Your's is one of the six that I remember bricking around MP51.0087.B00.
Got a tip for us?
Let us know
Become a MacRumors Supporter for $50/year with no ads, ability to filter front page stories, and private forums.
MP 1,1-5,1 MacPro5,1: BootROM thread | 144.0.0.0.0
- Thread starter tsialex
- WikiPost WikiPost
- Start date
- Sort by reaction score
- Status
If we get a new firmware with the next DP I’ll give it a shot. I usually throw in an SSUAX with macOS to update it. Will dump BootROM too
Thx, PM me it.If we get a new firmware with the next DP I’ll give it a shot. I usually throw in an SSUAX with macOS to update it. Will dump BootROM too
[doublepost=1539637576][/doublepost]
This can't be a MP5,1 BootROM.
MP5,1 SPI flash memory is a 4MiB one, so the dump go until 0x3FFFFF with the NVRAM starting around 0x12Fxxx. This seems more a 2MiB dump or a incorrectly done dump, it's weird.
Last edited:
I own a Mac Pro 5,1, a MackBook Air and a MacBook Pro. I can assure you that I only ran the ROMTool on the Mac Pro.
In my PM to you I mentioned that I originally got my version of ROMTool from the internet archive link you provided. Running with the version you just sent me yields different results (attached). There is something odd going on here.
Oh...and aren't you supposed to be working!
Attachments
I can check MR with my iPhoneI own a Mac Pro 5,1, a MackBook Air and a MacBook Pro. I can assure you that I only ran the ROMTool on the Mac Pro.
In my PM to you I mentioned that I originally got my version of ROMTool from the internet archive link you provided. Running with the version you just sent me yields different results (attached). There is something odd going on here.
Oh...and aren't you supposed to be working!
This new screenshot is correct, the other one is totally weird.
Just one is perfectly normal, it's the certificate that Windows use to sign the EFI.Hello
I get XML after update to 140.0.0.0 .
Multiple certificates are wrong.
Everything seems fine with my 3 Mac Pros in terms of not having more than one X509 cert. But on all 3 Pros my output contains LZMA compressed data lines. I got my version of binwalk from here https://github.com/ReFirmLabs/binwalk maybe that's the issue? I'm assuming it's normal and this version is more verbose.
Attachments
Last edited:
High Sierra, on the machine it was dumped. Before it installs Mac OS fetches the necessary files to execute python commands.
Maybe I can also help you to get more data.
I’ve also been running Windows 10 Pro for years, upgrading it without issue, with HS on the main disk.
Last month, following your guide to update to 138.0.0.0.0, I updated directly from MP51.0084.B00 to MP51.0089.B00 , so I never updated to MP51.0087.B00.
Now I'm waiting to update to 140.0.0.0.0.
I've not exported the BootROM yet, but I can do it.
I’ve also been running Windows 10 Pro for years, upgrading it without issue, with HS on the main disk.
Last month, following your guide to update to 138.0.0.0.0, I updated directly from MP51.0084.B00 to MP51.0089.B00 , so I never updated to MP51.0087.B00.
Now I'm waiting to update to 140.0.0.0.0.
I've not exported the BootROM yet, but I can do it.
Yesterday @flehman sent me his Mac Pro 2009 BootROM to check. Surprise, it's the oldest MP4,1 that I know. Backplane build date of 20090208, a week earlier than the previous one.
Base_17 descriptor:
His BootROM has all the correct positioned hardwareIDs, and is clean:
I'll update his descriptor from Base_17 to Base_21 from mid-2012, check the checksums, create the intermediate files and reconstruct 140.0.0.0.0, no heavy hex editing here.
Base_17 descriptor:
His BootROM has all the correct positioned hardwareIDs, and is clean:
I'll update his descriptor from Base_17 to Base_21 from mid-2012, check the checksums, create the intermediate files and reconstruct 140.0.0.0.0, no heavy hex editing here.
Alex, did you try checking my original 5,1 rom dump I sent you? i'm curious to see what it has seeing that I switch between W10 and macOS often.
if you want
I can jump into macOS and dump the 140.0.0.0.0 firmware you sent me that I just flashed not to long ago.
