ropshell> use 7450dd3ddf93a83f69c64c82b539212a (download)
name         : win32kfull.sys (x86_64/PE)
base address : 0x1c0001000
total gadgets: 13056

ropshell> suggest "jmp"
> 0x1c00ec070 : push rsp; ret
> 0x1c008eda5 : jmp rax
> 0x1c01502fe : jmp rbx
> 0x1c0009833 : jmp rcx
> 0x1c002104c : jmp rdx
> 0x1c0024e45 : jmp rsi
> 0x1c0031a97 : jmp rdi
> 0x1c02248ec : jmp rbp
> 0x1c002da39 : jmp rsp
> 0x1c01502fd : jmp r11
> 0x1c0031d64 : jmp [rax]
> 0x1c003b6af : jmp [rbx]
> 0x1c0048c58 : jmp [rcx]
> 0x1c000ba1f : jmp [rdx]
> 0x1c00b84ea : jmp [rsi]
> 0x1c003c98d : jmp [rdi]
> 0x1c01c5485 : jmp [rbp + 0x16]
> 0x1c01afdea : jmp [rsp + rax]
> 0x1c00fe7a9 : jmp [r9]
> 0x1c011468b : jmp [r11]
> 0x1c00b0cd6 : jmp [r14 + 0x44]