mirror of
https://github.com/zeek/zeek.git
synced 2025-10-05 16:18:19 +00:00
7e9d48f532
The broxygen-generated files now live in the git repo, have tests that check that they are up-to-date, and a script to re-generate them on-demand.
1433 lines
109 KiB
ReStructuredText
1433 lines
109 KiB
ReStructuredText
:tocdepth: 3
|
|
|
|
base/protocols/dce-rpc/consts.bro
|
|
=================================
|
|
.. bro:namespace:: DCE_RPC
|
|
|
|
|
|
:Namespace: DCE_RPC
|
|
|
|
Summary
|
|
~~~~~~~
|
|
Redefinable Options
|
|
###################
|
|
============================================================================================================================================ ==================================================
|
|
:bro:id:`DCE_RPC::operations`: :bro:type:`table` :bro:attr:`&redef` :bro:attr:`&default` = :bro:type:`function` :bro:attr:`&optional`
|
|
:bro:id:`DCE_RPC::pipe_name_to_common_uuid`: :bro:type:`table` :bro:attr:`&redef` This table is to map pipe names to the most common
|
|
service used over that pipe.
|
|
:bro:id:`DCE_RPC::uuid_endpoint_map`: :bro:type:`table` :bro:attr:`&redef` :bro:attr:`&default` = :bro:type:`function` :bro:attr:`&optional`
|
|
============================================================================================================================================ ==================================================
|
|
|
|
|
|
Detailed Interface
|
|
~~~~~~~~~~~~~~~~~~
|
|
Redefinable Options
|
|
###################
|
|
.. bro:id:: DCE_RPC::operations
|
|
|
|
:Type: :bro:type:`table` [:bro:type:`string`, :bro:type:`count`] of :bro:type:`string`
|
|
:Attributes: :bro:attr:`&redef` :bro:attr:`&default` = :bro:type:`function` :bro:attr:`&optional`
|
|
:Default:
|
|
|
|
::
|
|
|
|
{
|
|
["e1af8308-5d1f-11c9-91a4-08002b14a0fa", 8] = "ept_map_auth_async",
|
|
["12345678-1234-abcd-ef00-0123456789ab", 91] = "RpcGetSpoolFileInfo",
|
|
["342cfd40-3c6c-11ce-a893-08002b2e9c6d", 77] = "LlsrReplicationCertDbAddW",
|
|
["3919286a-b10c-11d0-9ba8-00c04fd92ef5", 10] = "DsRolerAbortDownlevelServerUpgrade",
|
|
["342cfd40-3c6c-11ce-a893-08002b2e9c6d", 88] = "LlsrLocalServiceInfoGetA",
|
|
["3c4728c5-f0ab-448b-bda1-6ce01eb0a6d6", 3] = "RpcSrvRequestParams",
|
|
["342cfd40-3c6c-11ce-a893-08002b2e9c6d", 8] = "LlsrProductAddW",
|
|
["3c4728c5-f0ab-448b-bda1-6ce01eb0a6d5", 6] = "RpcSrvFallbackRefreshParams",
|
|
["4b324fc8-1670-01d3-1278-5a47bf6ee188", 37] = "NetrShareDelStart",
|
|
["5ca4a760-ebb1-11cf-8611-00a0245420ed", 38] = "RpcServerNWLogonSetAdmin",
|
|
["12345678-1234-abcd-ef00-0123456789ab", 92] = "RpcCommitSpoolData",
|
|
["000001a0-0000-0000-c000-000000000046", 1] = "AddRefIRemoteISCMActivator",
|
|
["12345678-1234-abcd-ef00-01234567cffb", 42] = "NetrServerTrustPasswordsGet",
|
|
["12345778-1234-abcd-ef00-0123456789ac", 20] = "SamrQueryInformationGroup",
|
|
["4fc742e0-4a10-11cf-8273-00aa004ae673", 18] = "NetrDfsFlushFtTable",
|
|
["5ca4a760-ebb1-11cf-8611-00a0245420ed", 10] = "RpcWinStationConnect",
|
|
["12345778-1234-abcd-ef00-0123456789ab", 11] = "LsarEnumerateAccounts",
|
|
["45f52c28-7f9f-101a-b52b-08002b2efabe", 13] = "R_WinsGetNameAndAdd",
|
|
["12345778-1234-abcd-ef00-0123456789ab", 10] = "LsarCreateAccount",
|
|
["f5cc59b4-4264-101a-8c59-08002b2f8426", 2] = "FrsRpcStartPromotionParent",
|
|
["c386ca3e-9061-4a72-821e-498d83be188f", 12] = "AudioSessionGetState",
|
|
["12345678-1234-abcd-ef00-01234567cffb", 40] = "DsrEnumerateDomainTrusts",
|
|
["4b324fc8-1670-01d3-1278-5a47bf6ee188", 15] = "NetrShareEnum",
|
|
["00000143-0000-0000-c000-000000000046", 3] = "RemQueryInterface",
|
|
["342cfd40-3c6c-11ce-a893-08002b2e9c6d", 25] = "LlsrUserProductEnumA",
|
|
["4fc742e0-4a10-11cf-8273-00aa004ae673", 16] = "NetrDfsGetDcAddress",
|
|
["12345678-1234-abcd-ef00-0123456789ab", 44] = "RpcDeletePrinterConnection",
|
|
["8d0ffe72-d252-11d0-bf8f-00c04fd9126b", 12] = "KeyrEnroll_V2",
|
|
["8d9f4e40-a03d-11ce-8f69-08003e30051b", 12] = "PNP_GetDepth",
|
|
["5ca4a760-ebb1-11cf-8611-00a0245420ed", 55] = "RpcWinStationQueryLogonCredentials",
|
|
["12345678-1234-abcd-ef00-0123456789ab", 46] = "RpcAddMonitor",
|
|
["12345678-1234-abcd-ef00-01234567cffb", 37] = "DsrAddressToSiteNamesExW",
|
|
["12345678-1234-abcd-ef00-0123456789ab", 79] = "RpcEnumPrinterDataEx",
|
|
["342cfd40-3c6c-11ce-a893-08002b2e9c6d", 63] = "LlsrReplicationServiceAddW",
|
|
["8d9f4e40-a03d-11ce-8f69-08003e30051b", 21] = "PNP_GetInterfaceDeviceAlias",
|
|
["12345778-1234-abcd-ef00-0123456789ab", 41] = "LsarDeleteTrustedDomain",
|
|
["342cfd40-3c6c-11ce-a893-08002b2e9c6d", 19] = "LlsrUserInfoGetA",
|
|
["12345778-1234-abcd-ef00-0123456789ac", 18] = "SamrLookupIdsInDomain",
|
|
["5ca4a760-ebb1-11cf-8611-00a0245420ed", 17] = "RpcWinStationShadow",
|
|
["8d9f4e40-a03d-11ce-8f69-08003e30051b", 47] = "PNP_AddResDes",
|
|
["12345678-1234-abcd-ef00-0123456789ab", 87] = "RpcEnumPerMachineConnections",
|
|
["8d9f4e40-a03d-11ce-8f69-08003e30051b", 44] = "PNP_GetFirstLogConf",
|
|
["d95afe70-a6d5-4259-822e-2c84da1ddb0d", 1] = "WsdrAbortShutdown",
|
|
["99fcfec4-5260-101b-bbcb-00aa0021347a", 0] = "ResolveOxid",
|
|
["c386ca3e-9061-4a72-821e-498d83be188f", 4] = "AudioServerCreateStream",
|
|
["9556dc99-828c-11cf-a37e-00aa003240c7", 12] = "CreateClassEnum",
|
|
["367abb81-9844-35f1-ad32-98f038001003", 43] = "ScSendTSMessage",
|
|
["12345778-1234-abcd-ef00-0123456789ab", 83] = "LsarSetAuditPolicy",
|
|
["12345778-1234-abcd-ef00-0123456789ab", 50] = "LsarEnumerateTrustedDomainsEx",
|
|
["8d9f4e40-a03d-11ce-8f69-08003e30051b", 8] = "PNP_GetRelatedDeviceInstance",
|
|
["a4f1db00-ca47-1067-b31f-00dd010662da", 1] = "EcDoDisconnect",
|
|
["5ca4a760-ebb1-11cf-8611-00a0245420ed", 66] = "RpcConnectCallback",
|
|
["c386ca3e-9061-4a72-821e-498d83be188f", 66] = "AudioVolumeStepDown",
|
|
["367abb81-9844-35f1-ad32-98f038001003", 25] = "EnumDependentServicesA",
|
|
["12345678-1234-abcd-ef00-0123456789ab", 42] = "RpcDeletePrinterIC",
|
|
["12345678-1234-abcd-ef00-0123456789ab", 50] = "RpcDeletePrintProvidor",
|
|
["17fdd703-1827-4e34-79d4-24a55c53bb37", 2] = "NetrMessageNameGetInfo",
|
|
["f5cc5a18-4264-101a-8c59-08002b2f8426", 9] = "NspiGetProps",
|
|
["45f52c28-7f9f-101a-b52b-08002b2efabe", 12] = "R_WinsWorkerThdUpd",
|
|
["86d35949-83c9-4044-b424-db363231fd0c", 7] = "SchRpcEnumTasks",
|
|
["f50aac00-c7f3-428e-a022-a6b71bfb9d43", 5] = "SSCatDBRebuildDatabase",
|
|
["12345678-1234-abcd-ef00-01234567cffb", 8] = "NetrDatabaseSync",
|
|
["4b324fc8-1670-01d3-1278-5a47bf6ee188", 27] = "NetrServerTransportDel",
|
|
["6bffd098-a112-3610-9833-46c3f87e345a", 1] = "NetrWkstaSetInfo",
|
|
["12345778-1234-abcd-ef00-0123456789ac", 41] = "SamrGetDisplayEnumerationIndex",
|
|
["12345678-1234-abcd-ef00-0123456789ab", 20] = "RpcEndPagePrinter",
|
|
["342cfd40-3c6c-11ce-a893-08002b2e9c6d", 17] = "LlsrUserEnumA",
|
|
["c386ca3e-9061-4a72-821e-498d83be188f", 30] = "AudioServerGetMixFormat",
|
|
["83da7c00-e84f-11d2-9807-00c04f8ec850", 7] = "SfcSrv_InstallProtectedFiles",
|
|
["367abb81-9844-35f1-ad32-98f038001003", 40] = "QueryServiceStatusEx",
|
|
["12345678-1234-abcd-ef00-01234567cffb", 15] = "NetrServerAuthenticate2",
|
|
["367abb81-9844-35f1-ad32-98f038001003", 22] = "ScSetServiceBitsA",
|
|
["a4f1db00-ca47-1067-b31f-00dd010662da", 7] = "EcRGetDCName",
|
|
["8d9f4e40-a03d-11ce-8f69-08003e30051b", 32] = "PNP_DisableDevInst",
|
|
["5ca4a760-ebb1-11cf-8611-00a0245420ed", 20] = "RpcWinStationGenerateLicense",
|
|
["c386ca3e-9061-4a72-821e-498d83be188f", 26] = "AudioSessionGetChannelVolume",
|
|
["12345778-1234-abcd-ef00-0123456789ac", 33] = "SamrGetMembersInAlias",
|
|
["82273fdc-e32a-18c3-3f78-827929dc23ea", 24] = "ElfrReportEventAndSourceW",
|
|
["4b324fc8-1670-01d3-1278-5a47bf6ee188", 24] = "NetrServerStatisticsGet",
|
|
["12345778-1234-abcd-ef00-0123456789ac", 63] = "SamrUnicodeChangePasswordUser3",
|
|
["12345778-1234-abcd-ef00-0123456789ab", 30] = "LsarQuerySecret",
|
|
["50abc2a4-574d-40b3-9d66-ee4fd5fba076", 1] = "DnssrvQuery",
|
|
["2f5f3220-c126-1076-b549-074d078619da", 12] = "NDdeSetTrustedShareW",
|
|
["8d9f4e40-a03d-11ce-8f69-08003e30051b", 45] = "PNP_GetNextLogConf",
|
|
["86d35949-83c9-4044-b424-db363231fd0c", 5] = "SchRpcGetSecurity",
|
|
["d6d70ef0-0e3b-11cb-acc3-08002b1d29c4", 10] = "nsi_profile_elt_inq_next",
|
|
["12345778-1234-abcd-ef00-0123456789ac", 6] = "SamrEnumerateDomainsInSamServer",
|
|
["342cfd40-3c6c-11ce-a893-08002b2e9c6d", 87] = "LlsrLocalServiceInfoGetW",
|
|
["342cfd40-3c6c-11ce-a893-08002b2e9c6d", 80] = "LlsrCapabilityGet",
|
|
["c386ca3e-9061-4a72-821e-498d83be188f", 15] = "AudioSessionIsSystemSoundsSession",
|
|
["12345778-1234-abcd-ef00-0123456789ab", 73] = "LsarQueryForestTrustInformation",
|
|
