SepInformFileSystemsOfDeletedLogon
VOID __stdcall SepInformFileSystemsOfDeletedLogon(_LUID *LogonId, VOID *ServerSilo){
VOID **PoolWithTag;
_WORK_QUEUE_ITEM *v5;
PoolWithTag = ExAllocatePoolWithTag(0x200ui64, 0x30ui64, 1397122387i64);
v5 = (_WORK_QUEUE_ITEM *)PoolWithTag;
if( PoolWithTag )
{
PoolWithTag[4] = (VOID *)*LogonId;
PoolWithTag[5] = ServerSilo;
if( ServerSilo )
ObfReferenceObjectWithTag(ServerSilo, 0x53466553ui64);
v5->List.Flink = 0i64;
v5->WorkerRoutine = (void(__fastcall *)(void *))SepNotifyFileSystems;
v5->Parameter = v5;
ExQueueWorkItem(v5, DelayedWorkQueue);
}
}Referenced by:
SepDeReferenceLogonSession