Jump to content

Pattern of MLB (Main Logic Board)

holyfield

By holyfield,
in Tutorials (The Genius Bar)

 Share
573 posts in this topic

Recommended Posts

tyufhl
tyufhl
Posted
Posted

these are real values MBA6,2

MLB: C0232260DQRFD49AG
ROM: 406c8fcb38ac


MLB: C02326207WBFD49AA      
ROM: 406c8fd8f788


MLB: C0232130012FD49AR
ROM: 406c8fc3948e

how it everything is connected??? or all casual values?

P.S.  I give up. It is simpler to prescribe real and not to puzzle.

Link to comment
Share on other sites
Pike R. Alpha
Pike R. Alpha
Posted
Posted

There was too much variation in the TTT values of the MLB so I had another look and I think we are reading it wrong. Let's take an example from the above MLB's:

 

C0 2 3 21 30 012 FD49 AR

 

What if we use this:

 

PP G Y WW xx NBR EEEE xx

 

Now NBR looks more like a Base36 production number i.e this would be the 38th logic board. What do you think?

Link to comment
Share on other sites
flicka
flicka
Posted
Posted

There was too much variation in the TTT values of the MLB so I had another look and I think we are reading it wrong. Let's take an example from the above MLB's:

 

C0 2 3 21 30 012 FD49 AR

 

What if we use this:

 

PP Y WW xx NBR EEEE xx

 

Now NBR looks more like a Base36 production number i.e this would be the 38th logic board. What do you think?

I think you misspelled.

What you probably mean is "PP P Y WW xx NBR EEEE xx". 

In any case, your guess is very plausible

Link to comment
Share on other sites
Maf3r0
Maf3r0
Posted
Posted

I called to Apple support, but...nothing  :(

On the last month, i did the same — :|. A kind of "gentlewoman" help me to solve this problem; she ask me a few questions (just to confirm that I was me) and then she said me: "iMessage was activated on your AppleID" — :wink_anim:.

 

They registered my Serial Number, restart my Hack, but still the same.

I u just say: — "I have a problem with Apple ID", then they won't request Serial. But, if u say: — "I have a problem with iMessage", they will request a Serial.

 

At now, after a month, I lost my activation because i tryed disable activation and reactivate on other OS X instalation (with same AppleID, Serial, SmUUID, Hardware UUID, MLB and ROM — just in another partition). Well, this is my walkthrough. :P

  • Like 1
Link to comment
Share on other sites
flicka
flicka
Posted
Posted

@Pike
My two cents:
looking at various 17 characters MLB I've noticed that the second x in "WW xx NBR" is always a "0". Maybe a coincidence, but  another thing is that "NBR", if Base36, may be a maximum of 46.665, which, multiplied by 52 makes a total of 2.426.580. Macs sold in 2012 were 18,158,000 and in this case, the iMacs would be, approximately, 13% of the total. I think it is an underestimate, but in any case, what I wanted to point out is that "NBR" seems too small and this leads me to think that the pattern instead of "PP G Y WW xx NBR EEEE xx could be "PP G Y WW x NMBR EEEE xx".
Let me know if I've done another big mistake.

Link to comment
Share on other sites
fusion71au
fusion71au
Posted
Posted

So...Generate MLB (that looks like genuine Mac) won't fix the problem because we still need it to be registered via Apple Customer Support right?

But if we do that it will get Apple more attention as holyfield stated in OP.

 

As people with no have genuine MLB I just think about removing iMassage & FaceTime from Dock :unsure:

 

I'm pretty certain you are correct with this - even if you have generated a MLB serial with correct formatting/syntax, it still needs to be registered on Apple's "whitelist".  Obviously MLB/ROMs from real Macs have the correct formatting/syntax and are registered on the whitelist so you don't need to call Apple Support when using genuine values.

 

Testing by changing only a single digit of genuine MLB/ROM combination from 2 Macs:

 

1.  MBP 6,2 ---> 13 character MLB

MLB format PPYWWSSSSCCCC where WW changed from 36 to 46

ROM unchanged

 

2.  Mac Mini 6,2 ---> 17 character MLB

MLB format PPGYWWxxNBREEEExx where WW changed from 36 to 39

ROM unchanged

 

results in activation failure and "Your Apple ID can't be used to set up iMessage at this time" + "Customer Code".  Changing WW back to original values results in immediate and successful iMessage activation/login again.

 

Take Home Message: unless you accidently generate someone's real MLB/ROM by chance, you still need to contact Apple Support to register your fake serials.

