The big gap here is finding instruction streams that match the thing you are trying to do. I am not aware of any obvious way to autogenerate these short of the typical superoptimizer work (usually brute force or SMT).