Jump to content

ReadSMC for EFI, a tool to enter read SMC keys from EFI shell on real Macs

Andy Vandijck

By Andy Vandijck,
in UEFI

 Share
73 posts in this topic

Recommended Posts

martel_420
martel_420
Posted
Posted

Thank you for posting the fix. Have you seen any other issues since flashing the correct firmware?

 

I still have the battery not charging, even with a new battery, and i also got a kernel task issue, but its very random.. maybe caused by the battery (when its at 0%) 

 

I checked with new magsafe (OEM) but its not charging the new battery, tried all resets possibles .. 

 

I check the resistors with Louis method, but everything looks fine, so i'll try get an osciloscope and see if i can check for data on R5281 & R5280 data lines to SMC

 

Maybe the smc? (u4900)

Link to comment
Share on other sites
  • 4 months later...
nicocorradini
nicocorradini
Posted
Posted

Hi! I know that this is an old topic, but I think this can be useful for me.

 

Sorry for my english.

 

I have two A1342 (MB61, Late09) Macbooks. One of them has the MBP55 bootloader installed on it, the other one does not. 

 

macOS Sierra isn't compatible with Macbook Pro 5,5, but it is with Macbook White 6,1. 

 

I need to downgrade the bootrom of this Mac, and i was wondering if your software can "dump" the bootrom from the MB61 to install it over the MBP55. 

 

Once again, sorry for my english. Hope you understand. 

Link to comment
Share on other sites
nicocorradini
nicocorradini
Posted
Posted

have you tried mounting your mb6,1 EFI partition and using the file located in EFI/APPLE/FIRMWARE/*.scap maybe you can use it the same way you modified the mbp5,5 scap file

 

Hi, Bronxteck! Thanks for your answer. Yes, I already did that, but i got the "Could not set boot properties: 0xe00002bc Error while writing firmware updater for EFI" error. Full terminal output:

 

 

sh-3.2# bless -mount / -firmware MB61_00C8_B00_LOCKED.scap --verbose

EFI found at IODeviceTree:/efi

Will need to copy 15732736 bytes to EFI system partition

GPT detected

No auxiliary booter partition required

System partition found

Preferred system partition found: disk0s1

Returning booter information dictionary:

<CFBasicHash 0x7fb108c0c9c0 [0x7fff7897c440]>{type = mutable dict, count = 3,

entries =>

         0 : <CFString 0x10f08a990 [0x7fff7897c440]>{contents = "System Partitions"} = (

    disk0s1,

    disk2s1

)

         1 : <CFString 0x10f08b170 [0x7fff7897c440]>{contents = "Data Partitions"} = (

    disk2s2

)

         2 : <CFString 0x10f08b190 [0x7fff7897c440]>{contents = "Auxiliary Partitions"} = (

)

}

 

Substituting ESP disk0s1

Mounting at /Volumes/bless.yRQ9

Executing "/sbin/mount"

Returned 0

Creating /Volumes/bless.yRQ9/EFI/APPLE/FIRMWARE if needed

Deleting previous contents of /Volumes/bless.yRQ9/EFI/APPLE/FIRMWARE

Deleting /Volumes/bless.yRQ9/EFI/APPLE/FIRMWARE/MB61_00C8_B00_LOCKED.scap (15729264 bytes)

Opened dest at /Volumes/bless.yRQ9/EFI/APPLE/FIRMWARE/MB61_00C8_B00_LOCKED.scap for writing

preallocation not supported on this filesystem for /Volumes/bless.yRQ9/EFI/APPLE/FIRMWARE/MB61_00C8_B00_LOCKED.scap

 

/Volumes/bless.yRQ9/EFI/APPLE/FIRMWARE/MB61_00C8_B00_LOCKED.scap created successfully

Relative path of /Volumes/bless.yRQ9/EFI/APPLE/FIRMWARE/MB61_00C8_B00_LOCKED.scap is \EFI\APPLE\FIRMWARE\MB61_00C8_B00_LOCKED.scap

IOMedia disk0s1 has UUID 7899BF72-B18C-4F9D-9877-958667F8C0AF

Executing "/sbin/umount"

Returned 0

Setting EFI NVRAM:

