NtLoadHotPatch

Other → NTSTATUS

NtLoadHotPatch is a Windows NT kernel system call, in the Other category, returning NTSTATUS. Its syscall number is not the same on every Windows release: across the 6 version-and-architecture pairs recorded here it takes 5 distinct values, from 0x00FE to 0x010E.

The number is an index into the system service table of one particular build, not a stable identifier, so it is not portable between Windows versions or between x64 and x86. The table below gives the value recorded for each.

Numbers across OS versions (6)

OS VersionArchitectureNumber
Windows 10 1703 x64 0x00FE (254)
Windows 10 1703 x86 0x010B (267)
Windows 10 1709 x64 0x00FF (255)
Windows 10 1709 x86 0x010E (270)
Windows 10 1803 x64 0x0100 (256)
Windows 10 1803 x86 0x010E (270)