注销之后logonui.exe依然有事情要做
注销之后logonui.exe依然有事情要做

kd> kc
#
00 authui!GetBitmapSize
01 authui!CLogonFrame::_SetBrandingGraphic
02 authui!CLogonFrame::_Initialize
03 authui!CLogonFrame::Create
04 authui!CLogonUI_CreateThenDoModalThenDestroy
05 authui!CLogonUI::DoModal
06 LogonUI!wWinMain
07 LogonUI!_initterm_e
08 kernel32!BaseThreadInitThunk
09 ntdll!__RtlUserThreadStart
0a ntdll!_RtlUserThreadStart
kd> r
eax=0019fa44 ebx=00000000 ecx=00000000 edx=773aa084 esi=20000000 edi=0024f340
eip=73f5cd97 esp=0019fa28 ebp=0019fa6c iopl=0 nv up ei pl nz na po nc
cs=001b ss=0023 ds=0023 es=0023 fs=003b gs=0000 efl=00000202
authui!GetBitmapSize:
001b:73f5cd97 8bff mov edi,edi
kd> dd 0019fa28
0019fa28 73f1e05e 080506f7 0019fa44 a82cc8c9
0019fa38 73f40183 0024f340 00000000 73f03740
0019fa48 abcdef42 0024f340 080506f7 0019fa34
0019fa58 0024f340 0019faa4 73f144fa dbc30aa5
0019fa68 fffffffe 0019fab4 73f27890 a82cc811
0019fa78 00000000 73f6f000 73edc888 0024f340
0019fa88 abcdef42 0024f340 00000409 0024f340
0019fa98 00000000 0019fa74 73f40157 0019fb2c
kd> dd 080506f7
080506f7 ???????? ???????? ???????? ????????
08050707 ???????? ???????? ???????? ????????
08050717 ???????? ???????? ???????? ????????
08050727 ???????? ???????? ???????? ????????
08050737 ???????? ???????? ???????? ????????
08050747 ???????? ???????? ???????? ????????
08050757 ???????? ???????? ???????? ????????
08050767 ???????? ???????? ???????? ????????
kd> gu
eax=00000001 ebx=00000000 ecx=0019fa44 edx=773aa084 esi=20000000 edi=0024f340
eip=73f1e05e esp=0019fa34 ebp=0019fa6c iopl=0 nv up ei pl nz na po nc
cs=001b ss=0023 ds=0023 es=0023 fs=003b gs=0000 efl=00000202
authui!CLogonFrame::_SetBrandingGraphic+0x103:
001b:73f1e05e 84c0 test al,al
kd> g
Breakpoint 0 hit
eax=013f0001 ebx=00257b30 ecx=0000138a edx=00000030 esi=00000000 edi=00000000
eip=76e99987 esp=0019ef68 ebp=0019efa8 iopl=0 nv up ei pl zr na pe nc
cs=001b ss=0023 ds=0023 es=0023 fs=003b gs=0000 efl=00000246
USER32!LoadImageW:
001b:76e99987 8bff mov edi,edi
kd> kc
#
00 USER32!LoadImageW
01 COMCTL32!ImageList_LoadImageW
02 authui!CDUIAnimationStrip::LoadFromResource
03 authui!CDUIAnimationStrip::Paint
04 DUI70!DirectUI::Element::_DisplayNodeCallback
05 DUser!GPCB::xwCallGadgetProc
06 DUser!DuEventGadget::ApiOnEvent
07 DUser!DUser::Gadget::CallStubEvent
08 DUser!GPCB::xwCallOnEvent
09 DUser!GPCB::xwInvokeDirect
0a DUser!GPCB::xrFirePaint
0b DUser!DuVisual::xrDrawCore
0c DUser!DuVisual::xrDrawTrivial
0d DUser!DuVisual::xrDrawTrivial
0e DUser!DuVisual::xrDrawTrivial
0f DUser!DuVisual::xrDrawTrivial
10 DUser!DuVisual::xrDrawFull
11 DUser!DuVisual::xrDrawFull
12 DUser!DuVisual::xrDrawStart
13 DUser!DuRootGadget::xrDrawTree
14 DUser!HWndContainer::xdHandleMessage
15 DUser!ExtraInfoWndProc
16 USER32!InternalCallWinProc
17 USER32!UserCallWinProcCheckWow
18 USER32!DispatchClientMessage
19 USER32!__fnDWORD
1a ntdll!KiUserCallbackDispatcher
1b USER32!NtUserDispatchMessage
1c USER32!DispatchMessageWorker
1d USER32!DispatchMessageW
1e authui!CLogonFrame::DoModal
1f authui!CLogonUI_CreateThenDoModalThenDestroy
20 authui!CLogonUI::DoModal
21 LogonUI!wWinMain
22 LogonUI!_initterm_e
23 kernel32!BaseThreadInitThunk
24 ntdll!__RtlUserThreadStart
25 ntdll!_RtlUserThreadStart
