ViFaultsGetBaseImageName

VOID __stdcall ViFaultsGetBaseImageName(UNICODE_STRING *FullImagePath, UNICODE_STRING *BaseImageName){
  unsigned __int64 Length; 
  wchar_t *Buffer; 
  wchar_t *i; 
  wchar_t *v5; 
  unsigned __int16 v6; 
  Length = FullImagePath->Length;
  if( (_WORD)Length )
  {
    Buffer = FullImagePath->Buffer;
    for( i = &Buffer[(Length >> 1) - 1]; i >= Buffer && *i != 92; --i )
      ;
    v5 = i + 1;
    BaseImageName->Buffer = v5;
    v6 = (_WORD)Buffer + Length - (_WORD)v5;
    BaseImageName->Length = v6;
    BaseImageName->MaximumLength = v6;
  }
  else
  {
    *BaseImageName = *FullImagePath;
  }
}

Referenced by:

ViCreateProcessCallbackInternal