Reverse Engineering Stack Exchange is a question and answer site for researchers and developers who explore the principles of a system through analysis of its structure, function, and operation. It only takes a minute to sign up.
Sign up to join this community
Is it possible to see a kind of statistics in IDA about functions and how often they are referenced? When analyzing a program, I find it helpfull.
Functions that are referenced very often typically are common functionality. An example would be stuff like strcmp(), malloc()/free(), strlen(), etc..
Some of those are quite easy to identfiy (like a strcmp() implementation), and giving a name to those functions early on, makes the analysis of the rest more easy.
There might be an easier way to get the count XrefsTo a certain function, but this worked for me.
from idaapi import *
funcs = Functions()
for f in funcs:
name = Name(f)
print "%s %d" % (name, len(list(XrefsTo(f))))
The following code is taken from GreyHat Python, and is very similar to the previous answer:
from idaapi import *
funcs = ["malloc","free","strcmp"]
for f in funcs:
curAddr = LocByName(f)
if curAddr != BADADDR:
xrefs = CodeRefsTo(curAddr,0)
print "Cross References to %s" % f
for ref in xrefs:
print "08x" % ref
SetColor(ref,CIC_ITEM,0x0000ff)
This function will also highlight the call to make tracing it easier
