Module functions

Provides abstractions for all entries in the apfnSimpleCall table.

Depending on the operating system the program is running on, the syscalls are invoked differently:

• On Windows 11 or newer, the function is loaded from win32u.dll.
• On older operating systems the function is invoked via the NtUserCall* family of syscalls, loaded from win32u.dll.
• On Windows 7 to 8.1, NtUserCall* syscalls are not exported, and the syscalls are invoked directly via inline assembly.

Function resolution happens the first time the function is called.

Errors:

• UserCallError::OsNotSupported: The crate does not contain table entry indices.
• UserCallError::LibraryNotFound: A required DLL has not been loaded.
• UserCallError::CallNotFound: The function cannot be invoked on the current operating system.

Modules

user_call

Direct access to the underlying NtUserCall* syscalls.

Enums

NtUserCall

The sum of all functions accessible via the NtUserCall* family of system calls in all supported operating systems. The variants will be mapped to the respective function indices in crate::indices at runtime.

Functions

NtUserAllowForegroundActivation^⚠

NtUserAllowSetForegroundWindow^⚠

https://learn.microsoft.com/en-us/windows/win32/api/winuser/nf-winuser-allowsetforegroundwindow

NtUserArrangeIconicWindows^⚠

https://learn.microsoft.com/en-us/windows/win32/api/winuser/nf-winuser-arrangeiconicwindows

NtUserBeginDeferWindowPos^⚠

https://learn.microsoft.com/en-us/windows/win32/api/winuser/nf-winuser-begindeferwindowpos

NtUserBroadcastImeShowStatusChange^⚠

NtUserCancelQueueEventCompletionPacket^⚠

NtUserChangeWindowMessageFilter^⚠

NtUserCheckImeShowStatusInThread^⚠

NtUserCitSetInfo^⚠

NtUserClearWakeMask^⚠

NtUserClearWindowState^⚠

NtUserCreateEmptyCursorObject^⚠

NtUserCreateMenu^⚠

https://learn.microsoft.com/en-us/windows/win32/api/winuser/nf-winuser-createmenu

NtUserCreatePopupMenu^⚠

https://learn.microsoft.com/en-us/windows/win32/api/winuser/nf-winuser-createpopupmenu

NtUserCreateSystemThreads^⚠

NtUserCsDdeUninitialize^⚠

NtUserDWP_GetEnabledPopup^⚠

NtUserDWP_GetEnabledPopupOffset^⚠

NtUserDeferredDesktopRotation^⚠

NtUserDeregisterShellHookWindow^⚠

NtUserDesktopHasWatermarkText^⚠

NtUserDestroyCaret^⚠

https://learn.microsoft.com/en-us/windows/win32/api/winuser/nf-winuser-destroycaret

NtUserDirectedYield^⚠

NOP

NtUserDisableProcessWindowsGhosting^⚠

https://learn.microsoft.com/en-us/windows/win32/api/winuser/nf-winuser-disableprocesswindowsghosting

NtUserDoInitMessagePumpHook^⚠

NtUserDoUninitMessagePumpHook^⚠

NtUserDrainThreadCoreMessagingCompletions^⚠

NtUserDrawMenuBar^⚠

https://learn.microsoft.com/en-us/windows/win32/api/winuser/nf-winuser-drawmenubar

NtUserDwmLockScreenUpdates^⚠

May only be called by winlogon.

NtUserEditionGetExecutionEvironment^⚠

NtUserEditionPostKeyboardInputMessage^⚠

Always returns STATUS_NOT_SUPPORTED.

NtUserEnableMiPShellThread^⚠

NtUserEnableModernAppWindowKeyboardIntercept^⚠

May only be called by the immersive broker, otherwise returns 0 with GetLastError() == ERROR_ACCESS_DENIED.

NtUserEnableMouseInPointerForThread^⚠

NtUserEnablePerMonitorMenuScaling^⚠

NtUserEnableSessionForMMCSS^⚠

May only be called by dwm, returns FALSE otherwise.

NtUserEnableShellWindowManagementBehavior^⚠

NtUserEnableWindow^⚠

https://learn.microsoft.com/en-us/windows/win32/api/winuser/nf-winuser-enablewindow

NtUserEnsureDpiDepSysMetCacheForPlateau^⚠

NtUserEnumClipboardFormats^⚠

https://learn.microsoft.com/en-us/windows/win32/api/winuser/nf-winuser-enumclipboardformats

NtUserForceEnableNumpadTranslation^⚠

NtUserGetClassIcoCur^⚠

See https://learn.microsoft.com/en-us/windows/win32/api/winuser/nf-winuser-getclasslongptrw. index may be GCLP_HCURSOR or GCLP_HICON.