["83da7c00-e84f-11d2-9807-00c04f8ec850", 5] = "SfcSrv_SetCacheSize",
|
|
["12345678-1234-abcd-ef00-0123456789ab", 15] = "RpcEnumPrintProcessors",
|
|
["12345678-1234-abcd-ef00-0123456789ab", 8] = "RpcGetPrinter",
|
|
["3faf4738-3a21-4307-b46c-fdda9bb8c0d5", 8] = "gfxLogoff",
|
|
["9556dc99-828c-11cf-a37e-00aa003240c7", 3] = "OpenNamespace",
|
|
["8d9f4e40-a03d-11ce-8f69-08003e30051b", 63] = "PNP_GetBlockedDriverInfo",
|
|
["12345678-1234-abcd-ef00-01234567cffb", 18] = "NetrLogonControl2Ex",
|
|
["4b324fc8-1670-01d3-1278-5a47bf6ee188", 16] = "NetrShareGetInfo",
|
|
["12345778-1234-abcd-ef00-0123456789ab", 37] = "LsarAddAccountRights",
|
|
["338cd001-2244-31f1-aaaa-900038001003", 6] = "BaseRegCreateKey",
|
|
["4fc742e0-4a10-11cf-8273-00aa004ae673", 3] = "NetrDfsSetInfo",
|
|
["8d9f4e40-a03d-11ce-8f69-08003e30051b", 9] = "PNP_EnumerateSubKeys",
|
|
["3c4728c5-f0ab-448b-bda1-6ce01eb0a6d5", 16] = "RpcSrvGetClassId",
|
|
["12345778-1234-abcd-ef00-0123456789ac", 0] = "SamrConnect",
|
|
["c386ca3e-9061-4a72-821e-498d83be188f", 58] = "AudioVolumeAddMasterVolumeNotification",
|
|
["12345778-1234-abcd-ef00-0123456789ab", 71] = "LsarGenAuditEvent",
|
|
["8d9f4e40-a03d-11ce-8f69-08003e30051b", 56] = "PNP_QueryArbitratorFreeData",
|
|
["342cfd40-3c6c-11ce-a893-08002b2e9c6d", 26] = "LlsrUserProductDeleteW",
|
|
["12345778-1234-abcd-ef00-0123456789ac", 21] = "SamrSetInformationGroup",
|
|
["367abb81-9844-35f1-ad32-98f038001003", 42] = "EnumServicesStatusExW",
|
|
["12345778-1234-abcd-ef00-0123456789ac", 61] = "SamrConnect3",
|
|
["342cfd40-3c6c-11ce-a893-08002b2e9c6d", 55] = "LlsrServiceInfoGetA",
|
|
["a4f1db00-ca47-1067-b31f-00dd010662da", 14] = "EcDoAsyncConnectEx",
|
|
["f5cc59b4-4264-101a-8c59-08002b2f8426", 4] = "FrsBackupComplete",
|
|
["12345678-1234-abcd-ef00-01234567cffb", 27] = "DsrGetDcNameEx",
|
|
["342cfd40-3c6c-11ce-a893-08002b2e9c6d", 37] = "LlsrMappingUserAddA",
|
|
["d6d70ef0-0e3b-11cb-acc3-08002b1d29c4", 0] = "nsi_group_delete",
|
|
["342cfd40-3c6c-11ce-a893-08002b2e9c6d", 51] = "LlsrLocalProductInfoGetA",
|
|
["99fcfec4-5260-101b-bbcb-00aa0021347a", 2] = "ComplexPing",
|
|
["12345678-1234-abcd-ef00-0123456789ab", 23] = "RpcEndDocPrinter",
|
|
["12345678-1234-abcd-ef00-0123456789ab", 60] = "RpcReplyClosePrinter",
|
|
["5ca4a760-ebb1-11cf-8611-00a0245420ed", 44] = "RpcWinStationGetProcessSid",
|
|
["12345778-1234-abcd-ef00-0123456789ac", 5] = "SamrLookupDomainInSamServer",
|
|
["c386ca3e-9061-4a72-821e-498d83be188f", 8] = "AudioServerIsFormatSupported",
|
|
["9556dc99-828c-11cf-a37e-00aa003240c7", 5] = "QueryObjectSink",
|
|
["76f03f96-cdfd-44fc-a22c-64950a001209", 8] = "RpcAsyncSetPrinter",
|
|
["12345778-1234-abcd-ef00-0123456789ab", 92] = "CredReadByTokenHandle",
|
|
["338cd001-2244-31f1-aaaa-900038001003", 13] = "BaseRegLoadKey",
|
|
["e3514235-4b06-11d1-ab04-00c04fc2dcd2", 12] = "DRSCrackNames",
|
|
["76f03f96-cdfd-44fc-a22c-64950a001209", 18] = "RpcAsyncSetPrinterData",
|
|
["12345778-1234-abcd-ef00-0123456789ac", 39] = "SamrGetGroupsForUser",
|
|
["e3514235-4b06-11d1-ab04-00c04fc2dcd2", 15] = "DRSRemoveDsDomain",
|
|
["76f03f96-cdfd-44fc-a22c-64950a001209", 34] = "RpcAsyncSendRecvBidiData",
|
|
["4b324fc8-1670-01d3-1278-5a47bf6ee188", 31] = "NetprPathCanonicalize",
|
|
["d6d70ef0-0e3b-11cb-acc3-08002b1d29c3", 1] = "nsi_binding_unexport",
|
|
["12345778-1234-abcd-ef00-0123456789ab", 90] = "LsarSetAuditSecurity",
|
|
["00000143-0000-0000-c000-000000000046", 5] = "RemRelease",
|
|
["12345778-1234-abcd-ef00-0123456789ab", 22] = "LsarSetQuotasForAccount",
|
|
["12345778-1234-abcd-ef00-0123456789ac", 65] = "SamrRidToSid",
|
|
["12345778-1234-abcd-ef00-0123456789ab", 0] = "LsarClose",
|
|
["338cd001-2244-31f1-aaaa-900038001003", 30] = "BaseInitiateSystemShutdownEx",
|
|
["12345778-1234-abcd-ef00-0123456789ab", 58] = "LsarLookupNames2",
|
|
["12345778-1234-abcd-ef00-0123456789ac", 8] = "SamrQueryInformationDomain",
|
|
["4b324fc8-1670-01d3-1278-5a47bf6ee188", 57] = "NetrShareDelEx",
|
|
["6bffd098-a112-3610-9833-46c3f87e345a", 31] = "NetrWorkstationResetDfsCache",
|
|
["8d9f4e40-a03d-11ce-8f69-08003e30051b", 31] = "PNP_SetDeviceProblem",
|
|
["12345678-1234-abcd-ef00-0123456789ab", 40] = "RpcCreatePrinterIC",
|
|
["12345678-1234-abcd-ef00-01234567cffb", 30] = "NetrServerPasswordSet2",
|
|
["8d9f4e40-a03d-11ce-8f69-08003e30051b", 14] = "PNP_SetDeviceRegProp",
|
|
["4b324fc8-1670-01d3-1278-5a47bf6ee188", 6] = "NetrCharDevQPurge",
|
|
["12345778-1234-abcd-ef00-0123456789ab", 54] = "LsarSetDomainInformationPolicy",
|
|
["d6d70ef0-0e3b-11cb-acc3-08002b1d29c4", 15] = "nsi_entry_expand_name",
|
|
["2f59a331-bf7d-48cb-9ec5-7c090d76e8b8", 8] = "RpcLicensingDeactivateCurrentPolicy",
|
|
["e1af8308-5d1f-11c9-91a4-08002b14a0fa", 7] = "ept_map_auth",
|
|
["4b324fc8-1670-01d3-1278-5a47bf6ee188", 35] = "NetprNameCompare",
|
|
["378e52b0-c0a9-11cf-822d-00aa0051e40f", 1] = "SASetNSAccountInformation",
|
|
["3c4728c5-f0ab-448b-bda1-6ce01eb0a6d5", 24] = "RpcSrvDeRegisterConnectionStateNotification",
|
|
["86d35949-83c9-4044-b424-db363231fd0c", 9] = "SchRpcGetInstanceInfo",
|
|
["367abb81-9844-35f1-ad32-98f038001003", 16] = "OpenServiceW",
|
|
["338cd001-2244-31f1-aaaa-900038001003", 27] = "OpenCurrentConfig",
|
|
["9556dc99-828c-11cf-a37e-00aa003240c7", 24] = "ExecMethod",
|
|
["68b58241-c259-4f03-a2e5-a2651dcbc930", 1] = "KSrGetTemplates",
|
|
["76f03f96-cdfd-44fc-a22c-64950a001209", 53] = "RpcAsyncDeletePrintProcessor",
|
|
["3c4728c5-f0ab-448b-bda1-6ce01eb0a6d5", 11] = "RpcSrvRegisterParams",
|
|
["5ca4a760-ebb1-11cf-8611-00a0245420ed", 9] = "RpcWinStationNameFromLogonId",
|
|
["76f03f96-cdfd-44fc-a22c-64950a001209", 19] = "RpcAsyncSetPrinterDataEx",
|
|
["12345678-1234-abcd-ef00-0123456789ab", 2] = "RpcSetJob",
|
|
["9556dc99-828c-11cf-a37e-00aa003240c7", 25] = "ExecMethodAsync",
|
|
["afa8bd80-7d8a-11c9-bef4-08002b102989", 2] = "is_server_listening",
|
|
["45f52c28-7f9f-101a-b52b-08002b2efabe", 8] = "R_WinsDelDbRecs",
|
|
["6bffd098-a112-3610-9833-012892020162", 3] = "BrowserrResetNetlogonState",
|
|
["342cfd40-3c6c-11ce-a893-08002b2e9c6d", 1] = "LlsrClose",
|
|
["12345678-1234-abcd-ef00-01234567cffb", 29] = "NetrLogonGetDomainInfo",
|
|
["367abb81-9844-35f1-ad32-98f038001003", 24] = "CreateServiceA",
|
|
["5ca4a760-ebb1-11cf-8611-00a0245420ed", 7] = "RpcWinStationSendMessage",
|
|
["8d0ffe72-d252-11d0-bf8f-00c04fd9126b", 10] = "KeyrEnumerateAvailableCertTypes",
|
|
["12345678-1234-abcd-ef00-0123456789ab", 59] = "RpcRouterReplyPrinter",
|
|
["8d9f4e40-a03d-11ce-8f69-08003e30051b", 57] = "PNP_QueryArbitratorFreeSize",
|
|
["378e52b0-c0a9-11cf-822d-00aa0051e40f", 0] = "SASetAccountInformation",
|
|
["12345678-1234-abcd-ef00-0123456789ab", 43] = "RpcAddPrinterConnection",
|
|
["12345678-1234-abcd-ef00-0123456789ab", 16] = "RpcGetPrintProcessorDirectory",
|
|
["4fc742e0-4a10-11cf-8273-00aa004ae673", 14] = "NetrDfsManagerInitialize",
|
|
["6bffd098-a112-3610-9833-46c3f87e345a", 11] = "NetrUseEnum",
|
|
["12345778-1234-abcd-ef00-0123456789ac", 11] = "SamrEnumerateGroupsInDomain",
|
|
["5ca4a760-ebb1-11cf-8611-00a0245420ed", 26] = "RpcWinStationSetPoolCount",
|
|
["8d9f4e40-a03d-11ce-8f69-08003e30051b", 29] = "PNP_DeviceInstanceAction",
|
|
["5ca4a760-ebb1-11cf-8611-00a0245420ed", 53] = "RpcWinStationGetLanAdapterName",
|
|
["c386ca3e-9061-4a72-821e-498d83be188f", 53] = "AudioVolumeSetChannelVolumeLevelScalar",
|
|
["50abc2a4-574d-40b3-9d66-ee4fd5fba076", 6] = "DnssrvQuery2",
|
|
["6bffd098-a112-3610-9833-012892020162", 6] = "BrowserrResetStatistics",
|
|
["3c4728c5-f0ab-448b-bda1-6ce01eb0a6d5", 22] = "RpcSrvRequestCachedParams",
|
|
["12345778-1234-abcd-ef00-0123456789ab", 15] = "LsarLookupSids",
|
|
["4fc742e0-4a10-11cf-8273-00aa004ae673", 6] = "NetrDfsRename",
|
|
["6bffd098-a112-3610-9833-46c3f87e345a", 15] = "NetrLogonDomainNameDel",
|
|
["12345678-1234-abcd-ef00-0123456789ab", 0] = "RpcEnumPrinters",
|
|
["50abc2a4-574d-40b3-9d66-ee4fd5fba076", 9] = "DnssrvUpdateRecord2",
|
|
["4fc742e0-4a10-11cf-8273-00aa004ae673", 12] = "NetrDfsAddStdRoot",
|
|
["5ca4a760-ebb1-11cf-8611-00a0245420ed", 0] = "RpcWinStationOpenServer",
|
|
["76f03f96-cdfd-44fc-a22c-64950a001209", 1] = "RpcAsyncAddPrinter",
|
|
["a4f1db00-ca47-1067-b31f-00dd010662da", 13] = "EcUnknown0xD",
|
|
["367abb81-9844-35f1-ad32-98f038001003", 32] = "GetServiceDisplayNameA",
|
|
["76f03f96-cdfd-44fc-a22c-64950a001209", 37] = "RpcAsyncDeletePrinterIC",
|
|
["c386ca3e-9061-4a72-821e-498d83be188f", 16] = "AudioSessionGetDisplayName",
|
|
["342cfd40-3c6c-11ce-a893-08002b2e9c6d", 76] = "LlsrCertificateClaimAddW",
|
|
["d6d70ef0-0e3b-11cb-acc3-08002b1d29c3", 0] = "nsi_binding_export",
|
|
["342cfd40-3c6c-11ce-a893-08002b2e9c6d", 22] = "LlsrUserDeleteW",
|
|
