vm: change some push/pop to replace/peek.