#include LdrRegisterDllNotification_t LdrRegisterDllNotification; LdrUnregisterDllNotification_t LdrUnregisterDllNotification; void ntdll_link() { HMODULE ntdll = GetModuleHandleA("ntdll.dll"); LdrRegisterDllNotification = (LdrRegisterDllNotification_t)GetProcAddress(ntdll, "LdrRegisterDllNotification"); LdrUnregisterDllNotification = (LdrUnregisterDllNotification_t)GetProcAddress(ntdll, "LdrUnregisterDllNotification"); }