requesttype=0x22
One parameter: 0x0000000f. Seems to be issued after a Remote Capture Control with subcode of 0x1c (unknown) or 0x04 (release shutter), or at the endo of a file download.
Command: 0x54 bytes
00000000 14 00 00 00 01 02 00 00 00 00 00 00 00 00 00 00 ................
00000010 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
00000020 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
00000030 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
00000040 02 00 00 00 22 00 10 12 14 00 00 00 b0 e7 12 00 ...."...........
00000050 0f 00 00 00 ....
Camera Response: 0x54 bytes (EOS 20D)
00000000 14 00 00 00 01 03 00 00 00 00 00 00 00 00 00 00 ................
00000010 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
00000020 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
00000030 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
00000000 02 00 00 00 22 00 10 22 14 00 00 00 b0 e7 12 00 ....".."........
00000010 00 00 00 00 ....
After this, there seems to be an interrupt read of 0x17 (23) bytes:
00000000 02 00 00 00 0c 00 00 00 17 00 00 00 07 00 00 00 ................
00000010 02 2d a4 81 00 83 ad .-.....
This looks a whole lot like the second interrupt message after release on an older Canon camera.
4-byte integer at byte 0 is 2
4-byte integer at byte 4 is 0xc
4-byte integer at byte 8 is total length
4-byte integer at byte 0x0c may be length of payload (i.e. <total length> - 0x10)
4-byte integer at byte 0x0c apparently gives the image handle for download
The byte at 0x10 is 2, whereas earlier cameras gave a 1
4-byte integer at byte 0x11 is the size of the image file, just as with older cameras
The byte at 0x15 happens to be the endpoint index of the interrupt endpoint of this device, but this may be coincidence
The final byte was 0xb0 for the G2, 0xaf for the D60. Could this be some sort of camera model ID?
But there seem to be other versions of the command, e.g.:
00000000 14 00 00 00 01 02 00 00 00 00 00 00 00 00 00 00 ................
00000010 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
00000020 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
00000030 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
00000040 02 00 00 00 21 00 10 12 14 00 00 00 a8 e7 12 00 ....!...........
00000050 0f 00 00 00 ....
with the following response:
00000000 14 00 00 00 01 03 00 00 00 00 00 00 00 00 00 00 ................
00000010 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
00000020 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
00000030 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
00000000 02 00 00 00 21 00 10 22 14 00 00 00 a8 e7 12 00 ....!.."........
00000010 00 00 00 00 ....