[PATCH 6/6] mshtml: Use the dispex's query_interface for the remaining nodes.