NtCreateTokenEx
Security → NTSTATUS
NtCreateTokenEx is a Windows NT kernel system call, in the Security category, returning NTSTATUS. Its syscall number is not the same on every Windows release: across the 40 version-and-architecture pairs recorded here it takes 25 distinct values, from 0x00B2 to 0x015E.
The number is an index into the system service table of one particular build, not a stable identifier, so it is not portable between Windows versions or between x64 and x86. The table below gives the value recorded for each.
Numbers across OS versions (40)
| OS Version | Architecture | Number |
|---|---|---|
| Windows 10 1507 | x86 | 0x0154 (340) |
| Windows 10 1507 | x64 | 0x00B7 (183) |
| Windows 10 1511 | x86 | 0x0156 (342) |
| Windows 10 1511 | x64 | 0x00B8 (184) |
| Windows 10 1607 | x86 | 0x0158 (344) |
| Windows 10 1607 | x64 | 0x00BA (186) |
| Windows 10 1703 | x86 | 0x015B (347) |
| Windows 10 1703 | x64 | 0x00BD (189) |
| Windows 10 1709 | x64 | 0x00BE (190) |
| Windows 10 1709 | x86 | 0x015E (350) |
| Windows 10 1803 | x86 | 0x015E (350) |
| Windows 10 1803 | x64 | 0x00BF (191) |
| Windows 10 1809 | x64 | 0x00C0 (192) |
| Windows 10 1809 | x86 | 0x015D (349) |
| Windows 10 1903 | x64 | 0x00C1 (193) |
| Windows 10 1903 | x86 | 0x015D (349) |
| Windows 10 1909 | x86 | 0x015D (349) |
| Windows 10 1909 | x64 | 0x00C1 (193) |
| Windows 10 2004 | x86 | 0x015D (349) |
| Windows 10 2004 | x64 | 0x00C5 (197) |
| Windows 10 20H2 | x64 | 0x00C5 (197) |
| Windows 10 20H2 | x86 | 0x015D (349) |
| Windows 10 21H1 | x64 | 0x00C5 (197) |
| Windows 10 21H1 | x86 | 0x015D (349) |
| Windows 10 21H2 | x64 | 0x00C6 (198) |
| Windows 10 21H2 | x86 | 0x015D (349) |
| Windows 10 22H2 | x86 | 0x015D (349) |
| Windows 10 22H2 | x64 | 0x00C6 (198) |
| Windows 11 and Server 11 21H2 | x64 | 0x00CB (203) |
| Windows 11 and Server 11 22H2 | x64 | 0x00CC (204) |
| Windows 11 and Server 11 23H2 | x64 | 0x00CC (204) |
| Windows 11 and Server 11 24H2 | x64 | 0x00CE (206) |
| Windows 11 and Server 11 25H2 | x64 | 0x00CE (206) |
| Windows 11 and Server Server 2022 | x64 | 0x00CA (202) |
| Windows 11 and Server Server 2025 | x64 | 0x00CE (206) |
| Windows 11 and Server Server 23H2 | x64 | 0x00CD (205) |
| Windows 8 8.0 | x86 | 0x014A (330) |
| Windows 8 8.0 | x64 | 0x00B2 (178) |
| Windows 8 8.1 | x86 | 0x014E (334) |
| Windows 8 8.1 | x64 | 0x00B4 (180) |