因为登陆的域名和用户名是明文存储在winlogon进程里的，findpass 通过在winlogon进程中查找用户登陆信息来获取简单加密后的用户密码。-Because the domain and user login name is stored in the winlogon process as clear text, findpass find the user login information to obtain a simple encrypted password from wi