博客-”深入windows的关机消息截获-从XP到Win7的变化“测试文件

0-0-0 WM_QUERYENDSESSION TIME:2014-1-11-11-0-55 0-0-0 WM_ENDSESSION TIME:2014-1-11-11-0-55 <00001> 00020DBA S .WM_QUERYENDSESSION nSource:0 (Logoff or Shutdown from Windows Security dialog) <00002> 00020DBA R .WM_QUERYENDSESSION fShutdownIsOk:False <00003> 00020DBA S .WM_ENDSESSION fEndSession:True <00004> 00020DBA R .WM_ENDSESSION 0-0-1 WM_QUERYENDSESSION TIME:2014-1-11-11-0-55 0-0-1 WM_ENDSESSION TIME:2014-1-11-11-0-55 <00001> 00020B2C S .WM_QUERYENDSESSION nSource:0 (Logoff or Shutdown from Windows Security dialog) <00002> 00020B2C R .WM_QUERYENDSESSION fShutdownIsOk:False <00003> 00020B2C S .WM_ENDSESSION fEndSession:True 1-0-0 WM_QUERYENDSESSION TIME:2014-1-11-11-1-0 <00001> 00050CFA S .WM_QUERYENDSESSION nSource:0 (Logoff or Shutdown from Windows Security dialog) 1-0-1 WM_QUERYENDSESSION TIME:2014-1-11-11-1-5 <00001> 00020BCA S .WM_QUERYENDSESSION nSource:0 (Logoff or Shutdown from Windows Security dialog) 0-1-0 WM_QUERYENDSESSION TIME:2014-1-11-11-1-10 0-1-0 WM_ENDSESSION TIME:2014-1-11-11-1-10 <00001> 00020BE2 S .WM_QUERYENDSESSION nSource:0 (Logoff or Shutdown from Windows Security dialog) <00002> 00020BE2 R .WM_QUERYENDSESSION fShutdownIsOk:True <00003> 00020BE2 S .WM_ENDSESSION fEndSession:True <00004> 00020BE2 R .WM_ENDSESSION 0-1-1 WM_QUERYENDSESSION TIME:2014-1-11-11-1-10 0-1-1 WM_ENDSESSION TIME:2014-1-11-11-1-10 <00001> 00020C4C S .WM_QUERYENDSESSION nSource:0 (Logoff or Shutdown from Windows Security dialog) <00002> 00020C4C R .WM_QUERYENDSESSION fShutdownIsOk:True <00003> 00020C4C S .WM_ENDSESSION fEndSession:True 1-1-0 WM_QUERYENDSESSION TIME:2014-1-11-11-1-15 <00001> 00040C5A S .WM_QUERYENDSESSION nSource:0 (Logoff or Shutdown from Windows Security dialog) 1-1-1 WM_QUERYENDSESSION TIME:2014-1-11-11-1-20 <00001> 00050C6C S .WM_QUERYENDSESSION nSource:0 (Logoff or Shutdown from Windows Security dialog)