PsGetProcessImageFileName
__int64 __fastcall PsGetProcessImageFileName(__int64 a1){ return a1 + 1448; }
Referenced by:
ObCheckRefTraceProcess
PiUEventHandleVetoEvent
PnpLogVetoInformation