Identify APIs inside functions

Question

I know it's a silly question 😂😂

I'm using IDA and I want to know if there is a plugin to identify all called APIs inside a function instead of entering each function manually?

Answer 1

To have an overview of called API in a function you can use Graph feature without pluging :

• select function
• click on menu View > Graphs > Users xrefs chart...
• in Starting Direction check only Cross references from
• in Ignore group, check all except Externals

Answer 2

I am not sure about a plugin. But, this answer gives an IDC script for similar purpose.

I also wrote a script to get called function graph a long time ago. You can leverage this and tweak this according to your needs (idapython).

def generate_graph():
        callees = {}
        # loop through all functions
        for ea in idautils.Functions():
            function = idc.get_func_name(ea)
            callees[function] = set()
            for h in idautils.FuncItems(ea):
                for xref in idautils.XrefsFrom(h, 0):
                    callees[function].add(idc.get_func_name(xref.to))
        return callees

Answer 3

Another way would be to dump the import table at runtime using ollydbg and load it into your ida using a script. I used to copy the data (address and function name) from ollydbg's import table and parse it into ida using a script I wrote. I can't quite find the script anymore though..