["894de0c0-0d55-11d3-a322-00c04fa321a1", 0] = "BaseInitiateShutdown",
|
|
["83da7c00-e84f-11d2-9807-00c04f8ec850", 6] = "SfcSrv_SetDisable",
|
|
["12345678-1234-abcd-ef00-01234567cffb", 39] = "NetrLogonSamLogonEx",
|
|
["338cd001-2244-31f1-aaaa-900038001003", 23] = "BaseRegUnLoadKey",
|
|
["12345678-1234-abcd-ef00-0123456789ab", 30] = "RpcAddForm",
|
|
["c386ca3e-9061-4a72-821e-498d83be188f", 5] = "AudioServerDestroyStream",
|
|
["76f03f96-cdfd-44fc-a22c-64950a001209", 35] = "RpcAsyncCreatePrinterIC",
|
|
["342cfd40-3c6c-11ce-a893-08002b2e9c6d", 65] = "LlsrProductSecurityGetW",
|
|
["c386ca3e-9061-4a72-821e-498d83be188f", 57] = "AudioSessionGetDisplayName",
|
|
["76f03f96-cdfd-44fc-a22c-64950a001209", 67] = "RpcAsyncDeletePrinterDriverPackage",
|
|
["f50aac00-c7f3-428e-a022-a6b71bfb9d43", 0] = "SSCatDBAddCatalog",
|
|
["367abb81-9844-35f1-ad32-98f038001003", 52] = "ScSendPnPMessage",
|
|
["76f03f96-cdfd-44fc-a22c-64950a001209", 64] = "RpcAsyncGetCorePrinterDrivers",
|
|
["12345678-1234-abcd-ef00-0123456789ab", 100] = "RpcUploadPrinterDriverPackage",
|
|
["12345778-1234-abcd-ef00-0123456789ab", 25] = "LsarOpenTrustedDomain",
|
|
["5ca4a760-ebb1-11cf-8611-00a0245420ed", 73] = "RpcWinStationAutoReconnect",
|
|
["12345678-1234-abcd-ef00-0123456789ab", 3] = "RpcGetJob",
|
|
["12345778-1234-abcd-ef00-0123456789ab", 67] = "CredrProfileLoaded",
|
|
["76f03f96-cdfd-44fc-a22c-64950a001209", 39] = "RpcAsyncAddPrinterDriver",
|
|
["4b324fc8-1670-01d3-1278-5a47bf6ee188", 30] = "NetprPathType",
|
|
["342cfd40-3c6c-11ce-a893-08002b2e9c6d", 10] = "LlsrProductUserEnumW",
|
|
["342cfd40-3c6c-11ce-a893-08002b2e9c6d", 33] = "LlsrMappingInfoSetA",
|
|
["12345778-1234-abcd-ef00-0123456789ab", 93] = "CredrRestoreCredentials",
|
|
["76f03f96-cdfd-44fc-a22c-64950a001209", 44] = "RpcAsyncAddPrintProcessor",
|
|
["5ca4a760-ebb1-11cf-8611-00a0245420ed", 2] = "RpcIcaServerPing",
|
|
["342cfd40-3c6c-11ce-a893-08002b2e9c6d", 38] = "LlsrMappingUserDeleteW",
|
|
["338cd001-2244-31f1-aaaa-900038001003", 16] = "BaseRegQueryInfoKey",
|
|
["342cfd40-3c6c-11ce-a893-08002b2e9c6d", 52] = "LlsrLocalProductInfoSetW",
|
|
["342cfd40-3c6c-11ce-a893-08002b2e9c6d", 71] = "LlsrCertificateClaimEnumA",
|
|
["2f5f3220-c126-1076-b549-074d078619da", 18] = "NDdeSpecialCommand",
|
|
["367abb81-9844-35f1-ad32-98f038001003", 28] = "OpenServiceA",
|
|
["4b324fc8-1670-01d3-1278-5a47bf6ee188", 53] = "NetrServerTransportDelEx",
|
|
["c386ca3e-9061-4a72-821e-498d83be188f", 32] = "PolicyConfigSetDeviceFormat",
|
|
["342cfd40-3c6c-11ce-a893-08002b2e9c6d", 29] = "LlsrMappingEnumA",
|
|
["c386ca3e-9061-4a72-821e-498d83be188f", 31] = "PolicyConfigGetDeviceFormat",
|
|
["8d9f4e40-a03d-11ce-8f69-08003e30051b", 71] = "PNP_DriverStoreDeleteDriverPackage",
|
|
["338cd001-2244-31f1-aaaa-900038001003", 8] = "BaseRegDeleteValue",
|
|
["12345678-1234-abcd-ef00-01234567cffb", 3] = "NetrLogonSamLogoff",
|
|
["d6d70ef0-0e3b-11cb-acc3-08002b1d29c4", 3] = "nsi_group_mbr_inq_begin",
|
|
["342cfd40-3c6c-11ce-a893-08002b2e9c6d", 79] = "LlsrReplicationUserAddExW",
|
|
["342cfd40-3c6c-11ce-a893-08002b2e9c6d", 86] = "LlsrLocalServiceInfoSetA",
|
|
["12345678-1234-abcd-ef00-0123456789ab", 27] = "RpcSetPrinterData",
|
|
["50abc2a4-574d-40b3-9d66-ee4fd5fba076", 8] = "DnssrvEnumRecords2",
|
|
["3c4728c5-f0ab-448b-bda1-6ce01eb0a6d5", 17] = "RpcSrvSetClientId",
|
|
["12345778-1234-abcd-ef00-0123456789ab", 62] = "CredrEnumerate",
|
|
["342cfd40-3c6c-11ce-a893-08002b2e9c6d", 69] = "LlsrProductLicensesGetA",
|
|
["342cfd40-3c6c-11ce-a893-08002b2e9c6d", 18] = "LlsrUserInfoGetW",
|
|
["45f52c28-7f9f-101a-b52b-08002b2efabe", 14] = "R_WinsGetBrowserNames_Old",
|
|
["12345678-1234-abcd-ef00-0123456789ab", 67] = "RpcRouterRefreshPrinterChangeNotification",
|
|
["12345678-1234-abcd-ef00-0123456789ab", 6] = "RpcDeletePrinter",
|
|
["5ca4a760-ebb1-11cf-8611-00a0245420ed", 61] = "RpcWinStationIsHelpAssistantSession",
|
|
["12345778-1234-abcd-ef00-0123456789ab", 44] = "LsarOpenPolicy2",
|
|
["367abb81-9844-35f1-ad32-98f038001003", 3] = "LockServiceDatabase",
|
|
["4b324fc8-1670-01d3-1278-5a47bf6ee188", 38] = "NetrShareDelCommit",
|
|
["8d9f4e40-a03d-11ce-8f69-08003e30051b", 46] = "PNP_GetLogConfPriority",
|
|
["12345678-1234-abcd-ef00-0123456789ab", 56] = "RpcFindClosePrinterChangeNotification",
|
|
["367abb81-9844-35f1-ad32-98f038001003", 54] = "ScOpenServiceStatusHandle",
|
|
["338cd001-2244-31f1-aaaa-900038001003", 26] = "BaseRegGetVersion",
|
|
["82273fdc-e32a-18c3-3f78-827929dc23ea", 12] = "ElfrClearELFA",
|
|
["6bffd098-a112-3610-9833-46c3f87e345a", 24] = "NetrRenameMachineInDomain2",
|
|
["12345778-1234-abcd-ef00-0123456789ab", 5] = "LsarChangePassword",
|
|
["12345678-1234-abcd-ef00-01234567cffb", 10] = "NetrAccountSync",
|
|
["9556dc99-828c-11cf-a37e-00aa003240c7", 18] = "CreateInstanceEnum",
|
|
["342cfd40-3c6c-11ce-a893-08002b2e9c6d", 42] = "LlsrMappingDeleteW",
|
|
["f50aac00-c7f3-428e-a022-a6b71bfb9d43", 3] = "SSCatDBRegisterForChangeNotification",
|
|
["12b81e99-f207-4a4c-85d3-77b42f76fd14", 0] = "SeclCreateProcessWithLogonW",
|
|
["2f5f3220-c126-1076-b549-074d078619da", 4] = "NDdeGetShareSecurityW",
|
|
["12345678-1234-abcd-ef00-01234567cffb", 36] = "NetrEnumerateTrustedDomainsEx",
|
|
["4fc742e0-4a10-11cf-8273-00aa004ae673", 19] = "NetrDfsAdd2",
|
|
["45f52c28-7f9f-101a-b52b-08002b2efabe", 3] = "R_WinsDoStaticInit",
|
|
["338cd001-2244-31f1-aaaa-900038001003", 3] = "OpenPerformanceData",
|
|
["5ca4a760-ebb1-11cf-8611-00a0245420ed", 52] = "RpcServerQueryInetConnectorInformation",
|
|
["12345678-1234-abcd-ef00-01234567cffb", 13] = "NetrGetAnyDCName",
|
|
["3919286a-b10c-11d0-9ba8-00c04fd92ef5", 8] = "DsRolerServerSaveStateForUpgrade",
|
|
["82273fdc-e32a-18c3-3f78-827929dc23ea", 9] = "ElfrOpenBELW",
|
|
["338cd001-2244-31f1-aaaa-900038001003", 34] = "BaseRegQueryMultipleValues2",
|
|
["8d9f4e40-a03d-11ce-8f69-08003e30051b", 58] = "PNP_RunDetection",
|
|
["367abb81-9844-35f1-ad32-98f038001003", 11] = "ChangeServiceConfigW",
|
|
["12345778-1234-abcd-ef00-0123456789ac", 1] = "SamrCloseHandle",
|
|
["8d9f4e40-a03d-11ce-8f69-08003e30051b", 41] = "PNP_GetHwProfInfo",
|
|
["8d9f4e40-a03d-11ce-8f69-08003e30051b", 40] = "PNP_HwProfFlags",
|
|
["4b324fc8-1670-01d3-1278-5a47bf6ee188", 12] = "NetrSessionEnum",
|
|
["000001a0-0000-0000-c000-000000000046", 3] = "RemoteGetClassObject",
|
|
["5ca4a760-ebb1-11cf-8611-00a0245420ed", 28] = "RpcWinStationCallback",
|
|
["342cfd40-3c6c-11ce-a893-08002b2e9c6d", 5] = "LlsrLicenseAddA",
|
|
["17fdd703-1827-4e34-79d4-24a55c53bb37", 3] = "NetrMessageNameDel",
|
|
["12345678-1234-abcd-ef00-0123456789ab", 22] = "RpcReadPrinter",
|
|
["e3514235-4b06-11d1-ab04-00c04fc2dcd2", 18] = "DRSExecuteKCC",
|
|
["12345778-1234-abcd-ef00-0123456789ab", 87] = "LsarEnumerateAuditSubCategories",
|
|
["76f03f96-cdfd-44fc-a22c-64950a001209", 33] = "RpcAsyncXcvData",
|
|
["c386ca3e-9061-4a72-821e-498d83be188f", 21] = "AudioSessionSetVolume",
|
|
["367abb81-9844-35f1-ad32-98f038001003", 44] = "CreateServiceWOW64A",
|
|
["82273fdc-e32a-18c3-3f78-827929dc23ea", 2] = "ElfrCloseEL",
|
|
["12345678-1234-abcd-ef00-01234567cffb", 24] = "NetrLogonComputeServerDigest",
|
|
["5ca4a760-ebb1-11cf-8611-00a0245420ed", 40] = "RpcWinStationNtsdDebug",
|
|
["12345678-1234-abcd-ef00-01234567cffb", 35] = "NetrLogonGetTimeServiceParentDomain",
|
|
["c386ca3e-9061-4a72-821e-498d83be188f", 27] = "AudioSessionSetAllVolumes",
|
|
["12345778-1234-abcd-ef00-0123456789ab", 94] = "CredrBackupCredentials",
|
|
["6bffd098-a112-3610-9833-46c3f87e345a", 29] = "NetrSetPrimaryComputerName",
|
|
["367abb81-9844-35f1-ad32-98f038001003", 48] = "GetNotifyResult",
|
|
["83da7c00-e84f-11d2-9807-00c04f8ec850", 0] = "SfcSrv_GetNextProtectedFile",
|
|
["68b58241-c259-4f03-a2e5-a2651dcbc930", 0] = "KSrSubmitRequest",
|
|
["342cfd40-3c6c-11ce-a893-08002b2e9c6d", 70] = "LlsrProductLicensesGetW",
|
|
["12345778-1234-abcd-ef00-0123456789ab", 14] = "LsarLookupNames",
|
|
["82273fdc-e32a-18c3-3f78-827929dc23ea", 1] = "ElfrBackupELFW",
|
|
["12345778-1234-abcd-ef00-0123456789ac", 54] = "SamrOemChangePasswordUser2",
|
|
["342cfd40-3c6c-11ce-a893-08002b2e9c6d", 2] = "LlsrLicenseEnumW",
|
|
["342cfd40-3c6c-11ce-a893-08002b2e9c6d", 44] = "LlsrServerEnumW",
|
|
["8d0ffe72-d252-11d0-bf8f-00c04fd9126b", 9] = "KeyrImportCert",
|
|
["91ae6020-9e3c-11cf-8d7c-00aa00c091be", 0] = "CertServerRequest",
|
|
["4b324fc8-1670-01d3-1278-5a47bf6ee188", 45] = "NetrDfsDeleteLocalPartition",
|
|
["c386ca3e-9061-4a72-821e-498d83be188f", 45] = "AudioVolumeConnect",
|
|
["5ca4a760-ebb1-11cf-8611-00a0245420ed", 21] = "RpcWinStationInstallLicense",
|
|
["c386ca3e-9061-4a72-821e-498d83be188f", 43] = "AudioSessionManagerDeleteAudioSessionClientNotification",
|
|