<CFBasicHash 0x7fb108c0d790 [0x7fff7897c440]>{type = mutable dict, count = 1,

entries =>

         1 : <CFString 0x10f08a9b0 [0x7fff7897c440]>{contents = "efi-boot-next"} = <CFString 0x7fb108d002b0 [0x7fff7897c440]>{contents = "<array><dict><key>IOMatch</key><dict><key>IOProviderClass</key><string>IOMedia</string><key>IOPropertyMatch</key><dict><key>UUID</key><string>7899BF72-B18C-4F9D-9877-958667F8C0AF</string></dict></dict><key>BLLastBSDName</key><string>disk0s1</string></dict><dict><key>IOEFIDevicePathType</key><string>MediaFilePath</string><key>Path</key><string>\EFI\APPLE\FIRMWARE\MB61_00C8_B00_LOCKED.scap</string></dict></array>"}

}

 

Could not set boot properties: 0xe00002bc

Error while writing firmware updater for EFI

 

Any idea? 

Link to comment
Share on other sites
wgr21
wgr21
Posted
Posted

Hi all , i`m new on this forum , i realy need help with a macbook pro retina, that i cannot install os , someone wants to remove password and corrupt some files.

I install os 10.9.2 update to 10.9.5 , and i update the efi file. 

 

But receive error when try to install smc update ( Alert  , This software is not supported on your system ) , also try with El Capitan without success.

I install rEfit into main drive , formated a usb to ms-dos (fat) rename FS4 , and copy Smcflasher.smc , VerifyRequirements , 2012MBPR15.smc ( extracted from MacBookProRetinaSMCupdat.pkg with unpkg 4.5 )

 

I restart the laptop , press ALT to boot rEfit , enter black terminal icon, 

 

Shell>

Shell> fs4:

Shell : Invalid mapping name - ' fs4:'

 

Shell> fs4:/

fs4:/ is not recognized as an internal or external command, operable program, or btch file

 

Shell> Smcflasher.efi -Loadapp 2012mbpr.smc

 

Error : invalid option 2 '2012mbpr15.smc'

Smcutil: version '1.3.8' usage 

Status error 0x8000000000000002

Invalid file system mapping on hd37a0a0b

 

now i write

 

Smcflasher.efi -LoadApp 2012mbpr.smc

 

and succes with update the smc, but fan is full speed.

 

----------------------------------------------------------------------

 

Seems like i update the smc , with a wrong version of file, i try with corect smc file, but error like first time.

Link to comment
Share on other sites
  • 2 weeks later...
TUISTERa
TUISTERa
Posted
Posted

Hi, Bronxteck! Thanks for your answer. Yes, I already did that, but i got the "Could not set boot properties: 0xe00002bc Error while writing firmware updater for EFI" error. Full terminal output:

 

 

Any idea? 

Hello, did you have any progress on this? My story is similar but a little more sad. I have a1342 that is updated to Sierra, i ordered 8 gb memory for it , and offcourse it didnt accepted it. Today i have read that mbp 5,5 is same as unibody 6,1 and i blessed 5,5 scap. Now my keyboard, trackpad and USB ports are not working. Macbook is starting and working, i am accessing it from teamviewer, but no way to work on the macbook in real. Tryed pram and smc resets, no luck. Please help, if i go for capitan installation i will lose every access to mac, only way to enter commands to it are via teamviewer at the moment

Link to comment
Share on other sites
bronxteck
bronxteck
Posted
Posted

is your mbp6,1 experiencing any gpu related issues before the smc upgrade?

the reason I ask is I just had my logic board replaced for free by apple under this program https://www.apple.com/support/macbookpro-videoissues/ myMacBook Pro had  bad solder to the gpu.

I think there only fixing them till December of this year. 

Products affected

  • 15-inch and 17-inch MacBook Pro models manufactured in 2011
  • 15-inch MacBook Pro with Retina models manufactured from Mid 2012 to Early 2013
Link to comment
Share on other sites
  • 2 weeks later...
wgr21
wgr21
Posted
Posted

Hi all , i`m new on this forum , i realy need help with a macbook pro retina, that i cannot install os , someone wants to remove password and corrupt some files.

I install os 10.9.2 update to 10.9.5 , and i update the efi file. 

 

But receive error when try to install smc update ( Alert  , This software is not supported on your system ) , also try with El Capitan without success.

