Skip to content

Appliance:2REF11EIDA__4

Andrzej Szombierski edited this page Mar 22, 2026 · 6 revisions

Brand name: Standard-Depth 4-Door French Door Refrigerator
Official model name: LF29H8330S
ThinQ Model ID: 2REF11EIDA__4 Platform: Thinq2

This is a fridge/freezer, with a flex temp drawer, in door water/ice maker, and a freezer ice maker.

It communicates with the "AABB" protocol.

Common structures

Status block

Several packets contain a 68-byte block describing the appliance's state.

The following bytes have been identified

byte index
(zero-based)
field description
1 fridge temp setpoint Formula = 44 - value (in decimal). E.g. if value is 10, then setpoint is 34 °F
2 freezer temp setpoint Formula: 6 - value (in decimal, for °F). E.g. if value is 12, then setpoint is -6 °F
3 Ice Plus command 1 = off, 2 = on
5 Smart grid command 0 = off, 2 = on
What's 1 then? Power reduced by grid command?
7 Door status 1 = open, 0 = closed
No differentiation between each of the 4 doors/drawers. Set to 1 if any door is open.
8 temperature unit 0=fahrenheit 1=celsius
10 Panel lock command 1=unlocked, 2=locked
13 Flex drawer setpoint Values: 1 - chilled wine. 2 - deli/snacks. 3 - cold drink. 4 - meat/seafood. 5 - freezer
32 In-door ice command 0 = off, 1 = on, 2 = ice full
33 Cubed Ice command
(freezer drawer ice maker)
0 = off, 1 = on, 2 = ice full

(thanks to @jseyfert3 for the analysis)

Packet format

The packets below are described excluding the AA..BB framing. This means that each full packet is 4 bytes longer.

device-to-cloud messages

"10EB" message

This message contains the initial state of the fridge. It consists of a 2-byte header 10EB followed by a 68-byte status block.

Example (whitespace added for clarity):

10EB 0209060202020400000001FFFF0300FFFF00FFFFFFFFFFFFFF020001010100000102FF6161FFFFFF01FF00FFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFF0078FF0000

"10EC" message

This message notifies of a change in the fridge's state. It consists of a 2-byte header 10EC followed by two copies of the status block. The first copy describes the previous state, the second one - the new state.

Example (whitespace added for clarity):

10EC 0209060202020400000001FFFF0300FFFF00FFFFFFFFFFFFFF020001010100000102FF6161FFFFFF01FF00FFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFF0078FF0000
     0209060202020401000001FFFF0300FFFF00FFFFFFFFFFFFFF020001010100000102FF6161FFFFFF01FF00FFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFF0078FF0000

cloud-to-device messages

initial query

The following message needs to be sent before the fridge will produce any useful output:

F0ED1211010000010400

change settings

All the settings appear to be settable with a single complex message.

F017FFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFF000000FFFF00FFFFFFFF00FFFFFFFFFFFFFFFFFF00FFFFFF1EFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFF0AFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFF

Skipping the F017 header, the following bytes have been identified, matching the status block precisely.

byte index
(zero-based)
field description
1 fridge temp setpoint same as in the status block
2 freezer temp setpoint same as in the status block
13 Flex drawer setpoint same as in the status block

Setting any of these bytes to 0xff means "leave unchanged".

Clone this wiki locally