JP1 Remotes

Learned some keys from a satellite box remote (DirecTV model D10, (pretty sure its made by Hughes Electronics)) onto a 2116 remote. The learned keys work fine but of course memory is almost full so I want to do an upgrade. In IR.exe most of the learned keys show NOTHING in the protocol box at all, and SOME keys show this:

"async5:437-451:C0.5C..C7.FF"

This "async" stuff is there for a few of the keys, but not many - most are blank with only data in the "sent once" & "sent repeatedly" boxes. I've wiped the remote & re-learned the keys three times, same result.

I've posted the IR.exe txt file in the Diagnosis section - it's named:

2116_with_async_only.txt

Any help is greatly appreciated.

This looks similar to the protocol here but the check nibble that Rob figured out is different.

Where, if I have my new irp notation correct, the link is:

{38k,600,msb}<1,-1|1,-2|2,-1|2,-2>(10,-2,D:4,F:8,C:4,1.-16,(5,-2,D:4,F:8,C:4,1,-16)+) where C=Mod16(F:2:6*7+F:2:4*4+F:2:2*2+F:2:0*1)

Here is how I decode the commands. It looks like the same protocol in the link but the calculation of the check nibble is not consistent:

1100-00000001-0001 0xC 01 1 (Rob's check nibble=1) 1
1100-00000010-0010 0xC 02 2 (Rob's check nibble=2) 2
1100-00000011-0011 0xC 03 3 (Rob's check nibble=3) 3
1100-00000100-0011 0xC 04 3 (Rob's check nibble=2) 4
1100-00000101-0100 0xC 05 4 (Rob's check nibble=3) 5
1100-00000110-0101 0xC 06 5 (Rob's check nibble=4) 6
1100-00000111-0110 0xC 07 6 (Rob's check nibble=5) 7
1100-00001000-0110 0xC 08 6 (Rob's check nibble=4) 8
1100-00001001-0111 0xC 09 7 (Rob's check nibble=5) 9
1100-00010001-0110 0xC 11 6 (Rob's check nibble=5) 0
1100-00001101-1010 0xC 0D A (Rob's check nibble=7) ch+
1100-00001110-1011 0xC 0E B (Rob's check nibble=8) ch-
1100-00101000-0000 0xC 28 0 (Rob's check nibble=C) guide
1100-00101110-0101 0xC 2E 5 (Rob's check nibble=0) info
1100-00100000-1010 0xC 20 A (Rob's check nibble=8) menu
1100-00100001-1011 0xC 21 B (Rob's check nibble=9) up
1100-00100010-1100 0xC 22 C (Rob's check nibble=A) dn
1100-00100100-1101 0xC 24 D (Rob's check nibble=A) right
1100-00100011-1101 0xC 23 D (Rob's check nibble=B) left
1100-00100101-1110 0xC 25 E (Rob's check nibble=B) sel


I'm going to be out for a while but I thought I would post this before everyone starts decoding :-) If someone else doesn't beat me to it I will test the UEI official protocol and see if it returns the same check nibble.

Also these commands have a much longer gap between frames:

{38k,600,msb}<1,-1|1,-2|2,-1|2,-2>(10,-2,D:4,F:8,C:4,1.-50,(5,-2,D:4,F:8,C:4,1,-50)+) where C=???

I don't have a clue what all that means, but I sure do appreciate you guys that do!!

I'll be anxiously watching the post replies.......

THANKS AGAIN TO ALL ! ! !

(This stuff is REALLY NEAT!)....

Ok, I can make the check nibble consistent with this algorithm:

Multiply the OBC bits (7,6,5,4,3,2,1,0) individually by 0x (?,?,A,5,6,3,2,1) and then Mod 16 that sum. The multiplication factors for the top two bits aren't certain since they are all zeroes in what I've seen so far.

Any better ideas from the more mathematically inclined?

BTW, I also tested out $01C6 and tried other combinations of the unused bottom four bits of fixed data and nothing changed. Specifically I tried C2, C0, C1, and CF. I didn't see the frequency change.

Bugman, can you learn some more buttons please. You can clear the learns for the current ones. Is this the new DirecTV STB??

Here are the decodes for the latest batch:

1100-01011011-0101 tv/vid
1100-00010000-0101 1
1100-01011011-0101 2
1100-01011011-0101 3
1100-00110011-0010 4
1100-00110100-0010 5
1100-00110000-1111 6
1100-00110101-0011 7
1100-00110010-0001 8
1100-00101001-0001 9
1100-00101010-0010 0
1100-01011011-0101 mute
1100-00001111-1100 last
1100-01000001-1000 pip
1100-01000011-1010 swap
1100-01000010-1001 move
1100-01000100-1010 freeze


My previous check byte algorithm seems to be holding up and I could add one new multiplication factor for bit 6. It's now:

Multiply the OBC bits (7,6,5,4,3,2,1,0) individually by 0x (?,7,A,5,6,3,2,1) and then Mod 16 that sum. The multiplication factor for the top bit can't yet be determined since we haven't yet seen OBC>128.

Any other ideas from the code breakers here?

Bugman, are there any other commands that you haven't learned ? It would be great to find another command that used that top bit of OBC so we could create all 256 possible commands and test them to look for hidden commands. So far we've seen OBC's 1-9, 13-17, 32-37, 40-42, 46,48, 50-53, 65-68, and 91. Also, in the manual is there any section that describes how to communicate with multiple unit's?.

