Function SeLocateProcessImageName 

pub unsafe fn SeLocateProcessImageName(
    process: PEPROCESS,
    pimagefilename: *mut *mut UNICODE_STRING,
) -> NTSTATUS