;切换堆栈
		mov o_esp,esp
		
		mov eax,[edi].regEsp
		mov esp,eax
		;构造函数框架
		push ebp
		mov ebp,esp
		
		mov eax,[ebp+12]
		invoke crt_printf,eax
		leave

		mov esp,o_esp

_Handler proc C	_lpRecord,_SEH,_lpContext,_lpDispCotext
	LOCAL @szBuffer[256]:byte
	LOCAL old:dword
	LOCAL o_esp:dword
	pushad
		mov esi,_lpRecord
		mov edi,_lpContext
		assume esi:ptr EXCEPTION_RECORD,edi:ptr CONTEXT
		invoke crt_printf,addr szMsg,[edi].regEip,[esi].ExceptionCode,[esi].ExceptionFlags
		;切换堆栈
		mov o_esp,esp
		
		mov eax,[edi].regEsp
		mov esp,eax
		;构造函数框架
		push ebp
		mov ebp,esp
		
		mov eax,[ebp+12]
		invoke crt_printf,eax
		leave
		
		mov esp,o_esp
		
		invoke VirtualProtect,[edi].regEip,1,PAGE_EXECUTE_READWRITE,addr old
		
		
		;mov eax,_SEH
		;mov eax,[eax+4*2]
		;mov [edi].regEip,eax
		assume esi:nothing,edi:nothing
	popad
	mov eax,ExceptionContinueExecution	
	ret
_Handler endp

[培训]内核驱动高级班，冲击BAT一流互联网大厂工作，每周日13:00-18:00直播授课