#ifndef _NTEXAPI_H

/**
 * The SYSTEM_PROCESS_ID_INFORMATION structure retrieves the executable image
 * name associated with a specific process ID. The caller supplies a process ID,
 * and on return the system fills the UNICODE_STRING with the corresponding image path.
 */
typedef struct _SYSTEM_PROCESS_ID_INFORMATION
{
    HANDLE ProcessId;
    UNICODE_STRING ImageName;
} SYSTEM_PROCESS_ID_INFORMATION, *PSYSTEM_PROCESS_ID_INFORMATION;

#endif
View code on GitHub