SepInformFileSystemsOfDeletedLogon
VOID __stdcall SepInformFileSystemsOfDeletedLogon(LUID *LogonId, _EJOB *ServerSilo){
WORK_QUEUE_ITEM *PoolWithTag;
WORK_QUEUE_ITEM *v5;
PoolWithTag = (WORK_QUEUE_ITEM *)ExAllocatePoolWithTag(NonPagedPoolNx, 0x30ui64, 0x53466553ui64);
v5 = PoolWithTag;
if( PoolWithTag )
{
PoolWithTag[1].List.Flink = (_LIST_ENTRY *)*LogonId;
PoolWithTag[1].List.Blink = (_LIST_ENTRY *)ServerSilo;
if( ServerSilo )
ObfReferenceObjectWithTag(ServerSilo, 0x53466553u);
v5->List.Flink = 0i64;
v5->WorkerRoutine = (void(__fastcall *)(void *))SepNotifyFileSystems;
v5->Parameter = v5;
ExQueueWorkItem(v5, DelayedWorkQueue);
}
}Referenced by:
SepDeReferenceLogonSession