I suppose it's possible that the bottom two bits of device and top bit of what we are now calling device and OBC are a 3-bit unit code.

Rob, I believe that this remote is the one supplied by UEIC although not a JP1 remote. Any word on an official protocol upgrade? Apparently this is DirecTV's first step towards a unified STB approach like Dish. I have read that this is manufactured by Tompson.

jon,

I've just uploaded a new file here that has a couple more learned buttons. I think that's about all the buttons from the original remote. It does however have a switch that lets you put it in different modes for different devices: 1) DTV, 2) AV1, 3) AV2, & 4) TV. All the learned signals I've posted thus far have been from the DTV mode.

Would it help if I change it to another mode & learn signals there?

Lemme know....

Those were OBC's 18 and 19. The other buttons are undoubtedly device buttons and don't control the satellite receiver so there is no point in doing that.

BTW what are the actual commands on the second and third batches?

In the 2nd file the original buttons that I learned...

TV/Video (A/B)
then the numbers 1,2,3,(etc) thru 0
mute
last
PIP
swap
move
freeze

In the third file.....

dash
enter

Any help?......

jon,

In answer to your question re instructions on how to communicate with other components....

The manual instructs you to have the mode switch set to DTV, bring up the system menu on the TV screen, selcet on-screen the name of the mode switch you want to program (AV1, AV2, or TV), then choose what type of device you want to use that mode for (DVD, VCR, etc), then choose the brand of device (Sony, etc). It then gives you setup codes on the screen, and says to then put the mode switch in that position (AV1, etc), then press & hold the SELECT & MUTE buttons on the remote til the light flashes twice, then enter the setup code on the numerical keypad, then put the mode switch back in DTV mode & select DONE from the on-screen menu.

Any help?.....

bugman wrote:In the 2nd file the original buttons that I learned...

TV/Video (A/B)
then the numbers 1,2,3,(etc) thru 0
mute
last
PIP
swap
move
freeze

OK, I'm confused in the first batch the numerals were on the numeral keys. The second batch decoded as:

1100-01011011-0101 tv/vid
1100-01011011-0101 2
1100-01011011-0101 3
1100-01011011-0101 mute

1100-00010000-0101 1
1100-00110011-0010 4
1100-00110100-0010 5
1100-00110000-1111 6
1100-00110101-0011 7
1100-00110010-0001 8
1100-00101001-0001 9
1100-00101010-0010 0
1100-00001111-1100 last
1100-01000001-1000 pip
1100-01000011-1010 swap
1100-01000010-1001 move
1100-01000100-1010 freeze

Note that the first four are identical. The other numerals are all different but not the numeral commands that were in the first batch. Also, I have not seen a power button learned. No commands were duplicated between the first and second batch (other than the same command learned four times in the second batch)

I am building an upgrade in Protocol Builder for this along with a device upgrade and I would like to get as many commands possible to test. Until we get an official upgrade, that should work OK.

Jon,

OK... I've gotten confused also (as to which buttons are learned to which) so I started over clean.

I first did an OPS RESET on the 2116 remote, then uploaded the data from the remote to IR. This should be its "stock" settings, right?

I then made a list of all the buttons on the SAT Remote & what button on the 2116 I would learn them to (37 buttons in all), & proceeded from there.

I've just uploaded TWO files to the DAIG area as the 2116's memory got full before I could get all 37 buttons learned so I had to clear it out & do the 2nd half separately.

The first file is here and contains the following "learns":

(SAT remote key = RS2116 Key)
numerals 0 - 9 = numerals 0 - 9
play = play
FF = FF
REW = REW
stop = stop
pause = pause
select = select
arrows LRUD = arrows LRUD
ch up = ch up
ch dn = ch dn
mute = mute


The 2nd file is here and contains the following "learns":
(SAT remote key = RS2116 Key)
prev ch = last
enter = enter
power = swap
TV Input select = TV/video
menu = menu
guide = guide
info = info
back = +100
dash = sleep
active = PIP
exit = move
list = freeze
vol up = vol up
vol dn = vol dn


Hope this is helpful. I REALLY appreciate you (and anyothers who are assisting) helping in this effort.

Although I'm reading this thread with fascination, howcumizzit that I am reflected as the author of this thread?!?!?!?!

It ain't MINE, I assure you, bugman.

Capn Trips wrote:howcumizzit that I am reflected as the author of this thread?!?!?!?!

IIRC, Rob split this off of a thread you started. So sit back and enjoy your moment of fame! 8)

I was wonderin' that myself capn. I guess Mark is right. I assure you I didn't do it. As you have probably seen... I have a hard enough time just tryin' to get a blasted file link done correctly!

bugman wrote:I first did an OPS RESET on the 2116 remote, then uploaded the data from the remote to IR. This should be its "stock" settings, right?

An OPS RESET will get rid of all the learned signals, but it's a full factory reset. To do a full reset, or MFR RESET as it's called in the remote, press RECORD as soon as the on screen menu is activated, then follow the prompts.

Capn Trips wrote:Although I'm reading this thread with fascination, howcumizzit that I am reflected as the author of this thread?!?!?!?!

It ain't MINE, I assure you, bugman.

Yup, that's my fault, sorry. I was trying to split all the posts about posting links to a new thread and I pressed the wrong button. So what happened was Bugman's original post ended up in a thread by itself and all the other posts ended up in a new thread. As your post just happened to be the first post in that thread, it shows you as the author. Of course, I cleaned it all up so all the relevant posts were in one thread again, but I couldn't fix the author thing. Oh well!