VOID __stdcall PoUserShutdownCancelled(){ if( !PsIsCurrentThreadInServerSilo() ) { PopQueueWorkItem((_POP_WORK_ITEM *)&stru_140C23628 + 318); PopUserShutdownCancelled(1u); } }