Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

Every reverse engineer learns very quickly that "add [rax], al" has the machine code representation "00 00".


And this is mainly you use 0x90 padding (NOP) when the start of a function is being padded to align with a cache boundary. If you put zeros, you get a distracting barrage of "add [rax], al" in the disassembly listing in front of nearly every function.


Or "add [bx+si], al" for those from an earlier era.




Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: