win7下winlogon.exe调试记录第一部分：kd> !PROCESS fffffa8021520630 PROCESS fffffa8021520630 SessionId: 1 Cid: 01fc Peb: 7fffffd9000 ParentCid: 018c DirBase: 4fafa000 ObjectTable: fffff8a000e6b920 HandleCount: 0. Image: winlogon.exe VadRoot fffffa8021522d30 Vads 10 Clone 0 Private 15. Mo