[PATCH 5/6] ntdll: Use base address tree in get_modref().