UEFI Firmware Image Forensic Analysis
Short overview / tutorial on how UEFI firmware images can be aquired from your local system and thereafter analysed.A good book on this topic is: Book Rootkits and Bootkits, chapters 14-17 and 19.
Tools
UEFITool
Source: https://github.com/LongSoft/UEFITool
UEFITool is also able to load firmware images downloaded from vendor sites. E.g. the following Asus firmware update:
Chipsec
Links:
- https://github.com/chipsec/
- https://chipsec.github.io/
- How to install chipsec on a USB drive with UEFI Shell: https://chipsec.github.io/installation/USB%20with%20UEFI%20Shell.html
Run chipsec_main.py from UEFI Shell:
fs0:
cd chipsec
python368.efi chipsec_main.py
or chipsec_util.py:
python368.efi chipsec_util.py
Aquire a firmware (SPI) image with
chipsec_util.py spi dump image.bin
Image can be investigated with UEFITool and chipsec. The following command extracts all the contents of the firmware image into folders & files on the local filesystem:
python3 chipsec_util.py --skip_config -i --no_driver uefi decode ../asus_spi_image_20220731.bin
The following error message can be usually be ignored:
Error: Can not allocate memory
The above command for example creates a directory ../asus_spi_image_20220731.bin.dir/ with the following folders:
~/Downloads/asus_spi_image_20220731.bin.dir> tree -d
.
├── FV
│ ├── 00_8c8ce578-8a3d-4f1c-9935-896185c32dd3.dir
│ │ └── 00_cef5b9a3-476d-497f-9fdc-e98143e0422c.FV_RAW.dir
│ ├── 01_8c8ce578-8a3d-4f1c-9935-896185c32dd3.dir
│ │ ├── 00_ffffffff-ffff-ffff-ffff-ffffffffffff.FV_FFS_PAD.dir
│ │ └── 01_ff810ec8-8c55-401b-9f87-fc34bd760ae2.FV_MM.dir
│ ├── 02_8c8ce578-8a3d-4f1c-9935-896185c32dd3.dir
│ │ ├── 00_ffffffff-ffff-ffff-ffff-ffffffffffff.FV_FFS_PAD.dir
│ │ ├── 01_414d94ad-998d-47d2-bfcd-4e882241de32.FV_FREEFORM.dir
│ │ ├── 02_17088572-377f-44ef-8f4e-b09fff46a070.FV_RAW.dir
│ │ └── 03_9e21fd93-9c72-4c15-8c4b-e77f1db2d792.FV_FVIMAGE.dir
│ │ └── 00_S_GUID_DEFINED.dir
│ │ └── 01_S_FV_IMAGE.dir
│ │ ├── 00_ffffffff-ffff-ffff-ffff-ffffffffffff.FV_FFS_PAD.dir
│ │ ├── 01_fc510ee7-ffdc-11d4-bd41-0080c73c8881.FV_FREEFORM.dir
│ │ ├── 02_ab7ed12e-1d78-4635-ab87-23f00a911ec7.FV_DRIVER.dir
│ │ ├── 03_d6a2cb7f-6a18-4e2f-b43b-9920a733700a.FV_DXE_CORE.dir
│ │ │ └── 00_S_GUID_DEFINED.dir
│ │ ├── 04_8f4b8f82-9b91-4028-86e6-f4db7d4c1dff.FV_DRIVER.dir
│ │ ├── 05_53bcc14f-c24f-434c-b294-8ed2d4cc1860.FV_DRIVER.dir
│ │ ├── 06_9b680fce-ad6b-4f3a-b60b-f59899003443.FV_DRIVER.dir
│ │ ├── 07_cd3bafb6-50fb-4fe8-8e4e-ab74d2c1a600.FV_DRIVER.dir
│ │ ├── 08_13ac6dd0-73d0-11d4-b06b-00aa00bd6de7.FV_DRIVER.dir
│ │ ├── 09_348c4d62-bfbd-4882-9ece-c80bb1c4783b.FV_DRIVER.dir
│ │ ├── 100_0718ad81-f26a-4850-a6ec-f268e309d707.FV_DRIVER.dir
│ │ ├── 101_4c8bdf60-2085-4577-8a46-96cb180967bc.FV_DRIVER.dir
│ │ ├── 102_580dd900-385d-11d7-883a-00500473d4eb.FV_DRIVER.dir
│ │ ├── 103_4c006cd9-19ba-4617-8483-609194a1acfc.FV_DRIVER.dir
│ │ ├── 104_5c403b01-8c30-4e68-96a0-55612f9c32b9.FV_DRIVER.dir
│ │ ├── 105_fc740d58-59ba-429b-99ef-627051737b76.FV_DRIVER.dir
│ │ ├── 106_a7c619ff-9a64-4a89-947b-e7953e2427cb.FV_DRIVER.dir
│ │ ├── 107_54b070f3-9eb8-47cc-adaf-39029c853cbb.FV_DRIVER.dir
