kernel32: Replicate the MS bug with va_list argument counting in FormatMessage.