#ifndef _NTEXAPI_H
#if (PHNT_MODE != PHNT_MODE_KERNEL)
/**
* The NtQueryInformationAtom routine retrieves information about a specified atom in the system atom table.
*
* \param Atom The atom identifier for which information is being queried.
* \param AtomInformationClass Specifies the type of information to retrieve. This is an ATOM_INFORMATION_CLASS value.
* \param AtomInformation A pointer to a buffer that receives the requested information.
* \param AtomInformationLength The size, in bytes, of the AtomInformation buffer.
* \param ReturnLength Optional pointer to a variable that receives the number of bytes written to the AtomInformation buffer.
* \return NTSTATUS Successful or errant status.
*/
NTSYSCALLAPI
NTSTATUS
NTAPI
NtQueryInformationAtom(
_In_ RTL_ATOM Atom,
_In_ ATOM_INFORMATION_CLASS AtomInformationClass,
_Out_writes_bytes_(AtomInformationLength) PVOID AtomInformation,
_In_ ULONG AtomInformationLength,
_Out_opt_ PULONG ReturnLength
);
View code on GitHub#ifndef _NTZWAPI_H
NTSYSCALLAPI
NTSTATUS
NTAPI
ZwQueryInformationAtom(
_In_ RTL_ATOM Atom,
_In_ ATOM_INFORMATION_CLASS AtomInformationClass,
_Out_writes_bytes_(AtomInformationLength) PVOID AtomInformation,
_In_ ULONG AtomInformationLength,
_Out_opt_ PULONG ReturnLength
);
View code on GitHubNo description available.
NtQueryInformationAtom is used to get single Atom properties or to read Global Atom Table.
Atom to query. If AtomInformationClass parameter is AtomTableInformation, Atom parameter is not used.
See ATOM_INFORMATION_CLASS enumeration type for details.
Result of call - pointer to user's allocated buffer for data.
Size of AtomInformation buffer, in bytes.
Pointer to ULONG value contains required AtomInformation buffer size.