I was just using macOS yesterday, and currently using W10.
What about the ASRock Ultra Quad? https://www.newegg.com/Product/Prod...RSw7pCbTIBA9sWs703BoC_mcQAvD_BwE&gclsrc=aw.ds
No PCIe switch on the board, so needs chipset that supports bifurcation natively.
Don't work with a Mac Pro.
[doublepost=1539696657][/doublepost]
From your original dump, before reconstruction:
Last edited:
man now I'm all concerned mine is gonna be screwed up, I'm always swapping between W10 and macOS 10.13. I think I'm still on .0085 at present, I'll see about doing a dump later tonight.
I'm on boot ROM version 138.0.0. When I binwalk my ROM dump on macOS Sierra, I get this:
That seemed more verbose that what other people here are showing. When I ran binwalk on the same image in my Ubuntu VM, I got this result:
So that has two certificates, which is bad, right?
Code:
DECIMAL HEXADECIMAL DESCRIPTION
--------------------------------------------------------------------------------
0 0x0 UEFI PI Firmware Volume, volume size: 524288, header size: 1, revision: 0, EFI Firmware File System, GUID: 7A9354D9-0468-444A-CE81-0BF617D890DF
5701 0x1645 LZMA compressed data, properties: 0xC0, dictionary size: -2097152000 bytes, uncompressed size: 646645221368 bytes
14115 0x3723 LZMA compressed data, properties: 0x6E, dictionary size: 0 bytes, uncompressed size: 1848662811 bytes
17692 0x451C LZMA compressed data, properties: 0xB4, dictionary size: 0 bytes, uncompressed size: 3221225482 bytes
17967 0x462F LZMA compressed data, properties: 0x91, dictionary size: -2147483648 bytes, uncompressed size: 586381467899 bytes
24972 0x618C CRC32 polynomial table, little endian
35787 0x8BCB mcrypt 2.2 encrypted data, algorithm: blowfish-448, mode: CBC, keymode: 8bit
36521 0x8EA9 LZMA compressed data, properties: 0x87, dictionary size: -1962934272 bytes, uncompressed size: 599257601094 bytes
40760 0x9F38 LZMA compressed data, properties: 0x87, dictionary size: -536870912 bytes, uncompressed size: 582135571584 bytes
40769 0x9F41 LZMA compressed data, properties: 0x87, dictionary size: -536870912 bytes, uncompressed size: 828115122571 bytes
109378 0x1AB42 LZMA compressed data, properties: 0xBF, dictionary size: -2147483648 bytes, uncompressed size: 783899623480 bytes
122661 0x1DF25 LZMA compressed data, properties: 0x90, dictionary size: 50331648 bytes, uncompressed size: 639034302533 bytes
125727 0x1EB1F LZMA compressed data, properties: 0x90, dictionary size: 50331648 bytes, uncompressed size: 639185291333 bytes
127135 0x1F09F LZMA compressed data, properties: 0xC6, dictionary size: 1569259520 bytes, uncompressed size: 16916006844 bytes
128387 0x1F583 LZMA compressed data, properties: 0x88, dictionary size: 2105540608 bytes, uncompressed size: 796784525344 bytes
140797 0x225FD LZMA compressed data, properties: 0x9A, dictionary size: -2147483648 bytes, uncompressed size: 624985833528 bytes
144814 0x235AE LZMA compressed data, properties: 0xA3, dictionary size: -2147483648 bytes, uncompressed size: 663640539192 bytes
151013 0x24DE5 LZMA compressed data, properties: 0x90, dictionary size: 50331648 bytes, uncompressed size: 639185309765 bytes
153757 0x2589D LZMA compressed data, properties: 0x5B, dictionary size: -9961472 bytes, uncompressed size: 877918158848 bytes
155100 0x25DDC LZMA compressed data, properties: 0x8A, dictionary size: -2147483648 bytes, uncompressed size: 556266356792 bytes
