Releases: Macschrauber/Macschrauber-s-Rom-Dump
v1-9-2024
1-9-2024
Dumper:
- Various fixes for running the Dumper as a non admin user.
- Added iMac 12,1 dumping via
Eficheck
. - Adds MacOs version and CPU configuration to the analyse window and log file.
- Added detailed
boot block
info, with version and release date. - Detect more empty
.fd
firmware files forMP41
andMP51
. - Added scanning dump files file system wide via the cli tool.
- Read and decode NVRAM variables directly from NVRAM via the cli tool.
example nvram readout for csr-active-config
test_nvram '-nvram csr-active-config'
NVRAM output:
csr-active-config w%00%00%00
-------------------------------------------------------------------
Decoded:
77000000
Decoded (little-endian representation):
00000077
-------------------------------------------------------------------
0x001 CSR_ALLOW_UNTRUSTED_KEXTS
0x002 CSR_ALLOW_UNRESTRICTED_FS
0x004 CSR_ALLOW_TASK_FOR_PID
0x010 CSR_ALLOW_APPLE_INTERNAL
0x020 CSR_ALLOW_UNRESTRICTED_DTRACE
0x040 CSR_ALLOW_UNRESTRICTED_NVRAM
-------------------------------------------------------------------
Hexadecimal encoding:
00000000: 3737 3030 3030 3030 77000000
-------------------------------------------------------------------
Raw XML data:
dwAAAA==
-------------------------------------------------------------------
Base64 encoding:
w
-------------------------------------------------------------------
Hexadecimal conversion:
6477414141413d3d
-------------------------------------------------------------------
Extra Tools (ESP tools, Repair preboot, etc.):
- boot-args: edit boot-args got a vertical list of boot-args.
- Various fixes for running the extra tools as a non admin user.
v5-8-2024
5-8-2024
Dumper:
- Various fixes for running the Dumper as a non admin user.
- Added iMac 12,1 dumping via
Eficheck
. - Adds MacOs version and CPU configuration to the analyse window and log file.
- Added detailed
boot block
info, with version and release date. - Detect more empty
.fd
firmware files forMP41
andMP51
. - Added scanning dump files file system wide via the cli tool.
- Read and decode NVRAM variables directly from NVRAM via the cli tool.
example nvram readout for csr-active-config
test_nvram '-nvram csr-active-config'
NVRAM output:
csr-active-config w%00%00%00
-------------------------------------------------------------------
Decoded:
77000000
Decoded (little-endian representation):
00000077
-------------------------------------------------------------------
0x001 CSR_ALLOW_UNTRUSTED_KEXTS
0x002 CSR_ALLOW_UNRESTRICTED_FS
0x004 CSR_ALLOW_TASK_FOR_PID
0x010 CSR_ALLOW_APPLE_INTERNAL
0x020 CSR_ALLOW_UNRESTRICTED_DTRACE
0x040 CSR_ALLOW_UNRESTRICTED_NVRAM
-------------------------------------------------------------------
Hexadecimal encoding:
00000000: 3737 3030 3030 3030 77000000
-------------------------------------------------------------------
Raw XML data:
dwAAAA==
-------------------------------------------------------------------
Base64 encoding:
w
-------------------------------------------------------------------
Hexadecimal conversion:
6477414141413d3d
-------------------------------------------------------------------
Extra Tools (ESP tools, Repair preboot, etc.):
- boot-args: edit boot-args got a vertical list of boot-args.
- Various fixes for running the extra tools as a non admin user.
v16-6-2024
16-6-2024
-
display
BootNext
,unnamed
,clover
andgpu-power-mode
variables -
logging of Board-ID for
iMacPro 1,1
andMacPro 7,1
-
logging detailed
csr config
status -
-hexdumpall
argument fortest_nvram
withtest_nvram dumpfile.bin -hexdumpall
a full list of hexdumps of deleted and valid NVRAM variables is displayed. This can be hughe. -
additional tool:
Macschrauber's System Version Scanner
it scans thru all mounted volumes and displays the MacOs version, drive and physical position, similar to the ESP tools. -
ESP tools:
Also various corrections and additions to theESP tools
, regardingWindows ESP
and external volumes.
