BD-D Setup Menu

Samsung's BluRay player related hacks.

BD-D Setup Menu

Postby oga83 » Sun Mar 25, 2012 11:31 am

Hi,

I wrote a small app to easily get into setup menu.

It's for Windows and it uses dotnet 4
No install needed (except dotnet if not already installed), just run the exe.

How to use it :
    - Enter your BD IP address and click 'Setup Menu' (No IP discovery to keep it simple). After a few seconds, the setup menu will be displayed :D
    - Clik again, to exit with status infos on top of screen
    - Click again to quit Setup Menu (side effect : info bar is displayed on the screen. Click Exit on your remote).

First time you run it, the BD will ask you to accept the remote access.

Download it :
SamsungRemote.zip
(9.96 KiB) Downloaded 569 times

[EDIT] : updated 29/08/2012
[EDIT] : Each time you send a key, files containing TCP frames are created : Connect.bin and Key.Bin
[EDIT] : This allow easy scripting : you can send these files on TCP port 55000.

I have only tested it on my BD-D8900 and BD-E8300, but I guess it will work on all BD-D units.
Pls give me your feedback for your specific BD.

Of course, no warranty of any kind ;)
Last edited by oga83 on Wed Aug 29, 2012 2:42 pm, edited 2 times in total.
oga83
 
Posts: 267
Joined: Sun Mar 18, 2012 10:11 pm
Location: France

Re: BD-D Setup Menu

Postby NeoMoucha » Fri Apr 13, 2012 10:20 am

On my BD-D5500: After I pressed "Setup Menu" for the first time, onscreen question to allow appeared - I chose "Allow", but nothing more happened...
Samsung UE40D7000 with SamyGO :) & Samsung BD-D6900 with SamyGO :)
NeoMoucha
 
Posts: 40
Joined: Sat Dec 10, 2011 9:18 pm

Re: BD-D Setup Menu

Postby oga83 » Fri Apr 13, 2012 5:36 pm

Thanks for your feedback.

If the app doesn't display any error message, that means that your unit correctly receives the codes but does not handle them.
Make sure that you are watching TV when you press 'Setup Menu' (it will not work in smartHub).
What firmware do you have ?
oga83
 
Posts: 267
Joined: Sun Mar 18, 2012 10:11 pm
Location: France

Re: BD-D Setup Menu

Postby NeoMoucha » Sat Apr 14, 2012 12:20 pm

Maybe the problem is, that the D5500 model is a simple BD player without tuner... ? :)
Firmware 2012/03/22_001025
Samsung UE40D7000 with SamyGO :) & Samsung BD-D6900 with SamyGO :)
NeoMoucha
 
Posts: 40
Joined: Sat Dec 10, 2011 9:18 pm

Re: BD-D Setup Menu

Postby oga83 » Sat Apr 14, 2012 6:48 pm

No, I don't think so; you can select how many tuners you have in the setup menu (0 for D5500, 2 for D8900).

I rather think it is a question of firmware. I was not aware of release 1025.
Anybody else entered the setup menu with this firmware ?
oga83
 
Posts: 267
Joined: Sun Mar 18, 2012 10:11 pm
Location: France

Re: BD-D Setup Menu

Postby jannick » Mon Jun 11, 2012 9:50 am

Hi,

I tried on my BD-D8900-ZF with F/W BPH-D8900EUB-1009.0. At first I could not get to the "allow" dialog. Then when being in SmartHub I suddenly got the "allow" dialog". Never the less no service menu either from SmartHub nor from normal watching TV mode. Could it be the F/W that uses other codes for setup menu ?
jannick
 
Posts: 1
Joined: Fri Jun 08, 2012 12:45 pm

Re: BD-D Setup Menu

Postby oga83 » Mon Jun 11, 2012 3:21 pm

VK_FACTORY has been removed from last firmwares.
That means that you cannot activate the setup menu by network any longer :-(.
BD-D and BD-E series are both impacted (I don't know for the others).

There are no other network codes (I decompiled MakeRemoconKeyMap from exeDSP).

The setup menu can still be activated by IR (INFO+Code3B is still active), but the IR frame format for BD-D and BD-E is different than the one used for TV.
So, none of the well-known method is working yet (winlirc).