│ │ ├── 108_42857f0a-13f2-4b21-8a23-53d3f714b840.FV_DRIVER.dir
│ │ ├── 109_b601f8c4-43b7-4784-95b1-f4226cb40cee.FV_DRIVER.dir
│ │ ├── 10_f80697e9-7fd6-4665-8646-88e33ef71dfc.FV_DRIVER.dir
│ │ ├── 110_e23f86e1-056e-4888-b685-cfcd67c179d4.FV_DRIVER.dir
│ │ ├── 111_918aba30-3d8d-4bb5-b849-45cc4fc7de7c.FV_DRIVER.dir
│ │ ├── 112_bb1fbd4f-2e30-4793-9bed-74f672bc8ffe.FV_DRIVER.dir
│ │ ├── 113_a0bad9f7-ab78-491b-b583-c52b7f84b9e0.FV_DRIVER.dir
│ │ ├── 114_c194c6ea-b68c-4981-b64b-9bd271474b20.FV_DRIVER.dir
│ │ ├── 115_9a9a912b-5f53-4586-8820-704485a29d21.FV_DRIVER.dir
│ │ ├── 116_77eb6c06-fd48-488b-a1b3-ae0a70801369.FV_DRIVER.dir
│ │ ├── 117_768bedfd-7b4b-4c9f-b2ff-6377e3387243.FV_DRIVER.dir
│ │ ├── 118_ad3d267d-50e1-4b94-95d3-1025ef5b8391.FV_DRIVER.dir
│ │ ├── 119_bb8c2cf3-a5e3-49ef-941b-4a01fac6fd5f.FV_DRIVER.dir
│ │ ├── 11_c10194e7-deb2-4af4-9eee-bffde4d7d4c7.FV_DRIVER.dir
│ │ ├── 120_2fa2a6da-11d5-4dc3-999a-749648b03c56.FV_DRIVER.dir
│ │ ├── 121_c7a7030c-c3d8-45ee-bed9-5d9e76762953.FV_DRIVER.dir
│ │ ├── 122_8a2fdfc3-0395-442c-b9f7-9a3d69d2094c.FV_DRIVER.dir
│ │ ├── 123_08a2ca63-3b65-472c-874e-5e138e947324.FV_DRIVER.dir
│ │ ├── 124_a3eaab3c-ba3a-4524-9dc7-7e339996f496.FV_DRIVER.dir
│ │ ├── 125_628a497d-2bf6-4264-8741-069dbd3399d6.FV_DRIVER.dir
│ │ ├── 126_43e7abdd-e352-4cfb-a230-4cdc1d350e5c.FV_DRIVER.dir
│ │ ├── 127_6b38f7b4-ad98-40e9-9093-aca2b5a253c4.FV_DRIVER.dir
│ │ ├── 128_1fa1f39e-feff-4aae-bd7b-38a070a3b609.FV_DRIVER.dir
│ │ ├── 129_8f5a2e02-538c-4d59-b920-c4786acbc552.FV_DRIVER.dir
│ │ ├── 12_b03abacf-a532-5e78-aca0-b11f765b3afd.FV_DRIVER.dir
│ │ ├── 130_aaecdc89-2a49-46f1-a163-f7979c039998.FV_DRIVER.dir
│ │ ├── 13_116e1acf-2533-4cc2-820a-bbc10a2ab07c.FV_MM.dir
│ │ ├── 131_5fecef6b-5fa4-4570-8163-0cf72a9c04c5.FV_DRIVER.dir
│ │ ├── 132_3c1de39f-d207-408a-aacc-731cfb7f1dd7.FV_DRIVER.dir
│ │ ├── 133_a2f436ea-a127-4ef8-957c-8048606ff670.FV_DRIVER.dir
│ │ ├── 134_a210f973-229d-4f4d-aa37-9895e6c9eaba.FV_DRIVER.dir
│ │ ├── 135_025bbfc7-e6a9-4b8b-82ad-6815a1aeaf4a.FV_DRIVER.dir
│ │ ├── 136_529d3f93-e8e9-4e73-b1e1-bdf6a9d50113.FV_DRIVER.dir
│ │ ├── 137_94734718-0bbc-47fb-96a5-ee7a5ae6a2ad.FV_DRIVER.dir
│ │ ├── 138_26841bde-920a-4e7a-9fbe-637f477143a6.FV_DRIVER.dir
│ │ ├── 139_9fb1a1f3-3b71-4324-b39a-745cbb015fff.FV_DRIVER.dir
│ │ ├── 140_dc3641b8-2fa8-4ed3-bc1f-f9962a03454b.FV_DRIVER.dir
│ │ ├── 141_6d6963ab-906d-4a65-a7ca-bd40e5d6af2b.FV_DRIVER.dir
│ │ ├── 142_25acf158-dd61-4e64-9a49-55851e9a26c7.FV_DRIVER.dir
│ │ ├── 143_29cf55f8-b675-4f5d-8f2f-b87a3ecfd063.FV_DRIVER.dir
│ │ ├── 144_2f72309e-d5b0-4a9d-84a9-1ab38c698f78.FV_DRIVER.dir
│ │ ├── 145_0c989d41-f4b4-4244-9d7f-e9ffb4163273.FV_DRIVER.dir
│ │ ├── 146_961578fe-b6b7-44c3-af35-6bc705cd2b1f.FV_DRIVER.dir
│ │ ├── 147_e94f54cd-81eb-47ed-aec3-856f5dc157a9.FV_MM_CORE.dir
│ │ ├── 148_0c375a90-4c4c-4428-8ea0-531be8959bf7.FV_MM.dir
│ │ ├── 149_447a1b58-8f3e-4658-abaa-9e7b2280b90a.FV_MM.dir
│ │ ├── 14_bae7599f-3c6b-43b7-bdf0-9ce07aa91aa6.FV_DRIVER.dir
│ │ ├── 150_842a454a-75e5-408b-8b1c-36420e4e3f21.FV_MM.dir
│ │ ├── 151_a47ee2d8-f60e-42fd-8e58-7bd65ee4c29b.FV_MM.dir