["12345678-1234-abcd-ef00-0123456789ab", 47] = "RpcDeleteMonitor",
|
|
["8d9f4e40-a03d-11ce-8f69-08003e30051b", 70] = "PNP_DriverStoreAddDriverPackage",
|
|
["2f59a331-bf7d-48cb-9ec5-7c090d76e8b8", 5] = "RpcLicensingGetAvailablePolicyIds",
|
|
["f5cc59b4-4264-101a-8c59-08002b2f8426", 9] = "FrsBackupComplete",
|
|
["8d9f4e40-a03d-11ce-8f69-08003e30051b", 39] = "PNP_RequestEjectPC",
|
|
["6bffd098-a112-3610-9833-46c3f87e345a", 19] = "NetrRenameMachineInDomain",
|
|
["12345678-1234-abcd-ef00-01234567cffb", 20] = "DsrGetDcName",
|
|
["5ca4a760-ebb1-11cf-8611-00a0245420ed", 18] = "RpcWinStationShadowTargetSetup",
|
|
["1ff70682-0a51-30e8-076d-740be8cee98b", 3] = "NetrJobGetInfo",
|
|
["82273fdc-e32a-18c3-3f78-827929dc23ea", 11] = "ElfrReportEventW",
|
|
["12345678-1234-abcd-ef00-0123456789ab", 39] = "RpcDeletePort",
|
|
["12345778-1234-abcd-ef00-0123456789ac", 29] = "SamrSetInformationAlias",
|
|
["86d35949-83c9-4044-b424-db363231fd0c", 6] = "SchRpcEnumFolder",
|
|
["76f03f96-cdfd-44fc-a22c-64950a001209", 43] = "RpcAsyncDeletePrinterDriverEx",
|
|
["342cfd40-3c6c-11ce-a893-08002b2e9c6d", 9] = "LlsrProductAddA",
|
|
["342cfd40-3c6c-11ce-a893-08002b2e9c6d", 28] = "LlsrMappingEnumW",
|
|
["12345778-1234-abcd-ef00-0123456789ab", 12] = "LsarCreateTrustedDomain",
|
|
["12345778-1234-abcd-ef00-0123456789ac", 3] = "SamrQuerySecurityObject",
|
|
["342cfd40-3c6c-11ce-a893-08002b2e9c6d", 14] = "LlsrProductLicenseEnumW",
|
|
["12345778-1234-abcd-ef00-0123456789ab", 66] = "CredrGetTargetInfo",
|
|
["5ca4a760-ebb1-11cf-8611-00a0245420ed", 29] = "RpcWinStationGetApplicationInfo",
|
|
["76f03f96-cdfd-44fc-a22c-64950a001209", 24] = "RpcAsyncSetForm",
|
|
["c386ca3e-9061-4a72-821e-498d83be188f", 22] = "AudioSessionGetMute",
|
|
["45f52c28-7f9f-101a-b52b-08002b2efabe", 0] = "R_WinsRecordAction",
|
|
["6bffd098-a112-3610-9833-012892020162", 7] = "NetrBrowserStatisticsClear",
|
|
["82273fdc-e32a-18c3-3f78-827929dc23ea", 0] = "ElfrClearELFW",
|
|
["12345778-1234-abcd-ef00-0123456789ab", 45] = "LsarGetUserName",
|
|
["8d9f4e40-a03d-11ce-8f69-08003e30051b", 30] = "PNP_GetDeviceStatus",
|
|
["2f59a331-bf7d-48cb-9ec5-7c090d76e8b8", 6] = "RpcLicensingGetPolicy",
|
|
["12345778-1234-abcd-ef00-0123456789ab", 19] = "LsarAddPrivilegesToAccount",
|
|
["4b324fc8-1670-01d3-1278-5a47bf6ee188", 41] = "NetrServerTransportAddEx",
|
|
["12345778-1234-abcd-ef00-0123456789ab", 51] = "LsarCreateTrustedDomainEx",
|
|
["8d0ffe72-d252-11d0-bf8f-00c04fd9126b", 1] = "KeyrEnumerateProviders",
|
|
["f5cc59b4-4264-101a-8c59-08002b2f8426", 10] = "FrsRpcVerifyPromotionParentEx",
|
|
["5ca4a760-ebb1-11cf-8611-00a0245420ed", 41] = "RpcWinStationBreakPoint",
|
|
["8d9f4e40-a03d-11ce-8f69-08003e30051b", 15] = "PNP_GetClassInstance",
|
|
["8d9f4e40-a03d-11ce-8f69-08003e30051b", 50] = "PNP_GetResDesData",
|
|
["8d9f4e40-a03d-11ce-8f69-08003e30051b", 10] = "PNP_GetDeviceList",
|
|
["12345778-1234-abcd-ef00-0123456789ac", 37] = "SamrSetInformationUser",
|
|
["3c4728c5-f0ab-448b-bda1-6ce01eb0a6d5", 19] = "RpcSrvNotifyMediaReconnected",
|
|
["338cd001-2244-31f1-aaaa-900038001003", 29] = "BaseRegQueryMultipleValues",
|
|
["86d35949-83c9-4044-b424-db363231fd0c", 4] = "SchRpcSetSecurity",
|
|
["12345778-1234-abcd-ef00-0123456789ab", 39] = "LsarQueryTrustedDomainInfo",
|
|
["12345678-1234-abcd-ef00-01234567cffb", 1] = "NetrLogonUasLogoff",
|
|
["5ca4a760-ebb1-11cf-8611-00a0245420ed", 75] = "RpcWinStationOpenSessionDirectory",
|
|
["afa8bd80-7d8a-11c9-bef4-08002b102989", 1] = "inq_stats",
|
|
["8d9f4e40-a03d-11ce-8f69-08003e30051b", 26] = "PNP_GetClassRegProp",
|
|
["8d9f4e40-a03d-11ce-8f69-08003e30051b", 19] = "PNP_GetClassName",
|
|
["6bffd098-a112-3610-9833-46c3f87e345a", 9] = "NetrUseGetInfo",
|
|
["e3514235-4b06-11d1-ab04-00c04fc2dcd2", 7] = "DRSReplicaModify",
|
|
["5ca4a760-ebb1-11cf-8611-00a0245420ed", 33] = "RpcWinStationNotifyLogoff",
|
|
["5ca4a760-ebb1-11cf-8611-00a0245420ed", 58] = "RpcWinStationUpdateSettings",
|
|
["12345778-1234-abcd-ef00-0123456789ab", 49] = "LsarSetTrustedDomainInfoByName",
|
|
["00000143-0000-0000-c000-000000000046", 1] = "AddRef",
|
|
["6bffd098-a112-3610-9833-012892020162", 11] = "BrowserrServerEnumEx",
|
|
["342cfd40-3c6c-11ce-a893-08002b2e9c6d", 84] = "LlsrLocalServiceAddW",
|
|
["f5cc59b4-4264-101a-8c59-08002b2f8426", 6] = "FrsBackupComplete",
|
|
["4b324fc8-1670-01d3-1278-5a47bf6ee188", 32] = "NetprPathCompare",
|
|
["12345678-1234-abcd-ef00-0123456789ab", 65] = "RpcRemoteFindFirstPrinterChangeNotificationEx",
|
|
["8d9f4e40-a03d-11ce-8f69-08003e30051b", 69] = "PNP_ApplyPowerSettings",
|
|
["12345778-1234-abcd-ef00-0123456789ab", 85] = "LsarEnumerateAuditPolicy",
|
|
["f5cc5a18-4264-101a-8c59-08002b2f8426", 6] = "NspiResortRestriction",
|
|
["e3514235-4b06-11d1-ab04-00c04fc2dcd2", 5] = "DRSReplicaAdd",
|
|
["afa8bd80-7d8a-11c9-bef4-08002b102989", 4] = "inq_princ_name",
|
|
["12345678-1234-abcd-ef00-0123456789ab", 36] = "RpcEnumMonitors",
|
|
["f5cc59b4-4264-101a-8c59-08002b2f8426", 1] = "FrsRpcVerifyPromotionParent",
|
|
["5ca4a760-ebb1-11cf-8611-00a0245420ed", 32] = "RpcWinStationNotifyLogon",
|
|
["12345678-1234-abcd-ef00-0123456789ab", 1] = "RpcOpenPrinter",
|
|
["342cfd40-3c6c-11ce-a893-08002b2e9c6d", 67] = "LlsrProductSecuritySetW",
|
|
["3c4728c5-f0ab-448b-bda1-6ce01eb0a6d5", 10] = "RpcSrvPersistentRequestParams",
|
|
["f309ad18-d86a-11d0-a075-00c04fb68820", 4] = "RequestChallenge",
|
|
["c386ca3e-9061-4a72-821e-498d83be188f", 29] = "AudioServerDisconnect",
|
|
["c386ca3e-9061-4a72-821e-498d83be188f", 34] = "PolicyConfigSetProcessingPeriod",
|
|
["342cfd40-3c6c-11ce-a893-08002b2e9c6d", 13] = "LlsrProductServerEnumA",
|
|
["d6d70ef0-0e3b-11cb-acc3-08002b1d29c4", 6] = "nsi_profile_delete",
|
|
["8d9f4e40-a03d-11ce-8f69-08003e30051b", 2] = "PNP_GetVersion",
|
|
["5ca4a760-ebb1-11cf-8611-00a0245420ed", 68] = "RpcWinStationSessionInitialized",
|
|
["12345678-1234-abcd-ef00-0123456789ab", 95] = "RpcSendRecvBidiData",
|
|
["76f03f96-cdfd-44fc-a22c-64950a001209", 27] = "RpcAsyncEnumPrinterData",
|
|
["c386ca3e-9061-4a72-821e-498d83be188f", 18] = "AudioSessionGetSessionClass",
|
|
["8d9f4e40-a03d-11ce-8f69-08003e30051b", 16] = "PNP_CreateKey",
|
|
["342cfd40-3c6c-11ce-a893-08002b2e9c6d", 12] = "LlsrProductServerEnumW",
|
|
["8d9f4e40-a03d-11ce-8f69-08003e30051b", 33] = "PNP_UninstallDevInst",
|
|
["76f03f96-cdfd-44fc-a22c-64950a001209", 72] = "RpcAsyncDeleteJobNamedProperty",
|
|
["338cd001-2244-31f1-aaaa-900038001003", 9] = "BaseRegEnumKey",
|
|
["8d9f4e40-a03d-11ce-8f69-08003e30051b", 43] = "PNP_FreeLogConf",
|
|
["4b324fc8-1670-01d3-1278-5a47bf6ee188", 19] = "NetrShareDelSticky",
|
|
["367abb81-9844-35f1-ad32-98f038001003", 23] = "ChangeServiceConfigA",
|
|
["12345778-1234-abcd-ef00-0123456789ac", 24] = "SamrRemoveMemberFromGroup",
|
|
["2f5f3220-c126-1076-b549-074d078619da", 6] = "NDdeSetShareSecurityW",
|
|
["45f52c28-7f9f-101a-b52b-08002b2efabe", 1] = "R_WinsStatus",
|
|
["6bffd098-a112-3610-9833-012892020162", 10] = "BrowserrQueryEmulatedDomains",
|
|
["5ca4a760-ebb1-11cf-8611-00a0245420ed", 34] = "RpcWinStationEnumerateProcesses",
|
|
["76f03f96-cdfd-44fc-a22c-64950a001209", 11] = "RpcAsyncStartPagePrinter",
|
|
["76f03f96-cdfd-44fc-a22c-64950a001209", 69] = "RpcAsyncResetPrinter",
|
|
["367abb81-9844-35f1-ad32-98f038001003", 0] = "CloseServiceHandle",
|
|
["d6d70ef0-0e3b-11cb-acc3-08002b1d29c4", 14] = "nsi_entry_object_inq_done",
|
|
["12345778-1234-abcd-ef00-0123456789ac", 55] = "SamrUnicodeChangePasswordUser2",
|
|
["76f03f96-cdfd-44fc-a22c-64950a001209", 46] = "RpcAsyncGetPrintProcessorDirectory",
|
|
["c386ca3e-9061-4a72-821e-498d83be188f", 49] = "AudioVolumeSetMasterVolumeLevelScalar",
|
|
["338cd001-2244-31f1-aaaa-900038001003", 33] = "OpenPerformanceNlsText",
|
|
["367abb81-9844-35f1-ad32-98f038001003", 7] = "SetServiceStatus",
|
|
["c386ca3e-9061-4a72-821e-498d83be188f", 52] = "AudioVolumeSetChannelVolumeLevel",
|
|
["57674cd0-5200-11ce-a897-08002b2e9c6d", 1] = "LlsrLicenseFree",
|
|
["17fdd703-1827-4e34-79d4-24a55c53bb37", 1] = "NetrMessageNameEnum",
|
|
["12345678-1234-abcd-ef00-01234567cffb", 44] = "NetrGetForestTrustInformation",
|
|
["12345678-1234-abcd-ef00-0123456789ab", 25] = "RpcScheduleJob",
|
|
["3faf4738-3a21-4307-b46c-fdda9bb8c0d5", 11] = "winmmSessionConnectState",
|
|
["12345778-1234-abcd-ef00-0123456789ab", 88] = "LsarLookupAuditCategoryName",
|
|
["12345678-1234-abcd-ef00-0123456789ab", 75] = "RpcClusterSplClose",
|
|
["82273fdc-e32a-18c3-3f78-827929dc23ea", 18] = "ElfrReportEventA",
|
|
["a4f1db00-ca47-1067-b31f-00dd010662da", 2] = "EcDoRpc",
|
|
["82273fdc-e32a-18c3-3f78-827929dc23ea", 16] = "ElfrOpenBELA",
|
|
["3919286a-b10c-11d0-9ba8-00c04fd92ef5", 0] = "DsRolerGetPrimaryDomainInformation",
