struct _SE_AUDIT_PROCESS_CREATION_INFO// Size=0x8
{
    struct _OBJECT_NAME_INFORMATION * ImageFileName;// Offset=0x0 Size=0x8
};