3 ms·
Every reverse engineer learns very quickly that "add [rax], al" has the machine code representation "00 00".
by NobodyNada 11mo ago
Every reverse engineer learns very quickly that "add [rax], al" has the machine code representation "00 00".
- userbinator 11mo agoOr "add [bx+si], al" for those from an earlier era.
- kazinator 11mo agoAnd this is mainly you use 0x90 padding (NOP) when the start of a function is being padded to align with a cache boundary. If you put zeros, you get a distracting barrage of "add [rax], al" in the disassembly listing in front of nearly every function.