NtMarshallTransaction

Other → NTSTATUS

NtMarshallTransaction is a Windows NT kernel system call, in the Other category, returning NTSTATUS. Its syscall number is not the same on every Windows release: across the 2 version-and-architecture pairs recorded here it takes 2 distinct values, from 0x00E8 to 0x017A.

The number is an index into the system service table of one particular build, not a stable identifier, so it is not portable between Windows versions or between x64 and x86. The table below gives the value recorded for each.