│ │ ├── 152_a3ff0ef5-0c28-42f5-b544-8c7de1e80014.FV_MM.dir
│ │ ├── 153_e21f35a8-42ff-4050-82d6-93f7cdfa7073.FV_MM.dir
│ │ ├── 154_d933dede-0260-4e76-a7d9-2f9f2440e5a5.FV_MM.dir
│ │ ├── 155_c99e42d0-4964-4b09-b924-4a59e13e4f04.FV_MM.dir
│ │ ├── 156_6298fe18-d5ef-42b7-bb0c-2953283f5704.FV_MM.dir
│ │ ├── 157_750890a6-7acf-4f4f-81bd-b400c2bea95a.FV_MM.dir
│ │ ├── 158_6d4baa0b-f431-4370-af19-99d6209239f6.FV_MM.dir
│ │ ├── 15_87d402cd-8b07-4b93-b38b-f8799f28b033.FV_DRIVER.dir
│ │ ├── 159_77a6009e-116e-464d-8ef8-b35201a022dd.FV_MM.dir
│ │ ├── 160_8f0b5301-c79b-44f1-8fd3-26d73e316700.FV_MM.dir
│ │ ├── 161_63296c52-01cf-4eea-a47c-782a14da6894.FV_MM.dir
│ │ ├── 162_2d1e361c-7b3f-4d15-8b1f-66e551fabdc7.FV_MM.dir
│ │ ├── 163_2374eddf-f203-4fc0-a20e-61bad73089d6.FV_MM.dir
│ │ ├── 164_d7b10d4e-67e6-4c74-83e9-f9af0acc33cc.FV_MM.dir
│ │ ├── 165_b0d6ed53-b844-43f5-bd2f-61095264e77e.FV_MM.dir
│ │ ├── 166_59287178-59b2-49ca-bc63-532b12ea2c53.FV_MM.dir
│ │ ├── 167_27f4917b-a707-4aad-9676-26df168cbf0d.FV_MM.dir
│ │ ├── 168_f2d1f1c5-ed6d-4e95-ae50-9f2d6ddc9050.FV_MM.dir
│ │ ├── 169_9173c39b-08da-429a-be15-0f7481cf72ce.FV_MM.dir
│ │ ├── 16_e4ecd0b2-e277-4f2b-becb-e4d75c9a812e.FV_DRIVER.dir
│ │ ├── 170_61ed3d94-30d8-408c-97df-dedf2740f630.FV_DRIVER.dir
│ │ ├── 171_b19ef33c-10a6-4066-9217-8e5ee011a52f.FV_MM.dir
│ │ ├── 172_921cd783-3e22-4579-a71f-00d74197fcc8.FV_MM.dir
│ │ ├── 173_bc3245bd-b982-4f55-9f79-056ad7e987c5.FV_MM.dir
│ │ ├── 174_2ad511c7-1b60-4002-841d-2998ddc138ee.FV_MM.dir
│ │ ├── 175_75189fa6-7bcf-4f4f-81bd-a4f1c3bea95a.FV_MM.dir
│ │ ├── 176_8434da1f-5ceb-402e-a93c-038cbe0f3f0e.FV_MM.dir
│ │ ├── 177_be216ba8-38c4-4535-a6ca-5dca5b43addf.FV_MM.dir
│ │ ├── 178_4a6d890f-93c3-4b6d-a67d-5f2c4dce347b.FV_MM.dir
│ │ ├── 179_f44875ab-b9fc-4578-a280-aa335b49967c.FV_MM.dir
│ │ ├── 17_b98999a4-e96f-475a-99fc-762126f50f5a.FV_DRIVER.dir
│ │ ├── 180_316b1230-0500-4592-8c09-eaba0fb6b07f.FV_MM.dir
│ │ ├── 181_f3331de6-4a55-44e4-b767-7453f7a1a021.FV_MM.dir
│ │ ├── 182_3370a4bd-8c23-4565-a2a2-065feede6080.FV_MM.dir
│ │ ├── 18_24ccd374-3df6-4181-86f6-e3c66920a145.FV_DRIVER.dir
│ │ ├── 183_e2a74738-8934-48f5-8412-99e948c8dc1b.FV_MM.dir
│ │ ├── 184_bc327dbd-b982-4f55-9f79-056ad7e987c5.FV_MM.dir
│ │ ├── 185_33fb3535-f15e-4c17-b303-5eb94595ecb6.FV_MM.dir
│ │ ├── 186_330aa623-79e7-467c-81aa-de9ee0f96a52.FV_MM.dir
│ │ ├── 187_fd93f9e1-3c73-46e0-b7b8-2bba3f718f6c.FV_MM.dir
│ │ ├── 188_04eaaaa1-29a1-11d7-8838-00500473d4eb.FV_MM.dir
│ │ ├── 189_221f1d4f-034c-4bea-b2bb-b7a9672b06d7.FV_MM.dir
│ │ ├── 190_b6dd6150-70b2-4db4-ad9a-3c7c2b04e580.FV_MM.dir
│ │ ├── 191_6f4e7bdf-fc84-4bc4-bb23-884ac2ed87fa.FV_MM.dir
│ │ ├── 192_22046d50-f390-498c-92e5-5ba4f8e7f8b6.FV_FREEFORM.dir
│ │ ├── 193_60e31de1-03ec-492a-9598-65a3c50e0f6b.FV_FREEFORM.dir
│ │ ├── 194_ea139578-fea0-4dd2-91b5-6953819ef1e4.FV_FREEFORM.dir
│ │ ├── 195_2820908b-87f6-446b-a100-74eee36e2918.FV_FREEFORM.dir
│ │ ├── 19_5c266089-e103-4d43-9ab5-12d7095be2af.FV_DRIVER.dir
│ │ ├── 196_4b57ca25-395f-4e31-b2e4-6772020618d4.FV_FREEFORM.dir
│ │ ├── 197_3bbb09da-1e0f-469b-8997-d440f101d6f1.FV_FREEFORM.dir
│ │ ├── 198_c118f50d-391d-45f4-b3d3-11bc931aa56d.FV_FREEFORM.dir
