[PATCH] ntdll: Manually find the address of RtlUserThreadStart.