This seems to be a holdover from when ntdll was a Mach-O winelib binary, so the reservation needed to be removed before it was dlopen'd. Now that it's PE, unmapping the reservation is unnecessary and leaves time for the system to reclaim it, thus requiring the potentially problematic relocation of ntdll.