 

 

I called to Apple support, but...nothing  :(

They registered my Serial Number, restart my Hack, but still the same.

 

@Allan,

 

Did you call support using a 17 character MLB generated according to the OP's guidelines?

 

Going by a few user reports, after stricter MLB syntax checking introduced by Apple sometime after 17th Nov 2014, you might have a greater chance of success calling Apple Support using a synthetic 13 character MLB (due to looser validation checking compared to 17 character MLB?). 

 

Presently, MLB cross checking is NOT done against system serial or system-id (only against ROM), so it is still possible to use an older MLB/ROM (with 13 character MLB eg from MBP 6,2) to activate a hack using a newer SMBIOS and system serial eg MacPro 6,1.

 

  • Like 3
Link to comment
Share on other sites
Pike R. Alpha
Pike R. Alpha
Posted
Posted

@Pike

My two cents:

looking at various 17 characters MLB I've noticed that the second x in "WW xx NBR" is always a "0". Maybe a coincidence, but  another thing is that "NBR", if Base36, may be a maximum of 46.665, which, multiplied by 52 makes a total of 2.426.580. Macs sold in 2012 were 18,158,000 and in this case, the iMacs would be, approximately, 13% of the total. I think it is an underestimate, but in any case, what I wanted to point out is that "NBR" seems too small and this leads me to think that the pattern instead of "PP G Y WW xx NBR EEEE xx could be "PP G Y WW x NMBR EEEE xx".

Let me know if I've done another big mistake.

You only looked at the maximum value of NBR, which is indeed 46655 for ZZZ, but you forgot EEEE. Now look at this:

 

NBR EEEE = 78.364.164.095 x 52 = 4.074.936.532.940

 

That is the theoretical maximum number, in one year, available for Apple serial numbers. Now look at the models that were actually sold in 2012 (models that I found):

 

iMac (Late 2012)

661-7101 Logic Board, Quad-Core i5, 2.7GHz, 21.5 inch 512MB GDDR A1418, EEE Code: DYWF,F117,F502,F505,F9GY,F9H0,F9H1,F9H2
661-7102 Logic Board, Quad-Core i5, 2.9GHz, 512MB GDDR A1418, EEE Code: DYWD,F504
661-7103 Logic Board, Quad-Core i7, 3.1GHz, 512MB GDDR A1418, EEE Code: F116,F503
661-7156 Logic Board, Quad-Core i5, 2.9GHz, 512MB GDDR A1419, EEE Code: F2FR,F653
661-7157 Logic Board, Quad-Core i5, 3.2GHz, 1GB GDDR A1419, EEE Code: F49P,F651
661-7158 Logic Board, Quad-Core i5, 3.2GHz, 2GB GDDR A1419, EEE Code: F49R,F652
661-7159 Logic Board, Quad-Core i7, 3.4GHz, 1GB GDDR A1419, EEE Code: DYW3,F64V
661-7160 Logic Board, Quad-Core i7, 3.4GHz, 2GB GDDR A1419, EEE Code: F0V5,F64W
661-7373 Logic Board, 2.7GHz (Supports Fusion Drive) A1418, EEE Code: FF4G,FF4H,FF4J,FF4K,FF4L,FF4M,FF4N,FF4P
 
iMac12,1 (Late 2011)
661-6024 Logic Board, 3.1 GHz, Dual-Core i3 - 21.5inch iMac Late 2011 - A1311, EEE Code: DNY3,DP00
 
iMac12,2 (Mid 2011)
661-5935 Logic Board, 2.5 GHz, Quad-Core i5 - 21.5 inch iMac Mid 2011 - A1311, EEE Code: DJWK,DM66,DNJK
661-5936 Logic Board, 2.7 GHz, Quad-Core i5 - 21.5 inch iMac Mid 2011 - A1311, EEE Code: DKG1,DM65,DNJJ
661-5937 Logic Board, 2.8 GHz, Quad-Core i7 - 21.5 inch iMac Mid 2011 - A1311, EEE Code: DKG2,DM67,DNJL
661-5948 Logic Board, 2.7 GHz, Quad-Core i5 - 27 inch iMac Mid 2011 - A1312, EEE Code: DJWM,DMT3,DMT5
661-5949 Logic Board, 3.1 GHz, Quad-Core i5 - 27 inch iMac Mid 2011 - A1312, EEE Code: DJWN, DM69
661-5950 Logic Board, 3.4 GHz, Quad core i7 - 27 inch iMac Mid 2011 - A1312, EEE Code: DJWP, DM6C
 
That are 48 EEE codes giving us: 46655 (ZZZ) * 52 (weeks) = 2426060 * 48 (found EEE Codes) = 116450880
 
Enough for a ton more iMac's (a week) before Apple would run into issues with their serial numbers. Not to mention that Apple uses different production plants and several generations so it could even be more. In the end. Nobody knows exactly what Apple is using. I could be dead wrong, but so is everybody else for as long as we have to do (educated)  guess work.
 
