malware_ngram_classif/samples/ngram/bestFirstCFSFeatureLst
2024-02-27 17:30:16 +08:00

69 lines
1.5 KiB
Plaintext

fnstenv
fnsave
cmp jo
inc aam
or movzx
call sbb
leave push
fld fmul
out sbb
jno mov
out xchg
mov aam
out out
nop nop jmp
movzx cmp jne
movzx shl or
data16 data16 data16
add cmps add
mov mov shl
and push mov mov
and and push add
mov call add cmp
mov pop pop xor
call mov xor call
mov push mov sub
mov mov mov call ret
push add add add das
cmp jge push push push
pop pop test je mov
data16 data16 data16 data16 data16
inc add pop inc add
call add push call add
pop xor pop call leave
test je push call add
lea lea push lea push
jge push push push push
int3 mov push mov push
mov push call add test je
lea push call mov lea call
push push mov mov cmp je
je mov cmp jne add add
call mov test je mov mov
pop mov pop ret nop nop
pop pop mov pop mov pop
mov movzx mov mov mov mov
pop pop mov pop ret int3
jge push push push push call
mov push mov sub push push
int3 int3 mov push mov push
jne push push call test pop pop
mov mov jmp push push call test
int3 int3 int3 int3 push push call
mov mov mov mov push call push
mov push push push push call lea
mov mov pop pop pop pop pop
mov inc inc add add add add
push sub mov mov mov mov mov
int3 int3 int3 int3 int3 int3 sub
push push call mov mov push push
call mov mov call mov mov call
mov pop pop xor pop call leave
mov push push mov mov mov mov
jmp int3 int3 int3 int3 int3 mov
mov push call push lea push call
int3 int3 mov push mov push mov
or or or or or or or
mov push mov sub mov xor mov
int3 int3 int3 mov push mov push
int3 int3 int3 int3 mov push mov