mshtml: Use ifaces instead of vtbl pointers in BSCallback.