Difference between revisions of "G27 PS3"
| Line 1: | Line 1: | ||
This is a reverse engineering of the USB interface of the G27 when connected to a PS3. | This is a reverse engineering of the USB interface of the G27 when connected to a PS3. | ||
| + | |||
| + | =Compatibility mode= | ||
| + | |||
| + | When plugged the G27 starts in compatibility mode and behaves as a Driving Force (product id 0xc294). | ||
==Enumeration== | ==Enumeration== | ||
| Line 596: | Line 600: | ||
TODO | TODO | ||
| + | |||
| + | =Native mode= | ||
| + | |||
| + | Once the native mode is enabled the G27 enumerates as a G27. Only the differences will be detailed. | ||
| + | |||
| + | ==Device descriptor== | ||
| + | |||
| + | {| class="wikitable" | ||
| + | |- | ||
| + | |idProduct | ||
| + | |0xc29b | ||
| + | |} | ||
| + | |||
| + | ===Configuration descriptor=== | ||
| + | |||
| + | ====Configuration Descriptor==== | ||
| + | |||
| + | No difference. | ||
| + | |||
| + | ====Interface Descriptor==== | ||
| + | |||
| + | {| class="wikitable" | ||
| + | |- | ||
| + | |iInterface | ||
| + | |Not Requested (254) | ||
| + | |} | ||
| + | |||
| + | ====HID Descriptor==== | ||
| + | |||
| + | {| class="wikitable" | ||
| + | |- | ||
| + | |bcdHID | ||
| + | |1.11 (0x0111) | ||
| + | |- | ||
| + | |wDescriptorLength | ||
| + | |133 | ||
| + | |} | ||
| + | |||
| + | ====Endpoint Descriptor==== | ||
| + | |||
| + | {| class="wikitable" | ||
| + | |- | ||
| + | |wMaxPacketSize.PacketSize | ||
| + | |16 | ||
| + | |- | ||
| + | |bInterval | ||
| + | |2 | ||
| + | |} | ||
| + | |||
| + | ====Endpoint Descriptor==== | ||
| + | |||
| + | {| class="wikitable" | ||
| + | |- | ||
| + | |wMaxPacketSize.PacketSize | ||
| + | |16 | ||
| + | |- | ||
| + | |bInterval | ||
| + | |2 | ||
| + | |} | ||
Revision as of 16:32, 10 January 2015
This is a reverse engineering of the USB interface of the G27 when connected to a PS3.
Contents
Compatibility mode
When plugged the G27 starts in compatibility mode and behaves as a Driving Force (product id 0xc294).
Enumeration
Device descriptor
| bLength | 18 |
| bDescriptorType | DEVICE (0x01) |
| bcdUSB | 2.00 (0x0200) |
| bDeviceClass | Defined in Interface (0x00) |
| bDeviceSubClass | Defined in Interface (0x00) |
| bDeviceProtocol | Defined in Interface (0x00) |
| bMaxPacketSize0 | 16 |
| idVendor | 0x046d |
| idProduct | 0xc294 |
| bcdDevice | 12.38 (0x1238) |
| iManufacturer | None (0) |
| iProduct | Not Requested (2) |
| iSerialNumber | None (0) |
| bNumConfigurations | 1 |
Configuration descriptor
Configuration Descriptor
| bLength | 9 |
| bDescriptorType | CONFIGURATION (0x02) |
| wTotalLength | 41 |
| bNumInterfaces | 1 |
| bConfigurationValue | 1 |
| iConfiguration | None (0) |
| bmAttributes.Reserved | 0 |
| bmAttributes.RemoteWakeup | RemoteWakeup Not Supported (0b0) |
| bmAttributes.SelfPowered | Bus Powered (0b0) |
| bMaxPower | 98mA (0x31) |
Interface Descriptor
| bLength | 9 |
| bDescriptorType | INTERFACE (0x04) |
| bInterfaceNumber | 0 |
| bAlternateSetting | 0 |
| bNumEndpoints | 2 |
| bInterfaceClass | Human Interface Device (0x03) |
| bInterfaceSubClass | None (0x00) |
| bInterfaceProtocol | None (0x00) |
| iInterface | None (0) |
HID Descriptor
bLength 9| bDescriptorType | HID(33) |
| bcdHID | 1.00 (0x0100) |
| bCountryCode | 0x21 |
| bNumDescriptors | 1 |
| bDescriptorType | REPORT (34) |
| wDescriptorLength | 130 |
Endpoint Descriptor
| bLength | 7 |
| bDescriptorType | ENDPOINT (0x05) |
| bEndpointAddress | 1 IN (0b10000001) |
| bmAttributes.TransferType | Interrupt (0b11) |
| wMaxPacketSize.PacketSize | 8 |
| wMaxPacketSize.Transactions | One transaction per microframe if HS (0b00) |
| bInterval | 10 |
Endpoint Descriptor
| bLength | 7 |
| bDescriptorType | ENDPOINT (0x05) |
| bEndpointAddress | 1 OUT (0b00000001) |
| bmAttributes.TransferType | Interrupt (0b11) |
| wMaxPacketSize.PacketSize | 8 |
| wMaxPacketSize.Transactions | One transaction per microframe if HS (0b00) |
| bInterval | 10 |
Report descriptor
|
|
Product string
| bLength | 34 |
| bDescriptorType | STRING (0x03) |
| bString | G27 Racing Wheel |
Get Reports (control endpoint)
FFB reports
Set Reports (control endpoint)
Interrupt IN report
| byte index | bit 7 | bit 6 | bit 5 | bit 4 | bit 3 | bit 2 | bit 1 | bit 0 |
| [0] | Wheel axis LSB (unsigned, min = 0, max = 0x03ff, center = 0x0200) | |||||||
| [1] | l1
(left shift) |
r1
(right shift) |
triangle
(up) |
circle
(right) |
square
(down) |
cross
(left) |
Wheel axis MSB | |
| [2] | 1 | 0 | r2
(top-mid-bottom right) |
l2
(top-mid-bottom left) |
oxoo
select |
ooxo
start |
ooox
r3 |
xooo
l3 |
| [3] | pedals (signed, center = 0x7f) | |||||||
| [4] | 1 | 0 | 0 | 0 | hat switch (D-Pad, Released=8, N=0, NE=1, E=2, SE=3, S=4, SW=5, W=6, NW=7) | |||
| [5-6] | 0xffff | |||||||
Interrupt OUT reports
TODO
Native mode
Once the native mode is enabled the G27 enumerates as a G27. Only the differences will be detailed.
Device descriptor
| idProduct | 0xc29b |
Configuration descriptor
Configuration Descriptor
No difference.
Interface Descriptor
| iInterface | Not Requested (254) |
HID Descriptor
| bcdHID | 1.11 (0x0111) |
| wDescriptorLength | 133 |
Endpoint Descriptor
| wMaxPacketSize.PacketSize | 16 |
| bInterval | 2 |
Endpoint Descriptor
| wMaxPacketSize.PacketSize | 16 |
| bInterval | 2 |
