> PS C:\Program Files\Microsoft Visual Studio\18\Community> dumpbin.exe /EXPORTS C:\Windows\System32\ntdll.dll | rg ZwMapViewOfSection 2072 80F 001612B

> PS C:\Program Files\Microsoft Visual Studio\18\Community> dumpbin.exe /EXPORTS C:\Windows\System32\ntdll.dll | rg ZwMapViewOfSection 2072 80F 001612B0 ZwMapViewOfSection 2073 810 00163160 ZwMapViewOfSectionEx > PS C:\Program Files\Microsoft Visual Studio\18\Community> dumpbin.exe /EXPORTS C:\Windows\System32\ntdll.dll | rg NtMapViewOfSection 425 1A0 001612B0 NtMapViewOfSection 426 1A1 00163160 NtMapViewOfSectionEx > How "differently" exactly? That's undocumented. https://learn.microsoft.com/en-us/windows-hardware/drivers/kernel/using-nt-and-zw-versions-of-the-native-system-services-routines https://learn.microsoft.com/en-us/windows-hardware/drivers/k...