│ │ ├── 199_e25f8fbe-a34d-47d4-bec0-188d9e0454d3.FV_FREEFORM.dir
│ │ ├── 200_cacb3817-81e6-497e-87ff-c8fa8f24ec28.FV_FREEFORM.dir
│ │ ├── 201_cbcb3817-81e6-497e-87ff-c8fa8f24ec28.FV_FREEFORM.dir
│ │ ├── 202_63819805-67bb-46ef-aa8d-1524a19a01e4.FV_FREEFORM.dir
│ │ ├── 203_a08276ec-a0fe-4e06-8670-385336c7d093.FV_FREEFORM.dir
│ │ ├── 204_e998c6d8-572b-4e18-96cc-031ea3dd558c.FV_FREEFORM.dir
│ │ ├── 205_2b8a4061-9131-4d2a-a20b-d845d0eb1d83.FV_FREEFORM.dir
│ │ ├── 206_142204e2-c7b1-4af9-a729-923758d96d03.FV_FREEFORM.dir
│ │ ├── 207_0aa31bc6-3379-41e8-825a-53f82cc0f254.FV_FREEFORM.dir
│ │ ├── 208_7d113aa9-6280-48c6-bace-dfe7668e8307.FV_FREEFORM.dir
│ │ ├── 209_b733c141-e88f-4786-94af-8b87bc4867fe.FV_FREEFORM.dir
│ │ ├── 20_b7d19491-e55a-470d-8508-85a5dfa41974.FV_DRIVER.dir
│ │ ├── 210_196ddab1-8869-4a7a-9c78-04f4e3357f4e.FV_FREEFORM.dir
│ │ ├── 211_d73db4f7-8e0c-4447-807a-bb62214e4610.FV_FREEFORM.dir
│ │ ├── 212_9f1d46c5-9ac8-4e28-8d51-4ec0c6a5b8fa.FV_FREEFORM.dir
│ │ ├── 213_85efe237-e80c-4714-b730-3bc034a07d7f.FV_FREEFORM.dir
│ │ ├── 214_58c876c3-1257-4d80-91cd-79d89549b4af.FV_FREEFORM.dir
│ │ ├── 215_6f9867f9-5cf8-4ccb-8739-8f8002f028ab.FV_FREEFORM.dir
│ │ ├── 216_7bb28b99-61bb-11d5-9a5d-0090273fc14d.FV_FREEFORM.dir
│ │ ├── 217_0a22794e-69d4-42f8-b75b-2ebbf612f317.FV_FREEFORM.dir
│ │ ├── 218_51e778f1-0c9a-48cc-a357-b12055fdff4f.FV_FREEFORM.dir
│ │ ├── 219_d4b11432-b4ef-47bc-af02-0e64d20218ac.FV_FREEFORM.dir
│ │ ├── 21_d7e31ecb-0a17-4529-9b84-c529de8e1c0e.FV_DRIVER.dir
│ │ ├── 220_0c6f855a-8b0a-4b35-b5cd-a48fd8279e75.FV_FREEFORM.dir
│ │ ├── 221_9cc05d28-7f7f-482b-8f3f-4bbdb58f042b.FV_FREEFORM.dir
│ │ ├── 222_a22e25dc-1277-47b8-a59c-da1344f4a111.FV_FREEFORM.dir
│ │ ├── 223_62b35dc0-427c-46bb-9e88-9b941fdbc7c3.FV_FREEFORM.dir
│ │ ├── 224_61422d26-81ec-47ff-b6cf-939eaee73fba.FV_DRIVER.dir
│ │ ├── 225_db08f6ca-3048-4cd8-9b1f-20bed33ecfe7.FV_MM.dir
│ │ ├── 226_cbc59c4a-383a-41eb-a8ee-4498aea567e4.FV_DRIVER.dir
│ │ ├── 227_1807040d-5934-41a2-a088-8e0f777f71ab.FV_DRIVER.dir
│ │ ├── 228_80cf7257-87ab-47f9-a3fe-d50b76d89541.FV_DRIVER.dir
│ │ ├── 229_91b4d9c1-141c-4824-8d02-3c298e36eb3f.FV_DRIVER.dir
│ │ │ └── 01_S_GUID_DEFINED.dir
│ │ ├── 22_c07a1eb5-5c04-4100-817b-0a11bb5f15dc.FV_DRIVER.dir
│ │ ├── 230_26a2481e-4424-46a2-9943-cc4039ead8f8.FV_DRIVER.dir
│ │ ├── 231_5cc66692-3fb0-4643-acb5-a8817fcad842.FV_FREEFORM.dir
│ │ ├── 23_2bded685-f733-455f-a840-43a22b791fb3.FV_DRIVER.dir
│ │ ├── 232_c38fb0e2-0c43-49c9-b544-9b17aa4dcba3.FV_FREEFORM.dir
│ │ ├── 233_27e569d5-0afc-4d8f-8c90-783ac4a318ab.FV_FREEFORM.dir
│ │ ├── 234_aaa99a23-13b6-4c31-bb8b-299e8ec04fa4.FV_FREEFORM.dir
│ │ ├── 235_5aab83e5-f027-4ca7-bfd0-16358cc9e453.FV_DRIVER.dir
│ │ ├── 236_9a8f82d5-39b1-48da-92dc-a22da8834df6.FV_FREEFORM.dir
│ │ ├── 237_24a44caf-0bf2-4514-90c4-c794b3e778f5.FV_DRIVER.dir
│ │ ├── 238_a59a0056-3341-44b5-9c9c-6d76f7673817.FV_FREEFORM.dir
│ │ ├── 239_12bfca88-7a2f-4ab5-9a5d-c40ca68bf75f.FV_FREEFORM.dir
│ │ ├── 240_7b9a0a12-42f8-4d4c-82b6-32f0ca1953f4.FV_FREEFORM.dir
│ │ ├── 241_3237418a-478c-4700-b59f-768e2ccbc726.FV_DRIVER.dir
│ │ ├── 242_80d7491a-f7d9-479d-a8f7-1b393b02ed66.FV_DRIVER.dir
