Generally I don't have a problem firing an unknown hex code at a device as long as it is within the same IRP, d/sd, but service remotes are a different question.

Obviously the disclaimer here is use at your own risk.

P=NECx2
d=7
sd=7


Service (obc=59)

0000 006D 0000 0022 00AC 00AB 0015 0041 0015 0041 0015 0041 0015 0016 0015 0016 0015 0016 0015 0016 0015 0016 0015 0041 0015 0041 0015 0041 0015 0016 0015 0016 0015 0016 0015 0016 0015 0016 0015 0041 0015 0041 0015 0016 0015 0041 0015 0041 0015 0041 0015 0016 0015 0016 0015 0016 0015 0016 0015 0041 0015 0016 0015 0016 0015 0016 0015 0041 0015 0041 0015 0689

3Speed (obc=60)

0000 006D 0000 0022 00AC 00AB 0015 0041 0015 0041 0015 0041 0015 0016 0015 0016 0015 0016 0015 0016 0015 0016 0015 0041 0015 0041 0015 0041 0015 0016 0015 0016 0015 0016 0015 0016 0015 0016 0015 0016 0015 0016 0015 0041 0015 0041 0015 0041 0015 0041 0015 0016 0015 0016 0015 0041 0015 0041 0015 0016 0015 0016 0015 0016 0015 0016 0015 0041 0015 0041 0015 0689

Assuming everyone has made friends with your favorite search engine, we find:

"3 steps procedure:

You will need to have IR transmitter (easy to build by self), or use another possible method to send service codes.

1. TV is ON. Send codes to enter service menu:

INFO+FACTORY

Wait for Service Menu screen.
2. Send code for unlock:

FACTORY+3SPEED

3. Feel free to change locked service menu options.

NB. some explanation: factory+3speed means, you have first send one key (factory) and after this send another (3speed) key.

Optional when TV is OFF, to enter service menu use INFO MENU MUTE POWER keys for EU models or MUTE 1 8 2 POWER for Asia/Pacific/American models."

Hex source:

[Link: github.com]

Instruction Source:

[Link: wiki.samygo.tv]

It seems to bring up the same service menu for my tv that the key combination from the OEM brings up. Advanced is still locked for me, though. However, that's really ok. I don't know what I am doing in that menu, so why tempt fate.