malware_ngram_classif/samples/ngram/ftestSelectedFeatureLst
2024-02-27 17:30:16 +08:00

742 lines
14 KiB
Plaintext

fldcw
fmul
rol
jbe
shl
leave
jae
shl and
shl sub
js inc
outs addr16
dec js
arpl and
ins jne
pop idiv
shl cmp
popa inc
outs ja
push fs
cdq and
pusha pusha
shl inc
outs popa
gs jb
jo jb
imul popa
arpl imul
jb jae
mov div
jb ins
je je
imul jae
cmp call
sub jb
jb gs
popa imul
jl pop
popa push
jb arpl
mul add
pusha push
pop jbe
mov ror
jg push
push shl
jns dec
and rep
add shr
inc jne
cmps cmps
rcl rcl
idiv mov
lea rep
imul ins
fnclex mov
jb inc
je popa
add shl
jae inc
xor in
jmp sbb
mov jg
jl inc
jo jo
js push
ins imul
jne je
jns mov
popa jb
outs jae
mov rol
push movs
mov jge
ins gs
cdq mov
inc jb
jb popa
mov ja
imul imul
dec jmp
ret ret
gs outs
shl push
push popa
ins ins
outs jb
out out
popa ins
inc in
popa je
jnp add
sub test
jbe push
inc outs
dec outs
jmp inc
push je
jb outs
jmp pop
je outs
jae add
sbb sbb
sbb and
ret jmp
and je
outs outs
je and
inc test
arpl add
jmp add
add arpl
rol rol
push sub
test mov
and push
add or
inc inc
add inc
add push
adc inc add
push pop dec
add add nop
mov sub xor
push sub add
sbb add sbb
inc mov pop
dec test jl
dec jmp mov
add jne add
push or push
push push or
call call pop
pop inc dec
add or push
add xor inc
dec inc pop
add je push
nop nop jmp
add add jnp
pusha pusha pusha
push add outs
inc push pop
add mov or
pop dec dec
add push sub
sub inc add
or inc add
test jl inc
outs je outs
push pop xor
and add push
jb popa je
push mov or
xor add xor
inc add xor
inc xor mov
jbe push push
add je imul
dec push dec
mov sub and
inc pop inc
add or mov
sub push xor
add xor pop
lea lea lea
mov add or
xor inc add
xor inc push
dec push inc
jo jo jo
pop test pop
push pop inc
inc inc pop
pop lea push
push inc dec
rcl rcl rcl
mov test push
mov and rep
add push pop
mov cdq mov
pop inc push
cmps cmps cmps
sub add push
inc mov push
push dec dec
add inc mov
or add mov
add mov and
add push dec
pop add pop
mov add and
je outs outs
cmp cmp cmp
inc dec push
dec push pop
ret ret ret
inc push mov
dec inc push
add xor xor
inc add or
inc push call
add add call
mov inc dec
add jnp add
fnclex mov cmp
add mov sub
call fnclex mov
pop je mov
add jae add
call jmp call
inc pop pop
mov add dec
dec dec push
mov inc push
mov pop add
jnp add add
dec push push
inc dec inc
out out out
adc add adc
jmp add add
add call add
sbb sbb sbb
jmp jmp pop
inc mov inc
push push dec
mov add sub
push inc inc
lea mov inc
push dec push
inc inc dec
add add in
dec dec inc
pop inc add
inc inc mov
add add jmp
add dec inc
add push inc
add imul add
push push inc
mov jne push
push inc add
push push pop
call add add
jmp push jmp
mov push add
or or or
call call call
inc add dec
mov dec mov
dec mov mov
xor xor xor
ret jmp jmp
push inc push
push add inc
inc add push
arpl add arpl
inc push push
xor add add
call cmp mov
add arpl add
add add or
jmp jmp jmp
push add push
rol rol rol
add or add
inc inc inc
add add inc
push call cmp
add inc add
push call test
dec test jl inc
call add add add
pusha pusha pusha pusha
pop push push call
inc push inc inc
push jmp push lea
add jb outs add
jmp add add add
or jmp push push
lea mov inc test
add add imul add
test mov je push
jne call mov push
cmp mov je cmp
mov mov imul mov
cmp mov jne push
rcl rcl rcl rcl
je push call jmp
mov jne push call
mov je mov push
pop je push call
ret jmp jmp mov
inc inc add add
jo jo jo jo
inc add add push
push push inc push
add add add in
push inc push push
cmp cmp cmp cmp
cmps cmps cmps cmps
ret ret ret ret
call push call cmp
mov call ret jmp
call test pop je
push jmp push call
adc add adc add
call mov cmp mov
add adc add adc
out out out out
call test jne lea
