RTL_UNLOAD_EVENT_TRACE - NtDoc

#ifndef _NTRTL_H
// begin_msdn:"Winternl"

// private
typedef struct _RTL_UNLOAD_EVENT_TRACE
{
    PVOID BaseAddress;
    SIZE_T SizeOfImage;
    ULONG Sequence;
    ULONG TimeDateStamp;
    ULONG CheckSum;
    WCHAR ImageName[32];
    ULONG Version[2];
} RTL_UNLOAD_EVENT_TRACE, *PRTL_UNLOAD_EVENT_TRACE;

// end_msdn
#endif
View code on GitHub