|
|
["8d9f4e40-a03d-11ce-8f69-08003e30051b", 18] = "PNP_GetClassCount",
|
|
["342cfd40-3c6c-11ce-a893-08002b2e9c6d", 21] = "LlsrUserInfoSetA",
|
|
["4b324fc8-1670-01d3-1278-5a47bf6ee188", 17] = "NetrShareSetInfo",
|
|
["83da7c00-e84f-11d2-9807-00c04f8ec850", 1] = "SfcSrv_IsFileProtected",
|
|
["76f03f96-cdfd-44fc-a22c-64950a001209", 71] = "RpcAsyncSetJobNamedProperty",
|
|
["8d9f4e40-a03d-11ce-8f69-08003e30051b", 4] = "PNP_InitDetection",
|
|
["5ca4a760-ebb1-11cf-8611-00a0245420ed", 63] = "RpcWinStationUpdateClientCachedCredentials",
|
|
["3919286a-b10c-11d0-9ba8-00c04fd92ef5", 4] = "DsRolerDemoteDc",
|
|
["50abc2a4-574d-40b3-9d66-ee4fd5fba076", 0] = "DnssrvOperation",
|
|
["4b324fc8-1670-01d3-1278-5a47bf6ee188", 23] = "NetrServerDiskEnum",
|
|
["342cfd40-3c6c-11ce-a893-08002b2e9c6d", 49] = "LlsrLocalProductEnumA",
|
|
["342cfd40-3c6c-11ce-a893-08002b2e9c6d", 31] = "LlsrMappingInfoGetA",
|
|
["3dde7c30-165d-11d1-ab8f-00805f14db40", 0] = "bkrp_BackupKey",
|
|
["a4f1db00-ca47-1067-b31f-00dd010662da", 4] = "EcRRegisterPushNotification",
|
|
["76f03f96-cdfd-44fc-a22c-64950a001209", 61] = "RpcAsyncGetRemoteNotifications",
|
|
["57674cd0-5200-11ce-a897-08002b2e9c6d", 0] = "LlsrLicenseRequestW",
|
|
["342cfd40-3c6c-11ce-a893-08002b2e9c6d", 83] = "LlsrLocalServiceAddA",
|
|
["e3514235-4b06-11d1-ab04-00c04fc2dcd2", 10] = "DRSInterDomainMove",
|
|
["c386ca3e-9061-4a72-821e-498d83be188f", 59] = "AudioVolumeDeleteMasterVolumeNotification",
|
|
["4b324fc8-1670-01d3-1278-5a47bf6ee188", 1] = "NetrCharDevGetInfo",
|
|
["0a74ef1c-41a4-4e06-83ae-dc74fb1cdd53", 1] = "ItSrvUnregisterIdleTask",
|
|
["000001a0-0000-0000-c000-000000000046", 2] = "ReleaseIRemoteISCMActivator",
|
|
["12345678-1234-abcd-ef00-01234567cffb", 41] = "DsrDeregisterDnsHostRecords",
|
|
["12345778-1234-abcd-ef00-0123456789ab", 33] = "LsarLookupPrivilegeDisplayName",
|
|
["76f03f96-cdfd-44fc-a22c-64950a001209", 36] = "RpcAsyncPlayGdiScriptOnPrinterIC",
|
|
["5ca4a760-ebb1-11cf-8611-00a0245420ed", 39] = "RpcServerNWLogonQueryAdmin",
|
|
["c386ca3e-9061-4a72-821e-498d83be188f", 55] = "AudioVolumeGetChannelVolumeLevelScalar",
|
|
["12345678-1234-abcd-ef00-0123456789ab", 96] = "RpcAddDriverCatalog",
|
|
["9556dc99-828c-11cf-a37e-00aa003240c7", 4] = "CancelAsyncCall",
|
|
["76f03f96-cdfd-44fc-a22c-64950a001209", 63] = "RpcAsyncUploadPrinterDriverPackage",
|
|
["12345678-1234-abcd-ef00-0123456789ab", 97] = "RpcAddPrinterConnection2",
|
|
["8d9f4e40-a03d-11ce-8f69-08003e30051b", 11] = "PNP_GetDeviceListSize",
|
|
["76f03f96-cdfd-44fc-a22c-64950a001209", 65] = "RpcAsyncCorePrinterDriverInstalled",
|
|
["8d9f4e40-a03d-11ce-8f69-08003e30051b", 25] = "PNP_UnregisterDeviceClassAssociation",
|
|
["c386ca3e-9061-4a72-821e-498d83be188f", 3] = "AudioServerGetAudioSession",
|
|
["12345778-1234-abcd-ef00-0123456789ac", 27] = "SamrOpenAlias",
|
|
["d3fbb514-0e3b-11cb-8fad-08002b1d29c3", 0] = "nsi_binding_lookup_begin",
|
|
["12345678-1234-abcd-ef00-0123456789ab", 9] = "RpcAddPrinterDriver",
|
|
["367abb81-9844-35f1-ad32-98f038001003", 41] = "EnumServicesStatusExA",
|
|
["2f5f3220-c126-1076-b549-074d078619da", 5] = "NDdeSetShareSecurityA",
|
|
["6bffd098-a112-3610-9833-46c3f87e345a", 22] = "NetrJoinDomain2",
|
|
["12345778-1234-abcd-ef00-0123456789ac", 59] = "SamrSetBootKeyInformation",
|
|
["12345778-1234-abcd-ef00-0123456789ac", 45] = "SamrRemoveMemberFromForeignDomain",
|
|
["4fc742e0-4a10-11cf-8273-00aa004ae673", 9] = "NetrDfsManagerSendSiteInfo",
|
|
["367abb81-9844-35f1-ad32-98f038001003", 45] = "CreateServiceWOW64W",
|
|
["12345678-1234-abcd-ef00-01234567cffb", 21] = "NetrLogonGetCapabilities",
|
|
["12345778-1234-abcd-ef00-0123456789ab", 81] = "LsarAdtReportSecurityEvent",
|
|
["12345678-1234-abcd-ef00-0123456789ab", 71] = "RpcSetPort",
|
|
["5ca4a760-ebb1-11cf-8611-00a0245420ed", 13] = "RpcWinStationDisconnect",
|
|
["342cfd40-3c6c-11ce-a893-08002b2e9c6d", 23] = "LlsrUserDeleteA",
|
|
["12345778-1234-abcd-ef00-0123456789ac", 7] = "SamrOpenDomain",
|
|
["c386ca3e-9061-4a72-821e-498d83be188f", 25] = "AudioSessionSetChannelVolume",
|
|
["338cd001-2244-31f1-aaaa-900038001003", 28] = "OpenDynData",
|
|
["82273fdc-e32a-18c3-3f78-827929dc23ea", 17] = "ElfrReadELA",
|
|
["367abb81-9844-35f1-ad32-98f038001003", 2] = "DeleteService",
|
|
["8d9f4e40-a03d-11ce-8f69-08003e30051b", 55] = "PNP_SetHwProf",
|
|
["d6d70ef0-0e3b-11cb-acc3-08002b1d29c4", 2] = "nsi_group_mbr_remove",
|
|
["5ca4a760-ebb1-11cf-8611-00a0245420ed", 22] = "RpcWinStationEnumerateLicenses",
|
|
["8d9f4e40-a03d-11ce-8f69-08003e30051b", 72] = "PNP_RegisterServiceNotification",
|
|
["12345678-1234-abcd-ef00-0123456789ab", 32] = "RpcGetForm",
|
|
["8d9f4e40-a03d-11ce-8f69-08003e30051b", 42] = "PNP_AddEmptyLogConf",
|
|
["6bffd098-a112-3610-9833-46c3f87e345a", 4] = "NetrWkstaUserSetInfo",
|
|
["342cfd40-3c6c-11ce-a893-08002b2e9c6d", 3] = "LlsrLicenseEnumA",
|
|
["86d35949-83c9-4044-b424-db363231fd0c", 17] = "SchRpcGetTaskInfo",
|
|
["a4f1db00-ca47-1067-b31f-00dd010662da", 3] = "EcGetMoreRpc",
|
|
["12345678-1234-abcd-ef00-0123456789ab", 82] = "RpcDeletePrinterKey",
|
|
["000001a0-0000-0000-c000-000000000046", 4] = "RemoteCreateInstance",
|
|
["12345778-1234-abcd-ef00-0123456789ab", 1] = "LsarDelete",
|
|
["76f03f96-cdfd-44fc-a22c-64950a001209", 32] = "RpcAsyncDeletePrinterKey",
|
|
["12345778-1234-abcd-ef00-0123456789ab", 76] = "LsarLookupSids3",
|
|
["12345778-1234-abcd-ef00-0123456789ac", 69] = "SamrPerformGenericOperation",
|
|
["45f52c28-7f9f-101a-b52b-08002b2efabe", 11] = "R_WinsResetCounters",
|
|
["12345778-1234-abcd-ef00-0123456789ac", 36] = "SamrQueryInformationUser",
|
|
["3919286a-b10c-11d0-9ba8-00c04fd92ef5", 2] = "DsRolerDcAsDc",
|
|
["342cfd40-3c6c-11ce-a893-08002b2e9c6d", 48] = "LlsrLocalProductEnumW",
|
|
["12345778-1234-abcd-ef00-0123456789ab", 61] = "CredrRead",
|
|
["f50aac00-c7f3-428e-a022-a6b71bfb9d43", 4] = "KeyrCloseKeyService",
|
|
["12345778-1234-abcd-ef00-0123456789ab", 8] = "LsarSetInformationPolicy",
|
|
["342cfd40-3c6c-11ce-a893-08002b2e9c6d", 39] = "LlsrMappingUserDeleteA",
|
|
["e1af8308-5d1f-11c9-91a4-08002b14a0fa", 2] = "ept_lookup",
|
|
["82273fdc-e32a-18c3-3f78-827929dc23ea", 21] = "ElfrWriteClusterEvents",
|
|
["8d9f4e40-a03d-11ce-8f69-08003e30051b", 74] = "PNP_DeleteServiceDevices",
|
|
["12345678-1234-abcd-ef00-01234567cffb", 45] = "NetrLogonSameLogonWithFlags",
|
|
["82273fdc-e32a-18c3-3f78-827929dc23ea", 19] = "ElfrRegisterClusterSvc",
|
|
["86d35949-83c9-4044-b424-db363231fd0c", 12] = "SchRpcRun",
|
|
["e3514235-4b06-11d1-ab04-00c04fc2dcd2", 1] = "DRSUnbind",
|
|
["76f03f96-cdfd-44fc-a22c-64950a001209", 41] = "RpcAsyncGetPrinterDriverDirectory",
|
|
["c386ca3e-9061-4a72-821e-498d83be188f", 36] = "PolicyConfigSetShareMode",
|
|
["12345678-1234-abcd-ef00-01234567cffb", 48] = "DsrUpdateReadOnlyServerDnsRecords",
|
|
["45f52c28-7f9f-101a-b52b-08002b2efabe", 16] = "R_WinsSetFlags",
|
|
["12345778-1234-abcd-ef00-0123456789ab", 26] = "LsarQueryInfoTrustedDomain",
|
|
["12345778-1234-abcd-ef00-0123456789ab", 53] = "LsarQueryDomainInformationPolicy",
|
|
["12345678-1234-abcd-ef00-01234567cffb", 7] = "NetrDatabaseDeltas",
|
|
["5ca4a760-ebb1-11cf-8611-00a0245420ed", 51] = "RpcServerSetInternetConnectorStatus",
|
|
["3c4728c5-f0ab-448b-bda1-6ce01eb0a6d5", 21] = "RpcSrvSetMSFTVendorSpecificOptions",
|
|
["5ca4a760-ebb1-11cf-8611-00a0245420ed", 57] = "RpcWinStationUnRegisterConsoleNotification",
|
|
["367abb81-9844-35f1-ad32-98f038001003", 4] = "QueryServiceObjectSecurity",
|
|
["76f03f96-cdfd-44fc-a22c-64950a001209", 26] = "RpcAsyncGetPrinterDriver",
|
|
["342cfd40-3c6c-11ce-a893-08002b2e9c6d", 81] = "LlsrLocalServiceEnumW",
|
|
["e3514235-4b06-11d1-ab04-00c04fc2dcd2", 4] = "DRSUpdateRefs",
|
|
["12345678-1234-abcd-ef00-0123456789ab", 81] = "RpcDeletePrinterDataEx",
|
|
["8d9f4e40-a03d-11ce-8f69-08003e30051b", 17] = "PNP_DeleteRegistryKey",
|
|
["342cfd40-3c6c-11ce-a893-08002b2e9c6d", 6] = "LlsrProductEnumW",
|
|
["8d9f4e40-a03d-11ce-8f69-08003e30051b", 3] = "PNP_GetGlobalState",
|
|
["1ff70682-0a51-30e8-076d-740be8cee98b", 2] = "NetrJobEnum",
|
|
["12345778-1234-abcd-ef00-0123456789ab", 77] = "LsarLookupNames4",
|
|
["4b324fc8-1670-01d3-1278-5a47bf6ee188", 51] = "NetrDfsFixLocalVolume",
|
|
["12345778-1234-abcd-ef00-0123456789ac", 68] = "SamrQueryLocalizableAccountsInDomain",
|
|
["12345678-1234-abcd-ef00-01234567cffb", 26] = "NetrServerAuthenticate3",
|
|
["d3fbb514-0e3b-11cb-8fad-08002b1d29c3", 1] = "nsi_binding_lookup_done",
|
|
["5ca4a760-ebb1-11cf-8611-00a0245420ed", 71] = "RpcWinStationRegisterNotificationEvent",
|
|
["12345678-1234-abcd-ef00-0123456789ab", 68] = "RpcSetAllocFailCount",
|
|
["6bffd098-a112-3610-9833-012892020162", 8] = "NetrBrowserStatisticsGet",
