It makes no sense just to fire IR bursts an wait what happens. This will take a very long time and a lot of energy
At first there are protocols. If you are lucky, your devices are using known (by the Flipper) protocols.
Let’s take the NEC protocol as example. There is a Address part and Command part. Both are 2 digit hex values. You can start and go:
And as it is not bidirectional, just sit hours, days, weeks, … and wait until anything happens… Or leave it unattended and something happens at some time, but you’ll never know the triggered codes.
Another approach could be search within a Flipper-IRDB. First search your device. If it not there, look out for similar devices of the same brand. If no match, look out for the similar category… Try to find the best match you can.
Based on that you still can brute force the command, if you have an idea of the address.
1 X 255 is 254 times less than 255x255.
Maybe anyone has a Logitech Harmony which maybe can be programmed for the Z-5500 and could read out some signals?
Just my 2 cent. But I am not an expert in IR bruteforce technique.