PfSnFindImageFileName

WCHAR *__stdcall PfSnFindImageFileName(_UNICODE_STRING *ImagePath, UINT64 *NameNumCharsOut){
  WCHAR *v2; 
  wchar_t *Buffer; 
  int v4; 
  __int64 v5; 
  wchar_t *v6; 

  v2 = 0i64;
  Buffer = ImagePath->Buffer;
  v4 = 0;
  v5 = ImagePath->Length >> 1;
  v6 = &Buffer[v5 - 1];
  if( v6 >= Buffer )
  {
    do
    {
      if( *v6 == 92 )
        break;
      ++v4;
      --v6;
    }
    while( v6 >= Buffer );
    if( v4 )
    {
      *(_DWORD *)NameNumCharsOut = v4;
      return &Buffer[(unsigned int)(v5 - v4)];
    }
  }
  return v2;
}

Referenced by:

PfSnBeginAppLaunch
PfSnOperationProcess