RtlPcToFileHeader function (winnt.h)

Retrieves the base address of the image that contains the specified PC value.

Syntax

NTSYSAPI PVOID RtlPcToFileHeader(
  [in]  PVOID PcValue,
  [out] PVOID *BaseOfImage
);

Parameters

[in] PcValue

The PC value. The function searches all modules mapped into the address space of the calling process for a module that contains this value.

[out] BaseOfImage

The base address of the image containing the PC value. This value must be added to any relative addresses in the headers to locate the image.

Return value

If the PC value is found, the function returns the base address of the image that contains the PC value.

If no image contains the PC value, the function returns NULL.

Requirements

Requirement Value
Target Platform Windows
Header winnt.h
Library Kernel32.lib
DLL Kernel32.dll

See also

RtlLookupFunctionEntry

Vertdll APIs available in VBS enclaves