│ │ ├── 243_534f73cf-0937-418a-90c7-4f1079dcaed1.FV_DRIVER.dir
│ │ ├── 244_4551f2f5-c684-4f27-936f-c7b04a5c5ff1.FV_DRIVER.dir
│ │ ├── 245_daf4bf89-ce71-4917-b522-c89d32fbc59f.FV_FREEFORM.dir
│ │ ├── 246_a19b1fe7-c1bc-49f8-875f-54a5d542443f.FV_DRIVER.dir
│ │ ├── 247_16271fca-55d9-4a33-93fc-5a3eb128deb6.FV_DRIVER.dir
│ │ ├── 248_e35a40e9-d4be-4f4d-aba7-22c29cae0be1.FV_DRIVER.dir
│ │ ├── 249_563413a6-9dd1-4b7f-9e7c-5536e92aa55a.FV_DRIVER.dir
│ │ ├── 24_fc90eb7a-3e0a-483c-a26c-484d36593ff4.FV_DRIVER.dir
│ │ ├── 250_dba5b11b-8686-43dd-8850-854fd3d4b244.FV_DRIVER.dir
│ │ ├── 25_1314216c-cb8d-421c-b854-06231386e642.FV_DRIVER.dir
│ │ ├── 251_dac2b117-b5fb-4964-a312-0dcc77061b9b.FV_FREEFORM.dir
│ │ ├── 252_9221315b-30bb-46b5-813e-1b1bf4712bd3.FV_FREEFORM.dir
│ │ │ └── 00_S_GUID_DEFINED.dir
│ │ ├── 253_7e96e2b1-05d9-4592-b0ae-7672d506aeb7.FV_DRIVER.dir
│ │ │ └── 00_S_COMPRESSION.dir
│ │ ├── 254_b1da0adf-4f77-4070-a88e-bffe1c60529a.FV_DRIVER.dir
│ │ │ └── 00_S_GUID_DEFINED.dir
│ │ ├── 255_365c62ba-05ef-4b2e-a7f7-92c1781af4f9.FV_FREEFORM.dir
│ │ │ └── 00_S_GUID_DEFINED.dir
│ │ ├── 256_7934156d-cfce-460e-92f5-a07909a59eca.FV_RAW.dir
│ │ ├── 257_cc0f8a3f-3dea-4376-9679-5426ba0a907e.FV_FREEFORM.dir
│ │ │ └── 00_S_GUID_DEFINED.dir
│ │ ├── 258_9fe7de69-0aea-470a-b50a-139813649189.FV_FREEFORM.dir
│ │ │ └── 00_S_GUID_DEFINED.dir
│ │ ├── 259_fbf95065-427f-47b3-8077-d13c60710998.FV_FREEFORM.dir
│ │ │ └── 00_S_GUID_DEFINED.dir
│ │ ├── 260_9d7a05e9-f740-44c3-858b-75586a8f9c8e.FV_FREEFORM.dir
│ │ │ └── 00_S_GUID_DEFINED.dir
│ │ ├── 261_ead039a6-7390-411d-a9de-e5294b25b897.FV_APPLICATION.dir
│ │ │ └── 00_S_COMPRESSION.dir
│ │ ├── 262_057ad6b7-3525-40c8-9d21-552642894e3a.FV_APPLICATION.dir
│ │ │ └── 00_S_COMPRESSION.dir
│ │ ├── 263_5bba83e6-f027-4ca7-bfd0-16358cc9e123.FV_DRIVER.dir
│ │ │ └── 00_S_COMPRESSION.dir
│ │ ├── 264_878ac2cc-5343-46f2-b563-51f89daf56ba.FV_RAW.dir
│ │ ├── 265_a0327fe0-1fda-4e5b-905d-b510c45a61d0.FV_DRIVER.dir
│ │ │ └── 00_S_GUID_DEFINED.dir
│ │ ├── 26_62d171cb-78cd-4480-8678-c6a2a797a8de.FV_DRIVER.dir
│ │ ├── 27_f7731b4c-58a2-4df4-8980-5645d39ece58.FV_DRIVER.dir
│ │ ├── 28_15b9b6da-00a9-4de7-b8e8-ed7afb88f16e.FV_DRIVER.dir
│ │ ├── 29_ff917e22-a228-448d-bdaa-68efccdda5d3.FV_DRIVER.dir
│ │ ├── 30_10b12add-f5e2-cc78-5ca0-b77f76223acd.FV_DRIVER.dir
│ │ ├── 31_6db9486f-6af6-4090-984d-238482ce3ea4.FV_DRIVER.dir
│ │ ├── 32_8d6756b9-e55e-4d6a-a3a5-5e4d72ddf772.FV_DRIVER.dir
│ │ ├── 33_de23acee-cf55-4fb6-aa77-984ab53de811.FV_DRIVER.dir
│ │ ├── 34_eda39402-f375-4496-92d3-83b43cb8a76a.FV_DRIVER.dir
│ │ ├── 35_1323c7f8-dad5-4126-a54b-7a05fbf41515.FV_DRIVER.dir
│ │ ├── 36_67a54a24-3f4f-4048-8787-3e5aa2a0b7d2.FV_DRIVER.dir
│ │ ├── 37_bfd59d42-fe0f-4251-b772-4b098a1aec85.FV_DRIVER.dir
│ │ ├── 38_c1c418f9-591d-461c-82a2-b9cd96dfea86.FV_DRIVER.dir
│ │ ├── 39_de23acee-cf55-4fb6-aa77-984ab53de823.FV_DRIVER.dir
│ │ ├── 40_bb65942b-521f-4ec3-baf9-a92540cf60d2.FV_DRIVER.dir
│ │ ├── 41_fc1b7640-3466-4c06-b1cc-1c935394b5c2.FV_DRIVER.dir
│ │ ├── 42_90cb75db-71fc-489d-aacf-943477ec7212.FV_DRIVER.dir
│ │ ├── 43_e052d8a6-224a-4c32-8d37-2e0ae162364d.FV_DRIVER.dir
│ │ ├── 44_c810485e-d0ec-4e98-aab5-120c7e554428.FV_DRIVER.dir