|
|
["4b324fc8-1670-01d3-1278-5a47bf6ee188", 49] = "NetrDfsDeleteExitPoint",
|
|
["12345678-1234-abcd-ef00-0123456789ab", 70] = "RpcAddPrinterEx",
|
|
["8d9f4e40-a03d-11ce-8f69-08003e30051b", 52] = "PNP_ModifyResDes",
|
|
["4b324fc8-1670-01d3-1278-5a47bf6ee188", 40] = "NetrpSetFileSecurity",
|
|
["4fc742e0-4a10-11cf-8273-00aa004ae673", 22] = "NetrDfsSetInfo2",
|
|
["12345778-1234-abcd-ef00-0123456789ab", 79] = "LsarAdtRegisterSecurityEventSource",
|
|
["12345678-1234-abcd-ef00-0123456789ab", 94] = "RpcFlushPrinter",
|
|
["8d9f4e40-a03d-11ce-8f69-08003e30051b", 68] = "PNP_InstallDevInst",
|
|
["e3514235-4b06-11d1-ab04-00c04fc2dcd2", 16] = "DRSDomainControllerInfo",
|
|
["9556dc99-828c-11cf-a37e-00aa003240c7", 17] = "DeleteClassAsync",
|
|
["367abb81-9844-35f1-ad32-98f038001003", 38] = "QueryServiceConfig2A",
|
|
["367abb81-9844-35f1-ad32-98f038001003", 46] = "ScQueryServiceTagInfo",
|
|
["3c4728c5-f0ab-448b-bda1-6ce01eb0a6d5", 15] = "RpcSrvSetClassId",
|
|
["76f03f96-cdfd-44fc-a22c-64950a001209", 58] = "RpcSyncRegisterForRemoteNotifications",
|
|
["76f03f96-cdfd-44fc-a22c-64950a001209", 5] = "RpcAsyncAddJob",
|
|
["342cfd40-3c6c-11ce-a893-08002b2e9c6d", 4] = "LlsrLicenseAddW",
|
|
["5ca4a760-ebb1-11cf-8611-00a0245420ed", 16] = "RpcWinStationWaitSystemEvent",
|
|
["12345778-1234-abcd-ef00-0123456789ac", 9] = "SamrSetInformationDomain",
|
|
["3faf4738-3a21-4307-b46c-fdda9bb8c0d5", 9] = "winmmRegisterSessionNotificationEvent",
|
|
["8d9f4e40-a03d-11ce-8f69-08003e30051b", 23] = "PNP_GetInterfaceDeviceListSize",
|
|
["9556dc99-828c-11cf-a37e-00aa003240c7", 14] = "PutInstance",
|
|
["76f03f96-cdfd-44fc-a22c-64950a001209", 29] = "RpcAsyncEnumPrinterKey",
|
|
["12345678-1234-abcd-ef00-0123456789ab", 99] = "RpcInstallPrinterDriverFromPackage",
|
|
["76f03f96-cdfd-44fc-a22c-64950a001209", 74] = "RpcAsyncLogJobInfoForBranchOffice",
|
|
["367abb81-9844-35f1-ad32-98f038001003", 14] = "EnumServicesStatusW",
|
|
["342cfd40-3c6c-11ce-a893-08002b2e9c6d", 15] = "LlsrProductLicenseEnumA",
|
|
["9556dc99-828c-11cf-a37e-00aa003240c7", 11] = "DeleteClassAsync",
|
|
["4d9f4ab8-7d1c-11cf-861e-0020af6e7c57", 0] = "RemoteActivation",
|
|
["12345678-1234-abcd-ef00-0123456789ab", 12] = "RpcGetPrinterDriverDirectory",
|
|
["4b324fc8-1670-01d3-1278-5a47bf6ee188", 46] = "NetrDfsSetLocalVolumeState",
|
|
["9556dc99-828c-11cf-a37e-00aa003240c7", 9] = "PutClassAsync",
|
|
["6bffd098-a112-3610-9833-46c3f87e345a", 23] = "NetrUnjoinDomain2",
|
|
["f5cc5a18-4264-101a-8c59-08002b2f8426", 8] = "NspiGetPropList",
|
|
["76f03f96-cdfd-44fc-a22c-64950a001209", 0] = "RpcAsyncOpenPrinter",
|
|
["2f5f3220-c126-1076-b549-074d078619da", 15] = "NDdeTrustedShareEnumA",
|
|
["8d9f4e40-a03d-11ce-8f69-08003e30051b", 60] = "PNP_UnregisterNotification",
|
|
["342cfd40-3c6c-11ce-a893-08002b2e9c6d", 45] = "LlsrServerEnumA",
|
|
["6bffd098-a112-3610-9833-46c3f87e345a", 5] = "NetrWkstaTransportEnum",
|
|
["338cd001-2244-31f1-aaaa-900038001003", 11] = "BaseRegFlushKey",
|
|
["12345678-1234-abcd-ef00-01234567cffb", 47] = "unused",
|
|
["4b324fc8-1670-01d3-1278-5a47bf6ee188", 56] = "NetrServerAliasDel",
|
|
["5ca4a760-ebb1-11cf-8611-00a0245420ed", 60] = "RpcWinStationCloseServerEx",
|
|
["12345778-1234-abcd-ef00-0123456789ac", 17] = "SamrLookupNamesInDomain",
|
|
["1ff70682-0a51-30e8-076d-740be8cee98b", 1] = "NetrJobDel",
|
|
["f5cc59b4-4264-101a-8c59-08002b2f8426", 5] = "FrsBackupComplete",
|
|
["367abb81-9844-35f1-ad32-98f038001003", 9] = "NotifyBootConfigStatus",
|
|
["8d9f4e40-a03d-11ce-8f69-08003e30051b", 53] = "PNP_DetectResourceConflict",
|
|
["6bffd098-a112-3610-9833-012892020162", 5] = "BrowserrQueryStatistics",
|
|
["9556dc99-828c-11cf-a37e-00aa003240c7", 20] = "ExecQuery",
|
|
["c386ca3e-9061-4a72-821e-498d83be188f", 51] = "AudioVolumeGetMasterVolumeLevelScalar",
|
|
["6bffd098-a112-3610-9833-46c3f87e345a", 14] = "NetrLogonDomainNameAdd",
|
|
["5ca4a760-ebb1-11cf-8611-00a0245420ed", 74] = "RpcWinStationCheckAccess",
|
|
["76f03f96-cdfd-44fc-a22c-64950a001209", 3] = "RpcAsyncGetJob",
|
|
["5ca4a760-ebb1-11cf-8611-00a0245420ed", 35] = "RpcWinStationAnnoyancePopup",
|
|
["6bffd098-a112-3610-9833-46c3f87e345a", 26] = "NetrGetJoinableOUs2",
|
|
["f309ad18-d86a-11d0-a075-00c04fb68820", 6] = "NTLMLogin",
|
|
["c386ca3e-9061-4a72-821e-498d83be188f", 64] = "AudioVolumeGetStepInfo",
|
|
["8d9f4e40-a03d-11ce-8f69-08003e30051b", 35] = "PNP_RegisterDriver",
|
|
["82273fdc-e32a-18c3-3f78-827929dc23ea", 4] = "ElfrNumberOfRecords",
|
|
["12345678-1234-abcd-ef00-0123456789ab", 33] = "RpcSetForm",
|
|
["5ca4a760-ebb1-11cf-8611-00a0245420ed", 4] = "RpcWinStationRename",
|
|
["afa8bd80-7d8a-11c9-bef4-08002b102989", 0] = "inq_if_ids",
|
|
["8d0ffe72-d252-11d0-bf8f-00c04fd9126b", 3] = "KeyrEnumerateProvContainers",
|
|
["c386ca3e-9061-4a72-821e-498d83be188f", 42] = "AudioSessionManagerAddAudioSessionClientNotification",
|
|
["342cfd40-3c6c-11ce-a893-08002b2e9c6d", 64] = "LlsrReplicationUserAddW",
|
|
["4b324fc8-1670-01d3-1278-5a47bf6ee188", 4] = "NetrCharDevQGetInfo",
|
|
["5ca4a760-ebb1-11cf-8611-00a0245420ed", 46] = "RpcWinStationReInitializeSecurity",
|
|
["4b324fc8-1670-01d3-1278-5a47bf6ee188", 52] = "NetrDfsManagerReportSiteInfo",
|
|
["8d9f4e40-a03d-11ce-8f69-08003e30051b", 5] = "PNP_ReportLogOn",
|
|
["8d9f4e40-a03d-11ce-8f69-08003e30051b", 49] = "PNP_GetNextResDes",
|
|
["2f5f3220-c126-1076-b549-074d078619da", 16] = "NDdeTrustedShareEnumW",
|
|
["5ca4a760-ebb1-11cf-8611-00a0245420ed", 24] = "RpcWinStationRemoveLicense",
|
|
["338cd001-2244-31f1-aaaa-900038001003", 18] = "BaseRegReplaceKey",
|
|
["367abb81-9844-35f1-ad32-98f038001003", 20] = "GetServiceDisplayNameW",
|
|
["8d0ffe72-d252-11d0-bf8f-00c04fd9126b", 8] = "KeyrExportCert",
|
|
["3c4728c5-f0ab-448b-bda1-6ce01eb0a6d5", 2] = "RpcSrvRenewLeaseByBroadcast",
|
|
["6bffd098-a112-3610-9833-012892020162", 1] = "BrowserrDebugCall",
|
|
["12345778-1234-abcd-ef00-0123456789ab", 40] = "LsarSetTrustedDomainInfo",
|
|
["82273fdc-e32a-18c3-3f78-827929dc23ea", 14] = "ElfrOpenELA",
|
|
["342cfd40-3c6c-11ce-a893-08002b2e9c6d", 0] = "LlsrConnect",
|
|
["9556dc99-828c-11cf-a37e-00aa003240c7", 7] = "GetObjectAsync",
|
|
["12345778-1234-abcd-ef00-0123456789ab", 24] = "LsarSetSystemAccessAccount",
|
|
["12345678-1234-abcd-ef00-0123456789ab", 84] = "RpcDeletePrinterDriverEx",
|
|
["5ca4a760-ebb1-11cf-8611-00a0245420ed", 62] = "RpcWinStationGetMachinePolicy",
|
|
["50abc2a4-574d-40b3-9d66-ee4fd5fba076", 7] = "DnssrvComplexOperation2",
|
|
["76f03f96-cdfd-44fc-a22c-64950a001209", 54] = "RpcAsyncEnumPrintProcessorDatatypes",
|
|
["f5cc5a18-4264-101a-8c59-08002b2f8426", 5] = "NspiGetMatches",
|
|
["d6d70ef0-0e3b-11cb-acc3-08002b1d29c4", 17] = "nsi_mgmt_entry_delete",
|
|
["367abb81-9844-35f1-ad32-98f038001003", 18] = "QueryServiceLockStatusW",
|
|
["76f03f96-cdfd-44fc-a22c-64950a001209", 16] = "RpcAsyncGetPrinterData",
|
|
["8d0ffe72-d252-11d0-bf8f-00c04fd9126b", 13] = "KeyrQueryRequestStatus",
|
|
["9556dc99-828c-11cf-a37e-00aa003240c7", 6] = "GetObject",
|
|
["8d9f4e40-a03d-11ce-8f69-08003e30051b", 59] = "PNP_RegisterNotification",
|
|
["8d9f4e40-a03d-11ce-8f69-08003e30051b", 62] = "PNP_GetVersionInternal",
|
|
["12345778-1234-abcd-ef00-0123456789ab", 18] = "LsarEnumeratePrivilegesAccount",
|
|
["9556dc99-828c-11cf-a37e-00aa003240c7", 15] = "PutInstanceAsync",
|
|
["76f03f96-cdfd-44fc-a22c-64950a001209", 20] = "RpcAsyncClosePrinter",
|
|
["a4f1db00-ca47-1067-b31f-00dd010662da", 6] = "EcDummyRpc",
|
|
["12345678-1234-abcd-ef00-01234567cffb", 38] = "DsrGetDcSiteCoverageW",
|
|
["12345778-1234-abcd-ef00-0123456789ab", 59] = "LsarCreateTrustedDomainEx2",
|
|
["12345678-1234-abcd-ef00-01234567cffb", 34] = "DsrGetDcNameEx2",
|
|
["6bffd098-a112-3610-9833-46c3f87e345a", 28] = "NetrRemoveAlternateComputerName",
|
|
["c386ca3e-9061-4a72-821e-498d83be188f", 50] = "AudioVolumeGetMasterVolumeLevel",
|
|
["12345778-1234-abcd-ef00-0123456789ab", 7] = "LsarQueryInformationPolicy",
|
|
["12345778-1234-abcd-ef00-0123456789ac", 30] = "SamrDeleteAlias",
|
|
["12345778-1234-abcd-ef00-0123456789ab", 91] = "LsarQueryAuditSecurity",
|
|
["342cfd40-3c6c-11ce-a893-08002b2e9c6d", 68] = "LlsrProductSecuritySetA",
|
|
["c386ca3e-9061-4a72-821e-498d83be188f", 39] = "AudioSessionManagerGetAudioSession",
|
|
["12345778-1234-abcd-ef00-0123456789ac", 22] = "SamrAddMemberToGroup",
|
|
["12345778-1234-abcd-ef00-0123456789ac", 4] = "SamrShutdownSamServer",
|
|
["367abb81-9844-35f1-ad32-98f038001003", 17] = "QueryServiceConfigW",
|
|
["3c4728c5-f0ab-448b-bda1-6ce01eb0a6d5", 0] = "RpcSrvEnableDhcp",
|
|
["338cd001-2244-31f1-aaaa-900038001003", 22] = "BaseRegSetValue",
|
|
["6bffd098-a112-3610-9833-46c3f87e345a", 0] = "NetrWkstaGetInfo",
|
|
