diff --git a/CHANGES b/CHANGES index df0744b3bf..53e92a89be 100644 --- a/CHANGES +++ b/CHANGES @@ -1,4 +1,8 @@ +3.2.0-dev.565 | 2020-05-26 21:55:54 +0000 + + * Add DCE-RPC constants from BZAR project (V) + 3.2.0-dev.562 | 2020-05-26 11:06:34 -0700 * GH-979: Update libkqueue to fix use on CentOS 6 (Jon Siwek, Corelight) diff --git a/VERSION b/VERSION index c3d0baf0ad..0f42bed5e4 100644 --- a/VERSION +++ b/VERSION @@ -1 +1 @@ -3.2.0-dev.562 +3.2.0-dev.565 diff --git a/doc b/doc index ddc898c4a7..cc6f0df1ae 160000 --- a/doc +++ b/doc @@ -1 +1 @@ -Subproject commit ddc898c4a7ccea56f7ed74504a00e905639d7ddf +Subproject commit cc6f0df1aebce313f68ec699d3005e1657782a98 diff --git a/scripts/base/protocols/dce-rpc/consts.zeek b/scripts/base/protocols/dce-rpc/consts.zeek index 12d3c7cba4..c626be8005 100644 --- a/scripts/base/protocols/dce-rpc/consts.zeek +++ b/scripts/base/protocols/dce-rpc/consts.zeek @@ -88,6 +88,152 @@ export { ["4fc742e0-4a10-11cf-8273-00aa004ae673"] = "netdfs", ["83da7c00-e84f-11d2-9807-00c04f8ec850"] = "sfcapi", ["2f5f3220-c126-1076-b549-074d078619da"] = "nddeapi", + + # Added from BZAR + ["0b1c2170-5732-4e0e-8cd3-d9b16f3b84d7"] = "authzr", + ["e3d0d746-d2af-40fd-8a7a-0d7078bb7092"] = "BitsPeerAuth", + ["b97db8b2-4c63-11cf-bff6-08002be23f2f"] = "clusapi", + ["d61a27c6-8f53-11d0-bfa0-00a024151983"] = "CNtmsSvr", + ["6bffd098-a112-3610-9833-46c3f874532d"] = "dhcpsrv", + ["5b821720-f63b-11d0-aad2-00c04fc324db"] = "dhcpsrv2", + ["8f09f000-b7ed-11ce-bbd2-00001a181cad"] = "dimsvc", + ["7c44d7d4-31d5-424c-bd5e-2b3e1f323d22"] = "dsaop", + ["77df7a80-f298-11d0-8358-00a024c480a8"] = "dscomm", + ["708cca10-9569-11d1-b2a5-0060977d8118"] = "dscomm2", + ["df1941c5-fe89-4e79-bf10-463657acf44d"] = "efsrpc", + ["c681d488-d850-11d0-8c52-00c04fd90f7e"] = "efsrpc2", + ["ea0a3165-4834-11d2-a6f8-00c04fa346cc"] = "fax", + ["6099fc12-3eff-11d0-abd0-00c04fd91a4e"] = "faxclient", + ["a8e0653c-2744-4389-a61d-7373df8b2292"] = "FileServerVssAgent", + ["897e2e5f-93f3-4376-9c9c-fd2277495c27"] = "FrsTransport", + ["4bb8ab1d-9ef9-4100-8eb6-dd4b4e418b72"] = "IADProxy", + ["c4b0c7d9-abe0-4733-a1e1-9fdedf260c7a"] = "IADProxy2", + ["03837516-098b-11d8-9414-505054503030"] = "IAlertDataCollector", + ["0383751a-098b-11d8-9414-505054503030"] = "IApiTracingDataCollector", + ["d99e6e71-fc88-11d0-b498-00a0c90312f3"] = "ICertAdminD", + ["7fe0d935-dda6-443f-85d0-1cfb58fe41dd"] = "ICertAdminD2", + ["d99e6e70-fc88-11d0-b498-00a0c90312f3"] = "ICertRequestD", + ["5422fd3a-d4b8-4cef-a12e-e87d4ca22e90"] = "ICertRequestD2", + ["879c8bbe-41b0-11d1-be11-00c04fb6bf70"] = "IClientSink", + ["03837514-098b-11d8-9414-505054503030"] = "IConfigurationDataCollector", + ["038374ff-098b-11d8-9414-505054503030"] = "IDataCollector", + ["03837502-098b-11d8-9414-505054503030"] = "IDataCollectorCollection", + ["03837520-098b-11d8-9414-505054503030"] = "IDataCollectorSet", + ["03837524-098b-11d8-9414-505054503030"] = "IDataCollectorSetCollection", + ["03837541-098b-11d8-9414-505054503030"] = "IDataManager", + ["00020400-0000-0000-c000-000000000046"] = "IDispatch", + ["d2d79df7-3400-11d0-b40b-00aa005ff586"] = "IDMNotify", + ["3a410f21-553f-11d1-8e5e-00a0c92c9d5d"] = "IDMRemoteServer", + ["00020404-0000-0000-c000-000000000046"] = "IEnumVARIANT", + ["f6beaff7-1e19-4fbb-9f8f-b89e2018337c"] = "IEventService", + ["03837543-098b-11d8-9414-505054503030"] = "IFolderAction", + ["03837544-098b-11d8-9414-505054503030"] = "IFolderActionCollection", + ["7c4e1804-e342-483d-a43e-a850cfcc8d18"] = "IIISApplicationAdmin", + ["bd0c73bc-805b-4043-9c30-9a28d64dd7d2"] = "IIISCertObj", + ["e8fb8620-588f-11d2-9d61-00c04f79c5fe"] = "IIisServiceControl", + ["c3fcc19e-a970-11d2-8b5a-00a0c9b7c9c4"] = "IManagedObject", + ["034634fd-ba3f-11d1-856a-00a0c944138c"] = "IManageTelnetSessions", + ["081e7188-c080-4ff3-9238-29f66d6cabfd"] = "IMessenger", + ["8298d101-f992-43b7-8eca-5052d885b995"] = "IMSAdminBase2W", + ["f612954d-3b0b-4c56-9563-227b7be624b4"] = "IMSAdminBase3W", + ["70b51430-b6ca-11d0-b9b9-00a0c922e750"] = "IMSAdminBaseW", + ["82ad4280-036b-11cf-972c-00aa006887b0"] = "inetinfo", + ["4e934f30-341a-11d1-8fb1-00a024cb6019"] = "INtmsLibraryControl1", + ["db90832f-6910-4d46-9f5e-9fd6bfa73903"] = "INtmsLibraryControl2", + ["d02e4be0-3419-11d1-8fb1-00a024cb6019"] = "INtmsMediaServices1", + ["bb39332c-bfee-4380-ad8a-badc8aff5bb6"] = "INtmsNotifySink", + ["69ab7050-3059-11d1-8faf-00a024cb6019"] = "INtmsObjectInfo1", + ["b057dc50-3059-11d1-8faf-00a024cb6019"] = "INtmsObjectManagement1", + ["895a2c86-270d-489d-a6c0-dc2a9b35280e"] = "INtmsObjectManagement2", + ["3bbed8d9-2c9a-4b21-8936-acb2f995be6c"] = "INtmsObjectManagement3", + ["8da03f40-3419-11d1-8fb1-00a024cb6019"] = "INtmsSession1", + ["784b693d-95f3-420b-8126-365c098659f2"] = "IOCSPAdminD", + ["833e4100-aff7-4ac3-aac2-9f24c1457bce"] = "IPCHCollection", + ["833e4200-aff7-4ac3-aac2-9f24c1457bce"] = "IPCHService", + ["03837506-098b-11d8-9414-505054503030"] = "IPerformanceCounterDataCollector", + ["f120a684-b926-447f-9df4-c966cb785648"] = "IRASrv", + ["6619a740-8154-43be-a186-0319578e02db"] = "IRemoteDispatch", + ["66a2db22-d706-11d0-a37b-00c04fc9da04"] = "IRemoteICFICSConfig", + ["6139d8a4-e508-4ebb-bac7-d7f275145897"] = "IRemoteIPV6Config", + ["66a2db1b-d706-11d0-a37b-00c04fc9da04"] = "IRemoteNetworkConfig", + ["66a2db20-d706-11d0-a37b-00c04fc9da04"] = "IRemoteRouterRestart", + ["66a2db21-d706-11d0-a37b-00c04fc9da04"] = "IRemoteSetDnsConfig", + ["5ff9bdf6-bd91-4d8b-a614-d6317acc8dd8"] = "IRemoteSstpCertCheck", + ["67e08fc2-2984-4b62-b92e-fc1aae64bbbb"] = "IRemoteStringIdConfig", + ["00000131-0000-0000-c000-000000000046"] = "IRemUnknown", + ["c5cebee2-9df5-4cdd-a08c-c2471bc144b4"] = "IResourceManager", + ["2a3eb639-d134-422d-90d8-aaa1b5216202"] = "IResourceManager2", + ["7d07f313-a53f-459a-bb12-012c15b1846e"] = "IRobustNtmsMediaServices1", + ["833e41aa-aff7-4ac3-aac2-9f24c1457bce"] = "ISAFSession", + ["0383753a-098b-11d8-9414-505054503030"] = "ISchedule", + ["0383753d-098b-11d8-9414-505054503030"] = "IScheduleCollection", + ["b9785960-524f-11df-8b6d-83dcded72085"] = "ISDKey", + ["e65e8028-83e8-491b-9af7-aaf6bd51a0ce"] = "IServerHealthReport", + ["20d15747-6c48-4254-a358-65039fd8c63c"] = "IServerHealthReport2", + ["8165b19e-8d3a-4d0b-80c8-97de310db583"] = "IServicedComponentInfo", + ["112b1dff-d9dc-41f7-869f-d67fee7cb591"] = "ITpmVirtualSmartCardManager", + ["fdf8a2b9-02de-47f4-bc26-aa85ab5e5267"] = "ITpmVirtualSmartCardManager2", + ["3c745a97-f375-4150-be17-5950f694c699"] = "ITpmVirtualSmartCardManager3", + ["1a1bb35f-abb8-451c-a1ae-33d98f1bef4a"] = "ITpmVirtualSmartCardManagerStatusCallback", + ["0383750b-098b-11d8-9414-505054503030"] = "ITraceDataCollector", + ["03837512-098b-11d8-9414-505054503030"] = "ITraceDataProvider", + ["03837510-098b-11d8-9414-505054503030"] = "ITraceDataProviderCollection", + ["00020403-0000-0000-c000-000000000046"] = "ITypeComp", + ["00020401-0000-0000-c000-000000000046"] = "ITypeInfo", + ["00020412-0000-0000-c000-000000000046"] = "ITypeInfo2", + ["00020402-0000-0000-c000-000000000046"] = "ITypeLib", + ["00020411-0000-0000-c000-000000000046"] = "ITypeLib2", + ["00000000-0000-0000-c000-000000000046"] = "IUnknown", + ["03837534-098b-11d8-9414-505054503030"] = "IValueMap", + ["03837533-098b-11d8-9414-505054503030"] = "IValueMapItem", + ["d2d79df5-3400-11d0-b40b-00aa005ff586"] = "IVolumeClient", + ["4bdafc52-fe6a-11d2-93f8-00105a11164a"] = "IVolumeClient2", + ["135698d2-3a37-4d26-99df-e2bb6ae3ac61"] = "IVolumeClient3", + ["deb01010-3a37-4d26-99df-e2bb6ae3ac61"] = "IVolumeClient4", + ["214a0f28-b737-4026-b847-4f9e37d79529"] = "IVssDifferentialSoftwareSnapshotMgmt", + ["01954e6b-9254-4e6e-808c-c9e05d007696"] = "IVssEnumMgmtObject", + ["ae1c7110-2f60-11d3-8a39-00c04f72d8e3"] = "IVssEnumObject", + ["fa7df749-66e7-4986-a27f-e2f04ae53772"] = "IVssSnapshotMgmt", + ["29822ab7-f302-11d0-9953-00c04fd919c1"] = "IWamAdmin", + ["29822ab8-f302-11d0-9953-00c04fd919c1"] = "IWamAdmin2", + ["4f7ca01c-a9e5-45b6-b142-2332a1339c1d"] = "IWRMAccounting", + ["481e06cf-ab04-4498-8ffe-124a0a34296d"] = "IWRMCalendar", + ["21546ae8-4da5-445e-987f-627fea39c5e8"] = "IWRMConfig", + ["943991a5-b3fe-41fa-9696-7f7b656ee34b"] = "IWRMMachineGroup", + ["59602eb6-57b0-4fd8-aa4b-ebf06971fe15"] = "IWRMPolicy", + ["f31931a9-832d-481c-9503-887a0e6a79f0"] = "IWRMProtocol", + ["fc910418-55ca-45ef-b264-83d4ce7d30e0"] = "IWRMRemoteSessionMgmt", + ["bc681469-9dd9-4bf4-9b3d-709f69efe431"] = "IWRMResourceGroup", + ["e33c0cc4-0482-101a-bc0c-02608c6ba218"] = "locator", + ["afc07e2e-311c-4435-808c-c483ffeec7c9"] = "lsacap", + ["22e5386d-8b12-4bf0-b0ec-6a1ea419e366"] = "NetEventForwarder", + ["d049b186-814f-11d1-9a3c-00c04fc9b232"] = "NtFrsApi", + ["da5a86c5-12c2-4943-ab30-7f74a813d853"] = "PerflibV2", + ["1088a980-eae5-11d0-8d9b-00a02453c337"] = "qm2qm", + ["fdb3a030-065f-11d1-bb9b-00a024ea5525"] = "qmcomm", + ["76d12b80-3467-11d3-91ff-0090272f9ea3"] = "qmcomm2", + ["41208ee0-e970-11d1-9b9e-00e02c064c39"] = "qmmgmt", + ["20610036-fa22-11cf-9823-00a0c911e5df"] = "rasrpc", + ["497d95a6-2d27-4bf5-9bbd-a6046957133c"] = "RCMListener", + ["bde95fdf-eee0-45de-9e12-e5a61cd0d4fe"] = "RCMPublic", + ["6b5bdd1e-528c-422c-af8c-a4079be4fe48"] = "RemoteFW", + ["1a9134dd-7b39-45ba-ad88-44d01ca47f28"] = "RemoteRead", + ["2f5f6521-ca47-1068-b319-00dd010662db"] = "remotesp", + ["1257b580-ce2f-4109-82d6-a9459d0bf6bc"] = "SessEnvPublicRpc", + ["4b112204-0e19-11d3-b42b-0000f81feb9f"] = "ssdpsrv", + ["2f5f6520-ca46-1067-b319-00dd010662da"] = "tapsrv", + ["88143fd0-c28d-4b2b-8fef-8d882f6a9390"] = "TermServEnumeration", + ["11899a43-2b68-4a76-92e3-a3d6ad8c26ce"] = "TermServNotification", + ["484809d6-4239-471b-b5bc-61df8c23ac48"] = "TermSrvSession", + ["4da1c422-943d-11d1-acae-00c04fc2aa3f"] = "trksvr", + ["300f3532-38cc-11d0-a3f0-0020af6b0add"] = "trkwks", + ["44e265dd-7daf-42cd-8560-3cdb6e7a2729"] = "TsProxyRpcInterface", + ["53b46b02-c73b-4a3e-8dee-b16b80672fc0"] = "TSVIPPublic", + ["8fb6d884-2388-11d0-8c35-00c04fda2795"] = "W32Time", + ["1a927394-352e-4553-ae3f-7cf4aafca620"] = "WdsRpcInterface", + ["811109bf-a4e1-11d1-ab54-00a0c91e9b45"] = "winsi2", + ["ccd8c074-d0e5-4a40-92b4-d074faa6ba28"] = "Witness", + } &redef &default=function(uuid: string): string { return fmt("unknown-%s", uuid); }; ## This table is to map pipe names to the most common @@ -1493,5 +1639,1318 @@ export { ["afa8bd80-7d8a-11c9-bef4-08002b102989",0x03] = "stop_server_listening", ["afa8bd80-7d8a-11c9-bef4-08002b102989",0x04] = "inq_princ_name", + # authzr - MSDN Ref: Remote Authorization API Protocol [ms-raa] + ["0b1c2170-5732-4e0e-8cd3-d9b16f3b84d7",0x00] = "AuthzrFreeContext", + ["0b1c2170-5732-4e0e-8cd3-d9b16f3b84d7",0x01] = "AuthzrInitializeContextFromSid", + ["0b1c2170-5732-4e0e-8cd3-d9b16f3b84d7",0x02] = "AuthrzInitializeCompoundContext", + ["0b1c2170-5732-4e0e-8cd3-d9b16f3b84d7",0x03] = "AuthrzAccessCheck", + ["0b1c2170-5732-4e0e-8cd3-d9b16f3b84d7",0x04] = "AuthrzGetInformationFromContext", + ["0b1c2170-5732-4e0e-8cd3-d9b16f3b84d7",0x05] = "AuthrzModifyClaims", + ["0b1c2170-5732-4e0e-8cd3-d9b16f3b84d7",0x06] = "AuthrzModifySids", + + # BitsPeerAuth - MSDN Ref: BITS Peer-Caching: Peer Authentication Protocol [ms-bpau] + ["e3d0d746-d2af-40fd-8a7a-0d7078bb7092",0x00] = "ExchangePublicKeys", + + # clusapi (v2) - MSDN Ref: Failover Cluster Mgmt API Protocol [ms-cmrp] + ["b97db8b2-4c63-11cf-bff6-08002be23f2f",0x00] = "ApiOpenCluster", + ["b97db8b2-4c63-11cf-bff6-08002be23f2f",0x01] = "ApiCloseCluster", + ["b97db8b2-4c63-11cf-bff6-08002be23f2f",0x02] = "ApiSetClusterName", + ["b97db8b2-4c63-11cf-bff6-08002be23f2f",0x03] = "ApiGetClusterName", + ["b97db8b2-4c63-11cf-bff6-08002be23f2f",0x04] = "ApiGetClusterVersion", + ["b97db8b2-4c63-11cf-bff6-08002be23f2f",0x05] = "ApiGetQuorumResource", + ["b97db8b2-4c63-11cf-bff6-08002be23f2f",0x06] = "ApiSetQuorumResource", + ["b97db8b2-4c63-11cf-bff6-08002be23f2f",0x07] = "ApiCreateEnum", + ["b97db8b2-4c63-11cf-bff6-08002be23f2f",0x08] = "ApiOpenResource", + ["b97db8b2-4c63-11cf-bff6-08002be23f2f",0x09] = "ApiCreateResource", + ["b97db8b2-4c63-11cf-bff6-08002be23f2f",0x0A] = "ApiDeleteResource", + ["b97db8b2-4c63-11cf-bff6-08002be23f2f",0x0B] = "ApiCloseResource", + ["b97db8b2-4c63-11cf-bff6-08002be23f2f",0x0C] = "ApiGetResourceState", + ["b97db8b2-4c63-11cf-bff6-08002be23f2f",0x0D] = "ApiSetResourceName", + ["b97db8b2-4c63-11cf-bff6-08002be23f2f",0x0E] = "ApiGetResourceId", + ["b97db8b2-4c63-11cf-bff6-08002be23f2f",0x0F] = "ApiGetResourceType", + ["b97db8b2-4c63-11cf-bff6-08002be23f2f",0x10] = "ApiFailResource", + ["b97db8b2-4c63-11cf-bff6-08002be23f2f",0x11] = "ApiOnlineResource", + ["b97db8b2-4c63-11cf-bff6-08002be23f2f",0x12] = "ApiOfflineResource", + ["b97db8b2-4c63-11cf-bff6-08002be23f2f",0x13] = "ApiAddResourceDependency", + ["b97db8b2-4c63-11cf-bff6-08002be23f2f",0x14] = "ApiRemoveResourceDependency", + ["b97db8b2-4c63-11cf-bff6-08002be23f2f",0x15] = "ApiCanResourceBeDependent", + ["b97db8b2-4c63-11cf-bff6-08002be23f2f",0x16] = "ApiCreateResEnum", + ["b97db8b2-4c63-11cf-bff6-08002be23f2f",0x17] = "ApiAddResourceNode", + ["b97db8b2-4c63-11cf-bff6-08002be23f2f",0x18] = "ApiRemoveResourceNode", + ["b97db8b2-4c63-11cf-bff6-08002be23f2f",0x19] = "ApiChangeResourceGroup", + ["b97db8b2-4c63-11cf-bff6-08002be23f2f",0x1A] = "ApiCreateResourceType", + ["b97db8b2-4c63-11cf-bff6-08002be23f2f",0x1B] = "ApiDeleteResourceType", + ["b97db8b2-4c63-11cf-bff6-08002be23f2f",0x1C] = "ApiGetRootKey", + ["b97db8b2-4c63-11cf-bff6-08002be23f2f",0x1D] = "ApiCreateKey", + ["b97db8b2-4c63-11cf-bff6-08002be23f2f",0x1E] = "ApiOpenKey", + ["b97db8b2-4c63-11cf-bff6-08002be23f2f",0x1F] = "ApiEnumKey", + ["b97db8b2-4c63-11cf-bff6-08002be23f2f",0x20] = "ApiSetValue", + ["b97db8b2-4c63-11cf-bff6-08002be23f2f",0x21] = "ApiDeleteValue", + ["b97db8b2-4c63-11cf-bff6-08002be23f2f",0x22] = "ApiQueryValue", + ["b97db8b2-4c63-11cf-bff6-08002be23f2f",0x23] = "ApiDeleteKey", + ["b97db8b2-4c63-11cf-bff6-08002be23f2f",0x24] = "ApiEnumValue", + ["b97db8b2-4c63-11cf-bff6-08002be23f2f",0x25] = "ApiCloseKey", + ["b97db8b2-4c63-11cf-bff6-08002be23f2f",0x26] = "ApiQueryInfoKey", + ["b97db8b2-4c63-11cf-bff6-08002be23f2f",0x27] = "ApiSetKeySecurity", + ["b97db8b2-4c63-11cf-bff6-08002be23f2f",0x28] = "ApiGetKeySecurity", + ["b97db8b2-4c63-11cf-bff6-08002be23f2f",0x29] = "ApiOpenGroup", + ["b97db8b2-4c63-11cf-bff6-08002be23f2f",0x2A] = "ApiCreateGroup", + ["b97db8b2-4c63-11cf-bff6-08002be23f2f",0x2B] = "ApiDeleteGroup", + ["b97db8b2-4c63-11cf-bff6-08002be23f2f",0x2C] = "ApiCloseGroup", + ["b97db8b2-4c63-11cf-bff6-08002be23f2f",0x2D] = "ApiGetGroupState", + ["b97db8b2-4c63-11cf-bff6-08002be23f2f",0x2E] = "ApiSetGroupName", + ["b97db8b2-4c63-11cf-bff6-08002be23f2f",0x2F] = "ApiGetGroupId", + ["b97db8b2-4c63-11cf-bff6-08002be23f2f",0x30] = "ApiGetNodeId", + ["b97db8b2-4c63-11cf-bff6-08002be23f2f",0x31] = "ApiOnlineGroup", + ["b97db8b2-4c63-11cf-bff6-08002be23f2f",0x32] = "ApiOfflineGroup", + ["b97db8b2-4c63-11cf-bff6-08002be23f2f",0x33] = "ApiMoveGroup", + ["b97db8b2-4c63-11cf-bff6-08002be23f2f",0x34] = "ApiMoveGroupToNode", + ["b97db8b2-4c63-11cf-bff6-08002be23f2f",0x35] = "ApiCreateGroupResourceEnum", + ["b97db8b2-4c63-11cf-bff6-08002be23f2f",0x36] = "ApiSetGroupNodeList", + ["b97db8b2-4c63-11cf-bff6-08002be23f2f",0x37] = "ApiCreateNotify", + ["b97db8b2-4c63-11cf-bff6-08002be23f2f",0x38] = "ApiCloseNotify", + ["b97db8b2-4c63-11cf-bff6-08002be23f2f",0x39] = "ApiAddNotifyCluster", + ["b97db8b2-4c63-11cf-bff6-08002be23f2f",0x3A] = "ApiAddNotifyNode", + ["b97db8b2-4c63-11cf-bff6-08002be23f2f",0x3B] = "ApiAddNotifyGroup", + ["b97db8b2-4c63-11cf-bff6-08002be23f2f",0x3C] = "ApiAddNotifyResource", + ["b97db8b2-4c63-11cf-bff6-08002be23f2f",0x3D] = "ApiAddNotifyKey", + ["b97db8b2-4c63-11cf-bff6-08002be23f2f",0x3E] = "ApiReAddNotifyNode", + ["b97db8b2-4c63-11cf-bff6-08002be23f2f",0x3F] = "ApiReAddNotifyGroup", + ["b97db8b2-4c63-11cf-bff6-08002be23f2f",0x40] = "ApiReAddNotifyResource", + ["b97db8b2-4c63-11cf-bff6-08002be23f2f",0x41] = "ApiGetNotify", + ["b97db8b2-4c63-11cf-bff6-08002be23f2f",0x42] = "ApiOpenNode", + ["b97db8b2-4c63-11cf-bff6-08002be23f2f",0x43] = "ApiCloseNode", + ["b97db8b2-4c63-11cf-bff6-08002be23f2f",0x44] = "ApiGetNodeState", + ["b97db8b2-4c63-11cf-bff6-08002be23f2f",0x45] = "ApiPauseNode", + ["b97db8b2-4c63-11cf-bff6-08002be23f2f",0x46] = "ApiResumeNode", + ["b97db8b2-4c63-11cf-bff6-08002be23f2f",0x47] = "ApiEvictNode", + ["b97db8b2-4c63-11cf-bff6-08002be23f2f",0x48] = "ApiNodeResourceControl", + ["b97db8b2-4c63-11cf-bff6-08002be23f2f",0x49] = "ApiResourceControl", + ["b97db8b2-4c63-11cf-bff6-08002be23f2f",0x4A] = "ApiNodeResourceTypeControl", + ["b97db8b2-4c63-11cf-bff6-08002be23f2f",0x4B] = "ApiResourceTypeControl", + ["b97db8b2-4c63-11cf-bff6-08002be23f2f",0x4C] = "ApiNodeGroupControl", + ["b97db8b2-4c63-11cf-bff6-08002be23f2f",0x4D] = "ApiGroupControl", + ["b97db8b2-4c63-11cf-bff6-08002be23f2f",0x4E] = "ApiNodeNodeControl", + ["b97db8b2-4c63-11cf-bff6-08002be23f2f",0x4F] = "ApiNodeControl", + ["b97db8b2-4c63-11cf-bff6-08002be23f2f",0x50] = "Opnum80NotUsedOnWire", + ["b97db8b2-4c63-11cf-bff6-08002be23f2f",0x51] = "ApiOpenNetwork", + ["b97db8b2-4c63-11cf-bff6-08002be23f2f",0x52] = "ApiCloseNetwork", + ["b97db8b2-4c63-11cf-bff6-08002be23f2f",0x53] = "ApiGetNetworkState", + ["b97db8b2-4c63-11cf-bff6-08002be23f2f",0x54] = "ApiSetNetworkName", + ["b97db8b2-4c63-11cf-bff6-08002be23f2f",0x55] = "ApiCreateNetworkEnum", + ["b97db8b2-4c63-11cf-bff6-08002be23f2f",0x56] = "ApiGetNetworkId", + ["b97db8b2-4c63-11cf-bff6-08002be23f2f",0x57] = "ApiSetNetworkPriorityOrder", + ["b97db8b2-4c63-11cf-bff6-08002be23f2f",0x58] = "ApiNodeNetworkControl", + ["b97db8b2-4c63-11cf-bff6-08002be23f2f",0x59] = "ApiNetworkControl", + ["b97db8b2-4c63-11cf-bff6-08002be23f2f",0x5A] = "ApiAddNotifyNetwork", + ["b97db8b2-4c63-11cf-bff6-08002be23f2f",0x5B] = "ApiReAddNotifyNetwork", + ["b97db8b2-4c63-11cf-bff6-08002be23f2f",0x5C] = "ApiOpenNetInterface", + ["b97db8b2-4c63-11cf-bff6-08002be23f2f",0x5D] = "ApiCloseNetInterface", + ["b97db8b2-4c63-11cf-bff6-08002be23f2f",0x5E] = "ApiGetNetInterfaceState", + ["b97db8b2-4c63-11cf-bff6-08002be23f2f",0x5F] = "ApiGetNetInterface", + ["b97db8b2-4c63-11cf-bff6-08002be23f2f",0x60] = "ApiGetNetInterfaceId", + ["b97db8b2-4c63-11cf-bff6-08002be23f2f",0x61] = "ApiNodeNetInterfaceControl", + ["b97db8b2-4c63-11cf-bff6-08002be23f2f",0x62] = "ApiNetInterfaceControl", + ["b97db8b2-4c63-11cf-bff6-08002be23f2f",0x63] = "ApiAddNotifyNetInterface", + ["b97db8b2-4c63-11cf-bff6-08002be23f2f",0x64] = "ApiReAddNotifyNetInterface", + ["b97db8b2-4c63-11cf-bff6-08002be23f2f",0x65] = "ApiCreateNodeEnum", + ["b97db8b2-4c63-11cf-bff6-08002be23f2f",0x66] = "ApiGetClusterVersion2", + ["b97db8b2-4c63-11cf-bff6-08002be23f2f",0x67] = "ApiCreateResTypeEnum", + ["b97db8b2-4c63-11cf-bff6-08002be23f2f",0x68] = "ApiBackupClusterDatabase", + ["b97db8b2-4c63-11cf-bff6-08002be23f2f",0x69] = "ApiNodeClusterControl", + ["b97db8b2-4c63-11cf-bff6-08002be23f2f",0x6A] = "ApiClusterControl", + ["b97db8b2-4c63-11cf-bff6-08002be23f2f",0x6B] = "ApiUnblockGetNotifyCall", + ["b97db8b2-4c63-11cf-bff6-08002be23f2f",0x6C] = "ApiSetServiceAccountPassword", + + # dhcpsrv - MSDN Ref: DHCP Server Mgmt Protocol [ms-dhcpm] + ["6bffd098-a112-3610-9833-46c3f874532d",0x00] = "R_DhcpCreateSubnet", + ["6bffd098-a112-3610-9833-46c3f874532d",0x01] = "R_DhcpSetSubnetInfo", + ["6bffd098-a112-3610-9833-46c3f874532d",0x02] = "R_DhcpGetSubnetInfo", + ["6bffd098-a112-3610-9833-46c3f874532d",0x03] = "R_DhcpEnumSubnets", + ["6bffd098-a112-3610-9833-46c3f874532d",0x04] = "R_DhcpAddSubnetElement", + ["6bffd098-a112-3610-9833-46c3f874532d",0x05] = "R_DhcpEnumSubnetElements", + ["6bffd098-a112-3610-9833-46c3f874532d",0x06] = "R_DhcpRemoveSubnetElement", + ["6bffd098-a112-3610-9833-46c3f874532d",0x07] = "R_DhcpDeleteSubnet", + ["6bffd098-a112-3610-9833-46c3f874532d",0x08] = "R_DhcpCreateOption", + ["6bffd098-a112-3610-9833-46c3f874532d",0x09] = "R_DhcpSetOptionInfo", + ["6bffd098-a112-3610-9833-46c3f874532d",0x0A] = "R_DhcpGetOptionInfo", + ["6bffd098-a112-3610-9833-46c3f874532d",0x0B] = "R_DhcpRemoveOption", + ["6bffd098-a112-3610-9833-46c3f874532d",0x0C] = "R_DhcpSetOptionValue", + ["6bffd098-a112-3610-9833-46c3f874532d",0x0D] = "R_DhcpGetOptionValue", + ["6bffd098-a112-3610-9833-46c3f874532d",0x0E] = "R_DhcpEnumOptionValues", + ["6bffd098-a112-3610-9833-46c3f874532d",0x0F] = "R_DhcpRemoveOptionValue", + ["6bffd098-a112-3610-9833-46c3f874532d",0x10] = "R_DhcpCreateClientInfo", + ["6bffd098-a112-3610-9833-46c3f874532d",0x11] = "R_DhcpSetClientInfo", + ["6bffd098-a112-3610-9833-46c3f874532d",0x12] = "R_DhcpGetClientInfo", + ["6bffd098-a112-3610-9833-46c3f874532d",0x13] = "R_DhcpDeleteClientInfo", + ["6bffd098-a112-3610-9833-46c3f874532d",0x14] = "R_DhcpEnumSubnetClients", + ["6bffd098-a112-3610-9833-46c3f874532d",0x15] = "R_DhcpGetClientOptions", + ["6bffd098-a112-3610-9833-46c3f874532d",0x16] = "R_DhcpGetMibInfo", + ["6bffd098-a112-3610-9833-46c3f874532d",0x17] = "R_DhcpEnumOptions", + ["6bffd098-a112-3610-9833-46c3f874532d",0x18] = "R_DhcpSetOptionValues", + ["6bffd098-a112-3610-9833-46c3f874532d",0x19] = "R_DhcpServerSetConfig", + ["6bffd098-a112-3610-9833-46c3f874532d",0x1A] = "R_DhcpServerGetConfig", + ["6bffd098-a112-3610-9833-46c3f874532d",0x1B] = "R_DhcpScanDatabase", + ["6bffd098-a112-3610-9833-46c3f874532d",0x1C] = "R_DhcpGetVersion", + ["6bffd098-a112-3610-9833-46c3f874532d",0x1D] = "R_DhcpAddSubnetElementV4", + ["6bffd098-a112-3610-9833-46c3f874532d",0x1E] = "R_DhcpEnumSubnetElementsV4", + ["6bffd098-a112-3610-9833-46c3f874532d",0x1F] = "R_DhcpRemoveSubnetElementV4", + ["6bffd098-a112-3610-9833-46c3f874532d",0x20] = "R_DhcpCreateClientInfoV4", + ["6bffd098-a112-3610-9833-46c3f874532d",0x21] = "R_DhcpSetClientInfoV4", + ["6bffd098-a112-3610-9833-46c3f874532d",0x22] = "R_DhcpGetClientInfoV4", + ["6bffd098-a112-3610-9833-46c3f874532d",0x23] = "R_DhcpEnumSubnetClientsV4", + ["6bffd098-a112-3610-9833-46c3f874532d",0x24] = "R_DhcpSetSuperScopeV4", + ["6bffd098-a112-3610-9833-46c3f874532d",0x25] = "R_DhcpGetSuperScopeInfoV4", + ["6bffd098-a112-3610-9833-46c3f874532d",0x26] = "R_DhcpDeleteSuperScopeV4", + ["6bffd098-a112-3610-9833-46c3f874532d",0x27] = "R_DhcpServerSetConfigV4", + ["6bffd098-a112-3610-9833-46c3f874532d",0x28] = "R_DhcpServerGetConfigV4", + ["6bffd098-a112-3610-9833-46c3f874532d",0x29] = "R_DhcpServerSetConfigVQ", + ["6bffd098-a112-3610-9833-46c3f874532d",0x2A] = "R_DhcpServerGetConfigVQ", + ["6bffd098-a112-3610-9833-46c3f874532d",0x2B] = "R_DhcpGetMibInfoVQ", + ["6bffd098-a112-3610-9833-46c3f874532d",0x2C] = "R_DhcpCreateClientInfoVQ", + ["6bffd098-a112-3610-9833-46c3f874532d",0x2D] = "R_DhcpSetClientInfoVQ", + ["6bffd098-a112-3610-9833-46c3f874532d",0x2E] = "R_DhcpGetClientInfoVQ", + ["6bffd098-a112-3610-9833-46c3f874532d",0x2F] = "R_DhcpEnumSubnetClientsVQ", + ["6bffd098-a112-3610-9833-46c3f874532d",0x30] = "R_DhcpCreateSubnetVQ", + ["6bffd098-a112-3610-9833-46c3f874532d",0x31] = "R_DhcpGetSubnetInfoVQ", + ["6bffd098-a112-3610-9833-46c3f874532d",0x32] = "R_DhcpSetSubnetInfoVQ", + + # dhcpsrv2 - MSDN Ref: DHCP Server Mgmt Protocol [ms-dhcpm] + ["5b821720-f63b-11d0-aad2-00c04fc324db",0x00] = "R_DhcpEnumSubnetClientsV5", + ["5b821720-f63b-11d0-aad2-00c04fc324db",0x01] = "R_DhcpSetMScopeInfo", + ["5b821720-f63b-11d0-aad2-00c04fc324db",0x02] = "R_DhcpGetMScopeInfo", + ["5b821720-f63b-11d0-aad2-00c04fc324db",0x03] = "R_DhcpEnumMScopes", + ["5b821720-f63b-11d0-aad2-00c04fc324db",0x04] = "R_DhcpAddMScopeElement", + ["5b821720-f63b-11d0-aad2-00c04fc324db",0x05] = "R_DhcpEnumMScopeElements", + ["5b821720-f63b-11d0-aad2-00c04fc324db",0x06] = "R_DhcpRemoveMScopeElement", + ["5b821720-f63b-11d0-aad2-00c04fc324db",0x07] = "R_DhcpDeleteMScope", + ["5b821720-f63b-11d0-aad2-00c04fc324db",0x08] = "R_DhcpScanMDatabase", + ["5b821720-f63b-11d0-aad2-00c04fc324db",0x09] = "R_DhcpCreateMClientInfo", + ["5b821720-f63b-11d0-aad2-00c04fc324db",0x0A] = "R_DhcpSetMClientInfo", + ["5b821720-f63b-11d0-aad2-00c04fc324db",0x0B] = "R_DhcpGetMClientInfo", + ["5b821720-f63b-11d0-aad2-00c04fc324db",0x0C] = "R_DhcpDeleteMClientInfo", + ["5b821720-f63b-11d0-aad2-00c04fc324db",0x0D] = "R_DhcpEnumMScopeClients", + ["5b821720-f63b-11d0-aad2-00c04fc324db",0x0E] = "R_DhcpCreateOptionV5", + ["5b821720-f63b-11d0-aad2-00c04fc324db",0x0F] = "R_DhcpSetOptionInfoV5", + ["5b821720-f63b-11d0-aad2-00c04fc324db",0x10] = "R_DhcpGetOptionInfoV5", + ["5b821720-f63b-11d0-aad2-00c04fc324db",0x11] = "R_DhcpEnumOptionsV5", + ["5b821720-f63b-11d0-aad2-00c04fc324db",0x12] = "R_DhcpRemoveOptionV5", + ["5b821720-f63b-11d0-aad2-00c04fc324db",0x13] = "R_DhcpSetOptionValueV5", + ["5b821720-f63b-11d0-aad2-00c04fc324db",0x14] = "R_DhcpSetOptionValuesV5", + ["5b821720-f63b-11d0-aad2-00c04fc324db",0x15] = "R_DhcpGetOptionValueV5", + ["5b821720-f63b-11d0-aad2-00c04fc324db",0x16] = "R_DhcpEnumOptionValuesV5", + ["5b821720-f63b-11d0-aad2-00c04fc324db",0x17] = "R_DhcpRemoveOptionValueV5", + ["5b821720-f63b-11d0-aad2-00c04fc324db",0x18] = "R_DhcpCreateClass", + ["5b821720-f63b-11d0-aad2-00c04fc324db",0x19] = "R_DhcpModifyClass", + ["5b821720-f63b-11d0-aad2-00c04fc324db",0x1A] = "R_DhcpDeleteClass", + ["5b821720-f63b-11d0-aad2-00c04fc324db",0x1B] = "R_DhcpGetClassInfo", + ["5b821720-f63b-11d0-aad2-00c04fc324db",0x1C] = "R_DhcpEnumClasses", + ["5b821720-f63b-11d0-aad2-00c04fc324db",0x1D] = "R_DhcpGetAllOptions", + ["5b821720-f63b-11d0-aad2-00c04fc324db",0x1