For specific functions, certain bytes mean something special.

We can bypass this with certain techniques:

  • XOR
  • Move, and increment
  • Move into different sizes of register
  • Move and shift
  • Make your shellcode is writable and increment data values in there