为什么XueTr.exe和windbg查出来的NtOpenProcess地址不一样?

nt!NtOpenProcess:
805CC470        68 C4000000        push   0C4
805CC475        68 C0B44D80        push   804DB4C0
805CC47A        E8 6107F7FF        call   8053CBE0
805CC47F        33F6        xor    esi, esi
805CC481        8975 D4        mov    dword ptr [ebp-2C], esi
805CC484        33C0        xor    eax, eax
805CC486        8D7D D8        lea    edi, [ebp-28]
805CC489        AB        stosw/d  dword ptr es:edi, eax

nt!NtOpenProcess:
805cc3fc 68c4000000      push    0C4h
805cc401 68b8b44d80      push    offset nt!ObWatchHandles+0x25c (804db4b8)
805cc406 e87507f7ff      call    nt!_SEH_prolog (8053cb80)
805cc40b 33f6            xor     esi,esi
805cc40d 8975d4          mov     dword ptr [ebp-2Ch],esi
805cc410 33c0            xor     eax,eax
805cc412 8d7dd8          lea     edi,[ebp-28h]
805cc415 ab              stos    dword ptr es:[edi]