v5-5-2024
5-5-2024
-
presenting CSR values for s.i.p / rootless flags
like: csr_Allow_Untrusted_Kexts, Unrestricted_FS, Task_For_Pid, Apple_Internal, Unrestricted_Dtrace, Unrestricted_NVRAM (0x77) -
warn for unusual var headers
like state: 0x00 or 0xff and size: 0xff -
presenting nvda_drv=1 variable
-
presenting efi-boot-device-data variable
-
the log shows a platform compatibility test for the helper tools
fixed: security mode=none presented an alarm, tho this setting is useless it must not show a warning
- ESP tools:
added: OCLP got the model in the string
fixed: did not wrote an icon for Windows ESPs, also added support for multiple ESPs on one volume.
v21-4-2024
21-4-2024
-
analyzing
.scap
files -
revisited the display of the NVRAM variables to
example: 1 (5 deleted) MemoryConfigg -
showing some more NVRAM variables:
recover-boot-mode
sleepwake_diagxx
SleepWakeFailureString
StartupMute
and
SystemAudioVolume
for detecting no audible boot chime -
wildcards for the test_nvram_shell script. Like
test_nvram *.bin -showallvars
-
multiple CRC32 errors got all UUIDs displayed
v31-3-2024
31-3-2024
-
added an option for
ESP Mount from list and show bootloader
to prevent booting of Uefi Windows
If started on a Mac Pro 1,1 to 5,1 unit it allows the user to rename bootx64.efi to bootx64.efioff to
prevent direct booting Uefi Windows without OpenCore / RefindPlus protection. -
a 2nd variant of the LBSN Sector for MP41 is detected
-
-nofreshdump
argument for test_nvram and adding this for analysing ch341a dumps
As a readout of a chip in the programmer could not be treated same for live diagnostics.
also a fix for Type_80 firmwares what have more than one Fsys stream in the NRAM Volume, reporting FSys variables order
v22-3-2024
22-3-2024
-
analysing .dump files eficheck creates for sending them without user data (Fsys stream) to Apple
My Mac Mini 7,1 creates a 6 MB file, I would need more examples of other sizes -
the stop button of the progress window works now in the Dumper and most of the tools
-
worked over a handler to process sudo cli tool calls, so more precise logging
-
added
download from github
to the downloaders
Also error correction in the Is damaged fix
tool due to a typo in a version comment.
v2-3-2024
In V2-3-2024 a glitch was fixed when the font "Courier New" was missing it prevents displaying the analyse dialog.
v19-10-2024
changelog for v19-10-2024
The Dumper:
- detects if running on a T2 or Silicon Mac and removes the button accordingly.
- added a dialog for missing LBSN/BD sector.
- decodes board-id to Mac model in log file.
- tells the user if the assigned FireWire address does not match the firmware MAC address.
This may indicate that on an MP41 or MP51, firmware from another machine was flashed.
test_nvram:
- dumping IM121 is forced to use eficheck (available from High Sierra to Ventura) due to a crash when loading DirectHW.kext.
- "FW MAC matches not with LBSN" or "FW MAC matches with LBSN" line, when the Mac has Firewire and LBSN sector has a firmware MAC address.
- a catch when Eficheck is not available (before 10.13, after 13).
- a catch for an empty EFI version string
- CRC32 check for the main firmware volumes for MP41 and MP51 firmwares.
Macschrauber's System Version Scanner:
- more sealed status report.
- more progress bar steps for multiple MacOS on one machine.
Wifi-Scripts:
Select Wi-Fi from found networks and Select Wi-Fi from preferred networks:
Message and workaround if Airport Utility cli tool is not working anymore on OS since Ventura.
ESP Tools:
- detect amdvbflash ESP
unmount all ESPs, Mount ESP from list, Mount ESP from list and show bootloader:
- unmounting has an option to handle busy status of ESPs.
copy ESP:
- sets script into a loop, to work on more than one ESP in a row.
Boot-Args:
- edit boot-args got into a loop, so editing more options is more comfortable.
Preboot Fixer:
- mount ESP needs admin privileges if user is not in admin group, fixed when using stored admin / password data.