@julliard d57c41990acde38f085da1c8dd6051e5fd287fb7 breaks loading CtrlRoutine address (eg see failing test in MR!causes a regression in MR!4520)
this MR shows that native RtlFindExportedRoutine returns NULL on forwarded functions
I'm unsure about finding the CtrlRoutine address in loader_init(). Either we get kernelbase's module base address and use it to search with RtlFindExportedRoutine by name (but it adds a bit of glue, which goes against simplification) or revert d57c41990acde38f085da1c8dd6051e5fd287fb7 altogether.