jne push call push
call fnclex mov cmp
fnclex mov cmp jge
push call fnclex mov
ret lea push mov
sbb sbb sbb sbb
sub sub sub sub
add inc add dec
jne mov jmp push
mov inc test jne
mov push call jmp
ret jmp jmp pop
push jmp push jmp
mov mov lea lea
mov je push push
add add ins add
inc add dec add
jmp push jmp push
adc adc adc adc
jmp mov push call
push push jmp push
je push call push
or or or or
add push add inc
pop ret lea push
add mov add mov
call jmp push push
dec dec dec dec
push add inc add
call ret jmp jmp
add add add or
pop pop mov push
add or add add
mov jmp push push
lea push call test
mov ret mov ret
push call jmp push
add arpl add arpl
arpl add arpl add
jmp jmp jmp jmp
pop leave ret push
rol rol rol rol
push push call cmp
add add add inc
leave ret push mov
inc inc inc inc
add add inc add
add inc add add
push call push push
jmp mov mov mov lea
ret jmp jmp mov pop
push push call pop test
in add in add in
mov lea mov mov lea
jmp push push lea push
lea mov call mov call
push push push jmp push
push jmp push lea push
push call pop test pop
mov lea lea mov mov
lea mov mov mov lea
mov je push push push
push add push add push
lea call test je push
test je lea push lea
inc add inc add dec
inc add dec add add
push call cmp je cmp
mov dec test jl inc
add in add in add
add add add add je
call push call test je
push add inc add add
push call mov cmp mov
add add push add inc
pusha pusha pusha pusha pusha
imul add add add add
lea lea mov mov mov
mov mov jmp push push
mov cmp mov je mov
push push call ret push
rcl rcl rcl rcl rcl
cmp mov je push push
lea mov inc test jne
adc add adc add adc
mov inc test jne sub
cmp cmp cmp cmp cmp
push push push call ret
call add push push call
call pop pop pop leave
dec add push add inc
call ret jmp jmp mov
jo jo jo jo jo
or add or add or
mov mov mov lea lea
call push push call add
push call test pop je
pop leave ret push push
ret ret ret ret ret
lea push push call cmp
call test je mov jmp
push call jmp push call
push lea call test je
cmps cmps cmps cmps cmps
call mov push call push
add mov add mov add
add dec inc add dec
push jmp push push call
call jmp push push call
pop pop mov push mov
add adc add adc add
lea push call test jne
mov mov call xor pop
mov call ret jmp jmp
jne lea push push push
pop ret lea push mov
mov push call jmp mov
out out out out out
push call cmp jne mov
sub sub sub sub sub
jmp push push call pop
jmp push jmp push jmp
call test jne push push
sbb sbb sbb sbb sbb
xor add add add add
add inc add dec add
add add add add or
cmp je push call cmp
call fnclex mov cmp jge
fnclex mov cmp jge push
push call fnclex mov cmp
mov push call fnclex mov
mov push call push push
cmp jge push push mov
push jmp push jmp push
pop pop ret lea push
outs add add add add
call test je lea push
call lea push push push
call test jne push call
adc adc adc adc adc
push push call jmp push
push lea push call test
or or or or or
dec dec dec dec dec
add or add add add
add push add inc add
mov push push call test
call cmp je push call
push call mov jmp mov
push call cmp je push
lea push push call test
pop pop pop mov push
mov ret mov ret mov
ret mov ret mov ret
arpl add arpl add arpl
add arpl add arpl add
push push push call cmp
ret push mov sub push
pop leave ret push mov
jmp jmp jmp jmp jmp
add add add inc add
push push call test jne
push call push push push
add inc add add add
rol rol rol rol rol
push push call push push
push push push call test
inc inc inc inc inc
push call pop pop pop leave
in add in add in add
call cmp je push call mov
add push add inc add add
mov mov mov call xor pop
add push add push add push
push add push add push add
ret push mov sub mov push
