I need to get an ELF binary's total count of
- Function call instruction
- conditional jump (branch) instruction
The binary could be any CPU architecture, like x64, ARM, MIPS, Motorola 68K, etc.
It would be best if the disassembly tool can provide an intermediate representation/language.
I found there are several candidate options for that, like IDA Pro, Binary Ninja, Radare2, Capstone, Angr, Bap.
Finally feel Radare2 is a good tool to implement that. But I searched on the Internet, most tutorials show how to investigate specific code pieces for a specific function (e.g., main). How to directly get the whole IR (called ESIL) after disassembly?
Or any suggestions on accomplishing this task?