[Request] HowTo RollBack to an older HP Insyde BIOS

@Sweet_Kitten
If I want to use another BIOS version with the latest .zip you send me, will I need to change only .bin and .s12 files? or I will need to change some more files?

Just to know… cause I’m gonna do some tests with Spectre and Meltdown

One off-topic question: I have another water damaged motherboard (same laptop and motherboard), I tried cleaning it with alcohol but nothing it only shows two leds and black screen. I bough it on ebay, do you think it’s possible to recover it? The screen flashes 1 second when I turn it on and then black screen. Do you think it’s only water damaged or can be a bios problem?

Were s12 in my archive at all? Just .bin

It is a BIOS problem only if the caps lock shows 2 or 6 leds.

Thanks

@Sweet_Kitten

Another question, do you know which versions of these Bios are the best?

Or at least If spectre/meltdown patched are included in the latest bios from the official hp link?

I’m currently using NVME SSD in wifi port and I want to know if I/O and performance is affected due to spectre bios in newer bios…

Currently I think it’s working faster right now with the oldest bios but I don’t know if it’s a placebo haha

Anyway LOT OF THANKS for help me, if you need some w10 tweaks or I can help you in something I will be pleased.

Were s12 in my archive at all? Just .bin
ok, so replacing .bin with different version will work if I then recover the bios using latest bios ¿?

It is a BIOS problem only if the caps lock shows 2 or 6 leds.




the screen flashes 1 second and then black screen with power led and another led which is charging or powered led depending if battery is removed or not

Here in “Revision history” you can see the fixes related to all bios:

https://support.hp.com/us-en/drivers/sel…mId/ob-255012-1

sure these " Provides improved security." are related to spectre… but I don’t know

anyway there isn’t a lot of info about each bios update…

I’m sorry, I can’t know.

It depends on the microcode. It is likely that these vulnerabilities were patched in the latest BIOS versions. Since reverse engineering is difficult and I’m not sure if I can find information on this or that version of mCode, I can’t say. It will be easier if you check the performance on each BIOS one by one.

Perhaps, it is waterdamaged.

HOWTO Rollback to an Older HP Insyde BIOS.
Software method. Prerequisites and basic steps.

1. Prerequisites.
If you are an INTEL user.
In general: the thing is that you need a BIOS update SP (SoftPaq), or a specially formatted small BIOS file from it.
If you want to rollback to a previous BIOS version, you need to obtain a BIOS file from official source.
-NO any signature needed for downgrade if the process of updating your BIOS was meant by launching Windows executable. If you have one, it almost doubles your chances.

If you are an AMD user.
In general: the main thing is the BIOS update binary file you'd want to rollback to.
Obtain a BIOS file. It doesn't matter where it was taken, what extension it has and if it is encrypted or not. It just needs to be compatible to your device.
-NO any signature needed for downgrade if the process of updating your BIOS was meant by launching Windows executable. If you have one, it almost doubles your chances.

2. Steps.
In general: UEFI flashing or Legacy flashing.
A) Spoof BIOS version (UEFI).
Signature file is required! It can be extracted using the hewprsa included in the PHOENIX TOOL functionality. If you can't extract it or don't have it, go to method B.
As paddings in the BIOS structure are not protected by encryption, you can freely change the BIOS version without affecting the RSA signature. And all that needs to be done with the bios file is to increase the hexadecimal value of its version after the letter "F" higher than the currently installed version.
Can be done using H2OEZE or by locating next to "$bvdt" string using UEFITool.

bvdt.jpg

Once saved move edited BIOS file along with signature to the folder named "New" in created partition.Perform the UEFI flashing process by pressing Win+B key combo.

B) Patching flashing mode (Legacy).
This is the more complicated way to rollback, but more effecient too. Get a "InsydeFlash" aka "HPFlashWin" program compatible with your device. If you cannot - make a request. To proceed, you should have not only good computer skills, but also some experience in assembly. If you have not - make a request.
While editing InsydeFlash.exe and iscflashx32/64.dll make sure that you avoided these types of checks from being potentially executed: "The BIOS image is corrupted or does not contain the correct digital signature" and "Boot block cannot support to downgrade".
Open "platform.ini" and set value "FFF" to "AllowVersion" parameter.
What's more, there are the tested patches for the two most common patterns of choose function between UEFI and Legacy flashing modes that you need to apply if you still can't rollback.

OLD.jpg

NEW.jpg


3. Tips.
An abdication of responsibility and more.
Although I think that it is impossible to harm the device by doing this, I won't accept my responsibility for any kind of malfunction caused by your actions or occasionally. I recommend not trying anything described here unless absolutely necessary.
In the UEFI shell method, the support enviroment programs may not support all BIOSes, and the key combination may differ.
With regard to patching libraries, this information is provided for educational purposes and is not a real guide to action. It only determines what options for BIOS rollback are.



@Sweet_Kitten

done :slight_smile:

@Sweet_Kitten

May you send me a BIOS dump so I can see what hidden options are in bios and use with setup_var in efi shell ?

I want to check Intel DPTF ( Intel Dynamic Platform Thermal Framework )

thanks!

