I have the same issue, the SendControlMessage does not appear to work at-all or it just re-sends the last command from the windows application, if anyone can help I would appreciated it!
FYI - Here are the controll codes to make the missile launcher fire as captured by Snoopy
520 out down 0x00 2506.143 CLASS_INTERFACE 55 53 42 43 00 00 04 00
URB Header (length: 80)
SequenceNumber: 520
Function: 001b (CLASS_INTERFACE)
PipeHandle: 00000000
SetupPacket:
0000: 22 09 00 02 01 00 00 00
bmRequestType: 22
DIR: Host-To-Device
TYPE: Class
RECIPIENT: Endpoint
bRequest: 09
TransferBuffer: 0x00000008 (8) length
0000: 55 53 42 43 00 00 04 00
520 out up n/a 2506.146 CONTROL_TRANSFER - 0x00000000
URB Header (length: 80)
SequenceNumber: 520
Function: 0008 (CONTROL_TRANSFER)
PipeHandle: 82d1a670
SetupPacket:
0000: 21 09 00 02 01 00 08 00
bmRequestType: 21
DIR: Host-To-Device
TYPE: Class
RECIPIENT: Interface
bRequest: 09
No TransferBuffer
521 out down 0x00 2506.146 CLASS_INTERFACE 55 53 42 43 00 40 02 00
URB Header (length: 80)
SequenceNumber: 521
Function: 001b (CLASS_INTERFACE)
PipeHandle: 00000000
SetupPacket:
0000: 22 09 00 02 01 00 00 00
bmRequestType: 22
DIR: Host-To-Device
TYPE: Class
RECIPIENT: Endpoint
bRequest: 09
TransferBuffer: 0x00000008 (8) length
0000: 55 53 42 43 00 40 02 00
521 out up n/a 2506.150 CONTROL_TRANSFER - 0x00000000
URB Header (length: 80)
SequenceNumber: 521
Function: 0008 (CONTROL_TRANSFER)
PipeHandle: 82d1a670
SetupPacket:
0000: 21 09 00 02 01 00 08 00
bmRequestType: 21
DIR: Host-To-Device
TYPE: Class
RECIPIENT: Interface
bRequest: 09
No TransferBuffer
522 out down 0x00 2506.150 CLASS_INTERFACE 00 00 00 00 00 01 08 08
URB Header (length: 80)
SequenceNumber: 522
Function: 001b (CLASS_INTERFACE)
PipeHandle: 00000000
SetupPacket:
0000: 22 09 00 02 00 00 00 00
bmRequestType: 22
DIR: Host-To-Device
TYPE: Class
RECIPIENT: Endpoint
bRequest: 09
TransferBuffer: 0x00000040 (64) length
0000: 00 00 00 00 00 01 08 08 00 00 00 00 00 00 00 00
0010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
0020: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
0030: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
522 out up n/a 2506.164 CONTROL_TRANSFER - 0x00000000
URB Header (length: 80)
SequenceNumber: 522
Function: 0008 (CONTROL_TRANSFER)
PipeHandle: 82d1a670
SetupPacket:
0000: 21 09 00 02 00 00 40 00
bmRequestType: 21
DIR: Host-To-Device
TYPE: Class
RECIPIENT: Interface
bRequest: 09
No TransferBuffer