I'm trying to write some shellcode that will eventually be in the form of an English paragraph. This means that I'm mostly limited to instructions that have opcodes that evaluate to alphanumeric characters or punctuation. This actually leaves me with many different jump instructions including: jo, jno, jb, jae, je, jne, jbe, ja, js, jns, and jp (which correspond to letters p-z). Each of these jumps performs a test before it decides to jump or not. In most cases I can combine a jump plus its inverse to ensure a jump will take place in the shellcode (e.g. using jo then jno, or je then jne), but I cannot do this in the case of jb. The test for jb is CF=1.
My question is, is there any series of alphanumberic instructions that is functionally a NOP, but also ensures that CF=1? CF is the carry flag, so any operations that are guaranteed to set the carry flag would suffice.
Also to ensure a jae, is the anyway to ensure that the CF=0?
STCwould be perfect here, but it'sF9, which doesn't have anything to do with ASCII.