title: What is RtlPcToFileHeader?
body: <p>I am profiling an application using VerySleepy 0.7. The application is written in C++ with Qt 4.6.x, compiled with VS 2005 and is running on Windows 7 Ultimate x64.</p>
  
  <p>The highest usage by far is a call to <a href="http://msdn.microsoft.com/en-us/library/ms680603%28VS.85%29.aspx" rel="nofollow" title="RtlPcToFileHeader">RtlPcToFileHeader</a></p>
  
  <pre><code>Exclusive Inclusive %Exclusive %Inclusive Module
  33.67s    33.67s    15.13%     15.13%     ntdll
  </code></pre>
  
  <p>It is not clear to me from the documentation what RtlPcToFileHeader is but because it is referenced under "Error Handling Functions" it seems like it is something that should not be there. That being said, since it was used basically throughout my profiling capture, it could also be some very basic function call (i.e. something like <code>main</code>) or a side affect of the profiling itself.</p>
  
  <p>What is the purpose of the RtlPcToFileHeader function?</p>
  
  <p>Update: Based on Mike's suggestion, I did break into the running process and the couple times it included RtlPcToFileHeader in the stack trace it seemed somehow tied to a <code>dynamic_cast</code>. I have also changed to question to better reflect that I am trying to determine what RtlPcToFileHeader actually does.</p>