NtNotifyChangeDirectoryFileEx
Notify → NTSTATUS
NtNotifyChangeDirectoryFileEx is a Windows NT kernel system call, in the Notify category, returning NTSTATUS. Its syscall number is not the same on every Windows release: across the 28 version-and-architecture pairs recorded here it takes 12 distinct values, from 0x00FD to 0x0122.
The number is an index into the system service table of one particular build, not a stable identifier, so it is not portable between Windows versions or between x64 and x86. The table below gives the value recorded for each.
Numbers across OS versions (28)
| OS Version | Architecture | Number |
|---|---|---|
| Windows 10 1709 | x64 | 0x010F (271) |
| Windows 10 1709 | x86 | 0x00FD (253) |
| Windows 10 1803 | x64 | 0x0111 (273) |
| Windows 10 1803 | x86 | 0x00FD (253) |
| Windows 10 1809 | x86 | 0x00FD (253) |
| Windows 10 1809 | x64 | 0x0112 (274) |
| Windows 10 1903 | x64 | 0x0113 (275) |
| Windows 10 1903 | x86 | 0x00FD (253) |
| Windows 10 1909 | x64 | 0x0113 (275) |
| Windows 10 1909 | x86 | 0x00FD (253) |
| Windows 10 2004 | x86 | 0x00FD (253) |
| Windows 10 2004 | x64 | 0x0118 (280) |
| Windows 10 20H2 | x64 | 0x0118 (280) |
| Windows 10 20H2 | x86 | 0x00FD (253) |
| Windows 10 21H1 | x64 | 0x0118 (280) |
| Windows 10 21H1 | x86 | 0x00FD (253) |
| Windows 10 21H2 | x86 | 0x00FD (253) |
| Windows 10 21H2 | x64 | 0x0119 (281) |
| Windows 10 22H2 | x86 | 0x00FD (253) |
| Windows 10 22H2 | x64 | 0x0119 (281) |
| Windows 11 and Server 11 21H2 | x64 | 0x011F (287) |
| Windows 11 and Server 11 22H2 | x64 | 0x0120 (288) |
| Windows 11 and Server 11 23H2 | x64 | 0x0120 (288) |
| Windows 11 and Server 11 24H2 | x64 | 0x0122 (290) |
| Windows 11 and Server 11 25H2 | x64 | 0x0122 (290) |
| Windows 11 and Server Server 2022 | x64 | 0x011E (286) |
| Windows 11 and Server Server 2025 | x64 | 0x0122 (290) |
| Windows 11 and Server Server 23H2 | x64 | 0x0121 (289) |