find_xor.py

import idautils
import idaapi
import idc

LIGHT_BLUE = 0xFFFF00
GREEN = 0x00FF00
WHITE = 0xFFFFFF
for funcea in idautils.Functions():

    xor_in_func = 0
    bbs_in_func = idaapi.FlowChart(idaapi.get_func(funcea))
    for bb in bbs_in_func:
        
        xor_in_bb = 0    
        for head in idautils.Heads(bb.startEA, bb.endEA):
            # clear color first
            idc.SetColor(head, CIC_ITEM, WHITE)
            
            if idc.GetMnem(head) == "xor" and idc.GetOpnd(head,0) != idc.GetOpnd(head,1) and idc.GetOpnd(head,1) != 'rsp' and idc.GetOpnd(head,1) != 'rbp':
                xor_in_bb += 1
                xor_in_func += 1
                idc.SetColor(head, CIC_ITEM, BLUE)
                
        if xor_in_bb > 0:
            for head in idautils.Heads(bb.startEA, bb.endEA):
                color = idc.GetColor(head, CIC_ITEM)
                if color != LIGHT_BLUE:
                    idc.SetColor(head, CIC_ITEM, GREEN)
                
    if xor_in_func > 0:      
        print idc.GetFunctionName(funcea)