NtUserGetCursorPos^⚠

1 = regular, 2 = logical pos from dpi awareness context

NtUserGetDeviceChangeInfo^⚠

NtUserGetHDevName^⚠

NtUserGetIMEShowStatus^⚠

NtUserGetInputDesktop^⚠

NtUserGetInputEvent^⚠

NtUserGetKeyboardLayout^⚠

NtUserGetKeyboardType^⚠

https://learn.microsoft.com/en-us/windows/win32/api/winuser/nf-winuser-getkeyboardtype

NtUserGetMessagePos^⚠

https://learn.microsoft.com/en-us/windows/win32/api/winuser/nf-winuser-getmessagepos

NtUserGetModernAppWindow^⚠

NtUserGetProcessDefaultLayout^⚠

NtUserGetQueueIocp^⚠

NtUserGetQueueStatus^⚠

NtUserGetSendMessageReceiver^⚠

NtUserGetSysMenuHandle^⚠

NtUserGetSysMenuOffset^⚠

NtUserGetUnpredictedMessagePos^⚠

NtUserGetWinStationInfo^⚠

NtUserGetWindowContextHelpId^⚠

NtUserGetWindowTrackInfoAsync^⚠

Needs IAM access.

NtUserHandleSystemThreadCreationFailure^⚠

NtUserHideCursorNoCapture^⚠

NtUserInitAnsiOem^⚠

NtUserInitThreadCoreMessagingIocp^⚠

NtUserIsMiPShellThreadEnabled^⚠

NtUserIsQueueAttached^⚠

NtUserKbdNlsFuncTypeDummy^⚠

NtUserKillSystemTimer^⚠

NtUserLW_LoadFonts^⚠

NtUserLoadCursorsAndIcons^⚠

NtUserLoadUserApiHook^⚠

NtUserLockSetForegroundWindow^⚠

https://learn.microsoft.com/en-us/windows/win32/api/winuser/nf-winuser-locksetforegroundwindow

NtUserMapDesktopObject^⚠

NtUserMessageBeep^⚠

https://learn.microsoft.com/en-us/windows/win32/api/winuser/nf-winuser-messagebeep

NtUserMonitorFromWindow^⚠

https://learn.microsoft.com/en-us/windows/win32/api/winuser/nf-winuser-monitorfromwindow

NtUserNlsKbdSendIMENotification^⚠

NtUserNotifyOverlayWindow^⚠

NtUserPlayEventSound^⚠

NtUserPostQuitMessage^⚠

https://learn.microsoft.com/en-us/windows/win32/api/winuser/nf-winuser-postquitmessage

NtUserPostUIActions^⚠

May only be called by the immersive broker, otherwise returns 0 with GetLastError() == ERROR_ACCESS_DENIED.

NtUserPrepareForLogoff^⚠

NtUserRealizePalette^⚠

https://learn.microsoft.com/en-us/windows/win32/api/wingdi/nf-wingdi-realizepalette

NtUserReassociateQueueEventCompletionPacket^⚠

NtUserRedrawFrame^⚠

Equivalent to SetWindowPos(hwnd, HWND::default(), 0, 0, 0, 0, SWP_DRAWFRAME | SWP_NOACTIVATE | SWP_NOMOVE | SWP_NOSIZE | SWP_NOZORDER)

NtUserRedrawFrameAndHook^⚠

Redraws and calls WH_SYSMSGFILTER hooks if a tray window

NtUserRedrawTitle^⚠

NtUserRegisterGhostWindow^⚠

May only be called by DWM, returns FALSE with GetLastError() == ERROR_ACCESS_DENIED otherwise.

NtUserRegisterKeyboardCorrectionCallout^⚠

May only be called by the immersive broker, otherwise returns FALSE with GetLastError() == ERROR_ACCESS_DENIED.

NtUserRegisterLPK^⚠

NtUserRegisterLogonProcess^⚠

NtUserRegisterShellHookWindow^⚠

NtUserRegisterSiblingFrostWindow^⚠

NtUserRegisterSystemThread^⚠

NtUserRegisterUserHungAppHandlers^⚠

NtUserRegisterWindowArrangementCallout^⚠

NtUserReleaseCapture^⚠

NtUserReleaseDC^⚠

NtUserRemoteConnectState^⚠

NtUserRemoteConsoleShadowStop^⚠

NtUserRemoteDisconnect^⚠

NtUserRemoteLogoff^⚠

NtUserRemoteNotify^⚠

May only be called by CSRSS, returns STATUS_ACCESS_DENIED otherwise.

NtUserRemoteNtSecurity^⚠

Always returns STATUS_NOT_SUPPORTED.

NtUserRemotePassthruDisable^⚠

May only be called by CSRSS, returns STATUS_ACCESS_DENIED otherwise.

NtUserRemotePassthruEnable^⚠

May only be called by CSRSS, returns STATUS_ACCESS_DENIED otherwise.