160092 0x2715C LZMA compressed data, properties: 0xCF, dictionary size: -2147483648 bytes, uncompressed size: 852619100222 bytes
161109 0x27555 LZMA compressed data, properties: 0x92, dictionary size: -2147483648 bytes, uncompressed size: 612100932414 bytes
162073 0x27919 LZMA compressed data, properties: 0xCF, dictionary size: 939524096 bytes, uncompressed size: 852635942727 bytes
202936 0x318B8 LZMA compressed data, properties: 0x66, dictionary size: -788529152 bytes, uncompressed size: 1761607680 bytes
202972 0x318DC LZMA compressed data, properties: 0x66, dictionary size: -788529152 bytes, uncompressed size: 1761607680 bytes
203008 0x31900 LZMA compressed data, properties: 0x66, dictionary size: -788529152 bytes, uncompressed size: 1761607680 bytes
218800 0x356B0 LZMA compressed data, properties: 0xAB, dictionary size: -1962934272 bytes, uncompressed size: 552868242509 bytes
221824 0x36280 LZMA compressed data, properties: 0x88, dictionary size: -1962934272 bytes, uncompressed size: 844070852695 bytes
225076 0x36F34 LZMA compressed data, properties: 0xC0, dictionary size: 1610612736 bytes, uncompressed size: 50 bytes
524288 0x80000 UEFI PI Firmware Volume, volume size: 524288, header size: 1, revision: 0, EFI Firmware File System, GUID: 7A9354D9-0468-444A-CE81-0BF617D890DF
529989 0x81645 LZMA compressed data, properties: 0xC0, dictionary size: -2097152000 bytes, uncompressed size: 646645221368 bytes
538403 0x83723 LZMA compressed data, properties: 0x6E, dictionary size: 0 bytes, uncompressed size: 1848662811 bytes
541980 0x8451C LZMA compressed data, properties: 0xB4, dictionary size: 0 bytes, uncompressed size: 3221225482 bytes
542255 0x8462F LZMA compressed data, properties: 0x91, dictionary size: -2147483648 bytes, uncompressed size: 586381467899 bytes
549260 0x8618C CRC32 polynomial table, little endian
560075 0x88BCB mcrypt 2.2 encrypted data, algorithm: blowfish-448, mode: CBC, keymode: 8bit
560809 0x88EA9 LZMA compressed data, properties: 0x87, dictionary size: -1962934272 bytes, uncompressed size: 599257601094 bytes
565048 0x89F38 LZMA compressed data, properties: 0x87, dictionary size: -536870912 bytes, uncompressed size: 582135571584 bytes
565057 0x89F41 LZMA compressed data, properties: 0x87, dictionary size: -536870912 bytes, uncompressed size: 828115122571 bytes
633666 0x9AB42 LZMA compressed data, properties: 0xBF, dictionary size: -2147483648 bytes, uncompressed size: 783899623480 bytes
646949 0x9DF25 LZMA compressed data, properties: 0x90, dictionary size: 50331648 bytes, uncompressed size: 639034302533 bytes
650015 0x9EB1F LZMA compressed data, properties: 0x90, dictionary size: 50331648 bytes, uncompressed size: 639185291333 bytes
651423 0x9F09F LZMA compressed data, properties: 0xC6, dictionary size: 1569259520 bytes, uncompressed size: 16916006844 bytes
652675 0x9F583 LZMA compressed data, properties: 0x88, dictionary size: 2105540608 bytes, uncompressed size: 796784525344 bytes
665085 0xA25FD LZMA compressed data, properties: 0x9A, dictionary size: -2147483648 bytes, uncompressed size: 624985833528 bytes
669102 0xA35AE LZMA compressed data, properties: 0xA3, dictionary size: -2147483648 bytes, uncompressed size: 663640539192 bytes
675301 0xA4DE5 LZMA compressed data, properties: 0x90, dictionary size: 50331648 bytes, uncompressed size: 639185309765 bytes
678045 0xA589D LZMA compressed data, properties: 0x5B, dictionary size: -9961472 bytes, uncompressed size: 877918158848 bytes
