原理很简单：就是“借尸还魂”，启动一个僵尸进程（NT下可以是自身程序启动的另一个进程），然后在它运行前将其整个替换成内存中的exe内容，待正式运行后执行的就是你的目标代码了。-Principle is simple: is the " reincarnated"　to start a zombie process (NT can be its own proceedings under another process), then it replaces its entire run before the exe into the memory contents to be executed is officially running your target code.