PfSnFindImageFileName
WCHAR *__stdcall PfSnFindImageFileName(_UNICODE_STRING *ImagePath, UINT64 *NameNumCharsOut){
WCHAR *v2;
wchar_t *Buffer;
int v4;
__int64 v5;
wchar_t *v6;
v2 = 0i64;
Buffer = ImagePath->Buffer;
v4 = 0;
v5 = ImagePath->Length >> 1;
v6 = &Buffer[v5 - 1];
if( v6 >= Buffer )
{
do
{
if( *v6 == 92 )
break;
++v4;
--v6;
}
while( v6 >= Buffer );
if( v4 )
{
*(_DWORD *)NameNumCharsOut = v4;
return &Buffer[(unsigned int)(v5 - v4)];
}
}
return v2;
}Referenced by:
PfSnBeginAppLaunch
PfSnOperationProcess