679388 0xA5DDC LZMA compressed data, properties: 0x8A, dictionary size: -2147483648 bytes, uncompressed size: 556266356792 bytes
684380 0xA715C LZMA compressed data, properties: 0xCF, dictionary size: -2147483648 bytes, uncompressed size: 852619100222 bytes
685397 0xA7555 LZMA compressed data, properties: 0x92, dictionary size: -2147483648 bytes, uncompressed size: 612100932414 bytes
686361 0xA7919 LZMA compressed data, properties: 0xCF, dictionary size: 939524096 bytes, uncompressed size: 852635942727 bytes
727224 0xB18B8 LZMA compressed data, properties: 0x66, dictionary size: -788529152 bytes, uncompressed size: 1761607680 bytes
727260 0xB18DC LZMA compressed data, properties: 0x66, dictionary size: -788529152 bytes, uncompressed size: 1761607680 bytes
727296 0xB1900 LZMA compressed data, properties: 0x66, dictionary size: -788529152 bytes, uncompressed size: 1761607680 bytes
743088 0xB56B0 LZMA compressed data, properties: 0xAB, dictionary size: -1962934272 bytes, uncompressed size: 552868242509 bytes
746112 0xB6280 LZMA compressed data, properties: 0x88, dictionary size: -1962934272 bytes, uncompressed size: 844070852695 bytes
749364 0xB6F34 LZMA compressed data, properties: 0xC0, dictionary size: 1610612736 bytes, uncompressed size: 50 bytes
1048576 0x100000 UEFI PI Firmware Volume, volume size: 16384, header size: 1, revision: 0, EFI Firmware File System, GUID: 7A9354D9-0468-444A-CE81-0BF617D890DF
1050100 0x1005F4 LZMA compressed data, properties: 0x64, dictionary size: 1291321344 bytes, uncompressed size: 1638400 bytes
1064960 0x104000 UEFI PI Firmware Volume, volume size: 49152, header size: 1, revision: 0, GUID: 153D2197-29BD-44DC-59AC-887F70E41A6B
1114112 0x110000 UEFI PI Firmware Volume, volume size: 16384, header size: 1, revision: 0, EFI Firmware File System, GUID: 7A9354D9-0468-444A-CE81-0BF617D890DF
1115636 0x1105F4 LZMA compressed data, properties: 0x64, dictionary size: 1291321344 bytes, uncompressed size: 1638400 bytes
1130496 0x114000 UEFI PI Firmware Volume, volume size: 49152, header size: 1, revision: 0, GUID: 153D2197-29BD-44DC-59AC-887F70E41A6B
1179648 0x120000 UEFI PI Firmware Volume, volume size: 196608, header size: 1, revision: 0, Variable Storage, GUID: FFF12B8D-7696-4C8B-85A9-2747075B4F50
1181706 0x12080A Certificate in DER format (x509 v3), header length: 4, sequence length: 986
1183236 0x120E04 LZMA compressed data, properties: 0x64, dictionary size: 704643072 bytes, uncompressed size: 30073116074 bytes
1184521 0x121309 LZMA compressed data, properties: 0x76, dictionary size: 822083584 bytes, uncompressed size: 30073116074 bytes
1192016 0x123050 LZMA compressed data, properties: 0x65, dictionary size: 1006632960 bytes, uncompressed size: 30073116074 bytes
1247242 0x13080A Certificate in DER format (x509 v3), header length: 4, sequence length: 986
1248772 0x130E04 LZMA compressed data, properties: 0x64, dictionary size: 704643072 bytes, uncompressed size: 30073116074 bytes
1250057 0x131309 LZMA compressed data, properties: 0x76, dictionary size: 822083584 bytes, uncompressed size: 30073116074 bytes
1257552 0x133050 LZMA compressed data, properties: 0x65, dictionary size: 1006632960 bytes, uncompressed size: 30073116074 bytes
1343538 0x148032 bzip2 compressed data, block size = 100k
1376256 0x150000 UEFI PI Firmware Volume, volume size: 2686976, header size: 1, revision: 0, EFI Firmware File System, GUID: 7A9354D9-0468-444A-CE81-0BF617D890DF
1632735 0x18E9DF LZMA compressed data, properties: 0xB8, dictionary size: 0 bytes, uncompressed size: 791999947279 bytes
