NtOpenProcess
Other → NTSTATUS
NtOpenProcess is a Windows NT kernel system call, in the Other category, returning NTSTATUS. Its syscall number is not the same on every Windows release: across the 81 version-and-architecture pairs recorded here it takes 19 distinct values, from 0x0023 to 0x00E9.
The number is an index into the system service table of one particular build, not a stable identifier, so it is not portable between Windows versions or between x64 and x86. The table below gives the value recorded for each.
Numbers across OS versions (81)
| OS Version | Architecture | Number |
|---|---|---|
| Windows 10 1507 | x64 | 0x0026 (38) |
| Windows 10 1507 | x86 | 0x00E3 (227) |
| Windows 10 1511 | x86 | 0x00E3 (227) |
| Windows 10 1511 | x64 | 0x0026 (38) |
| Windows 10 1607 | x86 | 0x00E5 (229) |
| Windows 10 1607 | x64 | 0x0026 (38) |
| Windows 10 1703 | x86 | 0x00E7 (231) |
| Windows 10 1703 | x64 | 0x0026 (38) |
| Windows 10 1709 | x86 | 0x00E9 (233) |
| Windows 10 1709 | x64 | 0x0026 (38) |
| Windows 10 1803 | x64 | 0x0026 (38) |
| Windows 10 1803 | x86 | 0x00E9 (233) |
| Windows 10 1809 | x64 | 0x0026 (38) |
| Windows 10 1809 | x86 | 0x00E9 (233) |
| Windows 10 1903 | x86 | 0x00E9 (233) |
| Windows 10 1903 | x64 | 0x0026 (38) |
| Windows 10 1909 | x64 | 0x0026 (38) |
| Windows 10 1909 | x86 | 0x00E9 (233) |
| Windows 10 2004 | x64 | 0x0026 (38) |
| Windows 10 2004 | x86 | 0x00E9 (233) |
| Windows 10 20H2 | x86 | 0x00E9 (233) |
| Windows 10 20H2 | x64 | 0x0026 (38) |
| Windows 10 21H1 | x86 | 0x00E9 (233) |
| Windows 10 21H1 | x64 | 0x0026 (38) |
| Windows 10 21H2 | x86 | 0x00E9 (233) |
| Windows 10 21H2 | x64 | 0x0026 (38) |
| Windows 10 22H2 | x86 | 0x00E9 (233) |
| Windows 10 22H2 | x64 | 0x0026 (38) |
| Windows 11 and Server 11 21H2 | x64 | 0x0026 (38) |
| Windows 11 and Server 11 22H2 | x64 | 0x0026 (38) |
| Windows 11 and Server 11 23H2 | x64 | 0x0026 (38) |
| Windows 11 and Server 11 24H2 | x64 | 0x0026 (38) |
| Windows 11 and Server 11 25H2 | x64 | 0x0026 (38) |
| Windows 11 and Server Server 2022 | x64 | 0x0026 (38) |
| Windows 11 and Server Server 2025 | x64 | 0x0026 (38) |
| Windows 11 and Server Server 23H2 | x64 | 0x0026 (38) |
| Windows 2000 SP0 | x86 | 0x006A (106) |
| Windows 2000 SP1 | x86 | 0x006A (106) |
| Windows 2000 SP2 | x86 | 0x006A (106) |
| Windows 2000 SP3 | x86 | 0x006A (106) |
| Windows 2000 SP4 | x86 | 0x006A (106) |
| Windows 7 SP0 | x64 | 0x0023 (35) |
| Windows 7 SP0 | x86 | 0x00BE (190) |
| Windows 7 SP1 | x64 | 0x0023 (35) |
| Windows 7 SP1 | x86 | 0x00BE (190) |
| Windows 8 8.0 | x64 | 0x0024 (36) |
| Windows 8 8.0 | x86 | 0x00DD (221) |
| Windows 8 8.1 | x86 | 0x00E0 (224) |
| Windows 8 8.1 | x64 | 0x0025 (37) |
| Windows NT 3.x 3.1 | x86 | 0x0049 (73) |
| Windows NT 3.x 3.5 | x86 | 0x004C (76) |
| Windows NT 3.x 3.51 | x86 | 0x0050 (80) |
| Windows NT 4.0 SP0 | x86 | 0x0054 (84) |
| Windows NT 4.0 SP1 | x86 | 0x0054 (84) |
| Windows NT 4.0 SP2 | x86 | 0x0054 (84) |
| Windows NT 4.0 SP3 | x86 | 0x0054 (84) |
| Windows NT 4.0 SP3 TSE | x86 | 0x0054 (84) |
| Windows NT 4.0 SP4 | x86 | 0x0054 (84) |
| Windows NT 4.0 SP5 | x86 | 0x0054 (84) |
| Windows NT 4.0 SP6 | x86 | 0x0054 (84) |
| Windows Server 2003 R2 | x86 | 0x0080 (128) |
| Windows Server 2003 R2 | x64 | 0x0023 (35) |
| Windows Server 2003 R2 SP2 | x86 | 0x0080 (128) |
| Windows Server 2003 R2 SP2 | x64 | 0x0023 (35) |
| Windows Server 2003 SP0 | x64 | 0x0023 (35) |
| Windows Server 2003 SP0 | x86 | 0x0080 (128) |
| Windows Server 2003 SP1 | x86 | 0x0080 (128) |
| Windows Server 2003 SP2 | x86 | 0x0080 (128) |
| Windows Server 2003 SP2 | x64 | 0x0023 (35) |
| Windows Vista SP0 | x64 | 0x0023 (35) |
| Windows Vista SP0 | x86 | 0x00C2 (194) |
| Windows Vista SP1 | x86 | 0x00C2 (194) |
| Windows Vista SP1 | x64 | 0x0023 (35) |
| Windows Vista SP2 | x64 | 0x0023 (35) |
| Windows Vista SP2 | x86 | 0x00C2 (194) |
| Windows XP SP0 | x86 | 0x007A (122) |
| Windows XP SP1 | x86 | 0x007A (122) |
| Windows XP SP1 | x64 | 0x0023 (35) |
| Windows XP SP2 | x86 | 0x007A (122) |
| Windows XP SP2 | x64 | 0x0023 (35) |
| Windows XP SP3 | x86 | 0x007A (122) |