Subscribe to ntdll.dll