search

baselsayeh / coldboot-tools

coldboot-tools
24 stars 4 forks source link

memimage64: Writing page failed #1

Closed MexHigh closed 3 years ago

MexHigh commented 3 years ago

I'm having issues with the dumping. The dumping process stays at 00% for some minutes and then prints

Write error at block XXX
Writing page 0 failed

for every memory segment. I've followed the instructions in the howto.txt in the latest release zip archive of memimage64.

Any known issues why this is not working?

baselsayeh commented 3 years ago

What's your bios info? Laptop/MB model? Supports EFI?

It may be the bios does not support writing directly to disk via bios interrupts (I have seen this with newer EFI comparable BIOSes)

MexHigh commented 3 years ago

UEFI Bios Version: N1QET51W (1.26), so yes EFI support, falling back at legacy boot when UEFI is not available. Machine Type Model: 20HES01R02. It's a Lenovo ThinkPad T470, i5-7300U.

baselsayeh commented 3 years ago

Can you try this USB image and take a screenshot/picture of the screen? (Email it to me if you don't want to send it here)

https://1drv.ms/u/s!AsqipXndfFycmTiJBbBs5VvQiK-y?e=hg2yuE

This is a 8GB USB image, write it using dd, or win32 disk imager

MexHigh commented 3 years ago

IMG_20210115_111029

IMG_20210115_111929

baselsayeh commented 3 years ago

@MexHigh I think i know the problem I think your BIOS does not support writing 32K at one time, or something is causing the disk driver in the BIOS not to respond after the first write

To verify: Try opening the file 'ram.img' into a hex editor, and replace these areas with zeros: From 0xFC00 to 0x10000. Save the file and try to dump the ram again.

After dumping (it will fail), re-open 'ram.img', go to 0xFC00. Is the whole area filled with zeros?

baselsayeh commented 3 years ago

in addition, can you try the provided binaries, capturing the screen? (copy them into the first partition and accept the over-write)

scraper64_test.zip

MexHigh commented 3 years ago

Thanks for your help. I'm going to look into it tomorrow.

MexHigh commented 3 years ago

@MexHigh I think i know the problem I think your BIOS does not support writing 32K at one time, or something is causing the disk driver in the BIOS not to respond after the first write

To verify: Try opening the file 'ram.img' into a hex editor, and replace these areas with zeros: From 0xFC00 to 0x10000. Save the file and try to dump the ram again.

After dumping (it will fail), re-open 'ram.img', go to 0xFC00. Is the whole area filled with zeros?

Yes, the area is filled with zeros. But the image was full of zeros in the first place, too.

in addition, can you try the provided binaries, capturing the screen? (copy them into the first partition and accept the over-write)

scraper64_test.zip

IMG_20210119_105814

Then it starts over with the next bytes. Same error: Giving up, cannot dump 1

baselsayeh commented 3 years ago

@MexHigh I think i know the problem I think your BIOS does not support writing 32K at one time, or something is causing the disk driver in the BIOS not to respond after the first write To verify: Try opening the file 'ram.img' into a hex editor, and replace these areas with zeros: From 0xFC00 to 0x10000. Save the file and try to dump the ram again. After dumping (it will fail), re-open 'ram.img', go to 0xFC00. Is the whole area filled with zeros?

Yes, the area is filled with zeros. But the image was full of zeros in the first place, too.

in addition, can you try the provided binaries, capturing the screen? (copy them into the first partition and accept the over-write) scraper64_test.zip

IMG_20210119_105814

Then it starts over with the next bytes. Same error: Giving up, cannot dump 1

Then i think your BIOS is incompatible, or for some reason, the BIOS cannot write to that flash drive. You can try dumping it over PXE, or use MartijnB's memcompress, which compresses the ram and uses linux to dump the compressed segments.

Simple instructions to use memcompress:

dumper.img.zip

MexHigh commented 3 years ago

Ok, thank you very much for your assistance.