I hope to have some news soon...
oga83
 
Posts: 267
Joined: Sun Mar 18, 2012 10:11 pm
Location: France

Re: BD-D Setup Menu

Postby nobody » Sun Jun 17, 2012 2:39 pm

I just tried that with a BD-D5500 firmware 1018.
Authorization pops up but then nothing happens :(

I just need to remove region on dvd player but in 1018 the usual repeat+code doesn't work either :(

UPDATE:

@oga84:
you made a few mistakes in your program:

1) Sniffing the samsung remote, I noticed that the format is slightly different in bd-d5500:

in your "connect" routine, correct this line:
SendMsg(socket, String.Concat(New String() {ChrW(0), Me.FormatString("iphone..iapp.samsung", False), "8" & ChrW(0) & "d" & ChrW(0), Me.FormatString(s, True), Me.FormatString(str2, True), Me.FormatString(Environment.MachineName, True)}))

Also you forgot (or didn't understand properly) the message legth.

Correct your SendKey routine in this way:

Function SendKey(ByVal socket As Socket, ByVal sKey As String) As String
Dim k = Me.FormatString(sKey, True)
Return Me.SendMsg(socket, (ChrW(1) & Me.FormatString("iphone..iapp.samsung", False) & ChrW(k.Length + 3) & ChrW(0) & ChrW(0) & ChrW(0) & ChrW(0) & k))
End Function

After these corrections the program works.
I tried sending:

SendKey(socket, "BD_KEY_POWER")
and
SendKey(socket, "KEY_OPEN")

And they both work now.

The problem is that KEY_INFO / KEY_FACTORY sequence seems to be ignored.
User avatar
nobody
 
Posts: 164
Joined: Sat Nov 12, 2011 1:45 am

Re: BD-D Setup Menu

Postby oga83 » Mon Jun 18, 2012 1:05 am

I confirm my code on my BD-D8900 (1007) and my BD-E8300 (1006) !
Your modified connect function doesn't work on my units.
Regarding SendKey, both your code and mine work.

KEY_FACTORY has been removed from MakeRemoconKeyMap in exeDsp.
It is also the case for KEY_3SPEED (that was used in the setup menu).
That's why these keys can't be sent by network any longer.

For better readability, here is the original code :

Connect :
Code: Select all
            SendMsg(socket, "\x0000"
                            + FormatString("iphone.iapp.samsung", false)
                            + "\x0040\x0000\x0064\x0000"
                            + FormatString(MyIP, true)
                            + FormatString(MyMAC, true)
                            + FormatString(System.Environment.MachineName, true));


SendKey :
Code: Select all
            SendMsg(socket, "\x0000"
                +FormatString("iphone.iapp.samsung", false)
                +"\x000d\x0000\x0000\x0000\x0000"
                +FormatString(sKey, true));
oga83
 
Posts: 267
Joined: Sun Mar 18, 2012 10:11 pm
Location: France

Re: BD-D Setup Menu

Postby nobody » Mon Jun 18, 2012 4:13 pm

Hmm strange...

If you sniff the IOS samsung remote application, you will notice there are TWO dots between iphone and iapp

Code: Select all
0000   00 14 00 69 70 68 6f 6e 65 2e 2e 69 61 70 70 2e  ...iphone..iapp.
0010   73 61 6d 73 75 6e 67 02 00 c8 00                 samsung....


Then it uses the device name (which I think is ignored).

For example for BD-D5500 it sends:

Code: Select all
0000   01 1c 00 69 70 68 6f 6e 65 2e 42 44 2d 44 35 35  ...iphone.BD-D55
0010   30 30 2e 69 61 70 70 2e 73 61 6d 73 75 6e 67 11  00.iapp.samsung.
0020   00 00 00 00 0c 00 53 30 56 5a 58 30 39 51 52 55  ......S0VZX09QRU
0030   34 3d                                            4=


This works at the moment on 2011 TV and BD models I have and it should also work on any other model (still testing).
User avatar
nobody
 
Posts: 164
Joined: Sat Nov 12, 2011 1:45 am

Next

Return to BluRay Players

Who is online

Users browsing this forum: No registered users and 1 guest