xxandy / USB_UDE_Sample

UDE (USB Device Emulation) Hardware-less sample, with matching Host-Side drivers. Used as a USB study test bed.

USB UDE Sample

UDE (USB Device Emulation) Virtual USB device sample (hardware-less), with matching Host-Side drivers. Used as a USB study test bed. Can also be the starting point for developing other Virtual USB devices.

This project is a reference/sample that illustrates programming UDE (USB Device Emulation) devices, per the architecture/infrastructure Windows provides at https://docs.microsoft.com/en-us/windows-hardware/drivers/usbcon/usb-emulated-device--ude--architecture

The project contains two Windows 10 kernel-mode drivers and one test application (for now).

The Kernel mode drivers are:

• UDEFX2.sys : Sample USB Device Emulation driver (emulates both a virtual USB controller and a virtual USB device attached to that virtual controller)
• hostude.sys : Host-side driver, stolen originally from the WDK sample that talks to the OSR FX2 device, then modified to match the endpoints defined by UDEFX2.sys (above)

UDEFX2.sys defines these endpoints:

• a BULK/IN endpoint: generates pattern data when read.
• a BULK/OUT endpoint: traces incoming data for confirmation.
• an INTERRUPT/IN endpoint: Upon request from a back-channel controller test app (via a back-channel IOCTL), generates an interrupt from the virtual device. Interrupt also generates Remote Wakeup if the virtual device is in low-power mode.

Build prerequisites

• Visual Studio 2017 or newer
• The WDK, along with the WDK extension for Visual Studio

Driver installation

Steps to install the drivers:

• Disable Secure Boot in UEFI/BIOS.
• Run bcdedit /set testsigning on from an Administrator command prompt to enable loading of test-signed drivers.
• Copy the sys/inf/cat files to the same folder as installem.bat. Then run installem.bat from an Administrator command prompt to install the drivers and create a virtual UDEFX2 device.

Driver testing

To watch the driver behavior, you can use these scripts:

• tr_on.bat: turns trace on
• tr_off.bat: dumps trace and stops

It is especially instructional to watch the traces during install/uninstall of the drivers, or when the test application works (see below).

Once the drivers are installed, you can test them with the test app, which is also stolen from the WDK sample and modified. It can be used a few ways:

Full-blown test

• hostudetest.exe -a (goes into a loop waiting for commands over USB. Those can be sent from a separate instance, with the -c flag)
• hostudetest.exe -c somemission

1. sends "somemission" over BULK/OUT
2. waits for an interrupt on INTERRUPT/IN
3. finally then reads USB/IN for response to the mission

Interrupt-only test

• hostudetest.exe -i abc (generates an INTERRUPT/IN transfer with a 4-byte little-endian payload matching the hexadecimal parameter provided)
• hostudetest.exe -p (waits for an interrupt, which can be generated in a separate instance of the test app, with the -i command - see INTERRUPT/IN endpoint description above)