ropshell> use 3c94bcda2a65e71413d3fee2b4be913e (download)
name         : tcpip.sys (x86_64/PE)
base address : 0x1c0001000
total gadgets: 6847

ropshell> suggest "jmp"
> 0x1c00baf3d : push rsp; ret
> 0x1c00cb360 : jmp rax
> 0x1c00f9403 : jmp rbx
> 0x1c00770aa : jmp rcx
> 0x1c0033fa5 : jmp rsi
> 0x1c003fa2d : jmp rdi
> 0x1c00cb2a6 : jmp r9
> 0x1c001350d : jmp [rax]
> 0x1c003556c : jmp [rbx]
> 0x1c0004506 : jmp [rcx]
> 0x1c003709a : jmp [rdx]
> 0x1c00146d4 : jmp [rsi]
> 0x1c0079a1f : jmp [rdi]
> 0x1c006605a : jmp [rbp + 0x44]
> 0x1c0176077 : jmp [r8]
> 0x1c004a452 : jmp [r14 + 0x44]