winlogon!StateMachineRun函数会用到核心数据结构winlogon中的重要全局状态机状态数组第0部分：kd> g Breakpoint 0 hit winlogon!WMsgKMessageHandler: 001b:009cf97b 8bff mov edi,edi kd> g Breakpoint 8 hit winlogon!WlStateMachineSetSignal: 001b:009d0bc1 8bff mov edi,edi kd> g Breakpoint 2 hit winlogon!SignalManagerSetSignal: 001b:009efe64 6a1c pus