#ifndef _NTRTL_H

typedef struct _RTL_UNLOAD_EVENT_TRACE32
{
    ULONG BaseAddress;   // Base address of dll
    ULONG SizeOfImage;   // Size of image
    ULONG Sequence;      // Sequence number for this event
    ULONG TimeDateStamp; // Time and date of image
    ULONG CheckSum;      // Image checksum
    WCHAR ImageName[32]; // Image name
    ULONG Version[2];
} RTL_UNLOAD_EVENT_TRACE32, *PRTL_UNLOAD_EVENT_TRACE32;

#endif
View code on GitHub