let ROP.call_chain_ptr() be able to set rbx and rbp