Save LR in callWithABI.

Baseline ICs assume that LR is unchanged -- but if the IC
calls out to the VM, LR is modified.

Fixes ion/mod-double.js.