switch to runtime dynamic linking for ntdll.dll, removes dependency on WinDDK