PsGetProcessImageFileName
UINT8 *__stdcall PsGetProcessImageFileName(_EPROCESS *Process){ return Process->ImageFileName; }
Referenced by:
ObCheckRefTraceProcess
PiUEventHandleVetoEvent
PnpLogVetoInformation