convert it to hex to compare the checksum bytes too, I can do that. The last learns you posted where from IRScope, and that output is WAY harder to convert than if you were to post RMIR learns.

here is the rmir with learned sharp service menu signals that I programmed. signal number 1,2,3 are service menu signals and 4,5,6 are from sharp bd-hdw25.

https://hifi-remote.com/forums/dload.php ... e_id=25511


Thanks.

Here's the hex from your learned signals:
AA 5A 8F 30 01 B1
AA 5A 8F 30 05 F1
AA 5A 8F 30 06 C1
AA 5A 8F 30 F5 01
AA 5A 8F 31 F5 11
AA 5A 8F 32 F5 21

So from a hex perspective it all looks good. However, the carrier frequency for the new signals is 36.8 kHz, whereas for the originals it's 37.7 kHz, and the leadout time for the new ones is 43k whereas for the originals it's 20k. I know the leadout time can be fixed in RM by changing the setting in Protocol Parameters. I don't know whether the carrier being off by 1k would make a difference or not, it varies by device. To change that, we'd need to edit the protocol code itself.

Do you have this device? If so, have you tried creating an upgrade to see if it works the standard functions?

No, I don't have the device. My friend who has a nevo c2 will bring his nevo c2 to his friend's to test. I won't worry about the frequency for now as the bd-hdw 25 signal was actually captured from a harmony 650 remote itself. I will change the lead out though.

I will post here the files once it is proved to work.

Thanks.