A new pass that allows the fuzzer to change the 'function control' operand of OpFunction instructions. Fixes #2939.