add add add inc add inc
push call push lea push lea
add add push add inc add
push call test je mov jmp
call xor push push push mov
call lea push push push call
mov push push call test jne
rcl rcl rcl rcl rcl rcl
push push call mov jmp mov
pusha pusha pusha pusha pusha pusha
pop pop ret lea push mov
lea mov inc test jne sub
lea push call lea push push
pop pop ret lea push push
add ins add add add add
push call push push call pop
push call push push call add
xor xor xor xor xor xor
push call add push push call
pop pop leave ret push push
push call mov test jne push
cmp cmp cmp cmp cmp cmp
add adc add adc add adc
push push lea push call test
adc add adc add adc add
add add add add or add
cmp jne push push call mov
call add lea push lea push
or add or add or add
lea push mov mov mov push
add or add or add or
jo jo jo jo jo jo
call push lea push lea push
dec add push add inc add
call pop pop pop leave ret
add dec add push add inc
ret ret ret ret ret ret
mov cmp jne push push call
pop pop pop ret lea push
add add add add add or
mov mov lea push mov mov
call push lea push push push
call mov call mov call mov
lea push push call test jne
inc add dec inc add dec
push lea push call test je
push push call jmp push push
push push push call jmp push
cmps cmps cmps cmps cmps cmps
pop pop pop mov push mov
out out out out out out
mov mov call xor pop pop
lea push lea push call push
push jmp push jmp push jmp
push call test je lea push
mov mov mov lea push mov
inc add inc add add add
jmp push push call pop pop
jge push push mov push mov
sub sub sub sub sub sub
jmp push jmp push jmp push
sbb sbb sbb sbb sbb sbb
mov lea push mov mov mov
mov cmp jge push push mov
add inc add inc add add
cmp jge push push mov push
push call mov jmp mov mov
push push call test jne mov
push lea push push call test
call mov jmp mov mov mov
mov push call fnclex mov cmp
call fnclex mov cmp jge push
fnclex mov cmp jge push push
push call fnclex mov cmp jge
mov mov push call fnclex mov
push mov push call mov jmp
push push push call cmp je
mov mov mov push call fnclex
mov push call mov jmp mov
mov mov mov push call mov
push call push lea push push
adc adc adc adc adc adc
dec dec dec dec dec dec
or or or or or or
push push call push lea push
call xor pop pop pop mov
push call push push push call
lea push push lea push push
add add add add add inc
push push push push call cmp
xor pop pop pop mov push
mov ret mov ret mov ret
ret mov ret mov ret mov
add arpl add arpl add arpl
arpl add arpl add arpl add
push push call push push push
push push push call push push
push push push push call push
jmp jmp jmp jmp jmp jmp
pop pop pop pop pop pop
rol rol rol rol rol rol
inc inc inc inc inc inc
mov dec test jl inc xor mov
call push lea push lea push call
mov mov mov push mov push call
push mov lea push push push push
lea push push push call lea push
push call pop mov pop pop pop
mov mul seto neg or push call
mov mov mov push push call mov
add inc add inc add dec add
call push push push call push push
pop pop ret push mov add push
call ret jmp jmp mov pop pop
pop pop pop pop ret lea push
mov push mov push call mov mov
lea push call add test je mov
pop pop pop pop pop pop ret
add add dec add push add inc
mov push call add mov pop ret
int3 int3 int3 int3 mov test je
pop pop pop leave ret push push
push call cmp je push call mov
push push call mov test jne push
test je push call add mov mov
push lea push call lea push push
push call lea push push push call
ret push mov sub push mov push
mov call xor push push push mov
push push call pop pop jmp push
push lea push push call test jne
ret int3 int3 int3 push mov push
add push add inc add inc add
