Implement working trampoline unwind.

With this seemingly working, it's triggering a bug in the handling of
PLCRASH_ASYNC_CFE_ENTRY_TYPE_FRAMELESS_IMMD, where we assume that
frameless functions (as is the case on x86) have a return address
on the stack.