4063232 0x3E0000 UEFI PI Firmware Volume, volume size: 65536, header size: 1, revision: 0, GUID: E3B980A9-5FE3-48E5-929B-2798385A9027
4128768 0x3F0000 UEFI PI Firmware Volume, volume size: 65536, header size: 0, revision: 0, Apple Boot Volume, GUID: 04ADEEAD-61FF-4D31-BAB6-64F8BF901F5A
4190424 0x3FF0D8 LZMA compressed data, properties: 0x6D, dictionary size: 0 bytes, uncompressed size: 2147483652 bytes
4193821 0x3FFE1D LZMA compressed data, properties: 0x9B, dictionary size: -65536 bytes, uncompressed size: 2466250752 bytesThat seemed more verbose that what other people here are showing. When I ran binwalk on the same image in my Ubuntu VM, I got this result:
Code:
DECIMAL HEXADECIMAL DESCRIPTION
--------------------------------------------------------------------------------
0 0x0 UEFI PI Firmware Volume, volume size: 524288, header size: 1, revision: 0, EFI Firmware File System, GUID: 7A9354D9-0468-444A-CE81-0BF617D890DF
24972 0x618C CRC32 polynomial table, little endian
35787 0x8BCB mcrypt 2.2 encrypted data, algorithm: blowfish-448, mode: CBC, keymode: 8bit
524288 0x80000 UEFI PI Firmware Volume, volume size: 524288, header size: 1, revision: 0, EFI Firmware File System, GUID: 7A9354D9-0468-444A-CE81-0BF617D890DF
549260 0x8618C CRC32 polynomial table, little endian
560075 0x88BCB mcrypt 2.2 encrypted data, algorithm: blowfish-448, mode: CBC, keymode: 8bit
1048576 0x100000 UEFI PI Firmware Volume, volume size: 16384, header size: 1, revision: 0, EFI Firmware File System, GUID: 7A9354D9-0468-444A-CE81-0BF617D890DF
1064960 0x104000 UEFI PI Firmware Volume, volume size: 49152, header size: 1, revision: 0, GUID: 153D2197-29BD-44DC-59AC-887F70E41A6B
1114112 0x110000 UEFI PI Firmware Volume, volume size: 16384, header size: 1, revision: 0, EFI Firmware File System, GUID: 7A9354D9-0468-444A-CE81-0BF617D890DF
1130496 0x114000 UEFI PI Firmware Volume, volume size: 49152, header size: 1, revision: 0, GUID: 153D2197-29BD-44DC-59AC-887F70E41A6B
1179648 0x120000 UEFI PI Firmware Volume, volume size: 196608, header size: 1, revision: 0, Variable Storage, GUID: FFF12B8D-7696-4C8B-85A9-2747075B4F50
1181706 0x12080A Certificate in DER format (x509 v3), header length: 4, sequence length: 986
1247242 0x13080A Certificate in DER format (x509 v3), header length: 4, sequence length: 986
1343538 0x148032 bzip2 compressed data, block size = 100k
1376256 0x150000 UEFI PI Firmware Volume, volume size: 2686976, header size: 1, revision: 0, EFI Firmware File System, GUID: 7A9354D9-0468-444A-CE81-0BF617D890DF
4063232 0x3E0000 UEFI PI Firmware Volume, volume size: 65536, header size: 1, revision: 0, GUID: E3B980A9-5FE3-48E5-929B-2798385A9027
4128768 0x3F0000 UEFI PI Firmware Volume, volume size: 65536, header size: 0, revision: 0, Apple Boot Volume, GUID: 04ADEEAD-61FF-4D31-BAB6-64F8BF901F5A
I'm pretty sure new entries are only added if you do a Windows installation. Someone correct me if i'm wrong.
The first binwalk output show all the GUIDs, the second one shows EFI root and the volumes. It's just a different default option when you use the version installed from Github versus the version from brew/apt.
It's not right. Microsoft UEFI documentation never talks about multiple signing.
But I don't think that this is the motive for bricks, I think that this is just one of the causes. Bricked BootROMs that I inspected had multiple certificates, trash in the NVRAM and wrong checksums.