│ │ ├── 45_32c1c9f8-d53f-41c8-94d0-f6739f231011.FV_DRIVER.dir
│ │ ├── 46_55e76644-78a5-4a82-a900-7126a5798892.FV_DRIVER.dir
│ │ ├── 47_5820eeb4-c135-4854-9d2a-aa9efc4475e9.FV_DRIVER.dir
│ │ ├── 48_28d46803-7646-4dfe-90ed-8575584ed6e6.FV_DRIVER.dir
│ │ ├── 49_ca5e3df0-940a-48f1-8c14-db2fb5998b36.FV_DRIVER.dir
│ │ ├── 50_d2bc3092-92bb-4b21-a26b-ce6f7c3e9857.FV_DRIVER.dir
│ │ ├── 51_d27ac0e1-d553-4c59-bcfe-89e5ffe9bea6.FV_DRIVER.dir
│ │ ├── 52_887720a3-a59d-432e-afa7-43ad06f706cd.FV_DRIVER.dir
│ │ ├── 53_088e4724-e941-4cbd-9df3-158b3eacc450.FV_DRIVER.dir
│ │ ├── 54_6b9a0966-420a-4000-a4ed-b1a8f8fffb02.FV_DRIVER.dir
│ │ ├── 55_42347882-5025-4b3f-bed6-2b479215248b.FV_DRIVER.dir
│ │ ├── 56_5507247a-846b-4f22-b55f-72b4049435ef.FV_DRIVER.dir
│ │ ├── 57_290ea249-6e88-423c-b0da-75cdde7920cc.FV_DRIVER.dir
│ │ ├── 58_773cb08b-511a-4bd5-85ad-41d4f4b64a52.FV_DRIVER.dir
│ │ ├── 59_908c3852-b61b-4f26-ab66-f74f97e7dc1c.FV_DRIVER.dir
│ │ ├── 60_a8c67255-e029-4b1a-968e-eca6e9c11c73.FV_DRIVER.dir
│ │ ├── 61_4f4ff580-b8a0-4332-a6b0-e2e568e36c9c.FV_DRIVER.dir
│ │ ├── 62_d77c900d-a1c7-41c5-b989-0c3d37fca432.FV_DRIVER.dir
│ │ ├── 63_67820532-7613-4dd3-9ed7-3d9be3a7da63.FV_DRIVER.dir
│ │ ├── 64_0639408b-19a6-4b5d-bafb-12a2f5114032.FV_DRIVER.dir
│ │ ├── 65_899407d7-99fe-43d8-9a21-79ec328cac21.FV_DRIVER.dir
│ │ ├── 66_16d0a23e-c09c-407d-a14a-ad058fdd0ca1.FV_DRIVER.dir
│ │ ├── 67_dc2aa475-f939-48bb-9d74-7f2d629c1111.FV_DRIVER.dir
│ │ ├── 68_00364a4c-6a0a-4f08-8ffd-0937f3dbb13e.FV_DRIVER.dir
│ │ ├── 69_76d5cf91-0c55-434e-97c2-d2825c82e610.FV_DRIVER.dir
│ │ ├── 70_2ce5604f-a982-4d2e-8fd0-d1600c2e1515.FV_DRIVER.dir
│ │ ├── 71_502b04f3-71ab-47b4-beae-4736ea190aa4.FV_DRIVER.dir
│ │ ├── 72_271b424e-a4cc-4e0e-90a2-7ea4841f12f3.FV_DRIVER.dir
│ │ ├── 73_1a7e4468-2f55-4a56-903c-01265eb7622b.FV_DRIVER.dir
│ │ ├── 74_b95e9fda-26de-48d2-8807-1f9107ac5e3a.FV_DRIVER.dir
│ │ ├── 75_21891a9e-763e-4377-8841-8d5c90d88c51.FV_DRIVER.dir
│ │ ├── 76_5bedb5cc-d830-4eb2-8742-2d4cc9b54f2c.FV_DRIVER.dir
│ │ ├── 77_d912c7bc-f098-4367-92ba-e911083c7b0e.FV_DRIVER.dir
│ │ ├── 78_95e3669d-34be-4775-a651-7ea41b69d89e.FV_DRIVER.dir
│ │ ├── 79_99f03b99-98d8-49dd-a8d3-3219d0ffe41e.FV_DRIVER.dir
│ │ ├── 80_9f3a0016-ae55-4288-829d-d55fd3aac347.FV_DRIVER.dir
│ │ ├── 81_70e1a818-0be1-4449-bfd4-9ef68c7f02a8.FV_DRIVER.dir
│ │ ├── 82_97af1d95-203c-42de-8d6b-d13eb7e5a55a.FV_DRIVER.dir
│ │ ├── 83_a062cf1f-8473-4aa3-8793-600bc4ffe9a8.FV_DRIVER.dir
│ │ ├── 84_b7ee4835-84ce-4b15-bf52-2d11574ce470.FV_DRIVER.dir
│ │ ├── 85_d57c852e-809f-45cf-a377-d77bc0cb78ee.FV_DRIVER.dir
│ │ ├── 86_a9b700cf-019e-4d8b-a3a7-88e1ea01699e.FV_DRIVER.dir
│ │ ├── 87_6d1d13b3-8874-4e92-aed5-22fc7c4f7391.FV_DRIVER.dir
│ │ ├── 88_84e7016d-1eb8-4637-b01e-9eed018c7ae0.FV_DRIVER.dir
│ │ ├── 89_59af16b0-661d-4865-a381-38de68385d8d.FV_DRIVER.dir
│ │ ├── 90_8f3f1de2-2fe4-4d5c-a8ec-49e8cca17ebc.FV_DRIVER.dir
│ │ ├── 91_b13edd38-684c-41ed-a305-d7b7e32497df.FV_DRIVER.dir
│ │ ├── 92_cef68c66-06ab-4fb3-a3ed-5ffa885b5725.FV_DRIVER.dir
│ │ ├── 93_ded7956d-7e20-4f20-91a1-190439b04d5b.FV_DRIVER.dir
│ │ ├── 94_5e9caba3-f2b1-497a-adac-24f575e9cde9.FV_DRIVER.dir
