Robert Shearman : ntdll: Move the call to MODULE_DllThreadAttach from the kernel32