Notes:
We change the %rip-relative instruction to be, say, %rax relative and then preload %rax with the the normal location of the instruction.
Of course, this is only part of the solution – we need to detect if the instruction uses %rax and in that case we use %rcx (or some other scratch register).