nf-winnt-rtlpctofileheader.md

UID	title	description	helpviewer_keywords	old-location	tech.root	ms.assetid	ms.date	ms.keywords	req.header	req.include-header	req.target-type	req.target-min-winverclnt	req.target-min-winversvr	req.kmdf-ver	req.umdf-ver	req.ddi-compliance	req.unicode-ansi	req.idl	req.max-support	req.namespace	req.assembly	req.type-library	req.lib	req.dll	req.irql	targetos	req.typenames	req.redist	req.product	ms.custom	f1_keywords	dev_langs	topic_type	api_type	api_location	api_name
NF:winnt.RtlPcToFileHeader	RtlPcToFileHeader function (winnt.h)	Retrieves the base address of the image that contains the specified PC value.	RtlPcToFileHeader RtlPcToFileHeader function base.rtlpctofileheader winnt/RtlPcToFileHeader	base\rtlpctofileheader.htm	Debug	690c9f20-d471-49c9-a40c-28926f03acac	02/02/2024	RtlPcToFileHeader, RtlPcToFileHeader function, base.rtlpctofileheader, winnt/RtlPcToFileHeader	winnt.h		Windows												Kernel32.lib	Kernel32.dll		Windows			Windows XP Professional x64 Edition or 64-bit editions of Windows Server 2003	19H1	RtlPcToFileHeader winnt/RtlPcToFileHeader	c++	APIRef kbSyntax	DllExport	Kernel32.dll API-MS-Win-Core-rtlsupport-l1-1-0.dll ntdll.dll API-MS-Win-Core-rtlsupport-l1-2-0.dll vertdll.dll	RtlPcToFileHeader

RtlPcToFileHeader function

-description

Retrieves the base address of the image that contains the specified PC value.

-parameters

-param PcValue [in]

The PC value. The function searches all modules mapped into the address space of the calling process for a module that contains this value.

-param BaseOfImage [out]

The base address of the image containing the PC value. This value must be added to any relative addresses in the headers to locate the image.

-returns

If the PC value is found, the function returns the base address of the image that contains the PC value.

If no image contains the PC value, the function returns NULL.

-see-also

RtlLookupFunctionEntry

Vertdll APIs available in VBS enclaves