Cross-version syscall map
Compare syscall IDs across Windows builds. This page is under construction in Phase 1 — the data model is wired and the table will populate as syscalls are added.
| Syscall | Win10 1507 | Win10 1607 | Win10 1703 | Win10 1709 | Win10 1803 | Win10 1809 | Win10 1903 | Win10 1909 | Win10 2004 | Win10 20H2 | Win10 21H1 | Win10 21H2 | Win10 22H2 | Win11 21H2 | Win11 22H2 | Win11 23H2 | Win11 24H2 | Server 2016 | Server 2019 | Server 2022 | Server 2025 |
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| NtAllocateVirtualMemory | — | — | — | — | — | — | — | 0x18 | 0x18 | 0x18 | 0x18 | 0x18 | 0x18 | 0x18 | 0x18 | 0x18 | 0x18 | — | 0x18 | 0x18 | 0x18 |
| NtProtectVirtualMemory | 0x50 | 0x50 | 0x50 | 0x50 | 0x50 | 0x50 | 0x50 | 0x50 | 0x50 | 0x50 | 0x50 | 0x50 | 0x50 | 0x50 | 0x50 | 0x50 | 0x50 | 0x50 | 0x50 | 0x50 | 0x50 |
| NtWriteVirtualMemory | 0x3A | 0x3A | 0x3A | 0x3A | 0x3A | 0x3A | 0x3A | 0x3A | 0x3A | 0x3A | 0x3A | 0x3A | 0x3A | 0x3A | 0x3A | 0x3A | 0x3A | 0x3A | 0x3A | 0x3A | 0x3A |
| NtReadVirtualMemory | 0x3F | 0x3F | 0x3F | 0x3F | 0x3F | 0x3F | 0x3F | 0x3F | 0x3F | 0x3F | 0x3F | 0x3F | 0x3F | 0x3F | 0x3F | 0x3F | 0x3F | 0x3F | 0x3F | 0x3F | 0x3F |
| NtOpenProcess | 0x26 | 0x26 | 0x26 | 0x26 | 0x26 | 0x26 | 0x26 | 0x26 | 0x26 | 0x26 | 0x26 | 0x26 | 0x26 | 0x26 | 0x26 | 0x26 | 0x26 | 0x26 | 0x26 | 0x26 | 0x26 |
| NtCreateThreadEx | 0xB3 | 0xB6 | 0xB9 | 0xBA | 0xBB | 0xBC | 0xBD | 0xBD | 0xC1 | 0xC1 | 0xC1 | 0xC2 | 0xC2 | 0xC6 | 0xC7 | 0xC7 | 0xC9 | 0xB6 | 0xBC | 0xC5 | 0xC9 |
| NtCreateSection | 0x4A | 0x4A | 0x4A | 0x4A | 0x4A | 0x4A | 0x4A | 0x4A | 0x4A | 0x4A | 0x4A | 0x4A | 0x4A | 0x4A | 0x4A | 0x4A | 0x4A | 0x4A | 0x4A | 0x4A | 0x4A |
| NtMapViewOfSection | 0x28 | 0x28 | 0x28 | 0x28 | 0x28 | 0x28 | 0x28 | 0x28 | 0x28 | 0x28 | 0x28 | 0x28 | 0x28 | 0x28 | 0x28 | 0x28 | 0x28 | 0x28 | 0x28 | 0x28 | 0x28 |
| NtQueueApcThread | 0x45 | 0x45 | 0x45 | 0x45 | 0x45 | 0x45 | 0x45 | 0x45 | 0x45 | 0x45 | 0x45 | 0x45 | 0x45 | 0x45 | 0x45 | 0x45 | 0x45 | 0x45 | 0x45 | 0x45 | 0x45 |
| NtResumeThread | 0x52 | 0x52 | 0x52 | 0x52 | 0x52 | 0x52 | 0x52 | 0x52 | 0x52 | 0x52 | 0x52 | 0x52 | 0x52 | 0x52 | 0x52 | 0x52 | 0x52 | 0x52 | 0x52 | 0x52 | 0x52 |
| NtOpenProcessToken | 0x114 | 0x119 | 0x11D | 0x11F | 0x121 | 0x122 | 0x123 | 0x123 | 0x128 | 0x128 | 0x128 | 0x129 | 0x129 | 0x12F | 0x131 | 0x131 | 0x133 | 0x119 | 0x122 | 0x12E | 0x133 |
