Modifies the exploit a little for better stability

This patch makes sure the LFH is enabled before the CGenericElement
object is created.  Triggers is also modified a little.
Land #1891, @wchen-r7's improve for ie_cgenericelement_uaf