["4b324fc8-1670-01d3-1278-5a47bf6ee188", 55] = "NetrServerAliasEnum",
|
|
["f5cc5a18-4264-101a-8c59-08002b2f8426", 4] = "NspiSeekEntries",
|
|
["12345678-1234-abcd-ef00-0123456789ab", 83] = "RpcSeekPrinter",
|
|
["8d9f4e40-a03d-11ce-8f69-08003e30051b", 64] = "PNP_GetServerSideDeviceInstallFlags",
|
|
["5ca4a760-ebb1-11cf-8611-00a0245420ed", 25] = "RpcWinStationQueryLicense",
|
|
["82273fdc-e32a-18c3-3f78-827929dc23ea", 6] = "ElfrChangeNotify",
|
|
["8d9f4e40-a03d-11ce-8f69-08003e30051b", 27] = "PNP_SetClassRegProp",
|
|
["367abb81-9844-35f1-ad32-98f038001003", 1] = "ControlService",
|
|
["3c4728c5-f0ab-448b-bda1-6ce01eb0a6d5", 12] = "RpcSrvDeRegisterParams",
|
|
["6bffd098-a112-3610-9833-46c3f87e345a", 21] = "NetrGetJoinableOUs",
|
|
["8d9f4e40-a03d-11ce-8f69-08003e30051b", 36] = "PNP_QueryRemove",
|
|
["12345778-1234-abcd-ef00-0123456789ab", 23] = "LsarGetSystemAccessAccount",
|
|
["342cfd40-3c6c-11ce-a893-08002b2e9c6d", 24] = "LlsrUserProductEnumW",
|
|
["6bffd098-a112-3610-9833-46c3f87e345a", 20] = "NetrGetJoinInformation",
|
|
["12345778-1234-abcd-ef00-0123456789ac", 48] = "SamrQueryDisplayInformation2",
|
|
["12345778-1234-abcd-ef00-0123456789ac", 43] = "SamrTestPrivateFunctionsUser",
|
|
["4b324fc8-1670-01d3-1278-5a47bf6ee188", 25] = "NetrServerTransportAdd",
|
|
["12345778-1234-abcd-ef00-0123456789ab", 70] = "LsarRegisterAuditEvent",
|
|
["76f03f96-cdfd-44fc-a22c-64950a001209", 57] = "RpcAsyncEnumPerMachineConnections",
|
|
["342cfd40-3c6c-11ce-a893-08002b2e9c6d", 47] = "LlsrServerProductEnumA",
|
|
["83da7c00-e84f-11d2-9807-00c04f8ec850", 3] = "SfcSrv_InitiateScan",
|
|
["76f03f96-cdfd-44fc-a22c-64950a001209", 55] = "RpcAsyncAddPerMachineConnection",
|
|
["12345678-1234-abcd-ef00-0123456789ab", 24] = "RpcAddJob",
|
|
["342cfd40-3c6c-11ce-a893-08002b2e9c6d", 20] = "LlsrUserInfoSetW",
|
|
["99fcfec4-5260-101b-bbcb-00aa0021347a", 5] = "ServerAlive2",
|
|
["338cd001-2244-31f1-aaaa-900038001003", 32] = "OpenPerformanceText",
|
|
["76f03f96-cdfd-44fc-a22c-64950a001209", 45] = "RpcAsyncEnumPrintProcessors",
|
|
["3919286a-b10c-11d0-9ba8-00c04fd92ef5", 5] = "DsRolerGetDcOperationProgress",
|
|
["2f59a331-bf7d-48cb-9ec5-7c090d76e8b8", 4] = "RpcLicensingSetPolicy",
|
|
["8d9f4e40-a03d-11ce-8f69-08003e30051b", 20] = "PNP_DeleteClassKey",
|
|
["12345778-1234-abcd-ef00-0123456789ab", 20] = "LsarRemovePrivilegesFromAccount",
|
|
["12345778-1234-abcd-ef00-0123456789ab", 34] = "LsarDeleteObject",
|
|
["45f52c28-7f9f-101a-b52b-08002b2efabe", 5] = "R_WinsGetDbRecs",
|
|
["d6d70ef0-0e3b-11cb-acc3-08002b1d29c4", 13] = "nsi_entry_object_inq_next",
|
|
["2f5f3220-c126-1076-b549-074d078619da", 7] = "NDdeShareEnumA",
|
|
["338cd001-2244-31f1-aaaa-900038001003", 19] = "BaseRegRestoreKey",
|
|
["12345678-1234-abcd-ef00-01234567cffb", 46] = "NetrServerGetTrustInfo",
|
|
["12345678-1234-abcd-ef00-0123456789ab", 41] = "RpcPlayGdiScriptOnPrinterIC",
|
|
["12345678-1234-abcd-ef00-0123456789ab", 78] = "RpcGetPrinterDataEx",
|
|
["8d0ffe72-d252-11d0-bf8f-00c04fd9126b", 4] = "KeyrCloseKeyService",
|
|
["338cd001-2244-31f1-aaaa-900038001003", 15] = "BaseRegOpenKey",
|
|
["8d0ffe72-d252-11d0-bf8f-00c04fd9126b", 11] = "KeyrEnumerateCAs",
|
|
["367abb81-9844-35f1-ad32-98f038001003", 47] = "NotifyServiceStatusChange",
|
|
["12345678-1234-abcd-ef00-0123456789ab", 61] = "RpcAddPortEx",
|
|
["5ca4a760-ebb1-11cf-8611-00a0245420ed", 67] = "RpcWinStationNotifyDisconnectPipe",
|
|
["12345778-1234-abcd-ef00-0123456789ac", 57] = "SamrConnect2",
|
|
["c386ca3e-9061-4a72-821e-498d83be188f", 14] = "AudioSessionGetLastInactivation",
|
|
["367abb81-9844-35f1-ad32-98f038001003", 33] = "GetServiceKeyNameA",
|
|
["d6d70ef0-0e3b-11cb-acc3-08002b1d29c4", 20] = "nsi_mgmt_inq_exp_age",
|
|
["76f03f96-cdfd-44fc-a22c-64950a001209", 62] = "RpcAsyncInstallPrinterDriverFromPackage",
|
|
["12345778-1234-abcd-ef00-0123456789ab", 78] = "LsarOpenPolicySce",
|
|
["12345678-1234-abcd-ef00-0123456789ab", 72] = "RpcEnumPrinterData",
|
|
["342cfd40-3c6c-11ce-a893-08002b2e9c6d", 73] = "LlsrCertificateClaimAddCheckA",
|
|
["c386ca3e-9061-4a72-821e-498d83be188f", 60] = "AudioMeterGetAverageRMS",
|
|
["4b324fc8-1670-01d3-1278-5a47bf6ee188", 34] = "NetprNameCanonicalize",
|
|
["12345678-1234-abcd-ef00-01234567cffb", 28] = "DsrGetSiteName",
|
|
["c386ca3e-9061-4a72-821e-498d83be188f", 11] = "AudioSessionGetProcessId",
|
|
["c386ca3e-9061-4a72-821e-498d83be188f", 23] = "AudioSessionSetMute",
|
|
["12345678-1234-abcd-ef00-0123456789ab", 52] = "RpcResetPrinter",
|
|
["76f03f96-cdfd-44fc-a22c-64950a001209", 56] = "RpcAsyncDeletePerMachineConnection",
|
|
["2f5f3220-c126-1076-b549-074d078619da", 13] = "NDdeGetTrustedShareA",
|
|
["367abb81-9844-35f1-ad32-98f038001003", 34] = "ScGetCurrentGroupStateW",
|
|
["12345678-1234-abcd-ef00-01234567cffb", 23] = "NetrLogonGetTrustRid",
|
|
["12b81e99-f207-4a4c-85d3-77b42f76fd14", 1] = "SeclCreateProcessWithLogonExW",
|
|
["3c4728c5-f0ab-448b-bda1-6ce01eb0a6d5", 3] = "RpcSrvReleaseLease",
|
|
["f5cc5a18-4264-101a-8c59-08002b2f8426", 1] = "NspiUnbind",
|
|
["894de0c0-0d55-11d3-a322-00c04fa321a1", 2] = "BaseInitiateShutdownEx",
|
|
["12345678-1234-abcd-ef00-0123456789ab", 13] = "RpcDeletePrinterDriver",
|
|
["5ca4a760-ebb1-11cf-8611-00a0245420ed", 15] = "RpcWinStationShutdownSystem",
|
|
["12345778-1234-abcd-ef00-0123456789ab", 9] = "LsarClearAuditLog",
|
|
["82273fdc-e32a-18c3-3f78-827929dc23ea", 7] = "ElfrOpenELW",
|
|
["9556dc99-828c-11cf-a37e-00aa003240c7", 21] = "ExecQueryAsync",
|
|
["3c4728c5-f0ab-448b-bda1-6ce01eb0a6d6", 2] = "RpcSrvReleasePrefix",
|
|
["c386ca3e-9061-4a72-821e-498d83be188f", 33] = "AudioServerGetDevicePeriod",
|
|
["8d9f4e40-a03d-11ce-8f69-08003e30051b", 37] = "PNP_RequestDeviceEject",
|
|
["4b324fc8-1670-01d3-1278-5a47bf6ee188", 5] = "NetrCharDevQSetInfo",
|
|
["342cfd40-3c6c-11ce-a893-08002b2e9c6d", 74] = "LlsrCertificateClaimAddCheckW",
|
|
["12345678-1234-abcd-ef00-0123456789ab", 101] = "RpcGetCorePrinterDrivers",
|
|
["12345678-1234-abcd-ef00-0123456789ab", 17] = "RpcStartDocPrinter",
|
|
["338cd001-2244-31f1-aaaa-900038001003", 0] = "OpenClassesRoot",
|
|
["f5cc59b4-4264-101a-8c59-08002b2f8426", 0] = "FrsRpcSendCommPkt",
|
|
["6bffd098-a112-3610-9833-46c3f87e345a", 18] = "NetrValidateName",
|
|
["8d9f4e40-a03d-11ce-8f69-08003e30051b", 28] = "PNP_CreateDevInst",
|
|
["99fcfec4-5260-101b-bbcb-00aa0021347a", 3] = "ServerAlive",
|
|
["12345778-1234-abcd-ef00-0123456789ac", 49] = "SamrGetDisplayEnumerationIndex2",
|
|
["e3514235-4b06-11d1-ab04-00c04fc2dcd2", 9] = "DRSGetMemberships",
|
|
["12345678-1234-abcd-ef00-0123456789ab", 49] = "RpcAddPrintProvidor",
|
|
["12345778-1234-abcd-ef00-0123456789ac", 19] = "SamrOpenGroup",
|
|
["6bffd098-a112-3610-9833-46c3f87e345a", 10] = "NetrUseDel",
|
|
["3faf4738-3a21-4307-b46c-fdda9bb8c0d5", 14] = "winmmGetPnpInfo",
|
|
["12345678-1234-abcd-ef00-0123456789ab", 38] = "RpcConfigurePort",
|
|
["367abb81-9844-35f1-ad32-98f038001003", 50] = "ControlServiceExA",
|
|
["99fcfec4-5260-101b-bbcb-00aa0021347a", 4] = "ResolveOxid2",
|
|
["5ca4a760-ebb1-11cf-8611-00a0245420ed", 5] = "RpcWinStationQueryInformation",
|
|
["3919286a-b10c-11d0-9ba8-00c04fd92ef5", 9] = "DsRolerUpgradeDownlevelServer",
|
|
["12345778-1234-abcd-ef00-0123456789ab", 43] = "LsarRetrievePrivateData",
|
|
["3c4728c5-f0ab-448b-bda1-6ce01eb0a6d5", 9] = "RpcSrvRequestParams",
|
|
["12345778-1234-abcd-ef00-0123456789ac", 67] = "SamrValidatePassword",
|
|
["4b324fc8-1670-01d3-1278-5a47bf6ee188", 47] = "NetrDfsSetServerInfo",
|
|
["4b324fc8-1670-01d3-1278-5a47bf6ee188", 39] = "NetrpGetFileSecurity",
|
|
["c386ca3e-9061-4a72-821e-498d83be188f", 44] = "AudioSessionManagerAddAudioSessionClientNotification",
|
|
["c386ca3e-9061-4a72-821e-498d83be188f", 2] = "AudioServerInitialize",
|
|
["338cd001-2244-31f1-aaaa-900038001003", 7] = "BaseRegDeleteKey",
|
|
["4fc742e0-4a10-11cf-8273-00aa004ae673", 1] = "NetrDfsAdd",
|
|
["12345678-1234-abcd-ef00-0123456789ab", 77] = "RpcSetPrinterDataEx",
|
|
["45f52c28-7f9f-101a-b52b-08002b2efabe", 7] = "R_WinsBackup",
|
|
["338cd001-2244-31f1-aaaa-900038001003", 14] = "BaseRegNotifyChangeKeyValue",
|
|
["12345778-1234-abcd-ef00-0123456789ac", 52] = "SamrAddMultipleMembersToAlias",
|
|
["12345678-1234-abcd-ef00-0123456789ab", 7] = "RpcSetPrinter",
|
|
["2f59a331-bf7d-48cb-9ec5-7c090d76e8b8", 1] = "RpcLicensingCloseServer",
|
|
["12345778-1234-abcd-ef00-0123456789ab", 35] = "LsarEnumerateAccountsWithUserRight",
|
|
["9556dc99-828c-11cf-a37e-00aa003240c7", 10] = "DeleteClass",
|
|
["12345678-1234-abcd-ef00-0123456789ab", 90] = "RpcSplOpenPrinter",
|
|
["4fc742e0-4a10-11cf-8273-00aa004ae673", 21] = "NetrDfsEnumEx",
|
|
["8d9f4e40-a03d-11ce-8f69-08003e30051b", 51] = "PNP_GetResDesDataSize",
