Coincidentally, just before this was posted I read a similar analysis of Windows executables from 2008: <a href="https://www.strchr.com/x86_machine_code_statistics" rel="nofollow">https://www.strchr.com/x86_machine_code_statistics</a><p>MOV is still the top, but it was followed by PUSH and CALL.