efiXloader

efiXloader is an IDA Pro loader module, responsible for processing UEFI drivers within single IDA Pro instance.

Features

UEFI drivers entry points identification

During UEFI drivers analysis efiXloader identifies each driver's entry.

Navigation between different UEFI drivers

Each UEFI driver is accessible within single IDA Pro instance for reverse-engineering.

UEFI drivers extraction

All processed UEFI drivers are dropped into prepared folder.

efiXplorer + efiXloader in action

All efiXplorer analysis capabilities can be applied to the whole UEFI firmware image.

Dependency graph

If you run efiXplorer analysis on whole firmware image opened with efiXloader, at the end of the analysis you will see a separate window with a graph of dependencies between DXE drivers.

Limitations

• supports only 64-bit UEFI drivers