Uses js_mstime_malloc to do the no-spray technique

Now that we have a js_mstime_malloc, we should use that (see #1785).  This module serves as our first example.

To test this:  Fire up msfconsole, use exploit/windows/browser/ie_cbutton_uaf, set meterpreter as payload, run it against a Windows XP SP3 box with IE 8 on it.