Skip to content

efiXloader

Jump to bottom
yeggor edited this page Aug 11, 2021 · 5 revisions
Clone this wiki locally

efiXloader is an IDA Pro loader module, responsible for processing UEFI drivers within single IDA Pro instance.

loader_1.gif

Features

UEFI drivers entry points identification

During UEFI drivers analysis efiXloader identifies each driver's entry.

loader_2.gif

Navigation between different UEFI drivers

Each UEFI driver is accessible within single IDA Pro instance for reverse-engineering.

loader_3.gif

UEFI drivers extraction

All processed UEFI drivers are dropped into prepared folder.

loader_4.gif

efiXplorer + efiXloader in action

All efiXplorer analysis capabilities can be applied to the whole UEFI firmware image.

loader_5.gif

Dependency graph

If you run efiXplorer analysis on whole firmware image opened with efiXloader, at the end of the analysis you will see a separate window with a graph of dependencies between DXE drivers.

dep_graph.png

Limitations

  • supports only 64-bit UEFI drivers