Fix EmitTailCallVM() using the wrong frame register.

Didn't actually find a test that gets fixed by this;
just happened to see it while debugging something else.