UEFI tool

UEFITool is a cross-platform C++/Qt program for parsing, extracting and changing of UEFI-firmware-images. It supports parsing of complete BIOS images, beginning with the flash descriptor or any binary files that contain UEFI volume. In this article, we show how to query, for example, the containing Intel Microcode versions or the Build Date of a BIOS-image.

Download

UEFITool is compiled as available binary files for Windows and OSX. The source code can also be compiled by yourself (for example under Linux):

• UEFITool Releases (github.com)

Open BIOS-image and query Microcode versions

The following steps show how to query, for example, containing Intel Microcode versions:

• 
  Click on File -> Open image file... and select the desired BIOS-image.
• 
  The image is open. Now, click on the tab FIT (Firmware Interface Table).
• 
  The containing Microcode versions are now visible.

Reading out Build Date

The Build Date can either be made via GUID search (older BIOS image) or text search (newer BIOS image).

Reading out via GUID

Perform the following steps to query a Build Date of a BIOS-image via GUID search:

• 
  Click on Action -> Search...
• 
  Click on the tab GUID and enter the following string: AB56DC60-0057-11DA-A8DB-000102EEE626.
• 
  Perform a double click on the GUID pattern... entry in the search result.
• 
  Right-click on the entry at the top.AB56DC60-0057-11DA-A8DB-000102EEE626 and select Hex view...
• 
  The Build Date is now visible as shown.

Reading out via text with ASCII-coding

Perform the following steps for querying the Build Date via text search (ASCII-coding):

• 
  Click on Action -> Search...
• 
  Click on the tab Text and enter the assumed year of the Build Date.
• 
  Perform a double click on the entry SignOn/SignOn in the search result.
• 
  Right-click on the entry at the top. SignOn and select Hex view...
• 
  The Build Date is now visible as shown.

Reading out via text with Unicode-coding

Perform the following steps as described above and select the checkbox "Unicode" when searching.

Author: Werner Fischer Werner Fischer, working in the Knowledge Transfer team at Thomas-Krenn, completed his studies of Computer and Media Security at FH Hagenberg in Austria. He is a regular speaker at many conferences like LinuxTag, OSMC, OSDC, LinuxCon, and author for various IT magazines. In his spare time he enjoys playing the piano and training for a good result at the annual Linz marathon relay.

Translator: Alina Ranzinger Alina has been working at Thomas-Krenn.AG since 2024. After her training as multilingual business assistant, she got her job as assistant of the Product Management and is responsible for the translation of texts and for the organisation of the department.