// Write is symmetric — sends DA command (0xE8 handshake) Once driver is installed, you can use libusb or CreateFile on COM port:
#include <ntddk.h> #include <wdf.h> #include <usb.h> DRIVER_INITIALIZE DriverEntry; EVT_WDF_DRIVER_DEVICE_ADD BROM_EvtDeviceAdd; EVT_WDF_IO_QUEUE_IO_READ BROM_EvtIoRead; EVT_WDF_IO_QUEUE_IO_WRITE BROM_EvtIoWrite;
import usb.core dev = usb.core.find(idVendor=0x0E8D, idProduct=0x0003) dev.ctrl_transfer(bmRequestType=0x40, bRequest=0x01, wValue=0, wIndex=0, data_or_wLength=b'\xE8\x00\x00')
WDF_IO_QUEUE_CONFIG_INIT_DEFAULT_QUEUE(&queueConfig, WdfIoQueueDispatchSequential); queueConfig.EvtIoRead = BROM_EvtIoRead; queueConfig.EvtIoWrite = BROM_EvtIoWrite; return WdfIoQueueCreate(Device, &queueConfig, WDF_NO_OBJECT_ATTRIBUTES, &devExt->Queue);
VOID BROM_EvtIoRead(WDFQUEUE Queue, WDFREQUEST Request, size_t Length) PDEVICE_EXTENSION devExt = GetDeviceExtension(WdfIoQueueGetDevice(Queue)); WDF_USB_CONTROL_SETUP_PACKET setupPacket; WDF_MEMORY_DESCRIPTOR memDesc; ULONG bytesTransferred; NTSTATUS status;
WdfRequestCompleteWithInformation(Request, status, bytesTransferred);
NTSTATUS BROM_EvtDeviceAdd(WDFDEVICE Device) WDF_IO_QUEUE_CONFIG queueConfig; PDEVICE_EXTENSION devExt; WDF_OBJECT_ATTRIBUTES attributes; WDF_USB_DEVICE_CREATE_CONFIG usbConfig; NTSTATUS status;
[MTKDevices.NTx86] %DeviceDesc% = USB_Install, USB\VID_0E8D&PID_0003 %DeviceDesc% = USB_Install, USB\VID_0E8D&PID_2000
[USB_Install.Services] Include = machine.inf Needs = COMPORT.NT.Services
; MTK BROM Mode Driver ; Works for PID 0003, 2000 [Version] Signature = "$WINDOWS NT$" Class = Ports ClassGuid = 4d36e978-e325-11ce-bfc1-08002be10318 Provider = %ProviderName% DriverVer = 01/01/2024,1.0.0.0 CatalogFile = mtk_brom.cat
// Write is symmetric — sends DA command (0xE8 handshake) Once driver is installed, you can use libusb or CreateFile on COM port:
#include <ntddk.h> #include <wdf.h> #include <usb.h> DRIVER_INITIALIZE DriverEntry; EVT_WDF_DRIVER_DEVICE_ADD BROM_EvtDeviceAdd; EVT_WDF_IO_QUEUE_IO_READ BROM_EvtIoRead; EVT_WDF_IO_QUEUE_IO_WRITE BROM_EvtIoWrite;
import usb.core dev = usb.core.find(idVendor=0x0E8D, idProduct=0x0003) dev.ctrl_transfer(bmRequestType=0x40, bRequest=0x01, wValue=0, wIndex=0, data_or_wLength=b'\xE8\x00\x00') brom mode mtk driver
WDF_IO_QUEUE_CONFIG_INIT_DEFAULT_QUEUE(&queueConfig, WdfIoQueueDispatchSequential); queueConfig.EvtIoRead = BROM_EvtIoRead; queueConfig.EvtIoWrite = BROM_EvtIoWrite; return WdfIoQueueCreate(Device, &queueConfig, WDF_NO_OBJECT_ATTRIBUTES, &devExt->Queue);
VOID BROM_EvtIoRead(WDFQUEUE Queue, WDFREQUEST Request, size_t Length) PDEVICE_EXTENSION devExt = GetDeviceExtension(WdfIoQueueGetDevice(Queue)); WDF_USB_CONTROL_SETUP_PACKET setupPacket; WDF_MEMORY_DESCRIPTOR memDesc; ULONG bytesTransferred; NTSTATUS status; // Write is symmetric — sends DA command
WdfRequestCompleteWithInformation(Request, status, bytesTransferred);
NTSTATUS BROM_EvtDeviceAdd(WDFDEVICE Device) WDF_IO_QUEUE_CONFIG queueConfig; PDEVICE_EXTENSION devExt; WDF_OBJECT_ATTRIBUTES attributes; WDF_USB_DEVICE_CREATE_CONFIG usbConfig; NTSTATUS status; import usb.core dev = usb.core.find(idVendor=0x0E8D
[MTKDevices.NTx86] %DeviceDesc% = USB_Install, USB\VID_0E8D&PID_0003 %DeviceDesc% = USB_Install, USB\VID_0E8D&PID_2000
[USB_Install.Services] Include = machine.inf Needs = COMPORT.NT.Services
; MTK BROM Mode Driver ; Works for PID 0003, 2000 [Version] Signature = "$WINDOWS NT$" Class = Ports ClassGuid = 4d36e978-e325-11ce-bfc1-08002be10318 Provider = %ProviderName% DriverVer = 01/01/2024,1.0.0.0 CatalogFile = mtk_brom.cat