Dynamically generating shellcode using an SMT solver: almost magical! https://sean.heelan.io/2009/06/01/fun-uses-for-an-smt-solver/