user32: Use RtlIsCriticalSectionLockedByThread to check lock owner.