Unsuccessful EFIDL with macbook early 2016 model

Mine case is similar with this tread
ghostlyhaks.com/forum/macbook-pro-retina-2015-2016/681-macbook-air-a1534-read-dump-but-not-write

and chip is same as this tread
ghostlyhaks.com/forum/macbook-pro-retina-2015-2016/657-help-who-knows-where-efi-chip-located-on-12-mac

So, im really sure that chip is WINDBOND NOT MACRONIX

I will post result from terminal very soon.

Thannks

Well if you looked at the chip and tell me it's winbond, I am not arguing that with you lol

What I am saying is the schematic for that mac calls for three different EFI chips including macronix and winbond.

They are interchangeable for all intents and purposes as they share the same pinout, op codes, size, etc.

In any configuration you can identify a chip, try to proceed with that.

You must find a power state for the chip that will allow write, or find a way to set WREN.

With a bus pirate?

I will post result from raspberry as soon as I get back home.

I also have buspirate but I'm forgot code patten for it. If you can please give me some advice. I will do the rest and post both result.

Thanks

are you using windows or linux or OS X?

terminal into the bus pirate, and at HiZ>

HiZ>m
-- change mode
HiZ>5
-- select SPI as the mode
HiZ>5
-- set speed as 1MHz
HiZ>[Enter]
-- set clock polarity as Idle low, which is default
HiZ>[Enter]
-- set output clock edge as Active to idle, which is default
HiZ>[Enter]
-- set Input sample phase as Middle, which is default
HiZ>[Enter]
-- set CS as /CS, which is default
HiZ>2
-- select output type as Normal (H=3.3v, L=GND)

then you should be ready to send op codes. look up the data sheet for your chip, and send raw hex command for WREN. should be 06

Hi, What i have to do next? i have no clue on it

send raw hex command for op code 6

Do you mean just 6?

00000000 - Enter raw bitbang mode, reset to raw bitbang mode
This command has two purposes. First, send it to the command line interface 20 times to enter the raw bitbang binary mode. It's also used to exit the raw SPI mode and return to raw bitbang mode.

Send the value 0x00 to the Bus Pirate command line interface 20 times to enter raw bitbang mode. The Bus Pirate replies 'BBIOx', where x is the raw bitbang version number (currently 1).

Once in raw SPI mode (see command 00000001), the 0x00 command returns to raw bitbang mode. Send 0x00 once to return to raw bitbang mode.

In raw bitbang mode, send 0x0F to exit raw bitbang mode and reset the Bus Pirate.

0000001x - CS high (1) or low (0)
Toggle the Bus Pirate chip select pin, follows HiZ configuration setting. CS high is pin output at 3.3volts, or HiZ. CS low is pin output at ground. Bus Pirate responds 0x01.

What am i understanding is raw SPI can read and write up to 4096 byte by sending command 00000100

Btw, what would be the next step after get into bitbang mode.

ref: dangerousprototypes.com/docs/SPI_(binary)

Thanks

Yes. That is the resource I am seeing too.

The schematic calls for three different chips. Can you tell me exactly which winbond chip you have?

I will pull the datasheet and confirm op codes for WREN and RDSR

I believe that W25Q64.V (8192 KB)

send RDSR
send WREN
verify with RDSR again

Sorry for late reply im just broke keyboard cable by accidentally so new cable just arrived today.

i dont know why i cannot enter to bagbang mode, i type 00000000 more than 200 times but not get result of BBIOx.

Which firmware version is on your bus pirate?

Try upgrading to latest (beta)