I install rEfit into main drive , formated a usb to ms-dos (fat) rename FS4 , and copy Smcflasher.smc , VerifyRequirements , 2012MBPR15.smc ( extracted from MacBookProRetinaSMCupdat.pkg with unpkg 4.5 )

 

I restart the laptop , press ALT to boot rEfit , enter black terminal icon, 

 

Shell>

Shell> fs4:

Shell : Invalid mapping name - ' fs4:'

 

Shell> fs4:/

fs4:/ is not recognized as an internal or external command, operable program, or btch file

 

Shell> Smcflasher.efi -Loadapp 2012mbpr.smc

 

Error : invalid option 2 '2012mbpr15.smc'

Smcutil: version '1.3.8' usage 

Status error 0x8000000000000002

Invalid file system mapping on hd37a0a0b

 

now i write

 

Smcflasher.efi -LoadApp 2012mbpr.smc

 

and succes with update the smc, but fan is full speed.

 

----------------------------------------------------------------------

 

Seems like i update the smc , with a wrong version of file, i try with corect smc file, but error like first time.

, ok so any help from you guys ?

 

i need a way to do smc update and efi update

Link to comment
Share on other sites
  • 1 month later...
silencer51
silencer51
Posted
Posted

Like others, I have a MB6,1 with Sierra and 8GB of RAM, which worked fine UNTIL I attempted the MBP5,5 EFI flash procedure (don't ask me why, I use this Mac for experimentation).

 

Windows works perfectly, but in OS X USB, trackpad and keyboard are unresponsive, even in single user mode.

 

I will attempt to install an older OS X version (like Snow Leopard) and see if I can flash the original EFI firmware.

 

However, this doesn't appear to be available anywhere online. Could a Macbook6,1 owner post a dump of their original EFI?

Link to comment
Share on other sites
  • 3 months later...
UNRIPEpoweruser
UNRIPEpoweruser
Posted
Posted

Hi,

 

I believe I'm having trouble with the SMC chipset on my MacBook Pro. Not too long ago the system was having difficulty booting into OSX. That issue seems to have since rectified itself, but now my left shift key isn't functioning. I ran AHT which didn't generate error codes for the logic board, which furthers my thoughts on it being a chip corruption. I have downloaded the EFI updates and when I attempt to install them I'm getting "This computer does not need this update." Alert dialog box. I'm not sure how to go about flashing this chip. Any help is greatly appreciated.

I'm going to reread this thread and give rEFIt a shot. It reads the capability of doing what I don't seem to be qualified to do completely manually.

Where are your thoughts on this? Please advise!

Link to comment
Share on other sites
  • 2 years later...
phantomEVO
phantomEVO
Posted
Posted
On 7/26/2014 at 9:28 PM, Andy Vandijck said:

I wrote a little EFI tool to read SMC keys from real Macs from an EFI shell running on the real Macs.

I made 32bit and 64bit versions.

It also reads the SMC Signature out and shows it.

 

Usage example:

ReadSMC.efi OSK 31

 

It show:

OSK0: [ 6f 75 72 68 61 72 64 77 6f 72 6b 62 79 74 68 65 73 65 77 6f 72 64 73 67 75 61 72 64 65 64 70 6c ]

 

Have fun :D

 

EDIT: Upload restored, github repo created.

 

Github repo URL:

https://github.com/andyvand/ReadSMC

ReadSMC.zip

hi Andy! i have a question for you, i hope it isnt too much off topic

i've a macbook air with a broken smc. i've another smc from another board...i would like to use it, but since it has a different firmware, i would like to flash it with the right one (downloaded from apple website). is it possible? i would like to use the "working macbook" to force flash the smc 


thank you

Link to comment
Share on other sites
  • 1 year later...
Intel6600
Intel6600
Posted
Posted (edited)

Thanks. 

I killed the smc of my macbook. IT only boots in SMC Bypass Mode. 

 

Edit:

OK Sorry, but I need the whole SMC Files, which are the ".smc" and the ".epm" th Flash with Smcflasher. 

Edited by Intel6600
Link to comment
Share on other sites
  • 2 weeks later...
  • 2 years later...
Slice
Slice
Posted
Posted
11 minutes ago, kocoman said:

how to cast those 

[KPPW] type [ch8*] 6368382A len [32] attr [50] -> ATTR_FUNCTION|ATTR_WRITE

Kernel Protection Password

Pass [SpecialisRevelio] to succeed and enable more complete read mode for old SMC.

Pass [SMC The place to be, definitely!] to do the same for new SMC.

 

How it looks on real Macs?

Link to comment
Share on other sites
 Share
Go to topic listing
×
×
  • Create New...