Regression on ntdll:map_image function