title: Hooking Win32 exception dispatching
body: <p>I want to hook (local) the function that finally calls an exception handler in order to get the address of the handler before it actually gets executed. </p>
  
  <p>Is this even possible (in usermode)?</p>
  
  <p>Which function do I have to hook?</p>
  
  <p>Which parameter do I have to analyse to get the address of the exception handler that actually handles the exception?</p>
  
  <p>thanks!</p>