RtlQueryPackageIdentity function (ntifs.h)

RtlQueryPackageIdentity returns the associated full package name. It can optionally also return the package relative application name, and whether an application is considered packaged. See also RtlQueryPackageIdentityEx.

Syntax

NTSYSAPI NTSTATUS RtlQueryPackageIdentity(
  PVOID    TokenObject,
  PWSTR    PackageFullName,
  PSIZE_T  PackageSize,
  PWSTR    AppId,
  PSIZE_T  AppIdSize,
  PBOOLEAN Packaged
);

Parameters

TokenObject

Handle to a token object (user mode) that was opened with TOKEN_QUERY access, or to a raw token object (kernel mode).

PackageFullName

Pointer to a wide character buffer that will receive the unique package key. The buffer will be null terminated upon success.

PackageSize

Pointer to the value that defines the size of the buffer that PackageFullName points to. On output, it will contain the written size including the terminating null.

AppId

Pointer to a wide character buffer that may receive the package relative application identifier. AppId is optional and can be NULL.

AppIdSize

Pointer to the value that defines the size of the buffer that AppId points to. On output, it will contain the written size including the terminating null. If AppId is not NULL, AppIdSize must point to a valid value; otherwise AppIdSize should set to NULL.

Packaged

Pointer to a value that receives a BOOLEAN flag indicating whether the application is packaged. Packaged is optional and can be NULL.

Return value

RtlQueryPackageIdentity returns STATUS_SUCCESS upon successful completion; otherwise it returns a code such as one of the following.

Requirements

See also

RtlQueryPackageIdentityEx