@fusion71au,
 
Do that test once more and take a look at: /var/log/system.log Note the "Registered: No" v.s. "Registered:Yes" ;)
Link to comment
Share on other sites
Alien::X
Alien::X
Posted
Posted

LOL ..... Looks like Apple going in Danger. LOL


661-5948 Logic Board, 2.7 GHz, Quad-Core i5 - 27 inch iMac Mid 2011 - A1312, EEE Code: DJWM,DMT3,DMT5
661-5949 Logic Board, 3.1 GHz, Quad-Core i5 - 27 inch iMac Mid 2011 - A1312, EEE Code: DJWN, DM69
661-5950 Logic Board, 3.4 GHz, Quad core i7 - 27 inch iMac Mid 2011 - A1312, EEE Code: DJWP, DM6C
 
 
Check out this series M , N , P
I think its in Series 
Not encoded in Base64 or etc.

Also with this series

 

FF4G,FF4H,FF4J,FF4K,FF4L,FF4M,FF4N,FF4P


PP G Y WW X NMBR EEEE XX

And pike r alpha what about last two ?
Many results shows X is related with Mac address 8 bit conversion
  • Like 3
Link to comment
Share on other sites
themonarc
themonarc
Posted
Posted

I enjoy reading the work you guys are doing. So, is it safe or not to use real mlb/rom id's from family mac? It uses different icloud and imessage account but has been working on my hack for a week or so. If not, it looks like we will soon be able to generate mlb numbers based on apple's sequence, unless they must be specifically whitelisted on the server (in which case we are screwed)? just looking for clarification, thanks!

Link to comment
Share on other sites
Pike R. Alpha
Pike R. Alpha
Posted
Posted

 

LOL ..... Looks like Apple going in Danger. LOL

661-5948 Logic Board, 2.7 GHz, Quad-Core i5 - 27 inch iMac Mid 2011 - A1312, EEE Code: DJWM,DMT3,DMT5
661-5949 Logic Board, 3.1 GHz, Quad-Core i5 - 27 inch iMac Mid 2011 - A1312, EEE Code: DJWN, DM69
661-5950 Logic Board, 3.4 GHz, Quad core i7 - 27 inch iMac Mid 2011 - A1312, EEE Code: DJWP, DM6C
 
 
Check out this series M , N , P
I think its in Series 
Not encoded in Base64 or etc.

Also with this series

 

FF4G,FF4H,FF4J,FF4K,FF4L,FF4M,FF4N,FF4P

PP G Y WW X NMBR EEEE XX

 

And pike r alpha what about last two ?

Many results shows X is related with Mac address 8 bit conversion

 

What do you mean with "this series"?

 

The EEE code is Base36. That we know already. We also know that the EEE codes of the current Mac models haven't showed up on Mac parts/repair sites. This because Apple's one year warranty is still covering the repairs. In most cases that is.

 

About the last two bytes. I don't know what to do with them. Perhaps they are also part of the EEE code. Maybe less important to logic board replacements, but hey what do I know ;)

Link to comment
Share on other sites
Alien::X
Alien::X
Posted
Posted

FF4G

FF4H

FF4J

FF4K

FF4L

FF4M

FF4N

FF4P

 

DJWM

DJWN

DJWP

"Only For iMac"

In this model (A1312) First three letters are Fixed For iMac DJW , FF4 etc. are common last one is in ABCD..

They Name First build mac with EEEE:::: XXXA,XXXB,XXXC etc.  (Example)

I think They give number by ABCD  . < I'm not sure that all ABCD character use by apple>

​In this pattern Core not matter Its can i5 or i7 etc.


After Finishing Last latter It can change XXYA , XXYB , XXYC etc.


PikeR I'm not Sure its my prediction.

Link to comment
Share on other sites
Sabin1936
Sabin1936
Posted
Posted

Quick question: If you have an existing mac that you own and don't plan to use for iMessage or Apple ID in any way and in fact it lives in a closet and you have no intentions of selling or otherwise getting rid of it, would it be possible/appropriate to use its ROM/MLB/Serial in your Hackintosh safely? If so, how do you go about extracting them?

