Remap ntdll.dll using only NTAPI functions with a suspended process - View it on GitHub