While playing with MmmBop sometimes i was recording the transfers between basic blocks. I tried to produce some graphs from it to make a nice visualization, however it appears in a various cases ie. tElock, PESpin i have recorded so many egdes that GraphViz was unable to produce a correct graph. Tried few other things like Tulip, but it haven't really worked either. One thing that actually worked was Walrus3D but the graphs are not really a good visualization for this example - IMHO. Anyway may be you will like following ones:


MmmBop tracing the unpacking process of UPX packed binary:


http://piotrbania.com/all/mmmbop/mmmbop_upx.png ("http://piotrbania.com/all/mmmbop/mmmbop_upx.png")



MmmBop tracing the unpacking process of tElock packed binary (Walrus as renderer here):


http://piotrbania.com/all/mmmbop/mmmbop_telock.png ("http://piotrbania.com/all/mmmbop/mmmbop_telock.png")
http://piotrbania.com/all/mmmbop/mmmbop_telock2.png ("http://piotrbania.com/all/mmmbop/mmmbop_telock2.png")https://blogger.googleusercontent.com/tracker/5498266518143777458-5802684575344248761?l=blog.piotrbania.com


http://blog.piotrbania.com/2009/05/some-graphs.html