NtLoadHotPatch
Other → NTSTATUS
NtLoadHotPatch is a Windows NT kernel system call, in the Other category, returning NTSTATUS. Its syscall number is not the same on every Windows release: across the 6 version-and-architecture pairs recorded here it takes 5 distinct values, from 0x00FE to 0x010E.
The number is an index into the system service table of one particular build, not a stable identifier, so it is not portable between Windows versions or between x64 and x86. The table below gives the value recorded for each.
Numbers across OS versions (6)
| OS Version | Architecture | Number |
|---|---|---|
| Windows 10 1703 | x64 | 0x00FE (254) |
| Windows 10 1703 | x86 | 0x010B (267) |
| Windows 10 1709 | x64 | 0x00FF (255) |
| Windows 10 1709 | x86 | 0x010E (270) |
| Windows 10 1803 | x64 | 0x0100 (256) |
| Windows 10 1803 | x86 | 0x010E (270) |