MM21.88Z.009A.B00 EFI Researches !

AlexCoolTranquille's dump with modified Personal Data :

  • SSN
  • UUID

MM21_009A_B00.ACT.fd
(MD5 aaa19e6925273c161c70d4979538257d )
http://forum.macbidouille.com/index.php?showtopic=346602&mode=linear

Lolof's dump with modified Personal Data :

  • SSN ?
  • UUID ?
  • Something else ?

MM21_009A_B00.L.fd
(MD5 43979d390e6b7a6f3af5cb867507312b)
http://forum.netkas.org/index.php/topic,874.msg7138.html#msg7138

AlexCoolTranquille's dump and Lolof's dump without Personal Data :

(after the modifications listed below the files are identical !)

  • 0x4 bytes offset 0x1B004C
  • 0x38D6 bytes offset 0x1B0058
  • 0x244 bytes offset 0x1D0018
  • 0x2000 bytes offset 0x1D8000
  • 0x80 bytes offset 0x1FFF00

MM21.88Z.009A.B00.0706281359.s01.fd
(MD5 0d127e5f0ba47bed0ed70759c8cfbdfc)
http://forum.netkas.org/index.php/topic,874.msg7135.html#msg7135

  • 0x4 bytes offset 0x1B004C
  • 0x38D6 bytes offset 0x1B0058
  • 0x240 bytes offset 0x1D001C
  • 0x2000 bytes offset 0x1D8000
  • 0x80 bytes offset 0x1FFF00

MM21.88Z.009A.B00.0706281359.s02.fd
(MD5 e4639c38ff19413b0de009bcaa3f5d59)
http://forum.netkas.org/index.php/topic,874.msg7203.html#msg7203

EfiUpdaterApp2.efi

Firmware crc32 LSB-MSB format Position 1 Position 2 Position 3 Position 4 Position 5 Position 6
LOCKED_IM51_0090_09B.fd 2f8b3fac ac3f8b2f 0x7AA8 0x7AB4 0x7AC0 0x15A90 0x15AA0 0x15AB0
LOCKED_IM52_0090_09B.fd 6750db27 27db5067 0x7ACC 0x7AD8 - 0x15AC0 0x15AD0 -
LOCKED_IM61_0093_07B.fd ce9ddd58 58dd9dce 0x7AE4 0x7AF0 0x7AFC 0x15AE0 0x15AF0 0x15B00

Script

#Create a RAM Disk
echo Creating RamDisk ...
diskutil erasevolume HFS+ RamDisk `hdiutil attach -nomount ram://512000`
echo Done
 
#Dowload Files to RAM Disk
echo Downloading Files to RamDisk ...
curl -L -o '/Volumes/RamDisk/MacMini.dmg' 'https://support.apple.com/downloads/DL308/en_US/MacminiFirmwareUpdate.dmg'
echo 1/2 ...
curl -L -o '/Volumes/RamDisk/iMac.dmg' 'https://support.apple.com/downloads/DL205/en_US/iMacFirmwareUpdate1.2.dmg'
echo 2/2 ...
 
#Copy Files to RAM Disk
echo Copying Scripts to RamDisk ...
mkdir /Volumes/RamDisk/2006-2007
mkdir /Volumes/RamDisk/2007-2006
cp 'Contents/Resources/2007-2006.sh' /Volumes/RamDisk/2007-2006/
cp 'Contents/Resources/2006-2007.sh' /Volumes/RamDisk/2006-2007/
cp 'Contents/Resources/LOCKED_MM11_0055_08B.diff' /Volumes/RamDisk/2006-2007/
cp 'Contents/Resources/EFIUpdaterApp.diff' /Volumes/RamDisk/2006-2007/
cp 'Contents/Resources/EfiUpdaterApp2.diff' /Volumes/RamDisk/2007-2006/
 
