Mitsubishi Heavy Industries SRKxxZMP-S (SRK25ZMP-S, SRK35ZMP-S, SRK45ZMP-S) reverse engineered

Everything related to protocols and IR codes
Post Reply
jeroenterheerdt
Posts: 5
Joined: Sat Apr 21, 2018 8:07 am

Mitsubishi Heavy Industries SRKxxZMP-S (SRK25ZMP-S, SRK35ZMP-S, SRK45ZMP-S) reverse engineered

Post by jeroenterheerdt » Fri May 11, 2018 11:37 am

Hi all,

happy to share that I successfully reverse engineered the protocol of the Mitsubishi ZMP AC series (product names: SRK25ZMP-S, SRK35ZMP-S, SRK45ZMP-S. Remote control part number: RKX502A001P).
I have used ESPEASY and the excellent HeatpumpIR library to put the decoded protocol to work. The code is available on GitHub: https://github.com/jeroenterheerdt/arduino-heatpumpir (my fork) and corresponding PR: https://github.com/ToniA/arduino-heatpumpir/pull/51.

The protocol is 10 bytes. Values below are in HEX.

-Byte 0: 52
-Byte 1: AE
-Byte 2: C3
-Byte 3: 26
-Byte 4: D9
-Byte 5: 0x11 | swingH | (swingV & 0b00000010) | cleanMode
-Byte 6: inverse of byte 5
-Byte 7: 0x07 | fanSpeed | (swingV & 0b00011000)
-Byte 8: inverse of byte 7
-Byte 9: 00 | operatingMode | powerMode | temperature
-Byte 10: inverse of byte 9

The full protocol is in the Excel sheet attached. Also see the comments in the Excel sheet. Thanks to AnalysIR I was able to pull this off!
You do not have the required permissions to view the files attached to this post.


Lebrun
Posts: 1
Joined: Thu May 17, 2018 9:21 am

Re: Mitsubishi Heavy Industries SRKxxZMP-S (SRK25ZMP-S, SRK35ZMP-S, SRK45ZMP-S) reverse engineered

Post by Lebrun » Thu May 24, 2018 11:38 am

Color me impressed, Jeroenterheerdt. How long did it take you to reverse engineer that protocol?

User avatar
AnalysIR
Site Admin
Posts: 570
Joined: Sat Aug 31, 2013 3:51 pm
Location: Dublin, Ireland
Contact:

Re: Mitsubishi Heavy Industries SRKxxZMP-S (SRK25ZMP-S, SRK35ZMP-S, SRK45ZMP-S) reverse engineered

Post by AnalysIR » Sat Jun 02, 2018 5:49 pm

FYI: There are tools in our AnalysIR application to help with reverse engineering & als a checksum calculator to help figure that out too :)

agpecam
Posts: 3
Joined: Fri Nov 08, 2019 10:22 pm

Re: Mitsubishi Heavy Industries SRKxxZMP-S (SRK25ZMP-S, SRK35ZMP-S, SRK45ZMP-S) reverse engineered

Post by agpecam » Mon Nov 11, 2019 9:11 am

Hello!

Would you please tell me how many data bits the command from this console is?
I do automation, I need two commands - turn on 21 degrees heating and turning off.
There 's very little room for code.

User avatar
AnalysIR
Site Admin
Posts: 570
Joined: Sat Aug 31, 2013 3:51 pm
Location: Dublin, Ireland
Contact:

Re: Mitsubishi Heavy Industries SRKxxZMP-S (SRK25ZMP-S, SRK35ZMP-S, SRK45ZMP-S) reverse engineered

Post by AnalysIR » Mon Nov 11, 2019 2:13 pm

There are 11 bytes in all = 88 bits { There are 10 bytes in all = 80 bits}

However as 3 bytes are checksum, there are 8 unique data bytes = 64 data bits.{However as 3 bytes are checksum, there are 7 unique data bytes = 56 data bits.}

See next post for more details...

agpecam
Posts: 3
Joined: Fri Nov 08, 2019 10:22 pm

Re: Mitsubishi Heavy Industries SRKxxZMP-S (SRK25ZMP-S, SRK35ZMP-S, SRK45ZMP-S) reverse engineered

Post by agpecam » Mon Nov 11, 2019 10:55 pm

0-10 bytes is 11 bytes. I also read that two parcels were needed. And plus a headline.
The total is 23 bytes = 184 bits. I 'll send the raw code. This team will eventually take me 184 * 2 * 4 = 1472 bytes in code. And there on esp for code only 2500 bytes (
That 's why I 'm clarifying. That exactly whether one parcel needs data or two.
Thanks you!

agpecam
Posts: 3
Joined: Fri Nov 08, 2019 10:22 pm

Re: Mitsubishi Heavy Industries SRKxxZMP-S (SRK25ZMP-S, SRK35ZMP-S, SRK45ZMP-S) reverse engineered

Post by agpecam » Mon Nov 11, 2019 10:59 pm

There, in the code, the signal and pause of the signal is encoded by a 4 digit hex number. Values in milisecond signal and pause between them.

User avatar
AnalysIR
Site Admin
Posts: 570
Joined: Sat Aug 31, 2013 3:51 pm
Location: Dublin, Ireland
Contact:

Re: Mitsubishi Heavy Industries SRKxxZMP-S (SRK25ZMP-S, SRK35ZMP-S, SRK45ZMP-S) reverse engineered

Post by AnalysIR » Mon Nov 11, 2019 11:47 pm

in this sketch we show a way to send long AC signals from the HEX value. You should be able to adapt this for your needs & save memory.

https://www.analysir.com/blog/2017/01/2 ... r-signals/

Post Reply