 

Follow-up: I used imessage_debug to extract values... is that sufficient? If I run my hack using the smbios of an older Mac Mini (4,1) does anyone know if that causes any hardware issues? 

Link to comment
Share on other sites
Pavo
Pavo
Posted
Posted

Quick question: If you have an existing mac that you own and don't plan to use for iMessage or Apple ID in any way and in fact it lives in a closet and you have no intentions of selling or otherwise getting rid of it, would it be possible/appropriate to use its ROM/MLB/Serial in your Hackintosh safely? If so, how do you go about extracting them?

 

Follow-up: I used imessage_debug to extract values... is that sufficient? If I run my hack using the smbios of an older Mac Mini (4,1) does anyone know if that causes any hardware issues? 

Apparently you haven't read all the post on this thread, that has already been answered 

Link to comment
Share on other sites
Allan
Allan
Posted
Posted

@Allan,

 

Did you call support using a 17 character MLB generated according to the OP's guidelines?

 

Going by a few user reports, after stricter MLB syntax checking introduced by Apple sometime after 17th Nov 2014, you might have a greater chance of success calling Apple Support using a synthetic 13 character MLB (due to looser validation checking compared to 17 character MLB?). 

 

Presently, MLB cross checking is NOT done against system serial or system-id (only against ROM), so it is still possible to use an older MLB/ROM (with 13 character MLB eg from MBP 6,2) to activate a hack using a newer SMBIOS and system serial eg MacPro 6,1.

 

 

@fusion71au

 

Hi!

Yes bro, i still using 17 character MLB. 

 

I will change this now.  ;)

 

Thanks

  • Like 1
Link to comment
Share on other sites
fusion71au
fusion71au
Posted
Posted

@fusion71au

 

Hi!

Yes bro, i still using 17 character MLB. 

 

I will change this now.  ;)

 

Thanks

 

 

I've gotten hold of a real MLB (from a 13 inch MBP 5,5 Mid 2009) to give you an example of how to generate a synthetic MLB using its component parts :).

 

It's comprised of 13 characters with the format

PPYWWSSSSCCCC

  • PP = Manufacturing location ID = W8
  • Y = Year of manufacturing =  2009
  • WW = Week of manufacture (01-52) Say 26
  • SSSS = Production number, within this week.  Say it is 41 066 decimal converted to Base-36 = 0VOQ
  • CCCC = ID-Model of hardware part = 6GCA

So our made up MBP 5,5 MLB serial number is W89260VOQ6GCA.  You can obviously change WW and SSSS to other values so that the MLB is unique...

 

Procedure to activate

  1. Set the ROM as your 12 character ethernet MAC address.  To make it more "genuine", replace the first 6 characters with an "Apple Prefix" code.
  2. Put MLB & ROM in RtVariables/config.plist, keep everything else the same including current system serial and SMBIOS
  3. Disconnect from internet
  4. Reboot computer and run iMessage debug to confirm MLB/ROM values are persistent
  5. Reconnect internet
  6. Login to iMessage ---> will most likely get Customer code if you haven't accidently created someone's real MLB/ROM
  7. Call Apple Support saying you have a problem with your Apple ID while logging in to iMessage
  8. Cross fingers that they fix it :)!

 

 

Other examples:

Google for sellers of Mac parts or "Mac Logic Board Model No" (model no is usually in format AXXXX).  I have found that CCCC is often the EEE code followed by the letter A eg for MacPro 3,1, EEE = XDA, CCCC = XDAA.

 

MacPro 3,1

PP=J5, Year=2008, Week=17, Production No=6506 (decimal)=050Q (Base36), CCCC=XDAA ---> J5817050QXDAA

 

MacPro 4,1

PP=J5, Year=2009, Week=47, Production No=32075 (decimal)=0OQZ (Base36), CCCC=BXZA ---> J59470OQZBXZA

 

MacPro 5,1

PP=J5, Year=2010, Week=33, Production No=5802 (decimal)=04H6 (Base36), CCCC=BH8A ---> J503304H6BH8A

 

iMac 10,1 27 inch

PP=W8, Year=2009, Week=49, Production No=8512 (decimal)=06KG (Base36), CCCC=BZRA ---> W894906KGBZRA

 

iMac 11,1 27 inch

PP=W8, Year=2010, Week=15, Production No=11303 (decimal)=08PZ (Base36), CCCC=BA1A ---> W801508PZBA1A

  • Like 6
Link to comment
Share on other sites
 Share
Go to topic listing
×
×
  • Create New...