E] = "R_DhcpGetAllOptionValues", + ["5b821720-f63b-11d0-aad2-00c04fc324db",0x1F] = "R_DhcpGetMCastMibInfo", + ["5b821720-f63b-11d0-aad2-00c04fc324db",0x20] = "R_DhcpAuditLogSetParams", + ["5b821720-f63b-11d0-aad2-00c04fc324db",0x21] = "R_DhcpAuditLogGetParams", + ["5b821720-f63b-11d0-aad2-00c04fc324db",0x22] = "R_DhcpServerQueryAttribute", + ["5b821720-f63b-11d0-aad2-00c04fc324db",0x23] = "R_DhcpServerQueryAttributes", + ["5b821720-f63b-11d0-aad2-00c04fc324db",0x24] = "R_DhcpServerRedoAuthorization", + ["5b821720-f63b-11d0-aad2-00c04fc324db",0x25] = "R_DhcpAddSubnetElementV5", + ["5b821720-f63b-11d0-aad2-00c04fc324db",0x26] = "R_DhcpEnumSubnetElementsV5", + ["5b821720-f63b-11d0-aad2-00c04fc324db",0x27] = "R_DhcpRemoveSubnetElementV5", + ["5b821720-f63b-11d0-aad2-00c04fc324db",0x28] = "R_DhcpGetServerBindingInfo", + ["5b821720-f63b-11d0-aad2-00c04fc324db",0x29] = "R_DhcpSetServerBindingInfo", + ["5b821720-f63b-11d0-aad2-00c04fc324db",0x2A] = "R_DhcpQueryDnsRegCredentials", + ["5b821720-f63b-11d0-aad2-00c04fc324db",0x2B] = "R_DhcpSetDnsRegCredentials", + ["5b821720-f63b-11d0-aad2-00c04fc324db",0x2C] = "R_DhcpBackupDatabase", + ["5b821720-f63b-11d0-aad2-00c04fc324db",0x2D] = "R_DhcpRestoreDatabase", + ["5b821720-f63b-11d0-aad2-00c04fc324db",0x2E] = "R_DhcpGetServerSpecificStrings", + ["5b821720-f63b-11d0-aad2-00c04fc324db",0x2F] = "R_DhcpCreateOptionV6", + ["5b821720-f63b-11d0-aad2-00c04fc324db",0x30] = "R_DhcpSetOptionInfoV6", + ["5b821720-f63b-11d0-aad2-00c04fc324db",0x31] = "R_DhcpGetOptionInfoV6", + ["5b821720-f63b-11d0-aad2-00c04fc324db",0x32] = "R_DhcpEnumOptionsV6", + ["5b821720-f63b-11d0-aad2-00c04fc324db",0x33] = "R_DhcpRemoveOptionV6", + ["5b821720-f63b-11d0-aad2-00c04fc324db",0x34] = "R_DhcpSetOptionValueV6", + ["5b821720-f63b-11d0-aad2-00c04fc324db",0x35] = "R_DhcpEnumOptionValuesV6", + ["5b821720-f63b-11d0-aad2-00c04fc324db",0x36] = "R_DhcpRemoveOptionValueV6", + ["5b821720-f63b-11d0-aad2-00c04fc324db",0x37] = "R_DhcpGetAllOptionsV6", + ["5b821720-f63b-11d0-aad2-00c04fc324db",0x38] = "R_DhcpGetAllOptionValuesV6", + ["5b821720-f63b-11d0-aad2-00c04fc324db",0x39] = "R_DhcpCreateSubnetV6", + ["5b821720-f63b-11d0-aad2-00c04fc324db",0x3A] = "R_DhcpEnumSubnetsV6", + ["5b821720-f63b-11d0-aad2-00c04fc324db",0x3B] = "R_DhcpAddSubnetElementV6", + ["5b821720-f63b-11d0-aad2-00c04fc324db",0x3C] = "R_DhcpEnumSubnetElementsV6", + ["5b821720-f63b-11d0-aad2-00c04fc324db",0x3D] = "R_DhcpRemoveSubnetElementV6", + ["5b821720-f63b-11d0-aad2-00c04fc324db",0x3E] = "R_DhcpDeleteSubnetV6", + ["5b821720-f63b-11d0-aad2-00c04fc324db",0x3F] = "R_DhcpGetSubnetInfoV6", + ["5b821720-f63b-11d0-aad2-00c04fc324db",0x40] = "R_DhcpEnumSubnetClientsV6", + ["5b821720-f63b-11d0-aad2-00c04fc324db",0x41] = "R_DhcpServerSetConfigV6", + ["5b821720-f63b-11d0-aad2-00c04fc324db",0x42] = "R_DhcpServerGetConfigV6", + ["5b821720-f63b-11d0-aad2-00c04fc324db",0x43] = "R_DhcpGetMibInfoV6", + ["5b821720-f63b-11d0-aad2-00c04fc324db",0x45] = "R_DhcpGetServerBindingInfoV6", + ["5b821720-f63b-11d0-aad2-00c04fc324db",0x46] = "R_DhcpSetServerBindingInfoV6", + ["5b821720-f63b-11d0-aad2-00c04fc324db",0x47] = "R_DhcpSetClientInfoV6", + ["5b821720-f63b-11d0-aad2-00c04fc324db",0x48] = "R_DhcpGetClientInfoV6", + ["5b821720-f63b-11d0-aad2-00c04fc324db",0x49] = "R_DhcpDeleteClientInfoV6", + ["5b821720-f63b-11d0-aad2-00c04fc324db",0x4A] = "R_DhcpCreateClassV6", + ["5b821720-f63b-11d0-aad2-00c04fc324db",0x4B] = "R_DhcpModifyClassV6", + ["5b821720-f63b-11d0-aad2-00c04fc324db",0x4C] = "R_DhcpDeleteClassV6", + ["5b821720-f63b-11d0-aad2-00c04fc324db",0x4D] = "R_DhcpEnumClassesV6", + ["5b821720-f63b-11d0-aad2-00c04fc324db",0x4E] = "R_DhcpGetOptionValueV6", + ["5b821720-f63b-11d0-aad2-00c04fc324db",0x4F] = "R_DhcpSetSubnetDelayOffer", + ["5b821720-f63b-11d0-aad2-00c04fc324db",0x50] = "R_DhcpGetSubnetDelayOffer", + ["5b821720-f63b-11d0-aad2-00c04fc324db",0x51] = "R_DhcpGetMibInfoV5", + ["5b821720-f63b-11d0-aad2-00c04fc324db",0x52] = "R_DhcpAddFilterV4", + ["5b821720-f63b-11d0-aad2-00c04fc324db",0x53] = "R_DhcpDeleteFilterV4", + ["5b821720-f63b-11d0-aad2-00c04fc324db",0x54] = "R_DhcpSetFilterV4", + ["5b821720-f63b-11d0-aad2-00c04fc324db",0x55] = "R_DhcpGetFilterV4", + ["5b821720-f63b-11d0-aad2-00c04fc324db",0x56] = "R_DhcpEnumFilterV4", + ["5b821720-f63b-11d0-aad2-00c04fc324db",0x57] = "R_DhcpSetDnsRegCredentialsV5", + ["5b821720-f63b-11d0-aad2-00c04fc324db",0x58] = "R_DhcpEnumSubnetClientsFilterStatusInfo", + ["5b821720-f63b-11d0-aad2-00c04fc324db",0x59] = "R_DhcpV4FailoverCreateRelationship", + ["5b821720-f63b-11d0-aad2-00c04fc324db",0x5A] = "R_DhcpV4FailoverSetRelationship", + ["5b821720-f63b-11d0-aad2-00c04fc324db",0x5B] = "R_DhcpV4FailoverDeleteRelationship", + ["5b821720-f63b-11d0-aad2-00c04fc324db",0x5C] = "R_DhcpV4FailoverGetRelationship", + ["5b821720-f63b-11d0-aad2-00c04fc324db",0x5D] = "R_DhcpV4FailoverEnumRelationship", + ["5b821720-f63b-11d0-aad2-00c04fc324db",0x5E] = "R_DhcpV4FailoverAddScopeToRelationship", + ["5b821720-f63b-11d0-aad2-00c04fc324db",0x5F] = "R_DhcpV4FailoverDeleteScopeFromRelationship", + ["5b821720-f63b-11d0-aad2-00c04fc324db",0x60] = "R_DhcpV4FailoverGetScopeRelationship", + ["5b821720-f63b-11d0-aad2-00c04fc324db",0x61] = "R_DhcpV4FailoverGetScopeStatistics", + ["5b821720-f63b-11d0-aad2-00c04fc324db",0x62] = "R_DhcpV4FailoverGetClientInfo", + ["5b821720-f63b-11d0-aad2-00c04fc324db",0x63] = "R_DhcpV4FailoverGetSystemTime", + ["5b821720-f63b-11d0-aad2-00c04fc324db",0x64] = "R_DhcpV4FailoverTriggerAddrAllocation", + ["5b821720-f63b-11d0-aad2-00c04fc324db",0x65] = "R_DhcpV4SetOptionValue", + ["5b821720-f63b-11d0-aad2-00c04fc324db",0x66] = "R_DhcpV4SetOptionValues", + ["5b821720-f63b-11d0-aad2-00c04fc324db",0x67] = "R_DhcpV4GetOptionValue", + ["5b821720-f63b-11d0-aad2-00c04fc324db",0x68] = "R_DhcpV4RemoveOptionValue", + ["5b821720-f63b-11d0-aad2-00c04fc324db",0x69] = "R_DhcpV4GetAllOptionValues", + ["5b821720-f63b-11d0-aad2-00c04fc324db",0x6A] = "R_DhcpV4QueryPolicyEnforcement", + ["5b821720-f63b-11d0-aad2-00c04fc324db",0x6B] = "R_DhcpSetPolicyEnforcement", + ["5b821720-f63b-11d0-aad2-00c04fc324db",0x6C] = "R_DhcpV4CreatePolicy", + ["5b821720-f63b-11d0-aad2-00c04fc324db",0x6D] = "R_DhcpV4GetPolicy", + ["5b821720-f63b-11d0-aad2-00c04fc324db",0x6E] = "R_DhcpV4SetPolicy", + ["5b821720-f63b-11d0-aad2-00c04fc324db",0x6F] = "R_DhcpV4DeletePolicy", + ["5b821720-f63b-11d0-aad2-00c04fc324db",0x70] = "R_DhcpV4EnumPolicies", + ["5b821720-f63b-11d0-aad2-00c04fc324db",0x71] = "R_DhcpV4AddPolicyRange", + ["5b821720-f63b-11d0-aad2-00c04fc324db",0x72] = "R_DhcpV4RemovePolicyRange", + ["5b821720-f63b-11d0-aad2-00c04fc324db",0x73] = "R_DhcpV4EnumSubnetClients", + ["5b821720-f63b-11d0-aad2-00c04fc324db",0x74] = "R_DhcpV6SetStatelessStoreParams", + ["5b821720-f63b-11d0-aad2-00c04fc324db",0x75] = "R_DhcpV6GetStatelessStoreParams", + ["5b821720-f63b-11d0-aad2-00c04fc324db",0x76] = "R_DhcpV6GetStatelessStatistics", + ["5b821720-f63b-11d0-aad2-00c04fc324db",0x77] = "R_DhcpV4EnumSubnetReservations", + ["5b821720-f63b-11d0-aad2-00c04fc324db",0x78] = "R_DhcpV4GetFreeIPAddress", + ["5b821720-f63b-11d0-aad2-00c04fc324db",0x79] = "R_DhcpV6GetFreeIPAddress", + ["5b821720-f63b-11d0-aad2-00c04fc324db",0x7A] = "R_DhcpV4CreateClientInfo", + ["5b821720-f63b-11d0-aad2-00c04fc324db",0x7B] = "R_DhcpV4GetClientInfo", + ["5b821720-f63b-11d0-aad2-00c04fc324db",0x7C] = "R_DhcpV6CreateClientInfo", + ["5b821720-f63b-11d0-aad2-00c04fc324db",0x7D] = "R_DhcpV4FailoverGetAddressStatus", + ["5b821720-f63b-11d0-aad2-00c04fc324db",0x7E] = "R_DhcpV4CreatePolicyEx", + ["5b821720-f63b-11d0-aad2-00c04fc324db",0x7F] = "R_DhcpV4GetPolicyEx", + ["5b821720-f63b-11d0-aad2-00c04fc324db",0x80] = "R_DhcpV4SetPolicyEx", + ["5b821720-f63b-11d0-aad2-00c04fc324db",0x81] = "R_DhcpV4EnumPoliciesEx", + ["5b821720-f63b-11d0-aad2-00c04fc324db",0x82] = "R_DhcpV4EnumSubnetClientsEx", + ["5b821720-f63b-11d0-aad2-00c04fc324db",0x83] = "R_DhcpV4CreateClientInfoEx", + ["5b821720-f63b-11d0-aad2-00c04fc324db",0x84] = "R_DhcpV4GetClientInfoEx", + + # dsaop - MSDN Ref: Directory Replication Service (DRS) Remote Protocol [ms-drsr] + ["7c44d7d4-31d5-424c-bd5e-2b3e1f323d22",0x00] = "IDL_DSAPrepareScript", + ["7c44d7d4-31d5-424c-bd5e-2b3e1f323d22",0x01] = "IDL_DSAExecuteScript", + + # dscomm - MSDN Ref: Msg Queuing - Directory Service Protocol [ms-mqds] + ["77df7a80-f298-11d0-8358-00a024c480a8",0x00] = "S_DSCreateObject", + ["77df7a80-f298-11d0-8358-00a024c480a8",0x01] = "S_DSDeleteObject", + ["77df7a80-f298-11d0-8358-00a024c480a8",0x02] = "S_DSGetProps", + ["77df7a80-f298-11d0-8358-00a024c480a8",0x03] = "S_DSSetProps", + ["77df7a80-f298-11d0-8358-00a024c480a8",0x04] = "S_DSGetObjectSecurity", + ["77df7a80-f298-11d0-8358-00a024c480a8",0x05] = "S_DSSetObjectSecurity", + ["77df7a80-f298-11d0-8358-00a024c480a8",0x06] = "S_DSLookupBegin", + ["77df7a80-f298-11d0-8358-00a024c480a8",0x07] = "S_DSLookupNext", + ["77df7a80-f298-11d0-8358-00a024c480a8",0x08] = "S_DSLookupEnd", + ["77df7a80-f298-11d0-8358-00a024c480a8",0x09] = "Opnum9NotUsedOnWire", + ["77df7a80-f298-11d0-8358-00a024c480a8",0x0A] = "S_DSDeleteObjectGuid", + ["77df7a80-f298-11d0-8358-00a024c480a8",0x0B] = "S_DSGetPropsGuid", + ["77df7a80-f298-11d0-8358-00a024c480a8",0x0C] = "S_DSSetPropsGuid", + ["77df7a80-f298-11d0-8358-00a024c480a8",0x0D] = "S_DSGetObjectSecurityGuid", + ["77df7a80-f298-11d0-8358-00a024c480a8",0x0E] = "S_DSSetObjectSecurityGuid", + ["77df7a80-f298-11d0-8358-00a024c480a8",0x0F] = "Opnum15NotUsedOnWire", + ["77df7a80-f298-11d0-8358-00a024c480a8",0x10] = "Opnum16NotUsedOnWire", + ["77df7a80-f298-11d0-8358-00a024c480a8",0x11] = "Opnum17NotUsedOnWire", + ["77df7a80-f298-11d0-8358-00a024c480a8",0x12] = "Opnum18NotUsedOnWire", + ["77df7a80-f298-11d0-8358-00a024c480a8",0x13] = "S_DSQMSetMachineProperties", + ["77df7a80-f298-11d0-8358-00a024c480a8",0x14] = "S_DSCreateServersCache", + ["77df7a80-f298-11d0-8358-00a024c480a8",0x15] = "S_DSQMGetObjectSecurity", + ["77df7a80-f298-11d0-8358-00a024c480a8",0x16] = "S_DSValidateServer", + ["77df7a80-f298-11d0-8358-00a024c480a8",0x17] = "S_DSCloseServerHandle", + ["77df7a80-f298-11d0-8358-00a024c480a8",0x18] = "Opnum24NotUsedOnWire", + ["77df7a80-f298-11d0-8358-00a024c480a8",0x19] = "Opnum25NotUsedOnWire", + ["77df7a80-f298-11d0-8358-00a024c480a8",0x1A] = "Opnum26NotUsedOnWire", + ["77df7a80-f298-11d0-8358-00a024c480a8",0x1B] = "S_DSGetServerPort", + + # dscomm2 - MSDN Ref: Msg Queuing - Directory Service Protocol [ms-mqds] + ["708cca10-9569-11d1-b2a5-0060977d8118",0x00] = "S_DSGetComputerSites", + ["708cca10-9569-11d1-b2a5-0060977d8118",0x01] = "S_DSGetPropsEx", + ["708cca10-9569-11d1-b2a5-0060977d8118",0x02] = "S_DSGetPropsGuidEx", + ["708cca10-9569-11d1-b2a5-0060977d8118",0x03] = "S_DSBeginDeleteNotification", + ["708cca10-9569-11d1-b2a5-0060977d8118",0x04] = "S_DSNotifyDelete", + ["708cca10-9569-11d1-b2a5-0060977d8118",0x05] = "S_DSEndDeleteNotification", + ["708cca10-9569-11d1-b2a5-0060977d8118",0x06] = "S_DSIsServerGC", + ["708cca10-9569-11d1-b2a5-0060977d8118",0x07] = "Opnum7NotUsedOnWire", + ["708cca10-9569-11d1-b2a5-0060977d8118",0x08] = "S_DSGetGCListInDomain", + + # efsrpc - MSDN Ref: Encrypting File System Remote Protocol [ms-efsr] + ["df1941c5-fe89-4e79-bf10-463657acf44d",0x00] = "EfsRpcOpenFileRaw", + ["df1941c5-fe89-4e79-bf10-463657acf44d",0x01] = "EfsRpcReadFileRaw", + ["df1941c5-fe89-4e79-bf10-463657acf44d",0x02] = "EfsRpcWriteFileRaw", + ["df1941c5-fe89-4e79-bf10-463657acf44d",0x03] = "EfsRpcCloseRaw", + ["df1941c5-fe89-4e79-bf10-463657acf44d",0x04] = "EfsRpcEncryptFileSrv", + ["df1941c5-fe89-4e79-bf10-463657acf44d",0x05] = "EfsDecryptFileSrv", + ["df1941c5-fe89-4e79-bf10-463657acf44d",0x06] = "EfsRpcQueryUsersOnFile", + ["df1941c5-fe89-4e79-bf10-463657acf44d",0x07] = "EfsRpcQueryRecoveryAgents", + ["df1941c5-fe89-4e79-bf10-463657acf44d",0x08] = "EfsRpcRemoveUsersFromFile", + ["df1941c5-fe89-4e79-bf10-463657acf44d",0x09] = "EfsRpcAddUsersToFile", + ["df1941c5-fe89-4e79-bf10-463657acf44d",0x0A] = "Opnum10NotUsedOnWire", + ["df1941c5-fe89-4e79-bf10-463657acf44d",0x0B] = "EfsRpcNotSupported", + ["df1941c5-fe89-4e79-bf10-463657acf44d",0x0C] = "EfsRpcFileKeyInfo", + ["df1941c5-fe89-4e79-bf10-463657acf44d",0x0D] = "EfsRpcDuplicateEncryptionInfoFile", + ["df1941c5-fe89-4e79-bf10-463657acf44d",0x0E] = "Opnum14NotUsedOnWire", + ["df1941c5-fe89-4e79-bf10-463657acf44d",0x0F] = "EfsRpcAddUsersToFileEx", + ["df1941c5-fe89-4e79-bf10-463657acf44d",0x10] = "EfsRpcFileKeyInfoEx", + ["df1941c5-fe89-4e79-bf10-463657acf44d",0x11] = "Opnum17NotUsedOnWire", + ["df1941c5-fe89-4e79-bf10-463657acf44d",0x12] = "EfsRpcGetEncryptedFileMetadata", + ["df1941c5-fe89-4e79-bf10-463657acf44d",0x13] = "EfsRpcSetEncryptedFileMetadata", + ["df1941c5-fe89-4e79-bf10-463657acf44d",0x14] = "EfsRpcFlushEfsCache", + ["df1941c5-fe89-4e79-bf10-463657acf44d",0x15] = "EfsRpcEncryptFileExServ", + ["df1941c5-fe89-4e79-bf10-463657acf44d",0x16] = "EfsRpcQueryProtectors", + ["df1941c5-fe89-4e79-bf10-463657acf44d",0x17] = "Opnum23NotUsedOnWire", + ["df1941c5-fe89-4e79-bf10-463657acf44d",0x18] = "Opnum24NotUsedOnWire", + ["df1941c5-fe89-4e79-bf10-463657acf44d",0x19] = "Opnum25NotUsedOnWire", + ["df1941c5-fe89-4e79-bf10-463657acf44d",0x1A] = "Opnum26NotUsedOnWire", + ["df1941c5-fe89-4e79-bf10-463657acf44d",0x1B] = "Opnum27NotUsedOnWire", + ["df1941c5-fe89-4e79-bf10-463657acf44d",0x1C] = "Opnum28NotUsedOnWire", + ["df1941c5-fe89-4e79-bf10-463657acf44d",0x1D] = "Opnum29NotUsedOnWire", + ["df1941c5-fe89-4e79-bf10-463657acf44d",0x1E] = "Opnum30NotUsedOnWire", + ["df1941c5-fe89-4e79-bf10-463657acf44d",0x1F] = "Opnum31NotUsedOnWire", + ["df1941c5-fe89-4e79-bf10-463657acf44d",0x20] = "Opnum32NotUsedOnWire", + ["df1941c5-fe89-4e79-bf10-463657acf44d",0x21] = "Opnum33NotUsedOnWire", + ["df1941c5-fe89-4e79-bf10-463657acf44d",0x22] = "Opnum34NotUsedOnWire", + ["df1941c5-fe89-4e79-bf10-463657acf44d",0x23] = "Opnum35NotUsedOnWire", + ["df1941c5-fe89-4e79-bf10-463657acf44d",0x24] = "Opnum36NotUsedOnWire", + ["df1941c5-fe89-4e79-bf10-463657acf44d",0x25] = "Opnum37NotUsedOnWire", + ["df1941c5-fe89-4e79-bf10-463657acf44d",0x26] = "Opnum38NotUsedOnWire", + ["df1941c5-fe89-4e79-bf10-463657acf44d",0x27] = "Opnum39NotUsedOnWire", + ["df1941c5-fe89-4e79-bf10-463657acf44d",0x28] = "Opnum40NotUsedOnWire", + ["df1941c5-fe89-4e79-bf10-463657acf44d",0x29] = "Opnum41NotUsedOnWire", + ["df1941c5-fe89-4e79-bf10-463657acf44d",0x2A] = "Opnum42NotUsedOnWire", + ["df1941c5-fe89-4e79-bf10-463657acf44d",0x2B] = "Opnum43NotUsedOnWire", + ["df1941c5-fe89-4e79-bf10-463657acf44d",0x2C] = "Opnum44NotUsedOnWire", + + # efsrpc2 - MSDN Ref: Encrypting File System Remote Protocol [ms-efsr] + ["c681d488-d850-11d0-8c52-00c04fd90f7e",0x00] = "EfsRpcOpenFileRaw", + ["c681d488-d850-11d0-8c52-00c04fd90f7e",0x01] = "EfsRpcReadFileRaw", + ["c681d488-d850-11d0-8c52-00c04fd90f7e",0x02] = "EfsRpcWriteFileRaw", + ["c681d488-d850-11d0-8c52-00c04fd90f7e",0x03] = "EfsRpcCloseRaw", + ["c681d488-d850-11d0-8c52-00c04fd90f7e",0x04] = "EfsRpcEncryptFileSrv", + ["c681d488-d850-11d0-8c52-00c04fd90f7e",0x05] = "EfsDecryptFileSrv", + ["c681d488-d850-11d0-8c52-00c04fd90f7e",0x06] = "EfsRpcQueryUsersOnFile", + ["c681d488-d850-11d0-8c52-00c04fd90f7e",0x07] = "EfsRpcQueryRecoveryAgents", + ["c681d488-d850-11d0-8c52-00c04fd90f7e",0x08] = "EfsRpcRemoveUsersFromFile", + ["c681d488-d850-11d0-8c52-00c04fd90f7e",0x09] = "EfsRpcAddUsersToFile", + ["c681d488-d850-11d0-8c52-00c04fd90f7e",0x0A] = "Opnum10NotUsedOnWire", + ["c681d488-d850-11d0-8c52-00c04fd90f7e",0x0B] = "EfsRpcNotSupported", + ["c681d488-d850-11d0-8c52-00c04fd90f7e",0x0C] = "EfsRpcFileKeyInfo", + ["c681d488-d850-11d0-8c52-00c04fd90f7e",0x0D] = "EfsRpcDuplicateEncryptionInfoFile", + ["c681d488-d850-11d0-8c52-00c04fd90f7e",0x0E] = "Opnum14NotUsedOnWire", + ["c681d488-d850-11d0-8c52-00c04fd90f7e",0x0F] = "EfsRpcAddUsersToFileEx", + ["c681d488-d850-11d0-8c52-00c04fd90f7e",0x10] = "EfsRpcFileKeyInfoEx", + ["c681d488-d850-11d0-8c52-00c04fd90f7e",0x11] = "Opnum17NotUsedOnWire", + ["c681d488-d850-11d0-8c52-00c04fd90f7e",0x12] = "EfsRpcGetEncryptedFileMetadata", + ["c681d488-d850-11d0-8c52-00c04fd90f7e",0x13] = "EfsRpcSetEncryptedFileMetadata", + ["c681d488-d850-11d0-8c52-00c04fd90f7e",0x14] = "EfsRpcFlushEfsCache", + ["c681d488-d850-11d0-8c52-00c04fd90f7e",0x15] = "EfsRpcEncryptFileExServ", + ["c681d488-d850-11d0-8c52-00c04fd90f7e",0x16] = "EfsRpcQueryProtectors", + ["c681d488-d850-11d0-8c52-00c04fd90f7e",0x17] = "Opnum23NotUsedOnWire", + ["c681d488-d850-11d0-8c52-00c04fd90f7e",0x18] = "Opnum24NotUsedOnWire", + ["c681d488-d850-11d0-8c52-00c04fd90f7e",0x19] = "Opnum25NotUsedOnWire", + ["c681d488-d850-11d0-8c52-00c04fd90f7e",0x1A] = "Opnum26NotUsedOnWire", + ["c681d488-d850-11d0-8c52-00c04fd90f7e",0x1B] = "Opnum27NotUsedOnWire", + ["c681d488-d850-11d0-8c52-00c04fd90f7e",0x1C] = "Opnum28NotUsedOnWire", + ["c681d488-d850-11d0-8c52-00c04fd90f7e",0x1D] = "Opnum29NotUsedOnWire", + ["c681d488-d850-11d0-8c52-00c04fd90f7e",0x1E] = "Opnum30NotUsedOnWire", + ["c681d488-d850-11d0-8c52-00c04fd90f7e",0x1F] = "Opnum31NotUsedOnWire", + ["c681d488-d850-11d0-8c52-00c04fd90f7e",0x20] = "Opnum32NotUsedOnWire", + ["c681d488-d850-11d0-8c52-00c04fd90f7e",0x21] = "Opnum33NotUsedOnWire", + ["c681d488-d850-11d0-8c52-00c04fd90f7e",0x22] = "Opnum34NotUsedOnWire", + ["c681d488-d850-11d0-8c52-00c04fd90f7e",0x23] = "Opnum35NotUsedOnWire", + ["c681d488-d850-11d0-8c52-00c04fd90f7e",0x24] = "Opnum36NotUsedOnWire", + ["c681d488-d850-11d0-8c52-00c04fd90f7e",0x25] = "Opnum37NotUsedOnWire", + ["c681d488-d850-11d0-8c52-00c04fd90f7e",0x26] = "Opnum38NotUsedOnWire", + ["c681d488-d850-11d0-8c52-00c04fd90f7e",0x27] = "Opnum39NotUsedOnWire", + ["c681d488-d850-11d0-8c52-00c04fd90f7e",0x28] = "Opnum40NotUsedOnWire", + ["c681d488-d850-11d0-8c52-00c04fd90f7e",0x29] = "Opnum41NotUsedOnWire", + ["c681d488-d850-11d0-8c52-00c04fd90f7e",0x2A] = "Opnum42NotUsedOnWire", + ["c681d488-d850-11d0-8c52-00c04fd90f7e",0x2B] = "Opnum43NotUsedOnWire", + ["c681d488-d850-11d0-8c52-00c04fd90f7e",0x2C] = "Opnum44NotUsedOnWire", + + # FileServerVssAgent - MSDN Ref: File Server Remote VSS Protocol [ms-fsrvp] + ["a8e0653c-2744-4389-a61d-7373df8b2292",0x00] = "GetSupportedVersion", + ["a8e0653c-2744-4389-a61d-7373df8b2292",0x01] = "SetContext", + ["a8e0653c-2744-4389-a61d-7373df8b2292",0x02] = "StartShadowCopySet", + ["a8e0653c-2744-4389-a61d-7373df8b2292",0x03] = "AddToShadowCopySet", + ["a8e0653c-2744-4389-a61d-7373df8b2292",0x04] = "CommitShadowCopySet", + ["a8e0653c-2744-4389-a61d-7373df8b2292",0x05] = "ExposeShadowCopySet", + ["a8e0653c-2744-4389-a61d-7373df8b2292",0x06] = "RecoveryCompleteShadowCopySet", + ["a8e0653c-2744-4389-a61d-7373df8b2292",0x07] = "AbortShadowCopySet", + ["a8e0653c-2744-4389-a61d-7373df8b2292",0x08] = "IsPathSupported", + ["a8e0653c-2744-4389-a61d-7373df8b2292",0x09] = "IsPathShadowCopied", + ["a8e0653c-2744-4389-a61d-7373df8b2292",0x0A] = "GetShareMapping", + ["a8e0653c-2744-4389-a61d-7373df8b2292",0x0B] = "DeleteShareMapping", + ["a8e0653c-2744-4389-a61d-7373df8b2292",0x0C] = "PrepareShadowCopy", + + # FrsTransport - MSDN Ref: DFS Replication Protocol [ms-frs2] + ["897e2e5f-93f3-4376-9c9c-fd2277495c27",0x00] = "CheckConnectivity", + ["897e2e5f-93f3-4376-9c9c-fd2277495c27",0x01] = "EstablishConnection", + ["897e2e5f-93f3-4376-9c9c-fd2277495c27",0x02] = "EstablishSession", + ["897e2e5f-93f3-4376-9c9c-fd2277495c27",0x03] = "RequestUpdates", + ["897e2e5f-93f3-4376-9c9c-fd2277495c27",0x04] = "RequestVersionVector", + ["897e2e5f-93f3-4376-9c9c-fd2277495c27",0x05] = "AsyncPoll", + ["897e2e5f-93f3-4376-9c9c-fd2277495c27",0x06] = "RequestRecords", + ["897e2e5f-93f3-4376-9c9c-fd2277495c27",0x07] = "UpdateCancel", + ["897e2e5f-93f3-4376-9c9c-fd2277495c27",0x08] = "RawGetFileData", + ["897e2e5f-93f3-4376-9c9c-fd2277495c27",0x09] = "RdcGetSignatures", + ["897e2e5f-93f3-4376-9c9c-fd2277495c27",0x0A] = "RdcPushSourceNeeds", + ["897e2e5f-93f3-4376-9c9c-fd2277495c27",0x0B] = "RdcGetFileData", + ["897e2e5f-93f3-4376-9c9c-fd2277495c27",0x0C] = "RdcClose", + ["897e2e5f-93f3-4376-9c9c-fd2277495c27",0x0D] = "InitializeFileTransferAsync", + ["897e2e5f-93f3-4376-9c9c-fd2277495c27",0x0E] = "Opnum14NotUsedOnWire", + ["897e2e5f-93f3-4376-9c9c-fd2277495c27",0x0F] = "RawGetFileDataAsync", + ["897e2e5f-93f3-4376-9c9c-fd2277495c27",0x10] = "RdcGetFileDataAsync", + ["897e2e5f-93f3-4376-9c9c-fd2277495c27",0x11] = "RdcFileDataTransferKeepAlive", + + # IADProxy - MSDN Ref: DFS Replication Helper Protocol [ms-dfsrh] + ["4bb8ab1d-9ef9-4100-8eb6-dd4b4e418b72",0x03] = "CreateObject", + ["4bb8ab1d-9ef9-4100-8eb6-dd4b4e418b72",0x04] = "DeleteObject", + ["4bb8ab1d-9ef9-4100-8eb6-dd4b4e418b72",0x05] = "ModifyObject", + + # IADProxy2 - MSDN Ref: DFS Replication Helper Protocol [ms-dfsrh] + ["c4b0c7d9-abe0-4733-a1e1-9fdedf260c7a",0x06] = "CreateObject", + ["c4b0c7d9-abe0-4733-a1e1-9fdedf260c7a",0x07] = "DeleteObject", + ["c4b0c7d9-abe0-4733-a1e1-9fdedf260c7a",0x08] = "ModifyObject", + + # ICertAdminD - MSDN Ref: Certificate Services Remote Administration Protocol [ms-csra] + ["d99e6e71-fc88-11d0-b498-00a0c90312f3",0x03] = "SetExtension", + ["d99e6e71-fc88-11d0-b498-00a0c90312f3",0x04] = "SetAttributes", + ["d99e6e71-fc88-11d0-b498-00a0c90312f3",0x05] = "ResubmitRequest", + ["d99e6e71-fc88-11d0-b498-00a0c90312f3",0x06] = "DenyRequest", + ["d99e6e71-fc88-11d0-b498-00a0c90312f3",0x07] = "IsValidCertificate", + ["d99e6e71-fc88-11d0-b498-00a0c90312f3",0x08] = "PublishCRL", + ["d99e6e71-fc88-11d0-b498-00a0c90312f3",0x09] = "GetCRL", + ["d99e6e71-fc88-11d0-b498-00a0c90312f3",0x0A] = "RevokeCertificate", + ["d99e6e71-fc88-11d0-b498-00a0c90312f3",0x0B] = "EnumViewColumn", + ["d99e6e71-fc88-11d0-b498-00a0c90312f3",0x0C] = "GetViewDefaultColumnSet", + ["d99e6e71-fc88-11d0-b498-00a0c90312f3",0x0D] = "EnumAttributesOrExtensions", + ["d99e6e71-fc88-11d0-b498-00a0c90312f3",0x0E] = "OpenView", + ["d99e6e71-fc88-11d0-b498-00a0c90312f3",0x0F] = "EnumView", + ["d99e6e71-fc88-11d0-b498-00a0c90312f3",0x10] = "CloseView", + ["d99e6e71-fc88-11d0-b498-00a0c90312f3",0x11] = "ServerControl", + ["d99e6e71-fc88-11d0-b498-00a0c90312f3",0x12] = "Ping", + ["d99e6e71-fc88-11d0-b498-00a0c90312f3",0x13] = "GetServerState", + ["d99e6e71-fc88-11d0-b498-00a0c90312f3",0x14] = "BackupPrepare", + ["d99e6e71-fc88-11d0-b498-00a0c90312f3",0x15] = "BackupEnd", + ["d99e6e71-fc88-11d0-b498-00a0c90312f3",0x16] = "BackupGetAttachmentInformation", + ["d99e6e71-fc88-11d0-b498-00a0c90312f3",0x17] = "BackupGetBackupLogs", + ["d99e6e71-fc88-11d0-b498-00a0c90312f3",0x18] = "BackupOpenFile", + ["d99e6e71-fc88-11d0-b498-00a0c90312f3",0x19] = "BackupReadFile", + ["d99e6e71-fc88-11d0-b498-00a0c90312f3",0x1A] = "BackupCloseFile", + ["d99e6e71-fc88-11d0-b498-00a0c90312f3",0x1B] = "BackupTruncateLogs", + ["d99e6e71-fc88-11d0-b498-00a0c90312f3",0x1C] = "ImportCertificate", + ["d99e6e71-fc88-11d0-b498-00a0c90312f3",0x1D] = "BackupGetDynamicFiles", + ["d99e6e71-fc88-11d0-b498-00a0c90312f3",0x1E] = "RestoreGetDatabaseLocations", + + # ICertAdminD2 - MSDN Ref: Certificate Services Remote Administration Protocol [ms-csra] + ["7fe0d935-dda6-443f-85d0-1cfb58fe41dd",0x1F] = "PublishCRLs", + ["7fe0d935-dda6-443f-85d0-1cfb58fe41dd",0x20] = "GetCAProperty", + ["7fe0d935-dda6-443f-85d0-1cfb58fe41dd",0x21] = "SetCAProperty", + ["7fe0d935-dda6-443f-85d0-1cfb58fe41dd",0x22] = "GetCAPropertyInfo", + ["7fe0d935-dda6-443f-85d0-1cfb58fe41dd",0x23] = "EnumViewColumnTable", + ["7fe0d935-dda6-443f-85d0-1cfb58fe41dd",0x24] = "GetCASecurity", + ["7fe0d935-dda6-443f-85d0-1cfb58fe41dd",0x25] = "SetCASecurity", + ["7fe0d935-dda6-443f-85d0-1cfb58fe41dd",0x26] = "Ping2", + ["7fe0d935-dda6-443f-85d0-1cfb58fe41dd",0x27] = "GetArchivedKey", + ["7fe0d935-dda6-443f-85d0-1cfb58fe41dd",0x28] = "GetAuditFilter", + ["7fe0d935-dda6-443f-85d0-1cfb58fe41dd",0x29] = "SetAuditFilter", + ["7fe0d935-dda6-443f-85d0-1cfb58fe41dd",0x2A] = "GetOfficerRights", + ["7fe0d935-dda6-443f-85d0-1cfb58fe41dd",0x2B] = "SetOfficerRights", + ["7fe0d935-dda6-443f-85d0-1cfb58fe41dd",0x2C] = "GetConfigEntry", + ["7fe0d935-dda6-443f-85d0-1cfb58fe41dd",0x2D] = "SetConfigEntry", + ["7fe0d935-dda6-443f-85d0-1cfb58fe41dd",0x2E] = "ImportKey", + ["7fe0d935-dda6-443f-85d0-1cfb58fe41dd",0x2F] = "GetMyRoles", + ["7fe0d935-dda6-443f-85d0-1cfb58fe41dd",0x30] = "DeleteRow", + + # ICertRequestD - MSDN Ref: Windows Client Certificate Enrollment Protocol [ms-wcce] + ["d99e6e70-fc88-11d0-b498-00a0c90312f3",0x03] = "Request", + ["d99e6e70-fc88-11d0-b498-00a0c90312f3",0x04] = "GetCACert", + ["d99e6e70-fc88-11d0-b498-00a0c90312f3",0x05] = "Ping", + + # ICertRequestD2 - MSDN Ref: Windows Client Certificate Enrollment Protocol [ms-wcce] + ["5422fd3a-d4b8-4cef-a12e-e87d4ca22e90",0x03] = "Request", + ["5422fd3a-d4b8-4cef-a12e-e87d4ca22e90",0x04] = "GetCACert", + ["5422fd3a-d4b8-4cef-a12e-e87d4ca22e90",0x05] = "Ping", + ["5422fd3a-d4b8-4cef-a12e-e87d4ca22e90",0x06] = "Request2", + ["5422fd3a-d4b8-4cef-a12e-e87d4ca22e90",0x07] = "GetCAProperty", + ["5422fd3a-d4b8-4cef-a12e-e87d4ca22e90",0x08] = "GetCAPropertyInfo", + ["5422fd3a-d4b8-4cef-a12e-e87d4ca22e90",0x09] = "Ping2", + + # IDMNotify - MSDN Ref: Disk Mgmt Remote Protocol [ms-dmrp] + ["d2d79df7-3400-11d0-b40b-00aa005ff586",0x00] = "ObjectsChanged", + + # IDMRemoteServer - MSDN Ref: Disk Mgmt Remote Protocol [ms-dmrp] + ["3a410f21-553f-11d1-8e5e-00a0c92c9d5d",0x03] = "CreateRemoteObject", + + # IEnumWbemClassObject - MSDN Ref: WMI Remote Protocol [ms-wmi] + ["027947e1-d731-11ce-a357-000000000001",0x03] = "Reset", + ["027947e1-d731-11ce-a357-000000000001",0x04] = "Next", + ["027947e1-d731-11ce-a357-000000000001",0x05] = "NextAsync", + ["027947e1-d731-11ce-a357-000000000001",0x06] = "Clone", + ["027947e1-d731-11ce-a357-000000000001",0x07] = "Skip", + + # IEventService I Eventlog - MSDN Ref: Eventlog Remoting Protocol v6.0 [ms-even6] + ["f6beaff7-1e19-4fbb-9f8f-b89e2018337c",0x00] = "EvtRpcRegisterRemoteSubscription", + ["f6beaff7-1e19-4fbb-9f8f-b89e2018337c",0x01] = "EvtRpcRemoteSubscriptionNextAsync", + ["f6beaff7-1e19-4fbb-9f8f-b89e2018337c",0x02] = "EvtRpcRemoteSubscriptionNext", + ["f6beaff7-1e19-4fbb-9f8f-b89e2018337c",0x03] = "EvtRpcRemoteSubscriptionWaitAsync", + ["f6beaff7-1e19-4fbb-9f8f-b89e2018337c",0x04] = "EvtRpcRegisterControllableOperation", + ["f6beaff7-1e19-4fbb-9f8f-b89e2018337c",0x05] = "EvtRpcRegisterLogQuery", + ["f6beaff7-1e19-4fbb-9f8f-b89e2018337c",0x06] = "EvtRpcClearLog", + ["f6beaff7-1e19-4fbb-9f8f-b89e2018337c",0x07] = "EvtRpcExportLog", + ["f6beaff7-1e19-4fbb-9f8f-b89e2018337c",0x08] = "EvtRpcLocalizeExportLog", + ["f6beaff7-1e19-4fbb-9f8f-b89e2018337c",0x09] = "EvtRpcMessageRender", + ["f6beaff7-1e19-4fbb-9f8f-b89e2018337c",0x0A] = "EvtRpcMessageRenderDefault", + ["f6beaff7-1e19-4fbb-9f8f-b89e2018337c",0x0B] = "EvtRpcQueryNext", + ["f6beaff7-1e19-4fbb-9f8f-b89e2018337c",0x0C] = "EvtRpcQuerySeek", + ["f6beaff7-1e19-4fbb-9f8f-b89e2018337c",0x0D] = "EvtRpcClose", + ["f6beaff7-1e19-4fbb-9f8f-b89e2018337c",0x0E] = "EvtRpcCancel", + ["f6beaff7-1e19-4fbb-9f8f-b89e2018337c",0x0F] = "EvtRpcAssertConfig", + ["f6beaff7-1e19-4fbb-9f8f-b89e2018337c",0x10] = "EvtRpcRetractConfig", + ["f6beaff7-1e19-4fbb-9f8f-b89e2018337c",0x11] = "EvtRpcOpenLogHandle", + ["f6beaff7-1e19-4fbb-9f8f-b89e2018337c",0x12] = "EvtRpcGetLogFileInfo", + ["f6beaff7-1e19-4fbb-9f8f-b89e2018337c",0x13] = "EvtRpcGetChannelList", + ["f6beaff7-1e19-4fbb-9f8f-b89e2018337c",0x14] = "EvtRpcGetChannelConfig", + ["f6beaff7-1e19-4fbb-9f8f-b89e2018337c",0x15] = "EvtRpcPutChannelConfig", + ["f6beaff7-1e19-4fbb-9f8f-b89e2018337c",0x16] = "EvtRpcGetPublisherList", + ["f6beaff7-1e19-4fbb-9f8f-b89e2018337c",0x17] = "EvtRpcGetPublisherListForChannel", + ["f6beaff7-1e19-4fbb-9f8f-b89e2018337c",0x18] = "EvtRpcGetPublisherMetadata", + ["f6beaff7-1e19-4fbb-9f8f-b89e2018337c",0x19] = "EvtRpcGetPublisherResourceMetadata", + ["f6beaff7-1e19-4fbb-9f8f-b89e2018337c",0x1A] = "EvtRpcGetEventMetadataEnum", + ["f6beaff7-1e19-4fbb-9f8f-b89e2018337c",0x1B] = "EvtRpcGetNextEventMetadata", + ["f6beaff7-1e19-4fbb-9f8f-b89e2018337c",0x1C] = "EvtRpcGetClassicLogDisplayName", + + # IIISApplicationAdmin - MSDN Ref: IIS IMSAdminBaseW Remote Protocol [ms-imsa] + ["7c4e1804-e342-483d-a43e-a850cfcc8d18",0x03] = "CreateApplication", + ["7c4e1804-e342-483d-a43e-a850cfcc8d18",0x04] = "DeleteApplication", + ["7c4e1804-e342-483d-a43e-a850cfcc8d18",0x05] = "CreateApplicationPool", + ["7c4e1804-e342-483d-a43e-a850cfcc8d18",0x06] = "DeleteApplicationPool", + ["7c4e1804-e342-483d-a43e-a850cfcc8d18",0x07] = "EnumerateApplicationsInPool", + ["7c4e1804-e342-483d-a43e-a850cfcc8d18",0x08] = "RecycleApplicationPool", + ["7c4e1804-e342-483d-a43e-a850cfcc8d18",0x09] = "GetProcessMode", + + # IIISCertObj - MSDN Ref: IIS IMSAdminBaseW Remote Protocol [ms-imsa] + ["bd0c73bc-805b-4043-9c30-9a28d64dd7d2",0x07] = "Opnum7NotUsedOnWire", + ["bd0c73bc-805b-4043-9c30-9a28d64dd7d2",0x08] = "Opnum8NotUsedOnWire", + ["bd0c73bc-805b-4043-9c30-9a28d64dd7d2",0x09] = "Opnum9NotUsedOnWire", + ["bd0c73bc-805b-4043-9c30-9a28d64dd7d2",0x0A] = "InstanceName", + ["bd0c73bc-805b-4043-9c30-9a28d64dd7d2",0x0B] = "Opnum11NotUsedOnWire", + ["bd0c73bc-805b-4043-9c30-9a28d64dd7d2",0x0C] = "IsInstallRemote", + ["bd0c73bc-805b-4043-9c30-9a28d64dd7d2",0x0D] = "Opnum13NotUsedOnWire", + ["bd0c73bc-805b-4043-9c30-9a28d64dd7d2",0x0E] = "IsExportableRemote", + ["bd0c73bc-805b-4043-9c30-9a28d64dd7d2",0x0F] = "Opnum15NotUsedOnWire", + ["bd0c73bc-805b-4043-9c30-9a28d64dd7d2",0x10] = "GetCertInfoRemote", + ["bd0c73bc-805b-4043-9c30-9a28d64dd7d2",0x11] = "Opnum17NotUsedOnWire", + ["bd0c73bc-805b-4043-9c30-9a28d64dd7d2",0x12] = "Opnum18NotUsedOnWire", + ["bd0c73bc-805b-4043-9c30-9a28d64dd7d2",0x13] = "Opnum19NotUsedOnWire", + ["bd0c73bc-805b-4043-9c30-9a28d64dd7d2",0x14] = "Opnum20NotUsedOnWire", + ["bd0c73bc-805b-4043-9c30-9a28d64dd7d2",0x15] = "Opnum21NotUsedOnWire", + ["bd0c73bc-805b-4043-9c30-9a28d64dd7d2",0x16] = "ImportFromBlob", + ["bd0c73bc-805b-4043-9c30-9a28d64dd7d2",0x17] = "ImportFromBlobGetHash", + ["bd0c73bc-805b-4043-9c30-9a28d64dd7d2",0x18] = "Opnum24NotUsedOnWire", + ["bd0c73bc-805b-4043-9c30-9a28d64dd7d2",0x19] = "ExportToBlob", + + # IIisServiceControl - MSDN Ref: IIS Service Control Protocol [ms-iiss] + ["e8fb8620-588f-11d2-9d61-00c04f79c5fe",0x07] = "Stop", + ["e8fb8620-588f-11d2-9d61-00c04f79c5fe",0x08] = "Start", + ["e8fb8620-588f-11d2-9d61-00c04f79c5fe",0x09] = "Reboot", + ["e8fb8620-588f-11d2-9d61-00c04f79c5fe",0x0A] = "Status", + ["e8fb8620-588f-11d2-9d61-00c04f79c5fe",0x0B] = "Kill", + + # IManagedObject - MSDN Ref: IManagedObject Interface Protocol [ms-ioi] + ["c3fcc19e-a970-11d2-8b5a-00a0c9b7c9c4",0x03] = "GetSerializedBuffer", + ["c3fcc19e-a970-11d2-8b5a-00a0c9b7c9c4",0x04] = "GetObjectIdentify", + + # IManageTelnetSessions - MSDN Ref: Telnet Server Remote Administration Protocol [ms-tsrap] + ["034634fd-ba3f-11d1-856a-00a0c944138c",0x07] = "GetTelnetSessions", + ["034634fd-ba3f-11d1-856a-00a0c944138c",0x08] = "TerminateSession", + ["034634fd-ba3f-11d1-856a-00a0c944138c",0x09] = "SendMsgToASession", + + # IMSAdminBase2W - MSDN Ref: IIS IMSAdminBaseW Remote Protocol [ms-imsa] + ["8298d101-f992-43b7-8eca-5052d885b995",0x22] = "BackupWithPasswrd", + ["8298d101-f992-43b7-8eca-5052d885b995",0x23] = "RestoreWithPasswrd", + ["8298d101-f992-43b7-8eca-5052d885b995",0x24] = "Export", + ["8298d101-f992-43b7-8eca-5052d885b995",0x25] = "Import", + ["8298d101-f992-43b7-8eca-5052d885b995",0x26] = "RestoreHistory", + ["8298d101-f992-43b7-8eca-5052d885b995",0x27] = "EnumHistory", + + # IMSAdminBase3W - MSDN Ref: IIS IMSAdminBaseW Remote Protocol [ms-imsa] + ["f612954d-3b0b-4c56-9563-227b7be624b4",0x28] = "GetChildPaths", + + # IMSAdminBaseW - MSDN Ref: IIS IMSAdminBaseW Remote Protocol [ms-imsa] + ["70b51430-b6ca-11d0-b9b9-00a0c922e750",0x03] = "AddKey", + ["70b51430-b6ca-11d0-b9b9-00a0c922e750",0x04] = "DeleteKey", + ["70b51430-b6ca-11d0-b9b9-00a0c922e750",0x05] = "DeleteChildKEys", + ["70b51430-b6ca-11d0-b9b9-00a0c922e750",0x06] = "EnumKeys", + ["70b51430-b6ca-11d0-b9b9-00a0c922e750",0x07] = "CopyKey", + ["70b51430-b6ca-11d0-b9b9-00a0c922e750",0x08] = "RenameKey", + ["70b51430-b6ca-11d0-b9b9-00a0c922e750",0x09] = "R_SetData", + ["70b51430-b6ca-11d0-b9b9-00a0c922e750",0x0A] = "R_GetData", + ["70b51430-b6ca-11d0-b9b9-00a0c922e750",0x0B] = "DeleteDate", + ["70b51430-b6ca-11d0-b9b9-00a0c922e750",0x0C] = "R_EnumData", + ["70b51430-b6ca-11d0-b9b9-00a0c922e750",0x0D] = "R_GetAllData", + ["70b51430-b6ca-11d0-b9b9-00a0c922e750",0x0E] = "DeleteAllData", + ["70b51430-b6ca-11d0-b9b9-00a0c922e750",0x0F] = "CopyData", + ["70b51430-b6ca-11d0-b9b9-00a0c922e750",0x10] = "GetDataPaths", + ["70b51430-b6ca-11d0-b9b9-00a0c922e750",0x11] = "OpenKey", + ["70b51430-b6ca-11d0-b9b9-00a0c922e750",0x12] = "CloseKey", + ["70b51430-b6ca-11d0-b9b9-00a0c922e750",0x13] = "ChangePermissions", + ["70b51430-b6ca-11d0-b9b9-00a0c922e750",0x14] = "SaveData", + ["70b51430-b6ca-11d0-b9b9-00a0c922e750",0x15] = "GetHandleInfo", + ["70b51430-b6ca-11d0-b9b9-00a0c922e750",0x16] = "GetSystemChangeNumber", + ["70b51430-b6ca-11d0-b9b9-00a0c922e750",0x17] = "GetDataSetNumber", + ["70b51430-b6ca-11d0-b9b9-00a0c922e750",0x18] = "SetLastChangeTime", + ["70b51430-b6ca-11d0-b9b9-00a0c922e750",0x19] = "GetLastChangeTime", + ["70b51430-b6ca-11d0-b9b9-00a0c922e750",0x1A] = "R_KeyExchangePhase1", + ["70b51430-b6ca-11d0-b9b9-00a0c922e750",0x1B] = "R_KeyExchangePhase2", + ["70b51430-b6ca-11d0-b9b9-00a0c922e750",0x1C] = "Backup", + ["70b51430-b6ca-11d0-b9b9-00a0c922e750",0x1D] = "Restore", + ["70b51430-b6ca-11d0-b9b9-00a0c922e750",0x1E] = "EnumBackups", + ["70b51430-b6ca-11d0-b9b9-00a0c922e750",0x1F] = "DeleteBackup", + ["70b51430-b6ca-11d0-b9b9-00a0c922e750",0x20] = "UnmarshalInterface", + ["70b51430-b6ca-11d0-b9b9-00a0c922e750",0x21] = "R_GetServerGuid", + + # inetinfo - MSDN Ref: IIS Inetinfo Remote Protocol [ms-irp] + ["82ad4280-036b-11cf-972c-00aa006887b0",0x00] = "R_InetInfoGetVersion", + ["82ad4280-036b-11cf-972c-00aa006887b0",0x01] = "R_InetInfoGetAdminInformation", + ["82ad4280-036b-11cf-972c-00aa006887b0",0x02] = "R_InsetInfoGetSites", + ["82ad4280-036b-11cf-972c-00aa006887b0",0x03] = "R_InetInfoSetAdminInformation", + ["82ad4280-036b-11cf-972c-00aa006887b0",0x04] = "R_InetInfoGetGlobalAdminInformation", + ["82ad4280-036b-11cf-972c-00aa006887b0",0x05] = "R_InetInfoSetGlobalAdminInformation", + ["82ad4280-036b-11cf-972c-00aa006887b0",0x06] = "R_InetInfoQueryStatistics", + ["82ad4280-036b-11cf-972c-00aa006887b0",0x07] = "R_InetInfoClearStatistics", + ["82ad4280-036b-11cf-972c-00aa006887b0",0x08] = "R_InetInfoFlushMemoryCache", + ["82ad4280-036b-11cf-972c-00aa006887b0",0x09] = "R_InetInfoGetServerCapabilities", + ["82ad4280-036b-11cf-972c-00aa006887b0",0x0A] = "R_W3QueryStatistics2", + ["82ad4280-036b-11cf-972c-00aa006887b0",0x0B] = "R_W3ClearStatistics2", + ["82ad4280-036b-11cf-972c-00aa006887b0",0x0C] = "R_FtpQueryStatistics2", + ["82ad4280-036b-11cf-972c-00aa006887b0",0x0D] = "R_FtpClearStatistics2", + ["82ad4280-036b-11cf-972c-00aa006887b0",0x0E] = "R_IISDEnumerateUsers", + ["82ad4280-036b-11cf-972c-00aa006887b0",0x0F] = "R_IISDisconnectedUser", + ["82ad4280-036b-11cf-972c-00aa006887b0",0x10] = "Opnum16NotUsedOnWire", + ["82ad4280-036b-11cf-972c-00aa006887b0",0x11] = "Opnum17NotUsedOnWire", + + # IRemoteDispatch - MSDN Ref: IManagedObject Interface Protocol [ms-ioi] + ["6619a740-8154-43be-a186-0319578e02db",0x07] = "RemoteDispatchAutoDone", + ["6619a740-8154-43be-a186-0319578e02db",0x08] = "RemoteDispatchNotAutoDone", + + # IRemUnknown - MSDN Ref: DCOM Remote Protocol [ms-dcom] + ["00000131-0000-0000-c000-000000000046",0x03] = "RemQueryInterface", + ["00000131-0000-0000-c000-000000000046",0x04] = "RemAddRef", + ["00000131-0000-0000-c000-000000000046",0x05] = "RemRelease", + + # IResourceManager - MSDN Ref: Windows System Resource Manager Protocol [ms-wsrm] + ["c5cebee2-9df5-4cdd-a08c-c2471bc144b4",0x07] = "RetrieveEventList", + ["c5cebee2-9df5-4cdd-a08c-c2471bc144b4",0x08] = "GetSystemAffinity", + ["c5cebee2-9df5-4cdd-a08c-c2471bc144b4",0x09] = "ImportXMLFiles", + ["c5cebee2-9df5-4cdd-a08c-c2471bc144b4",0x0A] = "ExportXMLFiles", + ["c5cebee2-9df5-4cdd-a08c-c2471bc144b4",0x0B] = "RestoreXMLFiles", + ["c5cebee2-9df5-4cdd-a08c-c2471bc144b4",0x0C] = "GetDependencies", + ["c5cebee2-9df5-4cdd-a08c-c2471bc144b4",0x0D] = "GetServiceList", + ["c5cebee2-9df5-4cdd-a08c-c2471bc144b4",0x0E] = "GetllSAppPoolNames", + ["c5cebee2-9df5-4cdd-a08c-c2471bc144b4",0x0F] = "GetServerName", + ["c5cebee2-9df5-4cdd-a08c-c2471bc144b4",0x10] = "GetCurrentMemory", + + # IResourceManager2 - MSDN Ref: Windows System Resource Manager Protocol [ms-wsrm] + ["2a3eb639-d134-422d-90d8-aaa1b5216202",0x07] = "ExportObjects", + ["2a3eb639-d134-422d-90d8-aaa1b5216202",0x08] = "GetImportConflicts", + ["2a3eb639-d134-422d-90d8-aaa1b5216202",0x09] = "ImportXml", + ["2a3eb639-d134-422d-90d8-aaa1b5216202",0x0A] = "ExportXml", + + # ISDKey - MSDN Ref: Group Key Distribution Protocol [ms-gkdi] + ["b9785960-524f-11df-8b6d-83dcded72085",0x00] = "GetKey", + + # IServerHealthReport - MSDN Ref: DFS Replication Helper Protocol [ms-dfsrh] + ["e65e8028-83e8-491b-9af7-aaf6bd51a0ce",0x03] = "GetReport", + ["e65e8028-83e8-491b-9af7-aaf6bd51a0ce",0x04] = "GetCompressedReport", + ["e65e8028-83e8-491b-9af7-aaf6bd51a0ce",0x05] = "GetRawReportEx", + ["e65e8028-83e8-491b-9af7-aaf6bd51a0ce",0x06] = "GetReferenceVersionVectors", + ["e65e8028-83e8-491b-9af7-aaf6bd51a0ce",0x07] = "Opnum7NotUsedOnWire", + ["e65e8028-83e8-491b-9af7-aaf6bd51a0ce",0x08] = "GetReferenceBacklogCounts", + + # IServerHealthReport2 - MSDN Ref: DFS Replication Helper Protocol [ms-dfsrh] + ["20d15747-6c48-4254-a358-65039fd8c63c",0x09] = "GetReport", + ["20d15747-6c48-4254-a358-65039fd8c63c",0x10] = "GetCompressedReport", + + # IServicedComponentInfo - MSDN Ref: IManagedObject Interface Protocol [ms-ioi] + ["8165b19e-8d3a-4d0b-80c8-97de310db583",0x03] = "GetComponentInfo", + + # ITpmVirtualSmartCardManager - MSDN Ref: TPM Virtual Smart Card Mgmt Protocol [ms-tpmvsc] + ["112b1dff-d9dc-41f7-869f-d67fee7cb591",0x03] = "CreateVirtualSmartCard", + ["112b1dff-d9dc-41f7-869f-d67fee7cb591",0x04] = "DestroyVirtualSmartCard", + + # ITpmVirtualSmartCardManager2 - MSDN Ref: TPM Virtual Smart Card Mgmt Protocol [ms-tpmvsc] + ["fdf8a2b9-02de-47f4-bc26-aa85ab5e5267",0x05] = "CreateVirtualSmartCardWithPinPolicy", + + # ITpmVirtualSmartCardManager3 - MSDN Ref: TPM Virtual Smart Card Mgmt Protocol [ms-tpmvsc] + ["3c745a97-f375-4150-be17-5950f694c699",0x06] = "CreateVirtualSmartCardWithAttestation", + + # ITpmVirtualSmartCardManagerStatusCallback - MSDN Ref: TPM Virtual Smart Card Mgmt Protocol [ms-tpmvsc] + ["1a1bb35f-abb8-451c-a1ae-33d98f1bef4a",0x03] = "ReportProgress", + ["1a1bb35f-abb8-451c-a1ae-33d98f1bef4a",0x04] = "ReportError", + + # IUnknown - MSDN Ref: DCOM Remote Protocol [ms-dcom] + ["00000000-0000-0000-c000-000000000046",0x00] = "Opnum0NotUsedOnWire", + ["00000000-0000-0000-c000-000000000046",0x01] = "Opnum1NotUsedOnWire", + ["00000000-0000-0000-c000-000000000046",0x02] = "Opnum2NotUsedOnWire", + + # IVolumeClient - MSDN Ref: Disk Mgmt Remote Protocol [ms-dmrp] + ["d2d79df5-3400-11d0-b40b-00aa005ff586",0x03] = "EnumDisksEx", + ["d2d79df5-3400-11d0-b40b-00aa005ff586",0x04] = "EnumDiskRegionsEx", + ["d2d79df5-3400-11d0-b40b-00aa005ff586",0x05] = "CreatePartition", + ["d2d79df5-3400-11d0-b40b-00aa005ff586",0x06] = "CreatePartitionAssignAndFormat", + ["d2d79df5-3400-11d0-b40b-00aa005ff586",0x07] = "CreatePartitionAssignandFormatEx", + ["d2d79df5-3400-11d0-b40b-00aa005ff586",0x08] = "DeletePartition", + ["d2d79df5-3400-11d0-b40b-00aa005ff586",0x09] = "WriteSignature", + ["d2d79df5-3400-11d0-b40b-00aa005ff586",0x0A] = "MarkActivePartition", + ["d2d79df5-3400-11d0-b40b-00aa005ff586",0x0B] = "Eject", + ["d2d79df5-3400-11d0-b40b-00aa005ff586",0x0C] = "Opnum12NotUsedOnWire", + ["d2d79df5-3400-11d0-b40b-00aa005ff586",0x0D] = "FTEnumVolumes", + ["d2d79df5-3400-11d0-b40b-00aa005ff586",0x0E] = "FTEnumLogicalDiskMembers", + ["d2d79df5-3400-11d0-b40b-00aa005ff586",0x0F] = "FTDeleteVolume", + ["d2d79df5-3400-11d0-b40b-00aa005ff586",0x10] = "FTBreakMirror", + ["d2d79df5-3400-11d0-b40b-00aa005ff586",0x11] = "FTResyncMirror", + ["d2d79df5-3400-11d0-b40b-00aa005ff586",0x12] = "FTRegenerateParityStripe", + ["d2d79df5-3400-11d0-b40b-00aa005ff586",0x13] = "FTReplaceMirrorPartition", + ["d2d79df5-3400-11d0-b40b-00aa005ff586",0x14] = "FTReplaceParityStripePartition", + ["d2d79df5-3400-11d0-b40b-00aa005ff586",0x15] = "EnumDriveLetters", + ["d2d79df5-3400-11d0-b40b-00aa005ff586",0x16] = "AssignDriveLetter", + ["d2d79df5-3400-11d0-b40b-00aa005ff586",0x17] = "FreeDriveLetter", + ["d2d79df5-3400-11d0-b40b-00aa005ff586",0x18] = "EnumLocalFileSystems", + ["d2d79df5-3400-11d0-b40b-00aa005ff586",0x19] = "GetInstalledFileSystems", + ["d2d79df5-3400-11d0-b40b-00aa005ff586",0x1A] = "Format", + ["d2d79df5-3400-11d0-b40b-00aa005ff586",0x1B] = "Opnum27NotUsedOnWire", + ["d2d79df5-3400-11d0-b40b-00aa005ff586",0x1C] = "EnumVolumes", + ["d2d79df5-3400-11d0-b40b-00aa005ff586",0x1D] = "EnumVolumeMembers", + ["d2d79df5-3400-11d0-b40b-00aa005ff586",0x1E] = "CreateVolume", + ["d2d79df5-3400-11d0-b40b-00aa005ff586",0x1F] = "CreateVolumeAssignAndFormat", + ["d2d79df5-3400-11d0-b40b-00aa005ff586",0x20] = "CreateVolumeAssignAndFormatEx", + ["d2d79df5-3400-11d0-b40b-00aa005ff586",0x21] = "GetVolumeMountName", + ["d2d79df5-3400-11d0-b40b-00aa005ff586",0x22] = "GrowVolume", + ["d2d79df5-3400-11d0-b40b-00aa005ff586",0x23] = "DeleteVolume", + ["d2d79df5-3400-11d0-b40b-00aa005ff586",0x24] = "AddMirror", + ["d2d79df5-3400-11d0-b40b-00aa005ff586",0x25] = "RemoveMirror", + ["d2d79df5-3400-11d0-b40b-00aa005ff586",0x26] = "SplitMirror", + ["d2d79df5-3400-11d0-b40b-00aa005ff586",0x27] = "InitializeDiskEx", + ["d2d79df5-3400-11d0-b40b-00aa005ff586",0x28] = "UninitializeDisk", + ["d2d79df5-3400-11d0-b40b-00aa005ff586",0x29] = "ReConnectDisk", + ["d2d79df5-3400-11d0-b40b-00aa005ff586",0x2A] = "Opnum42NotUsedOnWire", + ["d2d79df5-3400-11d0-b40b-00aa005ff586",0x2B] = "ImportDiskGroup", + ["d2d79df5-3400-11d0-b40b-00aa005ff586",0x2C] = "DiskMergeQuery", + ["d2d79df5-3400-11d0-b40b-00aa005ff586",0x2D] = "DiskMerge", + ["d2d79df5-3400-11d0-b40b-00aa005ff586",0x2E] = "Opnum46NotUsedOnWire", + ["d2d79df5-3400-11d0-b40b-00aa005ff586",0x2F] = "ReAttachDisk", + ["d2d79df5-3400-11d0-b40b-00aa005ff586",0x30] = "Opnum48NotUsedOnWire", + ["d2d79df5-3400-11d0-b40b-00aa005ff586",0x31] = "Opnum49NotUsedOnWire", + ["d2d79df5-3400-11d0-b40b-00aa005ff586",0x32] = "Opnum50NotUsedOnWire", + ["d2d79df5-3400-11d0-b40b-00aa005ff586",0x33] = "ReplaceRaid5Column", + ["d2d79df5-3400-11d0-b40b-00aa005ff586",0x34] = "RestartVolume", + ["d2d79df5-3400-11d0-b40b-00aa005ff586",0x35] = "GetEncapsulateDiskInfoEx", + ["d2d79df5-3400-11d0-b40b-00aa005ff586",0x36] = "EncapsulateDiskEx", + ["d2d79df5-3400-11d0-b40b-00aa005ff586",0x37] = "QueryChangePartitionNumbers", + ["d2d79df5-3400-11d0-b40b-00aa005ff586",0x38] = "DeletePartitionNumberInfoFromRegistry", + ["d2d79df5-3400-11d0-b40b-00aa005ff586",0x39] = "SetDontShow", + ["d2d79df5-3400-11d0-b40b-00aa005ff586",0x3A] = "GetDontShow", + ["d2d79df5-3400-11d0-b40b-00aa005ff586",0x3B] = "Opnum59NotUsedOnWire", + ["d2d79df5-3400-11d0-b40b-00aa005ff586",0x3C] = "Opnum60NotUsedOnWire", + ["d2d79df5-3400-11d0-b40b-00aa005ff586",0x3D] = "Opnum61NotUsedOnWire", + ["d2d79df5-3400-11d0-b40b-00aa005ff586",0x3E] = "Opnum62NotUsedOnWire", + ["d2d79df5-3400-11d0-b40b-00aa005ff586",0x3F] = "Opnum63NotUsedOnWire", + ["d2d79df5-3400-11d0-b40b-00aa005ff586",0x40] = "Opnum64NotUsedOnWire", + ["d2d79df5-3400-11d0-b40b-00aa005ff586",0x41] = "Opnum65NotUsedOnWire", + ["d2d79df5-3400-11d0-b40b-00aa005ff586",0x42] = "Opnum66NotUsedOnWire", + ["d2d79df5-3400-11d0-b40b-00aa005ff586",0x43] = "EnumTasks", + ["d2d79df5-3400-11d0-b40b-00aa005ff586",0x44] = "GetTaskDetail", + ["d2d79df5-3400-11d0-b40b-00aa005ff586",0x45] = "AbortTask", + ["d2d79df5-3400-11d0-b40b-00aa005ff586",0x46] = "HrGetErrorData", + ["d2d79df5-3400-11d0-b40b-00aa005ff586",0x47] = "Initialize", + ["d2d79df5-3400-11d0-b40b-00aa005ff586",0x48] = "Uninitialize", + ["d2d79df5-3400-11d0-b40b-00aa005ff586",0x49] = "Refresh", + ["d2d79df5-3400-11d0-b40b-00aa005ff586",0x4A] = "RescanDisks", + ["d2d79df5-3400-11d0-b40b-00aa005ff586",0x4B] = "RefreshFileSys", + ["d2d79df5-3400-11d0-b40b-00aa005ff586",0x4C] = "SecureSystemPartition", + ["d2d79df5-3400-11d0-b40b-00aa005ff586",0x4D] = "ShutDownSystem", + ["d2d79df5-3400-11d0-b40b-00aa005ff586",0x4E] = "EnumAccessPath", + ["d2d79df5-3400-11d0-b40b-00aa005ff586",0x4F] = "EnumAccessPathForVolume", + ["d2d79df5-3400-11d0-b40b-00aa005ff586",0x50] = "AddAccessPath", + ["d2d79df5-3400-11d0-b40b-00aa005ff586",0x51] = "DeleteAccessPath", + + # IVolumeClient2 - MSDN Ref: Disk Mgmt Remote Protocol [ms-dmrp] + ["4bdafc52-fe6a-11d2-93f8-00105a11164a",0x03] = "GetMaxAdjustedFreeSpace", + + # IVolumeClient3 - MSDN Ref: Disk Mgmt Remote Protocol [ms-dmrp] + ["135698d2-3a37-4d26-99df-e2bb6ae3ac61",0x03] = "EnumDisksEx", + ["135698d2-3a37-4d26-99df-e2bb6ae3ac61",0x04] = "EnumDiskRegionsEx", + ["135698d2-3a37-4d26-99df-e2bb6ae3ac61",0x05] = "CreatePartition", + ["135698d2-3a37-4d26-99df-e2bb6ae3ac61",0x06] = "CreatePartitionAssignAndFormat", + ["135698d2-3a37-4d26-99df-e2bb6ae3ac61",0x07] = "CreatePartitionAssignandFormatEx", + ["135698d2-3a37-4d26-99df-e2bb6ae3ac61",0x08] = "DeletePartition", + ["135698d2-3a37-4d26-99df-e2bb6ae3ac61",0x09] = "InitializeDiskStyle", + ["135698d2-3a37-4d26-99df-e2bb6ae3ac61",0x0A] = "MarkActivePartition", + ["135698d2-3a37-4d26-99df-e2bb6ae3ac61",0x0B] = "Eject", + ["135698d2-3a37-4d26-99df-e2bb6ae3ac61",0x0C] = "Opnum12NotUsedOnWire", + ["135698d2-3a37-4d26-99df-e2bb6ae3ac61",0x0D] = "FTEnumVolumes", + ["135698d2-3a37-4d26-99df-e2bb6ae3ac61",0x0E] = "FTEnumLogicalDiskMembers", + ["135698d2-3a37-4d26-99df-e2bb6ae3ac61",0x0F] = "FTDeleteVolume", + ["135698d2-3a37-4d26-99df-e2bb6ae3ac61",0x10] = "FTBreakMirror", + ["135698d2-3a37-4d26-99df-e2bb6ae3ac61",0x11] = "FTResyncMirror", + ["135698d2-3a37-4d26-99df-e2bb6ae3ac61",0x12] = "FTRegenerateParityStripe", + ["135698d2-3a37-4d26-99df-e2bb6ae3ac61",0x13] = "FTReplaceMirrorPartition", + ["135698d2-3a37-4d26-99df-e2bb6ae3ac61",0x14] = "FTReplaceParityStripePartition", + ["135698d2-3a37-4d26-99df-e2bb6ae3ac61",0x15] = "EnumDriveLetters", + ["135698d2-3a37-4d26-99df-e2bb6ae3ac61",0x16] = "AssignDriveLetter", + ["135698d2-3a37-4d26-99df-e2bb6ae3ac61",0x17] = "FreeDriveLetter", + ["135698d2-3a37-4d26-99df-e2bb6ae3ac61",0x18] = "EnumLocalFileSystems", + ["135698d2-3a37-4d26-99df-e2bb6ae3ac61",0x19] = "GetInstalledFileSystems", + ["135698d2-3a37-4d26-99df-e2bb6ae3ac61",0x1A] = "Format", + ["135698d2-3a37-4d26-99df-e2bb6ae3ac61",0x1B] = "EnumVolumes", + ["135698d2-3a37-4d26-99df-e2bb6ae3ac61",0x1C] = "EnumVolumeMembers", + ["135698d2-3a37-4d26-99df-e2bb6ae3ac61",0x1D] = "CreateVolume", + ["135698d2-3a37-4d26-99df-e2bb6ae3ac61",0x1E] = "CreateVolumeAssignAndFormat", + ["135698d2-3a37-4d26-99df-e2bb6ae3ac61",0x1F] = "CreateVolumeAssignAndFormatEx", + ["135698d2-3a37-4d26-99df-e2bb6ae3ac61",0x20] = "GetVolumeMountName", + ["135698d2-3a37-4d26-99df-e2bb6ae3ac61",0x21] = "GrowVolume", + ["135698d2-3a37-4d26-99df-e2bb6ae3ac61",0x22] = "DeleteVolume", + ["135698d2-3a37-4d26-99df-e2bb6ae3ac61",0x23] = "CreatePartitionsForVolume", + ["135698d2-3a37-4d26-99df-e2bb6ae3ac61",0x24] = "DeletePartitionsForVolume", + ["135698d2-3a37-4d26-99df-e2bb6ae3ac61",0x25] = "GetMaxAdjustedFreeSpace", + ["135698d2-3a37-4d26-99df-e2bb6ae3ac61",0x26] = "AddMirror", + ["135698d2-3a37-4d26-99df-e2bb6ae3ac61",0x27] = "RemoveMirror", + ["135698d2-3a37-4d26-99df-e2bb6ae3ac61",0x28] = "SplitMirror", + ["135698d2-3a37-4d26-99df-e2bb6ae3ac61",0x29] = "InitializeDiskEx", + ["135698d2-3a37-4d26-99df-e2bb6ae3ac61",0x2A] = "UninitializeDisk", + ["135698d2-3a37-4d26-99df-e2bb6ae3ac61",0x2B] = "ReConnectDisk", + ["135698d2-3a37-4d26-99df-e2bb6ae3ac61",0x2C] = "ImportDiskGroup", + ["135698d2-3a37-4d26-99df-e2bb6ae3ac61",0x2D] = "DiskMergeQuery", + ["135698d2-3a37-4d26-99df-e2bb6ae3ac61",0x2E] = "DiskMerge", + ["135698d2-3a37-4d26-99df-e2bb6ae3ac61",0x2F] = "ReAttachDisk", + ["135698d2-3a37-4d26-99df-e2bb6ae3ac61",0x30] = "ReplaceRaid5Column", + ["135698d2-3a37-4d26-99df-e2bb6ae3ac61",0x31] = "RestartVolume", + ["135698d2-3a37-4d26-99df-e2bb6ae3ac61",0x32] = "GetEncapsulateDiskInfoEx", + ["135698d2-3a37-4d26-99df-e2bb6ae3ac61",0x33] = "EncapsulateDiskEx", + ["135698d2-3a37-4d26-99df-e2bb6ae3ac61",0x34] = "QueryChangePartitionNumbers", + ["135698d2-3a37-4d26-99df-e2bb6ae3ac61",0x35] = "DeletePartitionNumberInfoFromRegistry", + ["135698d2-3a37-4d26-99df-e2bb6ae3ac61",0x36] = "SetDontShow", + ["135698d2-3a37-4d26-99df-e2bb6ae3ac61",0x37] = "GetDontShow", + ["135698d2-3a37-4d26-99df-e2bb6ae3ac61",0x38] = "Opnum56NotUsedOnWire", + ["135698d2-3a37-4d26-99df-e2bb6ae3ac61",0x39] = "Opnum57NotUsedOnWire", + ["135698d2-3a37-4d26-99df-e2bb6ae3ac61",0x3A] = "Opnum58NotUsedOnWire", + ["135698d2-3a37-4d26-99df-e2bb6ae3ac61",0x3B] = "Opnum59NotUsedOnWire", + ["135698d2-3a37-4d26-99df-e2bb6ae3ac61",0x3C] = "Opnum60NotUsedOnWire", + ["135698d2-3a37-4d26-99df-e2bb6ae3ac61",0x3D] = "Opnum61NotUsedOnWire", + ["135698d2-3a37-4d26-99df-e2bb6ae3ac61",0x3E] = "Opnum62NotUsedOnWire", + ["135698d2-3a37-4d26-99df-e2bb6ae3ac61",0x3F] = "Opnum63NotUsedOnWire", + ["135698d2-3a37-4d26-99df-e2bb6ae3ac61",0x40] = "EnumTasks", + ["135698d2-3a37-4d26-99df-e2bb6ae3ac61",0x41] = "GetTaskDetail", + ["135698d2-3a37-4d26-99df-e2bb6ae3ac61",0x42] = "AbortTask", + ["135698d2-3a37-4d26-99df-e2bb6ae3ac61",0x43] = "HrGetErrorData", + ["135698d2-3a37-4d26-99df-e2bb6ae3ac61",0x44] = "Initialize", + ["135698d2-3a37-4d26-99df-e2bb6ae3ac61",0x45] = "Uninitialize", + ["135698d2-3a37-4d26-99df-e2bb6ae3ac61",0x46] = "Refresh", + ["135698d2-3a37-4d26-99df-e2bb6ae3ac61",0x47] = "RescanDisks", + ["135698d2-3a37-4d26-99df-e2bb6ae3ac61",0x48] = "RefreshFileSys", + ["135698d2-3a37-4d26-99df-e2bb6ae3ac61",0x49] = "SecureSystemPartition", + ["135698d2-3a37-4d26-99df-e2bb6ae3ac61",0x4A] = "ShutDownSystem", + ["135698d2-3a37-4d26-99df-e2bb6ae3ac61",0x4B] = "EnumAccessPath", + ["135698d2-3a37-4d26-99df-e2bb6ae3ac61",0x4C] = "EnumAccessPathForVolume", + ["135698d2-3a37-4d26-99df-e2bb6ae3ac61",0x4D] = "AddAccessPath", + ["135698d2-3a37-4d26-99df-e2bb6ae3ac61",0x4E] = "DeleteAccessPath", + + # IVolumeClient4 - MSDN Ref: Disk Mgmt Remote Protocol [ms-dmrp] + ["deb01010-3a37-4d26-99df-e2bb6ae3ac61",0x03] = "RefreshEx", + ["deb01010-3a37-4d26-99df-e2bb6ae3ac61",0x04] = "GetVolumeDeviceName", + + # IVssDifferentialSoftwareSnapshotMgmt - MSDN Ref: Shadow Copy Mgmt Protocol [ms-scmp] + ["214a0f28-b737-4026-b847-4f9e37d79529",0x03] = "AddDiffArea", + ["214a0f28-b737-4026-b847-4f9e37d79529",0x04] = "ChangeDiffAreaMaximizeSize", + ["214a0f28-b737-4026-b847-4f9e37d79529",0x05] = "QueryVolumesSupportedForDiffAreas", + ["214a0f28-b737-4026-b847-4f9e37d79529",0x06] = "QueryDiffAreasForVolume", + ["214a0f28-b737-4026-b847-4f9e37d79529",0x07] = "QueryDiffAreaOnVolume", + ["214a0f28-b737-4026-b847-4f9e37d79529",0x08] = "Opnum08NotUsedOnWire", + + # IVssEnumMgmtObject - MSDN Ref: Shadow Copy Mgmt Protocol [ms-scmp] + ["01954e6b-9254-4e6e-808c-c9e05d007696",0x03] = "Next", + ["01954e6b-9254-4e6e-808c-c9e05d007696",0x04] = "Skip", + ["01954e6b-9254-4e6e-808c-c9e05d007696",0x05] = "Reset", + ["01954e6b-9254-4e6e-808c-c9e05d007696",0x06] = "Clone", + + # IVssEnumObject - MSDN Ref: Shadow Copy Mgmt Protocol [ms-scmp] + ["ae1c7110-2f60-11d3-8a39-00c04f72d8e3",0x03] = "Next", + ["ae1c7110-2f60-11d3-8a39-00c04f72d8e3",0x04] = "Skip", + ["ae1c7110-2f60-11d3-8a39-00c04f72d8e3",0x05] = "Reset", + ["ae1c7110-2f60-11d3-8a39-00c04f72d8e3",0x06] = "Clone", + + # IVssSnapshotMgmt - MSDN Ref: Shadow Copy Mgmt Protocol [ms-scmp] + ["fa7df749-66e7-4986-a27f-e2f04ae53772",0x03] = "GetProviderMgmtInterface", + ["fa7df749-66e7-4986-a27f-e2f04ae53772",0x04] = "QueryVolumesSupportedForSnapshots", + ["fa7df749-66e7-4986-a27f-e2f04ae53772",0x05] = "QuerySnapshotsByVolume", + + # IWamAdmin - MSDN Ref: IIS IMSAdminBaseW Remote Protocol [ms-imsa] + ["29822ab7-f302-11d0-9953-00c04fd919c1",0x03] = "AppCreate", + ["29822ab7-f302-11d0-9953-00c04fd919c1",0x04] = "AppDelete", + ["29822ab7-f302-11d0-9953-00c04fd919c1",0x05] = "AppUnLoad", + ["29822ab7-f302-11d0-9953-00c04fd919c1",0x06] = "AppGetStatus", + ["29822ab7-f302-11d0-9953-00c04fd919c1",0x07] = "AppDeleteRecoverable", + ["29822ab7-f302-11d0-9953-00c04fd919c1",0x08] = "AppRecover", + + # IWamAdmin2 - MSDN Ref: IIS IMSAdminBaseW Remote Protocol [ms-imsa] + ["29822ab8-f302-11d0-9953-00c04fd919c1",0x09] = "AppCreate2", + + # IWRMAccounting - MSDN Ref: Windows System Resource Manager Protocol [ms-wsrm] + ["4f7ca01c-a9e5-45b6-b142-2332a1339c1d",0x07] = "CreateAccountingDb", + ["4f7ca01c-a9e5-45b6-b142-2332a1339c1d",0x08] = "GetAccountingMetadata", + ["4f7ca01c-a9e5-45b6-b142-2332a1339c1d",0x09] = "ExecuteAccountingQuery", + ["4f7ca01c-a9e5-45b6-b142-2332a1339c1d",0x0A] = "GetRawAccountingData", + ["4f7ca01c-a9e5-45b6-b142-2332a1339c1d",0x0B] = "GetNextAccountingDataBatch", + ["4f7ca01c-a9e5-45b6-b142-2332a1339c1d",0x0C] = "DeleteAccountingData", + ["4f7ca01c-a9e5-45b6-b142-2332a1339c1d",0x0D] = "DefragmentDB", + ["4f7ca01c-a9e5-45b6-b142-2332a1339c1d",0x0E] = "CancelAccountingQuery", + ["4f7ca01c-a9e5-45b6-b142-2332a1339c1d",0x0F] = "RegisterAccountingClient", + ["4f7ca01c-a9e5-45b6-b142-2332a1339c1d",0x10] = "DumpAccountingData", + ["4f7ca01c-a9e5-45b6-b142-2332a1339c1d",0x11] = "GetAccountingClients", + ["4f7ca01c-a9e5-45b6-b142-2332a1339c1d",0x12] = "SetAccountingClientStatus", + ["4f7ca01c-a9e5-45b6-b142-2332a1339c1d",0x13] = "CheckAccountingConnection", + ["4f7ca01c-a9e5-45b6-b142-2332a1339c1d",0x14] = "SetClientPermissions", + + # IWRMCalendar - MSDN Ref: Windows System Resource Manager Protocol [ms-wsrm] + ["481e06cf-ab04-4498-8ffe-124a0a34296d",0x07] = "GetCalendarInfo", + ["481e06cf-ab04-4498-8ffe-124a0a34296d",0x08] = "CreateCalendar", + ["481e06cf-ab04-4498-8ffe-124a0a34296d",0x09] = "ModifyCalendar", + ["481e06cf-ab04-4498-8ffe-124a0a34296d",0x0A] = "DeleteCalendar", + ["481e06cf-ab04-4498-8ffe-124a0a34296d",0x0B] = "RenameCalendar", + ["481e06cf-ab04-4498-8ffe-124a0a34296d",0x0C] = "ComputeEvents", + ["481e06cf-ab04-4498-8ffe-124a0a34296d",0x0D] = "GetScheduleInfo", + ["481e06cf-ab04-4498-8ffe-124a0a34296d",0x0E] = "CreateSchedule", + ["481e06cf-ab04-4498-8ffe-124a0a34296d",0x0F] = "ModifySchedule", + ["481e06cf-ab04-4498-8ffe-124a0a34296d",0x10] = "DeleteSchedule", + ["481e06cf-ab04-4498-8ffe-124a0a34296d",0x11] = "RenameSchedule", + ["481e06cf-ab04-4498-8ffe-124a0a34296d",0x12] = "MoveBeforeCalendar", + ["481e06cf-ab04-4498-8ffe-124a0a34296d",0x13] = "MoveAfterCalendar", + ["481e06cf-ab04-4498-8ffe-124a0a34296d",0x14] = "GetServerTimeZone", + + # IWRMConfig - MSDN Ref: Windows System Resource Manager Protocol [ms-wsrm] + ["21546ae8-4da5-445e-987f-627fea39c5e8",0x07] = "GetConfig", + ["21546ae8-4da5-445e-987f-627fea39c5e8",0x08] = "SetConfig", + ["21546ae8-4da5-445e-987f-627fea39c5e8",0x09] = "IsEnabled", + ["21546ae8-4da5-445e-987f-627fea39c5e8",0x0A] = "EnableDisable", + ["21546ae8-4da5-445e-987f-627fea39c5e8",0x0B] = "GetExclusionList", + ["21546ae8-4da5-445e-987f-627fea39c5e8",0x0C] = "SetExclusionList", + ["21546ae8-4da5-445e-987f-627fea39c5e8",0x0D] = "WSRMActivate", + ["21546ae8-4da5-445e-987f-627fea39c5e8",0x0E] = "IsWSRMActivated", + ["21546ae8-4da5-445e-987f-627fea39c5e8",0x0F] = "RestoreExclusionList", + + # IWRMMachineGroup - MSDN Ref: Windows System Resource Manager Protocol [ms-wsrm] + ["943991a5-b3fe-41fa-9696-7f7b656ee34b",0x07] = "CreateMachineGroup", + ["943991a5-b3fe-41fa-9696-7f7b656ee34b",0x08] = "GetMachineGroupInfo", + ["943991a5-b3fe-41fa-9696-7f7b656ee34b",0x09] = "ModifyMachineGroup", + ["943991a5-b3fe-41fa-9696-7f7b656ee34b",0x0A] = "DeleteMachineGroup", + ["943991a5-b3fe-41fa-9696-7f7b656ee34b",0x0B] = "RenameMachineGroup", + ["943991a5-b3fe-41fa-9696-7f7b656ee34b",0x0C] = "AddMachine", + ["943991a5-b3fe-41fa-9696-7f7b656ee34b",0x0D] = "GetMachineInfo", + ["943991a5-b3fe-41fa-9696-7f7b656ee34b",0x0E] = "ModifyMachineInfo", + ["943991a5-b3fe-41fa-9696-7f7b656ee34b",0x0F] = "DeleteMachine", + + # IWRMPolicy - MSDN Ref: Windows System Resource Manager Protocol [ms-wsrm] + ["59602eb6-57b0-4fd8-aa4b-ebf06971fe15",0x07] = "GetPolicyInfo", + ["59602eb6-57b0-4fd8-aa4b-ebf06971fe15",0x08] = "CreatePolicy", + ["59602eb6-57b0-4fd8-aa4b-ebf06971fe15",0x09] = "ModifyPolicy", + ["59602eb6-57b0-4fd8-aa4b-ebf06971fe15",0x0A] = "DeletePolicy", + ["59602eb6-57b0-4fd8-aa4b-ebf06971fe15",0x0B] = "RenameAllocationPolicy", + ["59602eb6-57b0-4fd8-aa4b-ebf06971fe15",0x0C] = "MoveBefore", + ["59602eb6-57b0-4fd8-aa4b-ebf06971fe15",0x0D] = "MoveAfter", + ["59602eb6-57b0-4fd8-aa4b-ebf06971fe15",0x0E] = "SetCalDefaultPolicyName", + ["59602eb6-57b0-4fd8-aa4b-ebf06971fe15",0x0F] = "GetCalDefaultPolicyName", + ["59602eb6-57b0-4fd8-aa4b-ebf06971fe15",0x10] = "GetProcessList", + ["59602eb6-57b0-4fd8-aa4b-ebf06971fe15",0x11] = "GetCurrentPolicy", + ["59602eb6-57b0-4fd8-aa4b-ebf06971fe15",0x12] = "SetCurrentPolicy", + ["59602eb6-57b0-4fd8-aa4b-ebf06971fe15",0x13] = "GetCurrentStateAndActivePolicyName", + ["59602eb6-57b0-4fd8-aa4b-ebf06971fe15",0x14] = "GetConditionalPolicy", + ["59602eb6-57b0-4fd8-aa4b-ebf06971fe15",0x15] = "SetConditionalPolicy", + + # IWRMProtocol - MSDN Ref: Windows System Resource Manager Protocol [ms-wsrm] + ["f31931a9-832d-481c-9503-887a0e6a79f0",0x07] = "GetSupportedClient", + + # IWRMRemoteSessionMgmt - MSDN Ref: Windows System Resource Manager Protocol [ms-wsrm] + ["fc910418-55ca-45ef-b264-83d4ce7d30e0",0x07] = "GetRemoteUserCategories", + ["fc910418-55ca-45ef-b264-83d4ce7d30e0",0x08] = "SetRemoteUserCategories", + ["fc910418-55ca-45ef-b264-83d4ce7d30e0",0x09] = "RefreshRemoteSessionWeights", + + # IWRMResourceGroup - MSDN Ref: Windows System Resource Manager Protocol [ms-wsrm] + ["bc681469-9dd9-4bf4-9b3d-709f69efe431",0x07] = "GetResourceGroupInfo", + ["bc681469-9dd9-4bf4-9b3d-709f69efe431",0x08] = "ModifyResourceGroup", + ["bc681469-9dd9-4bf4-9b3d-709f69efe431",0x09] = "CreateResourceGroup", + ["bc681469-9dd9-4bf4-9b3d-709f69efe431",0x0A] = "DeleteResourceGroup", + ["bc681469-9dd9-4bf4-9b3d-709f69efe431",0x0B] = "RenameResourceGroup", + + # locator - MSDN Ref: RPC Location Services Extensions [ms-rpcl] + ["e33c0cc4-0482-101a-bc0c-02608c6ba218",0x00] = "I_nsi_lookup_begin", + ["e33c0cc4-0482-101a-bc0c-02608c6ba218",0x01] = "I_nsi_lookup_done", + ["e33c0cc4-0482-101a-bc0c-02608c6ba218",0x02] = "I_nsi_lookup_next", + ["e33c0cc4-0482-101a-bc0c-02608c6ba218",0x03] = "I_nsi_entry_object_inq_next", + ["e33c0cc4-0482-101a-bc0c-02608c6ba218",0x04] = "I_nsi_ping_locator", + ["e33c0cc4-0482-101a-bc0c-02608c6ba218",0x05] = "I_nsi_entry_object_inq_done", + ["e33c0cc4-0482-101a-bc0c-02608c6ba218",0x06] = "I_nsi_entry_object_inq_begin", + + # lsacap - MSDN Ref: Central Access Policy Identifier Retreival Protocol [ms-capr] + ["afc07e2e-311c-4435-808c-c483ffeec7c9",0x00] = "LsarGetAvailableCAPIDs", + + # NetEventForwarder - MSDN Ref: Live Remote Event Capture Protocol [ms-lrec] + ["22e5386d-8b12-4bf0-b0ec-6a1ea419e366",0x00] = "RpcNetEventOpenSession", + ["22e5386d-8b12-4bf0-b0ec-6a1ea419e366",0x01] = "RpcNetEventReceiveData", + ["22e5386d-8b12-4bf0-b0ec-6a1ea419e366",0x02] = "RpcNetEventCloseSession", + + # NtFrsApi - MSDN Ref: File Replication Service Protocol [ms-frs1] + ["d049b186-814f-11d1-9a3c-00c04fc9b232",0x00] = "Opnum0NotUsedOnWire", + ["d049b186-814f-11d1-9a3c-00c04fc9b232",0x01] = "Opnum1NotUsedOnWire", + ["d049b186-814f-11d1-9a3c-00c04fc9b232",0x02] = "Opnum2NotUsedOnWire", + ["d049b186-814f-11d1-9a3c-00c04fc9b232",0x03] = "Opnum3NotUsedOnWire", + ["d049b186-814f-11d1-9a3c-00c04fc9b232",0x04] = "NtFrsApi_Rpc_Set_DsPollingIntervalW", + ["d049b186-814f-11d1-9a3c-00c04fc9b232",0x05] = "NtFrsApi_Rpc_Get_DsPollingIntervalW", + ["d049b186-814f-11d1-9a3c-00c04fc9b232",0x06] = "Opnum6NotUsedOnWire", + ["d049b186-814f-11d1-9a3c-00c04fc9b232",0x07] = "NtFrsApi_Rpc_InfoW", + ["d049b186-814f-11d1-9a3c-00c04fc9b232",0x08] = "NtFrsApi_Rpc_IsPathReplicated", + ["d049b186-814f-11d1-9a3c-00c04fc9b232",0x09] = "NtFrsApi_Rpc_WriterCommand", + ["d049b186-814f-11d1-9a3c-00c04fc9b232",0x0A] = "NtFrsApi_Rpc_ForceReplication", + + # RCMListener - MSDN Ref: Terminal Services Runtime Interface Protocol [ms-tsts] + ["497d95a6-2d27-4bf5-9bbd-a6046957133c",0x00] = "RpcOpenListener", + ["497d95a6-2d27-4bf5-9bbd-a6046957133c",0x01] = "RpcCloseListener", + ["497d95a6-2d27-4bf5-9bbd-a6046957133c",0x02] = "RpcStopListener", + ["497d95a6-2d27-4bf5-9bbd-a6046957133c",0x03] = "RpcStartListener", + ["497d95a6-2d27-4bf5-9bbd-a6046957133c",0x04] = "RpcIsListening", + + # RCMPublic - MSDN Ref: Terminal Services Runtime Interface Protocol [ms-tsts] + ["bde95fdf-eee0-45de-9e12-e5a61cd0d4fe",0x00] = "RpcGetClientData", + ["bde95fdf-eee0-45de-9e12-e5a61cd0d4fe",0x01] = "RpcGetConfigData", + ["bde95fdf-eee0-45de-9e12-e5a61cd0d4fe",0x02] = "RpcGetProtocolStatus", + ["bde95fdf-eee0-45de-9e12-e5a61cd0d4fe",0x03] = "RpcGetLastInputTime", + ["bde95fdf-eee0-45de-9e12-e5a61cd0d4fe",0x04] = "RpcGetRemoteAddress", + ["bde95fdf-eee0-45de-9e12-e5a61cd0d4fe",0x05] = "Opnum5NotUsedOnWire", + ["bde95fdf-eee0-45de-9e12-e5a61cd0d4fe",0x06] = "Opnum6NotUsedOnWire", + ["bde95fdf-eee0-45de-9e12-e5a61cd0d4fe",0x07] = "Opnum7NotUsedOnWire", + ["bde95fdf-eee0-45de-9e12-e5a61cd0d4fe",0x08] = "RpcGetAllListeners", + ["bde95fdf-eee0-45de-9e12-e5a61cd0d4fe",0x09] = "RpcGetSessionProtocolLastInputTime", + ["bde95fdf-eee0-45de-9e12-e5a61cd0d4fe",0x0A] = "RpcGetUserCertificates", + ["bde95fdf-eee0-45de-9e12-e5a61cd0d4fe",0x0B] = "RpcQuerySessionData", + + # RemoteFW - MSDN Ref: Firewall and Advanced Security Protocol [ms-fasp] + ["6b5bdd1e-528c-422c-af8c-a4079be4fe48",0x00] = "RRPC_FWOpenPolicyStore", + ["6b5bdd1e-528c-422c-af8c-a4079be4fe48",0x01] = "RRPC_FWClosePolicyStore", + ["6b5bdd1e-528c-422c-af8c-a4079be4fe48",0x02] = "RRPC_FWRestoreDefaults", + ["6b5bdd1e-528c-422c-af8c-a4079be4fe48",0x03] = "RRPC_FWGetGlobalConfig", + ["6b5bdd1e-528c-422c-af8c-a4079be4fe48",0x04] = "RRPC_FWSetGlobalConfig", + ["6b5bdd1e-528c-422c-af8c-a4079be4fe48",0x05] = "RRPC_FWAddFirewallRule", + ["6b5bdd1e-528c-422c-af8c-a4079be4fe48",0x06] = "RRPC_FWSetFirewallRule", + ["6b5bdd1e-528c-422c-af8c-a4079be4fe48",0x07] = "RRPC_FWDeleteFirewallRule", + ["6b5bdd1e-528c-422c-af8c-a4079be4fe48",0x08] = "RRPC_FWDeleteAllFirewallRules", + ["6b5bdd1e-528c-422c-af8c-a4079be4fe48",0x09] = "RRPC_FWEnumFirewallRules", + ["6b5bdd1e-528c-422c-af8c-a4079be4fe48",0x0A] = "RRPC_FWGetConfig", + ["6b5bdd1e-528c-422c-af8c-a4079be4fe48",0x0B] = "RRPC_FWSetConfig", + ["6b5bdd1e-528c-422c-af8c-a4079be4fe48",0x0C] = "RRPC_FWAddConnectionSecurityRule", + ["6b5bdd1e-528c-422c-af8c-a4079be4fe48",0x0D] = "RRPC_FWSetConnectionSecurityRule", + ["6b5bdd1e-528c-422c-af8c-a4079be4fe48",0x0E] = "RRPC_FWDeleteConnectionSecurityRule", + ["6b5bdd1e-528c-422c-af8c-a4079be4fe48",0x0F] = "RRPC_FWEnumConnectionSecurityRules", + ["6b5bdd1e-528c-422c-af8c-a4079be4fe48",0x10] = "RRPC_FWEnumConnectionSecurityRules", + ["6b5bdd1e-528c-422c-af8c-a4079be4fe48",0x11] = "RRPC_FWAddAuthenticationSet", + ["6b5bdd1e-528c-422c-af8c-a4079be4fe48",0x12] = "RRPC_FWSetAuthenticationSet", + ["6b5bdd1e-528c-422c-af8c-a4079be4fe48",0x13] = "RRPC_FWDeleteAuthenticationSet", + ["6b5bdd1e-528c-422c-af8c-a4079be4fe48",0x14] = "RRPC_FWDeleteAllAuthenticationSets", + ["6b5bdd1e-528c-422c-af8c-a4079be4fe48",0x15] = "RRPC_FWEnumAuthenticationSets", + ["6b5bdd1e-528c-422c-af8c-a4079be4fe48",0x16] = "RRPC_FWAddCryptoSet", + ["6b5bdd1e-528c-422c-af8c-a4079be4fe48",0x17] = "RRPC_FWSetCryptoSet", + ["6b5bdd1e-528c-422c-af8c-a4079be4fe48",0x18] = "RRPC_FWDeleteCryptoSet", + ["6b5bdd1e-528c-422c-af8c-a4079be4fe48",0x19] = "RRPC_FWDeleteAllCryptoSets", + ["6b5bdd1e-528c-422c-af8c-a4079be4fe48",0x1A] = "RRPC_FWEnumCryptoSets", + ["6b5bdd1e-528c-422c-af8c-a4079be4fe48",0x1B] = "RRPC_FWEnumPhase1SAs", + ["6b5bdd1e-528c-422c-af8c-a4079be4fe48",0x1C] = "RRPC_FWEnumPhase2SAs", + ["6b5bdd1e-528c-422c-af8c-a4079be4fe48",0x1D] = "RRPC_FWDeletePhase1SAs", + ["6b5bdd1e-528c-422c-af8c-a4079be4fe48",0x1E] = "RRPC_FWDeletePhase2SAs", + ["6b5bdd1e-528c-422c-af8c-a4079be4fe48",0x1F] = "RRPC_FWEnumProducts", + ["6b5bdd1e-528c-422c-af8c-a4079be4fe48",0x20] = "RRPC_FWAddMainModeRule", + ["6b5bdd1e-528c-422c-af8c-a4079be4fe48",0x21] = "RRPC_FWSetMainModeRule", + ["6b5bdd1e-528c-422c-af8c-a4079be4fe48",0x22] = "RRPC_FWDeleteMainModeRule", + ["6b5bdd1e-528c-422c-af8c-a4079be4fe48",0x23] = "RRPC_FWDeleteAllMainModeRules", + ["6b5bdd1e-528c-422c-af8c-a4079be4fe48",0x24] = "RRPC_FWEnumMainModeRules", + ["6b5bdd1e-528c-422c-af8c-a4079be4fe48",0x25] = "RRPC_FWQueryFirewallRules", + ["6b5bdd1e-528c-422c-af8c-a4079be4fe48",0x26] = "RRPC_FWQueryConnectionSecurityRules", + ["6b5bdd1e-528c-422c-af8c-a4079be4fe48",0x27] = "RRPC_FWQueryMainModeRules", + ["6b5bdd1e-528c-422c-af8c-a4079be4fe48",0x28] = "RRPC_FWQueryAuthenticationSets", + ["6b5bdd1e-528c-422c-af8c-a4079be4fe48",0x29] = "RRPC_FWQueryCryptoSets", + ["6b5bdd1e-528c-422c-af8c-a4079be4fe48",0x2A] = "RRPC_FWEnumNetworks", + ["6b5bdd1e-528c-422c-af8c-a4079be4fe48",0x2B] = "RRPC_FWEnumAdapters", + ["6b5bdd1e-528c-422c-af8c-a4079be4fe48",0x2C] = "RRPC_FWGetGlobalConfig2_10", + ["6b5bdd1e-528c-422c-af8c-a4079be4fe48",0x2D] = "RRPC_FWGetConfig2_10", + ["6b5bdd1e-528c-422c-af8c-a4079be4fe48",0x2E] = "RRPC_FWAddFirewallRule2_10", + ["6b5bdd1e-528c-422c-af8c-a4079be4fe48",0x2F] = "RRPC_FWSetFirewallRule2_10", + ["6b5bdd1e-528c-422c-af8c-a4079be4fe48",0x30] = "RRPC_FWEnumFirewallRules2_10", + ["6b5bdd1e-528c-422c-af8c-a4079be4fe48",0x31] = "RRPC_FWAddConnectionSecurityRule2_10", + ["6b5bdd1e-528c-422c-af8c-a4079be4fe48",0x32] = "RRPC_FWSetConnectionSecurityRule2_10", + ["6b5bdd1e-528c-422c-af8c-a4079be4fe48",0x33] = "RRPC_FWEnumConnectionSecurityRules2_10", + ["6b5bdd1e-528c-422c-af8c-a4079be4fe48",0x34] = "RRPC_FWAddAuthenticationSet2_10", + ["6b5bdd1e-528c-422c-af8c-a4079be4fe48",0x35] = "RRPC_FWSetAuthenticationSet2_10", + ["6b5bdd1e-528c-422c-af8c-a4079be4fe48",0x36] = "RRPC_FWEnumAuthenticationSets2_10", + ["6b5bdd1e-528c-422c-af8c-a4079be4fe48",0x37] = "RRPC_FWAddCryptoSet2_10", + ["6b5bdd1e-528c-422c-af8c-a4079be4fe48",0x38] = "RRPC_FWSetCryptoSet2_10", + ["6b5bdd1e-528c-422c-af8c-a4079be4fe48",0x39] = "RRPC_FWEnumCryptoSets2_10", + ["6b5bdd1e-528c-422c-af8c-a4079be4fe48",0x3A] = "RRPC_FWAddConnectionSecurityRule2_20", + ["6b5bdd1e-528c-422c-af8c-a4079be4fe48",0x3B] = "RRPC_FWSetConnectionSecurityRule2_20", + ["6b5bdd1e-528c-422c-af8c-a4079be4fe48",0x3C] = "RRPC_FWEnumConnectionSecurityRules2_20", + ["6b5bdd1e-528c-422c-af8c-a4079be4fe48",0x3D] = "RRPC_FWQueryConnectionSecurityRules2_20", + ["6b5bdd1e-528c-422c-af8c-a4079be4fe48",0x3E] = "RRPC_FWAddAuthenticationSet2_20", + ["6b5bdd1e-528c-422c-af8c-a4079be4fe48",0x3F] = "RRPC_FWEnumAuthenticationSets2_20", + ["6b5bdd1e-528c-422c-af8c-a4079be4fe48",0x40] = "RRPC_FWQueryAuthenticationSets2_20", + ["6b5bdd1e-528c-422c-af8c-a4079be4fe48",0x41] = "RRPC_FWAddFirewallRule2_20", + ["6b5bdd1e-528c-422c-af8c-a4079be4fe48",0x42] = "RRPC_FWSetFirewallRule2_20", + ["6b5bdd1e-528c-422c-af8c-a4079be4fe48",0x43] = "RRPC_FWEnumFirewallRules2_20", + ["6b5bdd1e-528c-422c-af8c-a4079be4fe48",0x45] = "RRPC_FWQueryFirewallRules2_20", + ["6b5bdd1e-528c-422c-af8c-a4079be4fe48",0x46] = "RRPC_FWAddFirewallRule2_24", + ["6b5bdd1e-528c-422c-af8c-a4079be4fe48",0x47] = "RRPC_FWSetFirewallRule2_24", + ["6b5bdd1e-528c-422c-af8c-a4079be4fe48",0x48] = "RRPC_FWEnumFirewallRules2_24", + ["6b5bdd1e-528c-422c-af8c-a4079be4fe48",0x49] = "RRPC_FWQueryFirewallRules2_24", + ["6b5bdd1e-528c-422c-af8c-a4079be4fe48",0x4A] = "RRPC_FWAddFirewallRule2_25", + ["6b5bdd1e-528c-422c-af8c-a4079be4fe48",0x4B] = "RRPC_FWSetFirewallRule2_25", + ["6b5bdd1e-528c-422c-af8c-a4079be4fe48",0x4C] = "RRPC_FWEnumFirewallRules2_25", + ["6b5bdd1e-528c-422c-af8c-a4079be4fe48",0x4D] = "RRPC_FWQueryFirewallRules2_25", + ["6b5bdd1e-528c-422c-af8c-a4079be4fe48",0x4E] = "RRPC_FWAddFirewallRule2_26", + ["6b5bdd1e-528c-422c-af8c-a4079be4fe48",0x4F] = "RRPC_FWSetFirewallRule2_26", + ["6b5bdd1e-528c-422c-af8c-a4079be4fe48",0x50] = "RRPC_FWEnumFirewallRules2_26", + ["6b5bdd1e-528c-422c-af8c-a4079be4fe48",0x51] = "RRPC_FWQueryFirewallRules2_26", + + # remotesp - MSDN Ref: Telephony Remote Protocol [ms-trp] + ["2f5f6521-ca47-1068-b319-00dd010662db",0x00] = "RemoteSPAttach", + ["2f5f6521-ca47-1068-b319-00dd010662db",0x01] = "RemoteSPEventProc", + ["2f5f6521-ca47-1068-b319-00dd010662db",0x02] = "RemoteSPDetach", + + # SessEnvPublicRpc - MSDN Ref: Terminal Services Runtime Interface Protocol [ms-tsts] + ["1257b580-ce2f-4109-82d6-a9459d0bf6bc",0x00] = "RpcShadow2", + + # ssdpsrv - Marchand Ref: Simple Service Discovery Protocol (SSDP) [ssdp] + ["4b112204-0e19-11d3-b42b-0000f81feb9f",0x00] = "RegisterServiceRpc", + ["4b112204-0e19-11d3-b42b-0000f81feb9f",0x01] = "DeregisterServiceRpcByUSN", + ["4b112204-0e19-11d3-b42b-0000f81feb9f",0x02] = "DeregisterServiceRpc", + ["4b112204-0e19-11d3-b42b-0000f81feb9f",0x03] = "UpdateCacheRpc", + ["4b112204-0e19-11d3-b42b-0000f81feb9f",0x04] = "LookupCacheRpc", + ["4b112204-0e19-11d3-b42b-0000f81feb9f",0x05] = "CleanupCacheRpc", + ["4b112204-0e19-11d3-b42b-0000f81feb9f",0x06] = "InitializeSyncHandle", + ["4b112204-0e19-11d3-b42b-0000f81feb9f",0x07] = "RemoveSyncHandle", + ["4b112204-0e19-11d3-b42b-0000f81feb9f",0x08] = "RegisterNotificationRpc", + ["4b112204-0e19-11d3-b42b-0000f81feb9f",0x09] = "GetNotificationRpc", + ["4b112204-0e19-11d3-b42b-0000f81feb9f",0x0A] = "WakeupGetNotificationRpc", + ["4b112204-0e19-11d3-b42b-0000f81feb9f",0x0B] = "DeregisterNotificationRpc", + ["4b112204-0e19-11d3-b42b-0000f81feb9f",0x0C] = "EnableDeviceHost", + ["4b112204-0e19-11d3-b42b-0000f81feb9f",0x0D] = "DisableDeviceHost", + ["4b112204-0e19-11d3-b42b-0000f81feb9f",0x0E] = "SetICSInterfaces", + ["4b112204-0e19-11d3-b42b-0000f81feb9f",0x0F] = "SetICSOff", + + # tapsrv - MSDN Ref: Telephony Remote Protocol [ms-trp] + ["2f5f6520-ca46-1067-b319-00dd010662da",0x00] = "ClientAttach", + ["2f5f6520-ca46-1067-b319-00dd010662da",0x01] = "ClientRequest", + ["2f5f6520-ca46-1067-b319-00dd010662da",0x02] = "ClientDetach", + + # TermServEnumeration - MSDN Ref: Terminal Services Runtime Interface Protocol [ms-tsts] + ["88143fd0-c28d-4b2b-8fef-8d882f6a9390",0x00] = "RpcOpenEnum", + ["88143fd0-c28d-4b2b-8fef-8d882f6a9390",0x01] = "RpcCloseEnum", + ["88143fd0-c28d-4b2b-8fef-8d882f6a9390",0x02] = "RpcFilterByState", + ["88143fd0-c28d-4b2b-8fef-8d882f6a9390",0x03] = "RpcFilterByCallersName", + ["88143fd0-c28d-4b2b-8fef-8d882f6a9390",0x04] = "RpcEnumAddFilter", + ["88143fd0-c28d-4b2b-8fef-8d882f6a9390",0x05] = "RpcGetEnumResult", + ["88143fd0-c28d-4b2b-8fef-8d882f6a9390",0x06] = "RpcFilterBySessionType", + ["88143fd0-c28d-4b2b-8fef-8d882f6a9390",0x07] = "Opnum7NotUsedOnWire", + ["88143fd0-c28d-4b2b-8fef-8d882f6a9390",0x08] = "RpcGetSessionIds", + ["88143fd0-c28d-4b2b-8fef-8d882f6a9390",0x09] = "RpcGetEnumResultEx", + ["88143fd0-c28d-4b2b-8fef-8d882f6a9390",0x0A] = "RpcGetAllSessions", + ["88143fd0-c28d-4b2b-8fef-8d882f6a9390",0x0B] = "RpcGetAllSessionsEx", + + # TermServNotification - MSDN Ref: Terminal Services Runtime Interface Protocol [ms-tsts] + ["11899a43-2b68-4a76-92e3-a3d6ad8c26ce",0x00] = "RpcWaitForSessionState", + ["11899a43-2b68-4a76-92e3-a3d6ad8c26ce",0x01] = "RpcRegisterAsyncNotification", + ["11899a43-2b68-4a76-92e3-a3d6ad8c26ce",0x02] = "RpcWaitAsyncNotification", + ["11899a43-2b68-4a76-92e3-a3d6ad8c26ce",0x03] = "RpcUnRegisterAsyncNotification", + + # TermSrvSession - MSDN Ref: Terminal Services Runtime Interface Protocol [ms-tsts] + ["484809d6-4239-471b-b5bc-61df8c23ac48",0x00] = "RpcWaitForSessionState", + ["484809d6-4239-471b-b5bc-61df8c23ac48",0x01] = "RpcRegisterAsyncNotification", + ["484809d6-4239-471b-b5bc-61df8c23ac48",0x02] = "RpcWaitAsyncNotification", + ["484809d6-4239-471b-b5bc-61df8c23ac48",0x03] = "RpcUnRegisterAsyncNotification", + + # trksvr - MSDN Ref: Distributed Link Tracking: Central Manager Protocol [ms-dltm] + ["4da1c422-943d-11d1-acae-00c04fc2aa3f",0x00] = "LnkSvrMessage", + ["4da1c422-943d-11d1-acae-00c04fc2aa3f",0x01] = "LnkSvrMessageCallback", + + # trkwks - MSDN Ref: Distributed Link Tracking: Workstation Protocol [ms-dltw] + ["300f3532-38cc-11d0-a3f0-0020af6b0add",0x00] = "Opnum0NotUsedOnWire", + ["300f3532-38cc-11d0-a3f0-0020af6b0add",0x01] = "Opnum1NotUsedOnWire", + ["300f3532-38cc-11d0-a3f0-0020af6b0add",0x02] = "Opnum2NotUsedOnWire", + ["300f3532-38cc-11d0-a3f0-0020af6b0add",0x03] = "Opnum3NotUsedOnWire", + ["300f3532-38cc-11d0-a3f0-0020af6b0add",0x04] = "Opnum4NotUsedOnWire", + ["300f3532-38cc-11d0-a3f0-0020af6b0add",0x05] = "Opnum5NotUsedOnWire", + ["300f3532-38cc-11d0-a3f0-0020af6b0add",0x06] = "Opnum6NotUsedOnWire", + ["300f3532-38cc-11d0-a3f0-0020af6b0add",0x07] = "Opnum7NotUsedOnWire", + ["300f3532-38cc-11d0-a3f0-0020af6b0add",0x08] = "Opnum8NotUsedOnWire", + ["300f3532-38cc-11d0-a3f0-0020af6b0add",0x09] = "Opnum9NotUsedOnWire", + ["300f3532-38cc-11d0-a3f0-0020af6b0add",0x0A] = "Opnum10NotUsedOnWire", + ["300f3532-38cc-11d0-a3f0-0020af6b0add",0x0B] = "Opnum11NotUsedOnWire", + ["300f3532-38cc-11d0-a3f0-0020af6b0add",0x0C] = "LnkSearchMachine", + + # TsProxyRpcInterface - MSDN Ref: Terminal Services Gateway Server Protocol [ms-tsgu] + ["44e265dd-7daf-42cd-8560-3cdb6e7a2729",0x00] = "Opnum0NotUsedOnWire", + ["44e265dd-7daf-42cd-8560-3cdb6e7a2729",0x01] = "TsProxyCreateTunnel", + ["44e265dd-7daf-42cd-8560-3cdb6e7a2729",0x02] = "TsProxyAuthorizeTunnel", + ["44e265dd-7daf-42cd-8560-3cdb6e7a2729",0x03] = "TsProxyMakeTunnelCall", + ["44e265dd-7daf-42cd-8560-3cdb6e7a2729",0x04] = "TsProxyCreateChannel", + ["44e265dd-7daf-42cd-8560-3cdb6e7a2729",0x05] = "Opnum5NotUsedOnWire", + ["44e265dd-7daf-42cd-8560-3cdb6e7a2729",0x06] = "TsProxyCloseChannel", + ["44e265dd-7daf-42cd-8560-3cdb6e7a2729",0x07] = "TsProxyCloseTunnel", + ["44e265dd-7daf-42cd-8560-3cdb6e7a2729",0x08] = "TsProxySetupReceivePipe", + ["44e265dd-7daf-42cd-8560-3cdb6e7a2729",0x09] = "TsProxySendToServer", + + # TSVIPPublic - MSDN Ref: Terminal Services Runtime Interface Protocol [ms-tsts] + ["53b46b02-c73b-4a3e-8dee-b16b80672fc0",0x00] = "RpcGetSessionIP", + + # W32Time - MSDN Ref: W32Time Remote Protocol [ms-w32t] + ["8fb6d884-2388-11d0-8c35-00c04fda2795",0x00] = "W32TimeSync", + ["8fb6d884-2388-11d0-8c35-00c04fda2795",0x01] = "W32TimeGetNetlogonServiceBits", + ["8fb6d884-2388-11d0-8c35-00c04fda2795",0x02] = "W32TimeQueryProviderStatus", + ["8fb6d884-2388-11d0-8c35-00c04fda2795",0x03] = "W32TimeQuerySource", + ["8fb6d884-2388-11d0-8c35-00c04fda2795",0x04] = "W32TimeQueryProviderConfiguration", + ["8fb6d884-2388-11d0-8c35-00c04fda2795",0x05] = "W32TimeQueryConfiguration", + ["8fb6d884-2388-11d0-8c35-00c04fda2795",0x06] = "W32TimeQueryStatus", + ["8fb6d884-2388-11d0-8c35-00c04fda2795",0x07] = "W32TimeLog", + + # WdsRpcInterface - MSDN Ref: Windows Deployment Services Control Protocol [ms-wdsc] + ["1a927394-352e-4553-ae3f-7cf4aafca620",0x00] = "WdsRpcMessage", + + # winsi2 - MSDN Ref: Remote Administrative Interface: WINS [ms-raiw] + ["811109bf-a4e1-11d1-ab54-00a0c91e9b45",0x00] = "R_WinsTombstoneDbRecs", + ["811109bf-a4e1-11d1-ab54-00a0c91e9b45",0x01] = "R_WinsCheckAccess", + + # Witness - MSDN Ref: Service Witness Protocol [ms-swn] + ["ccd8c074-d0e5-4a40-92b4-d074faa6ba28",0x00] = "WitnessrGetInterfaceList", + ["ccd8c074-d0e5-4a40-92b4-d074faa6ba28",0x01] = "WitnessrRegister", + ["ccd8c074-d0e5-4a40-92b4-d074faa6ba28",0x02] = "WitnessrUnRegister", + ["ccd8c074-d0e5-4a40-92b4-d074faa6ba28",0x03] = "WitnessrAsyncNotify", + ["ccd8c074-d0e5-4a40-92b4-d074faa6ba28",0x04] = "WitnessrRegisterEx", + } &redef &default=function(uuid: string, i: count): string { return fmt("unknown-%d", i); }; } diff --git a/testing/external/commit-hash.zeek-testing-private b/testing/external/commit-hash.zeek-testing-private index 717c726ff8..44c950dabd 100644 --- a/testing/external/commit-hash.zeek-testing-private +++ b/testing/external/commit-hash.zeek-testing-private @@ -1 +1 @@ -3a457386285fa29cccedfcecf9167a486b71e59d +8ef47172c5f941a1b6fed0941899a5fbd2df06db