gvl610 raspiduino

How to run Windows 10 on ARM or Ubuntu for ARM64 in QEMU on Apple Silicon Mac

Here is easy steps to try Windows 10 on ARM or Ubuntu for ARM64 on your Apple Silicon Mac. Enjoy!

NOTE: that this is current, 10/1/2021 state.

Running Windows 10 on ARM

Install Xcode from App Store or install Command Line Tools on your Mac

NokiaTool: control MediaTek-based Nokia phones from your PC

Overview

NokiaTool is a simple Bash script (nokiatool.sh) that allows you to use an undocumented serial connection in USB-enabled MediaTek-based Nokia feature phones manufactured by Microsoft (even the most basic ones, like the new 105) in order to control them from your PC.

This project is an ongoing work and uses only some bits and pieces of information about the phone internals available to the public, so under any circumstances don't consider it stable or a replacement for official tools if any are present.

QEMU Machine Protocol (QMP) socket

Start QEMU with QMP UNIX socket and connect:

qemu-system-x86_64 -qmp unix:test.socket,server,nowait ...
nc -U test.socket
qmp-shell test.socket    # use the raw qmp interface. see https://github.com/0xef53/qmp-shell
qmp-shell -H test.socket # use the human interface.   see https://github.com/0xef53/qmp-shell

I have a box running Fedora, which runs a bunch of VMs. I want to iPXE boot using a larger ipxe script than is allowed by the ipxe that is embedded in qemu's virtual nic. That is, a VM is booting with iPXE but not the right ipxe.

Let's consider two VMs, debian10 and debian-live-ipxe. The DHCP server is running debian10, the other is pxe booting.

The procedure followed is roughly:

Grab the .tar.gz from the manta directory mentioned by /Joyent_Dev/public/builds/ipxe/master-latest.

Copy boot/undionly.kpxe from that archive to /tftpboot/.

Reverse Engineering of Hikam S6 (HI3518 E)

Why?

I wanted to integrate the camera into my home security system. The only problem is that I want to toggle the alarm of the camera based on the security system status. Currently, this is only available via the app or a time trigger which is booth not sufficient for me. So the main target was to change the alarm status without the app.

What I've done so far:

My first try was to capture the TCP packages between the Android app and the camera. Soon I realized that they are only TCP+SSL (not pinned) requests to a cloud service of Hikam. So I installed an emulator with the Hikam app and Wireshark. I've seen some packages but the payload is very strange and even if I send the UDP commands again the status won't change. So this was a dead end for me.

	# ~/.zshrc file for zsh non-login shells.
	# see /usr/share/doc/zsh/examples/zshrc for examples

	setopt autocd # change directory just by typing its name
	#setopt correct # auto correct mistakes
	setopt interactivecomments # allow comments in interactive mode
	setopt ksharrays # arrays start at 0
	setopt magicequalsubst # enable filename expansion for arguments of the form ‘anything=expression’
	setopt nonomatch # hide error message if there is no match for the pattern
	setopt notify # report the status of background jobs immediately

	To build a A14+ (AOSP/LOS based) on Ubuntu 24.04+ (or distros based on it), there are four main steps:
	(This guide is applicable for recoveries as well (TWRP, OFRP...))
	Working on Android 14 and upper

	#################################################################
	# Step 1: Setup your environment #
	#################################################################

	**Setup Linux to build Android**

	Device Tree with 18 properties and 19 children
	Properties:
	device-tree:
	\| +--target-type 5 bytes: N104 0x4e 0x31 0x30 0x34 0x00
	\| +--mlb-serial-number 29 bytes: syscfg/MLB#/0x20,zeroes/0x20 0x73 0x79 0x73 0x63 0x66 0x67 0x2f 0x4d 0x4c 0x42 0x23 0x2f 0x30 0x78 0x32 0x30 0x2c 0x7a 0x65 0x72 0x6f 0x65 0x73 0x2f 0x30 0x78 0x32 0x30 0x00
	\| +--compatible 27 bytes: N104AP 0x4e 0x31 0x30 0x34 0x41 0x50 0x00 0x69 0x50 0x68 0x6f 0x6e 0x65 0x31 0x32 0x2c 0x31 0x00 0x41 0x70 0x70 0x6c 0x65 0x41 0x52 0x4d 0x00
	\| +--secure-root-prefix 3 bytes: md 0x6d 0x64 0x00
	\| +--AAPL,phandle 4 bytes: (null) 0x01 0x00 0x00 0x00
	\| +--platform-name 32 bytes: (null) 0x00 0x00 0x00 0x00 0x00 0x00 0x00 0x00 0x00 0x00 0x00 0x00 0x00 0x00 0x00 0x00 0x00 0x00 0x00 0x00 0x00 0x00 0x00 0x00 0x00 0x00 0x00 0x00 0x00 0x00 0x00 0x00
	\| +--device_type 8 bytes: (null) 0x62 0x6f 0x6f 0x74 0x72 0x6f 0x6d 0x00

	@echo off
	Title w10onARM Setup batch

	echo Blocking junk apps & echo.
	reg load HKLM\DEFAULT c:\users\default\ntuser.dat
	reg add "HKLM\DEFAULT\Software\Microsoft\Windows\CurrentVersion\ContentDeliveryManager" /v PreInstalledAppsEnabled /t REG_DWORD /d 0 /f
	reg add "HKLM\DEFAULT\Software\Microsoft\Windows\CurrentVersion\ContentDeliveryManager" /v OemPreInstalledAppsEnabled /t REG_DWORD /d 0 /f
	reg unload HKLM\DEFAULT

	echo Removing useless windows components & echo.

	FROM emscripten/emsdk

	COPY emsdk-liblzma.patch /
	RUN cd /emsdk/upstream/emscripten && patch -p1 < /emsdk-liblzma.patch