add add add add add or add
jmp nop nop jmp nop nop jmp
call mov call mov call mov call
mov mov push push call mov mov
add add add inc add inc add
nop nop jmp nop nop jmp nop
nop jmp nop nop jmp nop nop
push call cmp je push call cmp
pop mov push mov call ret jmp
pop pop mov push mov call ret
mov push mov call ret jmp jmp
push push push call mov add push
push push call add lea push lea
lea push lea push call push lea
mov push push push push call push
in add in add in add in
mov mov mov lea push mov mov
mov mov lea push mov mov mov
call push push push push call push
mov lea push mov mov mov push
pop pop pop mov push mov call
xor xor xor xor xor xor xor
rcl rcl rcl rcl rcl rcl rcl
add in add in add in add
push call pop pop pop leave ret
mov mov mov mov push push call
mov mov mov call xor pop pop
push push push call jmp push push
add push add push add push add
push push lea push push lea push
push push push push call push mov
push call push push call pop pop
pop pop pop ret push mov sub
push call push lea push lea push
push mov xor push push push mov
pusha pusha pusha pusha pusha pusha pusha
push push call lea push push push
cmp cmp cmp cmp cmp cmp cmp
adc add adc add adc add adc
or add or add or add or
ret push mov sub push push mov
push push push push lea push call
lea push mov mov mov push call
push push call test je push call
mov mov mov mov lea push mov
pop pop ret push mov sub push
add add add add dec add push
add adc add adc add adc add
push call push push push call add
push call add lea push lea push
add or add or add or add
mov mov mov mov push mov push
ret ret ret ret ret ret ret
add add add add add add dec
jo jo jo jo jo jo jo
mov push call mov jmp mov mov
call mov jmp mov mov mov mov
lea push push push call test je
push push push push call cmp je
add dec add push add inc add
dec inc add dec inc add dec
jmp push jmp push jmp push jmp
push call mov jmp mov mov mov
lea push push push push call test
out out out out out out out
mov mov push call mov mov mov
push mov mov mov push call fnclex
mov push call mov mov mov mov
cmps cmps cmps cmps cmps cmps cmps
add add add add add dec add
xor pop pop pop mov push mov
mov mov call xor pop pop pop
call mov mov mov mov mov movzx
pop ret push mov sub push push
lea push lea push push push push
lea push push call add lea push
pop pop leave ret push mov push
mov mov mov mov mov movzx mov
sbb sbb sbb sbb sbb sbb sbb
sub sub sub sub sub sub sub
mov mov mov mov movzx mov mov
pop leave ret push mov push push
mov mov mov movzx mov mov mov
jge push push mov push mov push
cmp jge push push mov push mov
mov cmp jge push push mov push
push push call push lea push push
mov mov movzx mov mov mov mov
mov pop pop pop leave ret push
fnclex mov cmp jge push push mov
mov mov mov push call fnclex mov
mov mov add mov mov mov mov
add add add dec add push add
mov push mov push call mov jmp
ret push mov sub push push push
push mov push call mov jmp mov
push lea push push lea push push
mov call xor pop pop pop mov
mov mov push call fnclex mov cmp
mov push call fnclex mov cmp jge
call fnclex mov cmp jge push push
push call fnclex mov cmp jge push
dec dec dec dec dec dec dec
or or or or or or or
push push lea push push push push
push push mov push mov push call
adc adc adc adc adc adc adc
call xor pop pop pop mov push
push mov push mov push call mov
push push push push call test jne
push call mov mov mov mov mov
lea push push push push push call
mov ret mov ret mov ret mov
ret mov ret mov ret mov ret
arpl add arpl add arpl add arpl
add arpl add arpl add arpl add
pop pop pop pop pop pop pop
jmp jmp jmp jmp jmp jmp jmp
rol rol rol rol rol rol rol
inc inc inc inc inc inc inc