The tool can trace the functions called by qemu while recompling
qemu with exra options like -finstrument-functions. It's just like strace and ltrace, but used to trace userland function.
Sorry, a mistake. The tool can trace the functions directly without any exra options.