If the firmware has TPM support but has no TPM, we're jumping to core.img without popping the registers back onto the stack. Fix that.