Use absolute address in trampoline, removes allocating memory near ntdll.
Remove unused variable.
Don't use highest bit on fake handle. Value is sign-extened on wow64 environment.
Implement hooking 32bit process under WoW64.