NtCreateThreadStateChange
Thread → NTSTATUS
NtCreateThreadStateChange is a Windows NT kernel system call, in the Thread category, returning NTSTATUS. Its syscall number is not the same on every Windows release: across the 8 version-and-architecture pairs recorded here it takes 5 distinct values, from 0x00C6 to 0x00CA.
The number is an index into the system service table of one particular build, not a stable identifier, so it is not portable between Windows versions. The table below gives the value recorded for each.
Numbers across OS versions (8)
| OS Version | Architecture | Number |
|---|---|---|
| Windows 11 and Server 11 21H2 | x64 | 0x00C7 (199) |
| Windows 11 and Server 11 22H2 | x64 | 0x00C8 (200) |
| Windows 11 and Server 11 23H2 | x64 | 0x00C8 (200) |
| Windows 11 and Server 11 24H2 | x64 | 0x00CA (202) |
| Windows 11 and Server 11 25H2 | x64 | 0x00CA (202) |
| Windows 11 and Server Server 2022 | x64 | 0x00C6 (198) |
| Windows 11 and Server Server 2025 | x64 | 0x00CA (202) |
| Windows 11 and Server Server 23H2 | x64 | 0x00C9 (201) |