add examples/use-offset-*.py and fix ROP.call_chain_ptr()