MP5,1: BootROM reconstruction with intermediate files

Note: I'm starting to move/separate some of the content from the BootROM thread to facilitate search. I'm still editing this article.

 

This is a DRAFT - Part1:​

This is the detailed process to populate generic MP51.fd from Apple with the hardware identifiers, using the intermediate files that I prepared and sent to some people. If you already have it, this is how you can use UEFITool 0.25.1 to inject the NVRAM volume and LBSN_BD sector into every MP51.fd released by Apple.

You can inject the NVMe EFI module into MP51.fd before doing this. (No need to inject if using 140.0.0.0.0 BootROM)

Don't extract the NVRAM volume from your corrupted BootROM and inject into the generic MP51.fd from Apple, you will get the same corrupted BootROM in the end. This works only with the intermediate files I sent.

Attention:​

Do exactly as I described here, you don't want to brick your Mac Pro. This process is exclusive to MP51 firmwares, do not ever do this to downgrade to a MP41 firmware or use the same process to clean up a MP31 firmware.


Open UEFITool 0.25.1 (Don't use UEFITool NE):




Menu, Open image file:




Select MP51.fd (you can inject the NVMe EFI module into MP51.fd before doing this if you want to use a BootROM before 140.0.0.0.0) and open it:



MP51.fd opened:



Now select the NVRAM area, it’s the GUID FFF12B8D-7696-4C8B-A985-2747075B4F50:



Click with the right button and select Replace as is:



Open your intermediate files folder, select the NVRAM volume and Open it:




NVRAM is done:



Now open the last volume, GUID 04ADEEAD-61FF-4D31-B6BA-64F8BF901F5A:




Select the last RAW section of GUID 1BA0062E-C779-4582-8566-336AE8F78F09:



Continue on Part2

 

This is a DRAFT - Part2:​

Replace as is with your intermediate LBSN_BD sector:





LBSN_BD sector is done, now you just have to save it to have a fully reconstructed BootROM.




Menu, Save image file:



Save your file and you are done!.

Just write it to your logic board SPI flash memory with ROMTool, flashrom etc.

You can even use EFI2Updater if you know the hidden/force options and how to manually bless it, but it's out of the scope here.

P.S: There is a tiny easter egg in this document, what is about?

 

Reserved

 

Reserved

 

Reserved

 

No (it's in one of the images, btw)

 

But why?

People are near, but no one found it yet

 

Ok, you are near. What the numbers represent?

 

Nope. Cold again.

 

It's a totally valid serial number for early-2009.

4PC is one of the models of 2009 Mac Pros, the basic single processor one, MB871LL/A.

No phone numbers, no hidden info. It's about the serial. Why?

 

No, but you are near. Decode the serial number and you know why.

 

China, USA, Ireland… But it's not where.

 

Yep. It's the first production Mac Pro, since Apple starts all serials with zero.

--- Post Merged, Oct 15, 2018 ---

Yes, the first one production Mac Pro made.