What program is used to see the hidden functions of each bios? I would like to try it

@sagael


I don’t know, @Lost_N_BIOS done it for me (different laptop) some time ago with textual output of BIOS options so you can use efi shell to enable/disable without modding the BIOS (in some bios)

Link to the post:

ACPI mod request for vga Intel UHD Graphics 600 detection (3)

try this method at the time but without success as my current bios has no hidden option to modify igpu behavior

I don’t like this bios.s12 file too. If I make modification to bios for example to update CPU microcode, this s12 file prevents to flash, it understands the file changed and stops bios update.

More in detail:

I have HP Pavilion - 15-cs3001nt it has the latest F.15 Rev.A dated Sep 22, 2021. It has microcode of cpu706E5_plat80_ver000000A6_2020-11-01_PRD_BC302391.bin in it. But, the latest is cpu706E5_plat80_ver000000A8_2021-05-26_PRD_5F2962F1.bin, I can not managed to find a way, I even tried HxD Hex editor but, after integrating the new one, date changes and the program understands that the image is not original.

Any ideas for this?

Signature file (s12) is the least of your problems. You can update BIOS without it, but the computer will not start with the modified BIOS.

bios.s12 read by the bios updating program, this file has an important role of making a kind of .sha check for the bios file. So, this control check by the .s12 file is the primary problem, not he least one!

After modifying bios, a new .sha check and a new .s12 file must have to be created. I have even tried saving the new file by changing the date, saved my new file exactly at the original bios date. But, this even did not allowed me to flash. .s12 file is not checking file save date, it checks within a special algorithm for the whole file!

If those types of bios files become dominant, sadly we can not use UBU bios updater for the future bioses. Thus, we must find a way to modify insyde h2o bios files, and maybe for many others too…

In my 086AA.s12 file I read with notepad:

Ꝼṍ搦鄿�冤⟊❷�ナ㫳懧ﲶ뺉맫䅐罤ꥸﻏ崑⷇殼駡ᕆ冡䱚볭枼얋緯౰掬糦�醝᝟춆馚ᄙꃛ枪橴悋끧豆硺镤ﲽ吕༙郃蔟鯓ܘ噶㨦訜憎㷵ᄄ㋧䳋얷溴�䂩ᑐ芧㏘斩䶣�ㇼ追몘಩�꺱ꈏ쌠繣盼䣎﮸笑ꦩצּ᫂歉㎍⒗擓쀴ྔñ疤╦覮꒱鯝幮槀⭸榤玮咳�ⵌ狞殪귱㞝迶鍡

And with hex editor:

7B A7 4D 1E 26 64 3F 91 DE DF A0 E0 A4 51 CA 27
77 27 EF DC 85 FF F3 3A E7 61 FD F4 B6 FC 89 BE
96 E4 EB B9 71 F2 50 41 64 7F 78 A9 17 F2 CF FE
11 5D C7 2D BC 6B E1 99 46 15 A1 51 5A 4C ED BC
BC 67 8B C5 25 E4 EF 7D 70 0C AC 63 E6 7C D3 DC
9D 91 5F 17 86 CD 9A 99 19 11 DB A0 25 E3 AA 67
74 6A 8B 60 67 B0 B4 E8 46 8C 7A 78 64 95 BD FC
15 54 19 0F C3 90 1F 85 D3 9B 18 07 AA E1 76 56
26 3A 1C 8A 8E 61 F5 3D 04 11 E7 32 CB 4C B7 C5
05 E7 B4 6E EE DB A9 40 50 14 A7 82 D8 33 A9 65
A3 4D 7B DE FC 31 FD 8F 98 BA A9 0C 53 DE C8 EA
B1 AE 0F A2 20 C3 F3 F8 63 7E FC 76 58 E5 CE 48
B8 FB 11 7B A9 A9 46 FB C2 1A 49 6B 8D 33 97 24
D3 64 34 C0 94 0F F1 00 A4 75 66 25 72 E8 AE 89
B1 A4 DD 9B 6E 5E C0 69 78 2B A4 69 AE 73 B3 54
CE DB 4C 2D DE 72 AA 6B F1 AD 9D 37 F6 8F 61 93

Bios file: https://ftp.hp.com/pub/softpaq/sp135501-136000/sp135593.exe

No. And I can prove it: give you an archive that will update your BIOS and change, for example, the BIOS version number to any text you choose. And all this without the SHA check. The BIOS will work, but I doubt that you will find an explanation why It won’t be if you change microcodes, because you still don’t understand the whole thing.

“because you still don’t understand the whole thing.” → Ha haa, I don’t think so! I am not a newbe, I am here for a long time. If you don’t have a HP computer, this is new to you, it is completely different. Insyde h2o bios has it’s high level protection against modifying!

@karakarga
But you haven’t modified any of the HP insyde BIOSes with signature check, have you?
[InsydeH20 F.49 REV3.7] Is it possible to unlock advanced menu!??

Thanks for your reply, Sweet Kitten. Rolling back is another issue. The reverted file nevertheless original HP bios file. Modifying a rom file is a step further!

I have checked web, no one find a solution for it, yet! ( Soon or later I hope… )

Here is a solution, [Guide] Unlock Insyde H2O BIOS with Checksum Control but,

@gao2001 said: Hewlett-Packard’s BIOS verification procedure is extremely complex. The algorithm and verification method are changed almost every year.

How extract properly bios to bin file, for HP Pavilion 15-n051su? After flash all work, but not screen! Thanks of advance