A1465 EMC 2924 Early 2015 Macbook AIR

Hey from Floridaman,
Have spent the last few hours reading up on your forums. The knowledge share is greatly appreciated. I am getting ready for my first EFI flash on the above model. Wanting to make sure I have all of my ducks in a row.

1. Have read everything I can find regarding EFI flashing with EZ flash and pi on the site.
2. Have located two separate HEX dumps for my model from the site.
@atinder thanks : ghostlyhaks.com/forum/efi-firmware-dumps-requests/380-dump-a1465-emc-2924-2015
@CygnusX1 thanks : ghostlyhaks.com/forum/efi-firmware-dumps-requests/532-request-clean-macbook-air-11-a1465-emc-2924
3. Have purchased the 4.0.3 SPI adapter.

I intend to hook up and read out my own firmware a few times. Confirm md5's. Then attempt to clean the password out using the above for failback and to compare against.

Anything I am missing? Anything drastically overlooked?

Thanks,
SPS

Two questions :

1. On forum saw mention of using "MX25L6406E/MX25L6408E" but another post mentioned using last one in the list. I went with : MX25L6406E/MX25L6408E is that OK?

Found Macronix flash chip "MX25L6405" (8192 kB, SPI) on linux_spi.
Found Macronix flash chip "MX25L6405D" (8192 kB, SPI) on linux_spi.
Found Macronix flash chip "MX25L6406E/MX25L6408E" (8192 kB, SPI) on linux_spi.
Found Macronix flash chip "MX25L6436E/MX25L6445E/MX25L6465E/MX25L6473E" (8192 kB, SPI) on linux_spi.
Multiple flash chip definitions match the detected chip(s): "MX25L6405", "MX25L6405D", "MX25L6406E/MX25L6408E", "MX25L6436E/MX25L6445E/MX25L6465E/MX25L6473E"

EDIT :
Found my answer here, doesn't matter which one you pick.
Source : @therealjayvi Thanks! : www.ghostlyhaks.com/forum/apple-efi/627-did-i-read-the-wrong-chip : specifying chip types (at least in the situations that we use flashrom for) does not change the dump in any way.


2. Failing MD5 hard. Suspect wire length because 5 inches. Size is correct for each read . Thoughts?

5 Inch Wires :
pi@raspberrypi:~/efi $ md5sum read1.bin
076258862d42021798ae6ed2b60a7ce6 read1.bin

pi@raspberrypi:~/efi $ md5sum read2.bin
5f44d8b46213c1e4f2337b72c1bb08ef read2.bin

pi@raspberrypi:~/efi $ md5sum read3.bin
78cb76cda31c7e417c4769f59028bfff read3.bin

pi@raspberrypi:~/efi $ md5sum read4.bin
6463713760644f6cf9f643572dd0fcf9 read4.bin

pi@raspberrypi:~/efi $ md5sum read5.bin
0e9b3b7a0a359acb3e29a2fb0bdaad83 read5.bin

pi@raspberrypi:~/efi $ md5sum read6.bin
3f6f73ea4a08edf5916ead22d8e852b5 read6.bin




Changed out to 2.5 Inch Wires :
pi@raspberrypi:~/efi $ md5sum read1.bin
2e2a3a11d67413c364e373e699a344f4 read1.bin

pi@raspberrypi:~/efi $ md5sum read2.bin
710feb33753ecbbf2dd86f84a1360397 read2.bin

pi@raspberrypi:~/efi $ md5sum read3.bin
f61e86e88107c79cff36d7893716ebb4 read3.bin

www.ghostlyhaks.com/forum/apple-efi/1038-mba-a1466-emc-2362-different-md5sums-or-no-svs

So looks like it has to do with power states.

Model : Raspberry Pi Model 2 B.

Pinout :
VCC > Pin 17
CLK > Pin 23
SI > Pin 19
GND > Pin 25
SO > Pin 21
CS > Pin 24

apt-get install flashrom used because git build wasn't working properly

MAGSAFE removed + Battery disconnected and it is reading. Fingers Crossed :

SPS

ghostlyhaks.com/forum/macbook-pro-retina-2015-2016/571-a1466-emc2925-read-issues

:/

Got it to work!

Plug in battery plug in magsafe.
Disconnect VCC wire from PI
Turn on MAC, press and hold power button.

Begin read.

MD5's match and I can see my $SVS pw.



Will update with write process if different.

577539da60c2584598d2d095b98d05bc read1.bin
577539da60c2584598d2d095b98d05bc read2.bin
dc35904cb4b8c749cd586dcb103d0e58 read3.bin
dc35904cb4b8c749cd586dcb103d0e58 read4.bin


Appears to change between power cycles.

Second set of reads were good looking as well although different checksum.

Removed the $SVS and reflashed.

Failed erasing. Took 3 times to write the chip before it actually took.

Cleared PRAM, on my way.

Thanks for all the information! Hopefully the above helps someone else.

SPS

You have greatly helped me out.
I purchased the EFI Destroyer Lite and was crushed that it was unable to bypass/crack the firmware on a MBA 2015 model A1465 // EMC-2924.

I was able to hook up the 4.0.3 clip to a RPI3.

However, flashrom couldn't even recognize the chip until I read that you had to append theto the command.
Your pro-tip about pressing and holding the power button even after the device was powered off was the trick to capture the dump as well a push the fixed bin.

Hats off to you sir.

Glad I could help! I gained a lot of knowledge from this forum so happy I could give a little back.

Best combo are chipmunk clips and raspberry. You don`t need to hold it by hand, use (print) my clip

--> ghostlyhaks.com/forum/macbook/2316-clappy-the-clamp#9484

Nicely done. That would have come in very handy.

However, I don't have access to a 3d printer.
May you suggest something I can use as an alternative, preferably something cheap from Amazon?