NtFindAtom - NtDoc

Native API online documentation, based on the System Informer (formerly Process Hacker) phnt headers
#ifndef _NTEXAPI_H
#if (PHNT_MODE != PHNT_MODE_KERNEL)

/**
 * The NtFindAtom routine retrieves the atom identifier associated with a
 * Unicode string in the system atom table.
 *
 * \param AtomName A pointer to a Unicode string containing the atom name.
 * \param Length The length, in bytes, of the string pointed to by AtomName.
 * \param Atom An optional pointer that receives the atom identifier if found.
 * \return NTSTATUS Successful or errant status.
 * \see https://learn.microsoft.com/en-us/windows/win32/api/winbase/nf-winbase-findatomw
 */
NTSYSCALLAPI
NTSTATUS
NTAPI
NtFindAtom(
    _In_reads_bytes_opt_(Length) PCWSTR AtomName,
    _In_ ULONG Length,
    _Out_opt_ PRTL_ATOM Atom
    );

#endif
#endif

View code on GitHub
#ifndef _NTZWAPI_H

NTSYSCALLAPI
NTSTATUS
NTAPI
ZwFindAtom(
    _In_reads_bytes_opt_(Length) PCWSTR AtomName,
    _In_ ULONG Length,
    _Out_opt_ PRTL_ATOM Atom
    );

#endif

View code on GitHub

NtDoc

No description available.

NTinternals.net (undocumented.ntinternals.net)

Function NtFindAtom retrieve existing Atom's identifier without incrementing Atom's internal counter.

AtomName

Atom's name, in UNICODE format.

Atom

Result of call - Pointer to Atom's identifier.

Documented by

See also