I have a remote called an MX500 and a bit of hardware called an Ir clone. The MX500s can clone either one device or the whole config to another remote, so a chap reverse engineered the protocol and you can now view/edit the config on a PC.
I'll have another squint at the codes as going from the on/off times to command/address can be error prone, though NEC protocol is one of the easiest.
I recently had to hand-craft the pulse times for a SoundGraph iMon Inside. They use a custom 32-bit data burst, with no error checking, and seemingly no reclocking. My remote failed to learn the codes, so I wrote some Python to generate the on/off times and typed them in hy hand! The protocol is so lame that my four remotes all need slightly different data rates - they only allow 1% clock drift before the end of the packet gets corrupted.
[later]
OK, here are the on/off times with commentary.
340, 170 - AGC calibration and start bit
21, 21 - Address 10h
21, 21
21, 21
21, 64
21, 21
21, 21
21, 21
21, 21
21, 64 - Address inverted
21, 64
21, 64
21, 21
21, 64
21, 64
21, 64
21, 64
21, 64
21, 21 - Comand 28h
21, 21
21, 64
21, 21
21, 64
21, 21
21, 21
21, 21
21, 64 - Command inverted
21, 64
21, 21
21, 64
21, 21
21, 64
21, 64
21, 64
21, 1511 - End bit and gap
All typed by hand, so maybe the odd error!
Ian