Use `xor` to bypass check for `syscall`.

Original writeup (https://bitbucket.org/keen4n/writeup/src/master/2019-justCTF/Shellcode/README.md).