| NtOpenProcessTokenEx | 0x30 | 0x30 | 0x30 | 0x30 | 0x30 | 0x30 | 0x30 | 0x30 | 0x30 | 0x30 | 0x30 | 0x30 | 0x30 | 0x30 | 0x30 | 0x30 | 0x30 | 0x30 | 0x30 | 0x30 | 0x30 |
| NtAdjustPrivilegesToken | 0x41 | 0x41 | 0x41 | 0x41 | 0x41 | 0x41 | 0x41 | 0x41 | 0x41 | 0x41 | 0x41 | 0x41 | 0x41 | 0x41 | 0x41 | 0x41 | 0x41 | 0x41 | 0x41 | 0x41 | 0x41 |
| NtQueryInformationToken | 0x21 | 0x21 | 0x21 | 0x21 | 0x21 | 0x21 | 0x21 | 0x21 | 0x21 | 0x21 | 0x21 | 0x21 | 0x21 | 0x21 | 0x21 | 0x21 | 0x21 | 0x21 | 0x21 | 0x21 | 0x21 |
| NtDuplicateToken | 0x42 | 0x42 | 0x42 | 0x42 | 0x42 | 0x42 | 0x42 | 0x42 | 0x42 | 0x42 | 0x42 | 0x42 | 0x42 | 0x42 | 0x42 | 0x42 | 0x42 | 0x42 | 0x42 | 0x42 | 0x42 |
| NtImpersonateAnonymousToken | 0xED | 0xF0 | 0xF3 | 0xF4 | 0xF5 | 0xF6 | 0xF7 | 0xF7 | 0xFC | 0xFC | 0xFC | 0xFD | 0xFD | 0x102 | 0x103 | 0x103 | 0x105 | 0xF0 | 0xF6 | 0x101 | 0x105 |
| NtImpersonateThread | 0xEE | 0xF1 | 0xF4 | 0xF5 | 0xF6 | 0xF7 | 0xF8 | 0xF8 | 0xFD | 0xFD | 0xFD | 0xFE | 0xFE | 0x103 | 0x104 | 0x104 | 0x106 | 0xF1 | 0xF7 | 0x102 | 0x106 |
| NtSetInformationThread | 0xD | 0xD | 0xD | 0xD | 0xD | 0xD | 0xD | 0xD | 0xD | 0xD | 0xD | 0xD | 0xD | 0xD | 0xD | 0xD | 0xD | 0xD | 0xD | 0xD | 0xD |
| NtCreateKey | 0x1D | 0x1D | 0x1D | 0x1D | 0x1D | 0x1D | 0x1D | 0x1D | 0x1D | 0x1D | 0x1D | 0x1D | 0x1D | 0x1D | 0x1D | 0x1D | 0x1D | 0x1D | 0x1D | 0x1D | 0x1D |
| NtSetValueKey | 0x60 | 0x60 | 0x60 | 0x60 | 0x60 | 0x60 | 0x60 | 0x60 | 0x60 | 0x60 | 0x60 | 0x60 | 0x60 | 0x60 | 0x60 | 0x60 | 0x60 | 0x60 | 0x60 | 0x60 | 0x60 |
| NtCreateFile | 0x55 | 0x55 | 0x55 | 0x55 | 0x55 | 0x55 | 0x55 | 0x55 | 0x55 | 0x55 | 0x55 | 0x55 | 0x55 | 0x55 | 0x55 | 0x55 | 0x55 | 0x55 | 0x55 | 0x55 | 0x55 |
| NtWriteFile | 0x8 | 0x8 | 0x8 | 0x8 | 0x8 | 0x8 | 0x8 | 0x8 | 0x8 | 0x8 | 0x8 | 0x8 | 0x8 | 0x8 | 0x8 | 0x8 | 0x8 | 0x8 | 0x8 | 0x8 | 0x8 |
| NtSetInformationFile | 0x27 | 0x27 | 0x27 | 0x27 | 0x27 | 0x27 | 0x27 | 0x27 | 0x27 | 0x27 | 0x27 | 0x27 | 0x27 | 0x27 | 0x27 | 0x27 | 0x27 | 0x27 | 0x27 | 0x27 | 0x27 |
| NtSetSystemInformation | 0x18E | 0x197 | 0x19D | 0x1A0 | 0x1A2 | 0x1A3 | 0x1A4 | 0x1A4 | 0x1AA | 0x1AA | 0x1AA | 0x1AC | 0x1AC | 0x1B5 | 0x1B9 | 0x1B9 | 0x1BC | 0x197 | 0x1A3 | 0x1B2 | 0x1BC |
More data coming soon