NtUserRemoteReconnect^⚠

NtUserRemoteShadowCleanup^⚠

May only be called by CSRSS, returns STATUS_ACCESS_DENIED otherwise.

NtUserRemoteShadowSetup^⚠

May only be called by CSRSS, returns STATUS_ACCESS_DENIED otherwise.

NtUserRemoteShadowStart^⚠

May only be called by CSRSS, returns STATUS_ACCESS_DENIED otherwise.

NtUserRemoteShadowStop^⚠

May only be called by CSRSS, returns STATUS_ACCESS_DENIED otherwise.

NtUserRemoteThinwireStats^⚠

May only be called by CSRSS, returns STATUS_ACCESS_DENIED otherwise.

NtUserRemoveQueueCompletion^⚠

NtUserReplyMessage^⚠

https://learn.microsoft.com/en-us/windows/win32/api/winuser/nf-winuser-replymessage

NtUserResetDblClk^⚠

NtUserScaleSystemMetricForDPIWithoutCache^⚠

NtUserScheduleDispatchNotification^⚠

NtUserSetActiveImmersiveWindow^⚠

Needs IAM access.

NtUserSetCancelRotationDelayHintWindow^⚠

NtUserSetCaretBlinkTime^⚠

https://learn.microsoft.com/en-us/windows/win32/api/winuser/nf-winuser-setcaretblinktime

NtUserSetCaretPos^⚠

https://learn.microsoft.com/en-us/windows/win32/api/winuser/nf-winuser-setcaretpos

NtUserSetCursorPos^⚠

https://learn.microsoft.com/en-us/windows/win32/api/winuser/nf-winuser-setcursorpos

NtUserSetDialogPointer^⚠

NtUserSetDialogSystemMenu^⚠

NtUserSetDoubleClickTime^⚠

https://learn.microsoft.com/en-us/windows/win32/api/winuser/nf-winuser-setdoubleclicktime

NtUserSetMessageExtraInfo^⚠

https://learn.microsoft.com/en-us/windows/win32/api/winuser/nf-winuser-setmessageextrainfo

NtUserSetModernAppWindow^⚠

NtUserSetMsgBox^⚠

NtUserSetPhysicalCursorPos^⚠

https://learn.microsoft.com/en-us/windows/win32/api/winuser/nf-winuser-setphysicalcursorpos

NtUserSetProcessDefaultLayout^⚠

https://learn.microsoft.com/en-us/windows/win32/api/winuser/nf-winuser-setprocessdefaultlayout

NtUserSetProgmanWindow^⚠

NtUserSetShellChangeNotifyHWND^⚠

NtUserSetSysMenu^⚠

NtUserSetTSFEventState^⚠

NtUserSetTaskmanWindow^⚠

NtUserSetThreadQueueMergeSetting^⚠

NtUserSetVisible^⚠

NtUserSetWaitForQueueAttach^⚠

NtUserSetWatermarkStrings^⚠

May only be called by winlogon, returns FALSE otherwise.

NtUserSetWindowContextHelpId^⚠

https://learn.microsoft.com/en-us/windows/win32/api/winuser/nf-winuser-setwindowcontexthelpid

NtUserSetWindowState^⚠

NtUserShowCursor^⚠

https://learn.microsoft.com/en-us/windows/win32/api/winuser/nf-winuser-showcursor

NtUserShowOwnedPopups^⚠

NtUserShowStartGlass^⚠

NtUserStubSetForegroundWindow^⚠

NtUserSwapMouseButton^⚠

https://learn.microsoft.com/en-us/windows/win32/api/winuser/nf-winuser-swapmousebutton

NtUserSwitchToThisWindow^⚠

https://learn.microsoft.com/en-us/windows/win32/api/winuser/nf-winuser-switchtothiswindow

NtUserThreadMessageQueueAttached^⚠

NtUserTraceLoggingSendMixedModeTelemetry^⚠

NtUserUnhookWindowsHook^⚠

NtUserUpdateClientRect^⚠

NtUserUpdatePerUserImmEnabling^⚠

NtUserUpdateWindow^⚠

NtUserUpdateWindows^⚠

NtUserUserPowerCalloutWorker^⚠

NtUserValidateRgn^⚠

https://learn.microsoft.com/en-us/windows/win32/api/winuser/nf-winuser-validatergn

NtUserWOWCleanup^⚠

NtUserWOWModuleUnload^⚠

NtUserWakeRITForShutdown^⚠

May only be called by CSRSS, returns STATUS_UNSUPPORTED otherwise.

NtUserWindowFromDC^⚠

https://learn.microsoft.com/en-us/windows/win32/api/winuser/nf-winuser-windowfromdc

NtUserZapActiveAndFocus^⚠