How to search the memory for 8MB file?
I am trying to find a BIOS image that is created by a BIOS flash executable. Normally, the exec creates the image and then reboots to flash the system. I have found a way to prevent the restart in attempt to find and edit this image before flashing it. I know the image is present on the system because when I restart manually after running the exec, the BIOS is flashed. I have searched the computer repeatedly with viewing system files and hidden files enabled, and I cannot find the flash image. It should be a 8MB .ROM or .HDR file. My lack of success in finding it is leading me to believe that it is in fact stored in memory. How can I search for and then edit a file located in memory only? I thought of dumping the memory contents, but that would not solve the problem of having to edit the memory itself, which is where the BIOS would expect to see the flash image. Could anyone please tell me what I should try, or where I should ask to get ideas on what to try?
June 27th, 2012 7:17pm

That would be because some BIOSs have a special area that is reserved for updates. When you execute the .exe file, the BIOS image is not stored on the local hard drive, but is actually stored in a special area in the BIOS. When rebooted, the computer performs a checksum to ensure image consistence, backs up the current settings, copies over the new image, does another checksum and reboots again. This is why you can't find your BIOS image; it doesn't exist on your HDD.
Free Windows Admin Tool Kit Click here and download it now
June 27th, 2012 8:25pm

This topic is archived. No further replies will be accepted.

Other recent topics Other recent topics