│ │ ├── 95_196ca3d8-9a5a-4735-b328-8ffc1d93d188.FV_DRIVER.dir
│ │ ├── 96_50f6096d-7c98-4c78-9a1d-c5a1833b6a88.FV_DRIVER.dir
│ │ ├── 97_a29a63e3-e4e7-495f-8a6a-07738300cbb3.FV_DRIVER.dir
│ │ ├── 98_2688b232-9c02-4c12-be1f-857c0ff2aae3.FV_DRIVER.dir
│ │ └── 99_858ebe6f-360f-415b-b7dc-463aaeb03412.FV_DRIVER.dir
│ ├── 03_8c8ce578-8a3d-4f1c-9935-896185c32dd3.dir
│ │ ├── 00_ffffffff-ffff-ffff-ffff-ffffffffffff.FV_FFS_PAD.dir
│ │ ├── 01_ffffffff-ffff-ffff-ffff-ffffffffffff.FV_FFS_PAD.dir
│ │ └── 02_b52282ee-9b66-44b9-b1cf-7e5040f787c1.FV_RAW.dir
│ └── 04_8c8ce578-8a3d-4f1c-9935-896185c32dd3.dir
│ ├── 00_ffffffff-ffff-ffff-ffff-ffffffffffff.FV_FFS_PAD.dir
│ ├── 01_1b45cc0a-156a-428a-af62-49864da0e6e6.FV_FREEFORM.dir
│ ├── 02_7eb7126d-c45e-4bd0-9357-7f507c5c9cf9.FV_PEIM.dir
│ ├── 03_52c05b14-0b98-496c-bc3b-04b50211d680.FV_PEI_CORE.dir
│ ├── 04_c779f6d8-7113-4aa1-9648-eb1633c7d53b.FV_PEIM.dir
│ ├── 05_86d70125-baa3-4296-a62f-602bebbb9081.FV_PEIM.dir
│ ├── 06_1c8b7f78-1699-40e6-af33-9b995d16b043.FV_PEIM.dir
│ ├── 07_b1e9e2ca-b078-4070-bccd-87449ac7d2a6.FV_PEIM.dir
│ ├── 08_e60a79d5-dc9b-47f1-87d3-51bf697b6121.FV_PEIM.dir
│ ├── 09_91b886fd-2636-4fa8-a4a9-2eb04f235e09.FV_PEIM.dir
│ ├── 10_5ac804f2-7d19-5b5c-a22d-faf4a8fe5178.FV_PEIM.dir
│ ├── 11_c7d4bbcf-eb0a-4c91-bd8b-fca99f28b011.FV_PEIM.dir
│ ├── 12_b59daea4-fade-413e-a522-13639044ac2d.FV_PEIM.dir
│ ├── 13_def30e37-7aec-4f69-91a2-cf099e2729f2.FV_PEIM.dir
│ ├── 14_79aa6086-035a-4ad9-a89a-a6d5aa27f0e2.FV_PEIM.dir
│ ├── 15_c1fbd624-27ea-40d1-aa48-94c3dc5c7e0d.FV_PEIM.dir
│ ├── 16_3ff74422-3b5c-46fb-8593-2ecf2e856ee7.FV_PEIM.dir
│ ├── 17_52b3dba7-9565-48e8-8e13-ec7196721b3c.FV_PEIM.dir
│ ├── 18_01359d99-9446-456d-ada4-50a711c03ada.FV_PEIM.dir
│ ├── 19_567f05de-d174-48e4-a7c0-c19868a11f9b.FV_PEIM.dir
│ ├── 20_ca9d8617-d652-403b-b6c5-ba47570116ad.FV_PEIM.dir
│ ├── 21_3b42ef57-16d3-44cb-8632-9fdb06b41451.FV_PEIM.dir
│ ├── 22_fd236ae7-0791-48c4-b29e-29bdeee1a811.FV_PEIM.dir
│ ├── 23_6ecfce51-5724-450c-a38a-58553e954422.FV_PEIM.dir
│ ├── 24_fd236ae7-0791-48c4-b29e-29bdeee1a822.FV_PEIM.dir
│ ├── 25_fd236ae7-0791-48c4-b29e-29bdeee1a838.FV_PEIM.dir
│ ├── 26_25b5312a-70da-41d7-9801-25d6af9c6250.FV_PEIM.dir
│ ├── 27_c4bf4f30-8d71-45fc-87bc-9eae57b95b45.FV_PEIM.dir
│ ├── 28_aa652cb9-2d52-4624-9fae-d4e58b67ca46.FV_PEIM.dir
│ ├── 29_6b4fdbd2-47e1-4a09-ba8e-8e041f208b95.FV_PEIM.dir
│ ├── 30_30444c90-044a-4b44-9617-0a1fa6b4e225.FV_PEIM.dir
│ ├── 31_4862aff3-667c-5458-b274-a1c62df8ba80.FV_PEIM.dir
│ ├── 32_b6a2aff3-767c-5658-c37a-d1c82ef76543.FV_PEIM.dir
│ ├── 33_a05ece52-15a8-424e-bfd3-fcf3d566a09c.FV_PEIM.dir
│ ├── 34_12c67be1-ad2e-4f13-a95f-6edc2c4392de.FV_PEIM.dir
│ ├── 35_fbb9b481-0b19-4ba6-a31d-985716c56d51.FV_PEIM.dir
│ ├── 36_bdad7d1a-4c48-4c75-b5bc-d002d17f6397.FV_PEIM.dir
│ ├── 37_efd652cc-0e99-40f0-96c0-e08c089070fc.FV_PEIM.dir
│ ├── 38_4cc14f19-c626-4ab6-9dea-ca6c01fd10cd.FV_PEIM.dir
│ ├── 39_faf79e9f-4d40-4f02-8ac9-4b5512708f7f.FV_PEIM.dir
│ ├── 40_cac3fb95-33f5-4596-818b-68e024ddb67b.FV_PEIM.dir
│ ├── 41_34989d8e-930a-4a95-ab04-2e6cfdff6631.FV_PEIM.dir
│ ├── 42_01631791-f34e-4c0a-b15d-0b6ce22b27a8.FV_PEIM.dir