#Extract Files from Dowload
echo Extracting Files from Downloads ...
cd /Volumes/RamDisk
hdiutil attach -nobrowse MacMini.dmg
cp '/Volumes/MacMiniUpdate/MacminiFirmwareUpdate.pkg/Contents/Archive.pax.gz' Archive.pax.gz
gunzip Archive.pax.gz
pax -r -f Archive.pax
cp 'Applications/Utilities/Mac mini EFI Firmware Update.app/Contents/Resources/EFIUpdaterApp.efi' EFIUpdaterApp.efi
cp 'Applications/Utilities/Mac mini EFI Firmware Update.app/Contents/Resources/LOCKED_MM11_0055_08B.fd' 2007-2006/LOCKED_MM21_009A_00B.fd
rm -R Applications
rm Archive.pax
hdiutil detach '/Volumes/MacMiniUpdate/'
rm MacMini.dmg
 
hdiutil attach -nobrowse iMac.dmg
cp '/Volumes/iMac EFI Updater/iMacFirmwareUpdate.pkg/Contents/Archive.pax.gz' Archive.pax.gz
gunzip Archive.pax.gz
pax -r -f Archive.pax
cp 'Applications/Utilities/iMac EFI Firmware Update.app/Contents/Resources/EfiUpdaterApp2.efi' EfiUpdaterApp2.efi
rm -R Applications
rm Archive.pax
hdiutil detach '/Volumes/iMac EFI Updater/'
rm iMac.dmg
 
#Patch
echo Patching files ...
bspatch EFIUpdaterApp.efi 2006-2007/EFIUpdaterApp.efi 2006-2007/EFIUpdaterApp.diff
rm EFIUpdaterApp.efi
rm 2006-2007/EFIUpdaterApp.diff
 
bspatch 2007-2006/LOCKED_MM21_009A_00B.fd 2006-2007/LOCKED_MM11_0055_08B.fd 2006-2007/LOCKED_MM11_0055_08B.diff
rm 2006-2007/LOCKED_MM11_0055_08B.diff
 
bspatch EfiUpdaterApp2.efi 2007-2006/EfiUpdaterApp2.efi 2007-2006/EfiUpdaterApp2.diff
rm EfiUpdaterApp2.efi
rm 2007-2006/EfiUpdaterApp2.diff
echo Done

Upgrade

#!/bin/bash
 
updatesdir1="/System/Library/CoreServices/Firmware Updates"
updatesdir2="/System/Library/CoreServices/Firmware Updates/MacMiniEFIUpdate"
firmwaredir="/Volumes/RamDisk/2006-2007"
firmware="EFIUpdaterApp.efi"
firmware2="LOCKED_MM11_0055_08B.fd"
 
rm -r "${updatesdir1}"
mkdir "${updatesdir1}"
mkdir "${updatesdir2}"
 
cp "${firmwaredir}/${firmware}" "${updatesdir2}"
cp "${firmwaredir}/${firmware2}" "${updatesdir2}"
 
/usr/sbin/bless -mount / -firmware "${updatesdir2}/${firmware}" -payload "${updatesdir2}/${firmware2}" -options "-x efi-apple-payload0-data" --verbose
 
exit 0

Downgrade

#!/bin/bash
 
updatesdir1="/System/Library/CoreServices/Firmware Updates"
updatesdir2="/System/Library/CoreServices/Firmware Updates/MacMiniEFIUpdate"
firmwaredir="/Volumes/RamDisk/2007-2006"
firmware="EfiUpdaterApp2.efi"
firmware2="LOCKED_MM21_009A_00B.fd"
 
rm -r "${updatesdir1}"
mkdir "${updatesdir1}"
mkdir "${updatesdir2}"
 
cp "${firmwaredir}/${firmware}" "${updatesdir2}"
cp "${firmwaredir}/${firmware2}" "${updatesdir2}"
 
/usr/sbin/bless -mount / -firmware "${updatesdir2}/${firmware}" -payload "${updatesdir2}/${firmware2}" -options "-x efi-apple-payload0-data" --verbose
 
exit 0