BD-D Setup Menu

Samsung's BluRay player related hacks.

oga83
Posts: 268
Joined: Sun Mar 18, 2012 10:11 pm
Location: France

BD-D Setup Menu

Post by oga83 »

Hi,

I wrote a small app to easily get into setup menu.

It's for Windows and it uses dotnet 4
No install needed (except dotnet if not already installed), just run the exe.

How to use it :
  • - Enter your BD IP address and click 'Setup Menu' (No IP discovery to keep it simple). After a few seconds, the setup menu will be displayed :D
    - Clik again, to exit with status infos on top of screen
    - Click again to quit Setup Menu (side effect : info bar is displayed on the screen. Click Exit on your remote).
First time you run it, the BD will ask you to accept the remote access.

Download it :
SamsungRemote.zip
[EDIT] : updated 29/08/2012
[EDIT] : Each time you send a key, files containing TCP frames are created : Connect.bin and Key.Bin
[EDIT] : This allow easy scripting : you can send these files on TCP port 55000.

I have only tested it on my BD-D8900 and BD-E8300, but I guess it will work on all BD-D units.
Pls give me your feedback for your specific BD.

Of course, no warranty of any kind ;)
You do not have the required permissions to view the files attached to this post.
Last edited by oga83 on Wed Aug 29, 2012 2:42 pm, edited 2 times in total.

NeoMoucha
SamyGO Project Donor
Posts: 86
Joined: Sat Dec 10, 2011 9:18 pm

Re: BD-D Setup Menu

Post by NeoMoucha »

On my BD-D5500: After I pressed "Setup Menu" for the first time, onscreen question to allow appeared - I chose "Allow", but nothing more happened...
I love SamyGO :)

oga83
Posts: 268
Joined: Sun Mar 18, 2012 10:11 pm
Location: France

Re: BD-D Setup Menu

Post by oga83 »

Thanks for your feedback.

If the app doesn't display any error message, that means that your unit correctly receives the codes but does not handle them.
Make sure that you are watching TV when you press 'Setup Menu' (it will not work in smartHub).
What firmware do you have ?

NeoMoucha
SamyGO Project Donor
Posts: 86
Joined: Sat Dec 10, 2011 9:18 pm

Re: BD-D Setup Menu

Post by NeoMoucha »

Maybe the problem is, that the D5500 model is a simple BD player without tuner... ? :)
Firmware 2012/03/22_001025
I love SamyGO :)

oga83
Posts: 268
Joined: Sun Mar 18, 2012 10:11 pm
Location: France

Re: BD-D Setup Menu

Post by oga83 »

No, I don't think so; you can select how many tuners you have in the setup menu (0 for D5500, 2 for D8900).

I rather think it is a question of firmware. I was not aware of release 1025.
Anybody else entered the setup menu with this firmware ?

jannick
Posts: 1
Joined: Fri Jun 08, 2012 12:45 pm

Re: BD-D Setup Menu

Post by jannick »

Hi,

I tried on my BD-D8900-ZF with F/W BPH-D8900EUB-1009.0. At first I could not get to the "allow" dialog. Then when being in SmartHub I suddenly got the "allow" dialog". Never the less no service menu either from SmartHub nor from normal watching TV mode. Could it be the F/W that uses other codes for setup menu ?

oga83
Posts: 268
Joined: Sun Mar 18, 2012 10:11 pm
Location: France

Re: BD-D Setup Menu

Post by oga83 »

VK_FACTORY has been removed from last firmwares.
That means that you cannot activate the setup menu by network any longer :-(.
BD-D and BD-E series are both impacted (I don't know for the others).

There are no other network codes (I decompiled MakeRemoconKeyMap from exeDSP).

The setup menu can still be activated by IR (INFO+Code3B is still active), but the IR frame format for BD-D and BD-E is different than the one used for TV.
So, none of the well-known method is working yet (winlirc).

I hope to have some news soon...

User avatar
nobody
Posts: 182
Joined: Sat Nov 12, 2011 1:45 am

Re: BD-D Setup Menu

Post by nobody »

I just tried that with a BD-D5500 firmware 1018.
Authorization pops up but then nothing happens :(

I just need to remove region on dvd player but in 1018 the usual repeat+code doesn't work either :(

UPDATE:

@oga84:
you made a few mistakes in your program:

1) Sniffing the samsung remote, I noticed that the format is slightly different in bd-d5500:

in your "connect" routine, correct this line:
SendMsg(socket, String.Concat(New String() {ChrW(0), Me.FormatString("iphone..iapp.samsung", False), "8" & ChrW(0) & "d" & ChrW(0), Me.FormatString(s, True), Me.FormatString(str2, True), Me.FormatString(Environment.MachineName, True)}))

Also you forgot (or didn't understand properly) the message legth.

Correct your SendKey routine in this way:

Function SendKey(ByVal socket As Socket, ByVal sKey As String) As String
Dim k = Me.FormatString(sKey, True)
Return Me.SendMsg(socket, (ChrW(1) & Me.FormatString("iphone..iapp.samsung", False) & ChrW(k.Length + 3) & ChrW(0) & ChrW(0) & ChrW(0) & ChrW(0) & k))
End Function

After these corrections the program works.
I tried sending:

SendKey(socket, "BD_KEY_POWER")
and
SendKey(socket, "KEY_OPEN")

And they both work now.

The problem is that KEY_INFO / KEY_FACTORY sequence seems to be ignored.

oga83
Posts: 268
Joined: Sun Mar 18, 2012 10:11 pm
Location: France

Re: BD-D Setup Menu

Post by oga83 »

I confirm my code on my BD-D8900 (1007) and my BD-E8300 (1006) !
Your modified connect function doesn't work on my units.
Regarding SendKey, both your code and mine work.

KEY_FACTORY has been removed from MakeRemoconKeyMap in exeDsp.
It is also the case for KEY_3SPEED (that was used in the setup menu).
That's why these keys can't be sent by network any longer.

For better readability, here is the original code :

Connect :

Code: Select all

            SendMsg(socket, "\x0000"
                            + FormatString("iphone.iapp.samsung", false)
                            + "\x0040\x0000\x0064\x0000"
                            + FormatString(MyIP, true)
                            + FormatString(MyMAC, true)
                            + FormatString(System.Environment.MachineName, true));
SendKey :

Code: Select all

            SendMsg(socket, "\x0000" 
                +FormatString("iphone.iapp.samsung", false) 
                +"\x000d\x0000\x0000\x0000\x0000" 
                +FormatString(sKey, true));

User avatar
nobody
Posts: 182
Joined: Sat Nov 12, 2011 1:45 am

Re: BD-D Setup Menu

Post by nobody »

Hmm strange...

If you sniff the IOS samsung remote application, you will notice there are TWO dots between iphone and iapp

Code: Select all

0000   00 14 00 69 70 68 6f 6e 65 2e 2e 69 61 70 70 2e  ...iphone..iapp.
0010   73 61 6d 73 75 6e 67 02 00 c8 00                 samsung....
Then it uses the device name (which I think is ignored).

For example for BD-D5500 it sends:

Code: Select all

0000   01 1c 00 69 70 68 6f 6e 65 2e 42 44 2d 44 35 35  ...iphone.BD-D55
0010   30 30 2e 69 61 70 70 2e 73 61 6d 73 75 6e 67 11  00.iapp.samsung.
0020   00 00 00 00 0c 00 53 30 56 5a 58 30 39 51 52 55  ......S0VZX09QRU
0030   34 3d                                            4=
This works at the moment on 2011 TV and BD models I have and it should also work on any other model (still testing).

Post Reply

Return to “BluRay Players”