│ ├── 43_0fe9da53-043d-4265-a94d-fd77fede2eb4.FV_PEIM.dir
│ ├── 44_e9312938-e56b-4614-a252-cf7d2f377e26.FV_PEIM.dir
│ ├── 45_9b3f28d5-10a6-46c8-ba72-bd40b847a71a.FV_PEIM.dir
│ ├── 46_6b844c5b-6b75-42ca-8e8e-1cb94412b59b.FV_PEIM.dir
│ ├── 47_0d1ed2f7-e92b-4562-92dd-5c82ec917eae.FV_PEIM.dir
│ ├── 48_42924190-3f3e-44b8-9c21-793c2a024e3c.FV_PEIM.dir
│ ├── 49_8624d5ec-7a77-42a1-9257-b76a1612d9e4.FV_PEIM.dir
│ ├── 50_c41e9862-d078-4e7d-9062-00e3fac34c19.FV_PEIM.dir
│ ├── 51_a31b1af7-3a9b-424a-8636-9885e9de06f6.FV_PEIM.dir
│ ├── 52_4e05099f-7bf9-4a49-8b3e-e56971d71a40.FV_PEIM.dir
│ ├── 53_e9dd7f62-25ec-4f9d-a4ab-aad20bf59a10.FV_PEIM.dir
│ ├── 54_3fd1d3a2-99f7-420b-bc69-8bb1d492a332.FV_FREEFORM.dir
│ ├── 55_838dcf34-907b-4d55-9a4b-a0ef7167b5f4.FV_PEIM.dir
│ ├── 56_c91c3c17-fc74-46e5-bdbe-6f486a5a9f3c.FV_FREEFORM.dir
│ ├── 57_0dca793a-ea96-42d8-bd7b-dc7f684e38c1.FV_FREEFORM.dir
│ ├── 58_f7fde4a6-294c-493c-b50f-9734553bb757.FV_PEIM.dir
│ ├── 59_9b3ada4f-ae56-4c24-8dea-f03b7558ae50.FV_PEIM.dir
│ ├── 60_643df777-f312-42ed-81cc-1b1f57e18ad6.FV_PEIM.dir
│ ├── 61_1d88c542-9df7-424a-aa90-02b61f286938.FV_PEIM.dir
│ ├── 62_67451698-1825-4ac5-999d-f350cc7d5d72.FV_PEIM.dir
│ │ └── 01_S_GUID_DEFINED.dir
│ ├── 63_7ecd9c20-68b9-4a6f-b515-d64ff500b109.FV_PEIM.dir
│ │ └── 01_S_GUID_DEFINED.dir
│ ├── 64_10c22623-db6f-4721-aa30-4c12af4230a7.FV_PEIM.dir
│ │ └── 01_S_GUID_DEFINED.dir
│ ├── 65_dacf705c-71df-497d-aabe-10186b2e1dde.FV_PEIM.dir
│ │ └── 01_S_GUID_DEFINED.dir
│ ├── 66_8401a046-6f70-4505-8471-7015b40355e3.FV_PEIM.dir
│ │ └── 01_S_GUID_DEFINED.dir
│ ├── 67_654fe61a-2eda-4749-a76a-56ed7ade1cbe.FV_PEIM.dir
│ ├── 68_08efd15d-ec55-4023-b648-7ba40df7d05d.FV_PEIM.dir
│ ├── 69_a6a3a962-c591-4701-9d25-73d0226d89dc.FV_PEIM.dir
│ │ └── 01_S_GUID_DEFINED.dir
│ ├── 70_fd44820b-f1ab-41c0-ae4e-0c55556eb9bd.FV_FREEFORM.dir
│ ├── 71_ae265864-cf5d-41a8-913d-71c155e76442.FV_PEIM.dir
│ ├── 72_4f1f379f-2a62-48bb-ac34-d3f135c6e2b7.FV_PEIM.dir
│ ├── 73_ffffffff-ffff-ffff-ffff-ffffffffffff.FV_FFS_PAD.dir
│ ├── 74_2d27c618-7dcd-41f5-bb10-21166be7e143.FV_RAW.dir
│ ├── 75_77840a38-8ab1-4d7a-9181-03b2f5b34c0b.FV_RAW.dir
│ ├── 76_ffffffff-ffff-ffff-ffff-ffffffffffff.FV_FFS_PAD.dir
│ ├── 78_ffffffff-ffff-ffff-ffff-ffffffffffff.FV_FFS_PAD.dir
│ ├── 80_8e295870-d377-4b75-bfdc-9ae2f6dbde22.FV_FREEFORM.dir
│ ├── 81_5b85965c-455d-4cc6-9c4c-7f086967d2b0.FV_FREEFORM.dir
│ ├── 82_ffffffff-ffff-ffff-ffff-ffffffffffff.FV_FFS_PAD.dir
│ ├── 83_d1e59f50-e8c3-4545-bf61-11f002233c97.FV_RAW.dir
│ ├── 84_ffffffff-ffff-ffff-ffff-ffffffffffff.FV_FFS_PAD.dir
│ └── 85_1ba0062e-c779-4582-8566-336ae8f78f09.FV_SECURITY_CORE.dir
└── nvram_nvar.nvram.dir
├── db_D719B2CB-3D3A-4596-A3BC-DAD00E67656F_NV+BS+RT+TBAWS_0.bin.dir
├── dbx_D719B2CB-3D3A-4596-A3BC-DAD00E67656F_NV+BS+RT+TBAWS_0.bin.dir
├── KEK_8BE4DF61-93CA-11D2-AA0D-00E098032B8C_NV+BS+RT+TBAWS_0.bin.dir
└── PK_8BE4DF61-93CA-11D2-AA0D-00E098032B8C_NV+BS+RT+TBAWS_0.bin.dir
393 directories
You can compare the dumped firmware and the original file downloaded from the vendor webpage via directory/file diff tool:
(most of the files are equal in this example and not displayed listed)