|
|
["76f03f96-cdfd-44fc-a22c-64950a001209", 2] = "RpcAsyncSetJob",
|
|
["76f03f96-cdfd-44fc-a22c-64950a001209", 28] = "RpcAsyncEnumPrinterDataEx",
|
|
["8d9f4e40-a03d-11ce-8f69-08003e30051b", 34] = "PNP_AddID",
|
|
["e1af8308-5d1f-11c9-91a4-08002b14a0fa", 5] = "ept_inq_object",
|
|
["4b324fc8-1670-01d3-1278-5a47bf6ee188", 28] = "NetrRemoteTOD",
|
|
["12345678-1234-abcd-ef00-0123456789ab", 98] = "RpcDeletePrinterConnection2",
|
|
["5ca4a760-ebb1-11cf-8611-00a0245420ed", 43] = "RpcWinStationGetAllProcesses",
|
|
["50abc2a4-574d-40b3-9d66-ee4fd5fba076", 3] = "DnssrvEnumRecords",
|
|
["9556dc99-828c-11cf-a37e-00aa003240c7", 19] = "CreateInstanceEnumAsync",
|
|
["12345678-1234-abcd-ef00-0123456789ab", 34] = "RpcEnumForms",
|
|
["338cd001-2244-31f1-aaaa-900038001003", 35] = "BaseRegDeleteKeyEx",
|
|
["6bffd098-a112-3610-9833-012892020162", 0] = "BrowserrServerEnum",
|
|
["378e52b0-c0a9-11cf-822d-00aa0051e40f", 2] = "SAGetNSAccountInformation",
|
|
["12345778-1234-abcd-ef00-0123456789ab", 68] = "LsarLookupNames3",
|
|
["12345778-1234-abcd-ef00-0123456789ac", 46] = "SamrQueryInformationDomain2",
|
|
["3c4728c5-f0ab-448b-bda1-6ce01eb0a6d5", 14] = "RpcSrvQueryLeaseInfo",
|
|
["12345778-1234-abcd-ef00-0123456789ab", 57] = "LsarLookupSids2",
|
|
["12345678-1234-abcd-ef00-0123456789ab", 93] = "RpcCloseSpoolFileHandle",
|
|
["12345678-1234-abcd-ef00-0123456789ab", 11] = "RpcGetPrinterDriver",
|
|
["3faf4738-3a21-4307-b46c-fdda9bb8c0d5", 7] = "gfxLogon",
|
|
["f5cc5a18-4264-101a-8c59-08002b2f8426", 2] = "NspiUpdateStat",
|
|
["12345778-1234-abcd-ef00-0123456789ac", 34] = "SamrOpenUser",
|
|
["367abb81-9844-35f1-ad32-98f038001003", 26] = "EnumServicesStatusA",
|
|
["76f03f96-cdfd-44fc-a22c-64950a001209", 13] = "RpcAsyncEndPagePrinter",
|
|
["12345678-1234-abcd-ef00-01234567cffb", 31] = "NetrServerPasswordGet",
|
|
["6bffd098-a112-3610-9833-46c3f87e345a", 2] = "NetrWkstaUserEnum",
|
|
["12345778-1234-abcd-ef00-0123456789ab", 31] = "LsarLookupPrivilegeValue",
|
|
["86d35949-83c9-4044-b424-db363231fd0c", 1] = "SchRpcRegisterTask",
|
|
["894de0c0-0d55-11d3-a322-00c04fa321a1", 1] = "BaseAbortShutdown",
|
|
["76f03f96-cdfd-44fc-a22c-64950a001209", 51] = "RpcAsyncAddMonitor",
|
|
["12345678-1234-abcd-ef00-0123456789ab", 89] = "RpcAddPrinterDriverEx",
|
|
["d6d70ef0-0e3b-11cb-acc3-08002b1d29c4", 1] = "nsi_group_mbr_add",
|
|
["82273fdc-e32a-18c3-3f78-827929dc23ea", 10] = "ElfrReadELW",
|
|
["00000143-0000-0000-c000-000000000046", 0] = "QueryInterface",
|
|
["12345778-1234-abcd-ef00-0123456789ac", 32] = "SamrRemoveMemberFromAlias",
|
|
["12345778-1234-abcd-ef00-0123456789ac", 56] = "SamrGetDomainPasswordInformation",
|
|
["12345778-1234-abcd-ef00-0123456789ab", 55] = "LsarOpenTrustedDomainByName",
|
|
["342cfd40-3c6c-11ce-a893-08002b2e9c6d", 89] = "LlsrCloseEx",
|
|
["76f03f96-cdfd-44fc-a22c-64950a001209", 21] = "RpcAsyncAddForm",
|
|
["c386ca3e-9061-4a72-821e-498d83be188f", 20] = "AudioSessionGetVolume",
|
|
["342cfd40-3c6c-11ce-a893-08002b2e9c6d", 53] = "LlsrLocalProductInfoSetA",
|
|
["83da7c00-e84f-11d2-9807-00c04f8ec850", 2] = "SfcSrv_FileException",
|
|
["f5cc59b4-4264-101a-8c59-08002b2f8426", 3] = "FrsNOP",
|
|
["f5cc5a18-4264-101a-8c59-08002b2f8426", 7] = "NspiDNToEph",
|
|
["c386ca3e-9061-4a72-821e-498d83be188f", 38] = "AudioSessionManagerDestroy",
|
|
["5ca4a760-ebb1-11cf-8611-00a0245420ed", 8] = "RpcLogonIdFromWinStationName",
|
|
["3c4728c5-f0ab-448b-bda1-6ce01eb0a6d5", 18] = "RpcSrvGetClientId",
|
|
["76f03f96-cdfd-44fc-a22c-64950a001209", 14] = "RpcAsyncEndDocPrinter",
|
|
["5ca4a760-ebb1-11cf-8611-00a0245420ed", 27] = "RpcWinStationQueryUpdateRequired",
|
|
["76f03f96-cdfd-44fc-a22c-64950a001209", 73] = "RpcAsyncEnumJobNamedProperties",
|
|
["8d9f4e40-a03d-11ce-8f69-08003e30051b", 7] = "PNP_GetRootDeviceInstance",
|
|
["76f03f96-cdfd-44fc-a22c-64950a001209", 49] = "RpcAsyncAddPort",
|
|
["12345678-1234-abcd-ef00-0123456789ab", 55] = "RpcFindNextPrinterChangeNotification",
|
|
["12345778-1234-abcd-ef00-0123456789ab", 32] = "LsarLookupPrivilegeName",
|
|
["86d35949-83c9-4044-b424-db363231fd0c", 3] = "SchRpcCreateFolder",
|
|
["e3514235-4b06-11d1-ab04-00c04fc2dcd2", 11] = "DRSGetNT4ChangeLog",
|
|
["12345678-1234-abcd-ef00-01234567cffb", 9] = "NetrAccountDeltas",
|
|
["3919286a-b10c-11d0-9ba8-00c04fd92ef5", 1] = "DsRolerDnsNameToFlatName",
|
|
["342cfd40-3c6c-11ce-a893-08002b2e9c6d", 56] = "LlsrServiceInfoSetW",
|
|
["e3514235-4b06-11d1-ab04-00c04fc2dcd2", 14] = "DRSRemoveDsServer",
|
|
["afa8bd80-7d8a-11c9-bef4-08002b102989", 3] = "stop_server_listening",
|
|
["12345678-1234-abcd-ef00-01234567cffb", 14] = "NetrLogonControl2",
|
|
["d6d70ef0-0e3b-11cb-acc3-08002b1d29c4", 5] = "nsi_group_mbr_inq_done",
|
|
["12345778-1234-abcd-ef00-0123456789ac", 26] = "SamrSetMemberAttributesOfGroup",
|
|
["8d0ffe72-d252-11d0-bf8f-00c04fd9126b", 0] = "KeyrOpenKeyService",
|
|
["12345778-1234-abcd-ef00-0123456789ab", 63] = "CredrWriteDomainCredentials",
|
|
["12345778-1234-abcd-ef00-0123456789ac", 31] = "SamrAddMemberToAlias",
|
|
["68b58241-c259-4f03-a2e5-a2651dcbc930", 2] = "KSrGetCAs",
|
|
["342cfd40-3c6c-11ce-a893-08002b2e9c6d", 50] = "LlsrLocalProductInfoGetW",
|
|
["e3514235-4b06-11d1-ab04-00c04fc2dcd2", 20] = "DRSAddSidHistory",
|
|
["45f52c28-7f9f-101a-b52b-08002b2efabe", 4] = "R_WinsDoScavenging",
|
|
["d6d70ef0-0e3b-11cb-acc3-08002b1d29c4", 18] = "nsi_mgmt_entry_create",
|
|
["12345778-1234-abcd-ef00-0123456789ac", 40] = "SamrQueryDisplayInformation",
|
|
["367abb81-9844-35f1-ad32-98f038001003", 21] = "GetServiceKeyNameW",
|
|
["338cd001-2244-31f1-aaaa-900038001003", 31] = "BaseRegSaveKeyEx",
|
|
["12345678-1234-abcd-ef00-01234567cffb", 33] = "DsrAddressToSiteNamesW",
|
|
["8d9f4e40-a03d-11ce-8f69-08003e30051b", 65] = "PNP_GetObjectPropKeys",
|
|
["6bffd098-a112-3610-9833-012892020162", 9] = "BrowserrSetNetlogonState",
|
|
["76f03f96-cdfd-44fc-a22c-64950a001209", 31] = "RpcAsyncDeletePrinterDataEx",
|
|
["d6d70ef0-0e3b-11cb-acc3-08002b1d29c4", 7] = "nsi_profile_elt_add",
|
|
["4fc742e0-4a10-11cf-8273-00aa004ae673", 4] = "NetrDfsGetInfo",
|
|
["d3fbb514-0e3b-11cb-8fad-08002b1d29c3", 3] = "nsi_mgmt_handle_set_exp_age",
|
|
["12345678-1234-abcd-ef00-01234567cffb", 6] = "NetrServerPasswordSet",
|
|
["4b324fc8-1670-01d3-1278-5a47bf6ee188", 48] = "NetrDfsCreateExitPoint",
|
|
["2f59a331-bf7d-48cb-9ec5-7c090d76e8b8", 7] = "RpcLicensingGetPolicyInformation",
|
|
["12345678-1234-abcd-ef00-0123456789ab", 51] = "RpcEnumPrintProcessorDatatypes",
|
|
["c386ca3e-9061-4a72-821e-498d83be188f", 10] = "AudioVolumeGetMasterVolumeLevelScalar",
|
|
["5ca4a760-ebb1-11cf-8611-00a0245420ed", 30] = "RpcWinStationReadRegistry",
|
|
["12345678-1234-abcd-ef00-0123456789ab", 14] = "RpcAddPrintProcessor",
|
|
["c386ca3e-9061-4a72-821e-498d83be188f", 17] = "AudioSessionSetDisplayName",
|
|
["12345778-1234-abcd-ef00-0123456789ac", 23] = "SamrDeleteGroup",
|
|
["12345778-1234-abcd-ef00-0123456789ab", 64] = "CredrReadDomainCredentials",
|
|
["4b324fc8-1670-01d3-1278-5a47bf6ee188", 13] = "NetrSessionDel",
|
|
["c386ca3e-9061-4a72-821e-498d83be188f", 24] = "AudioSessionGetChannelCount",
|
|
["76f03f96-cdfd-44fc-a22c-64950a001209", 66] = "RpcAsyncGetPrinterDriverPackagePath",
|
|
["4b324fc8-1670-01d3-1278-5a47bf6ee188", 29] = "NetrServerSetServiceBits",
|
|
["8d9f4e40-a03d-11ce-8f69-08003e30051b", 22] = "PNP_GetInterfaceDeviceList",
|
|
["2f5f3220-c126-1076-b549-074d078619da", 0] = "NDdeShareAddW",
|
|
["c386ca3e-9061-4a72-821e-498d83be188f", 37] = "GetAudioSessionManager",
|
|
["6bffd098-a112-3610-9833-012892020162", 4] = "BrowserrDebugTrace",
|
|
["5ca4a760-ebb1-11cf-8611-00a0245420ed", 54] = "RpcWinStationUpdateUserConfig",
|
|
["12345678-1234-abcd-ef00-0123456789ab", 10] = "RpcEnumPrinterDrivers",
|
|
["3c4728c5-f0ab-448b-bda1-6ce01eb0a6d5", 23] = "RpcSrvRegisterConnectionStateNotification",
|
|
["12345778-1234-abcd-ef00-0123456789ab", 89] = "LsarLookupAuditSubCategoryName",
|
|
["12345778-1234-abcd-ef00-0123456789ac", 47] = "SamrQueryInformationUser2",
|
|
["82273fdc-e32a-18c3-3f78-827929dc23ea", 13] = "ElfrBackupELFA",
|
|
["12345678-1234-abcd-ef00-0123456789ab", 37] = "RpcAddPort",
|
|
["5ca4a760-ebb1-11cf-8611-00a0245420ed", 65] = "RpcWinStationCheckLoopBack",
|
|
["50abc2a4-574d-40b3-9d66-ee4fd5fba076", 5] = "DnssrvOperation2",
|
|
["3faf4738-3a21-4307-b46c-fdda9bb8c0d5", 10] = "winmmUnregisterSessionNotification",
|
|
["367abb81-9844-35f1-ad32-98f038001003", 35] = "EnumServiceGroupW",
|
|
["12345778-1234-abcd-ef00-0123456789ab", 72] = "LsarUnregisterAuditEvent",
|
|
["76f03f96-cdfd-44fc-a22c-64950a001209", 38] = "RpcAsyncEnumPrinters",
|
|
["12345778-1234-abcd-ef00-0123456789ac", 64] = "SamrConnect5",
|
|
["f5cc5a18-4264-101a-8c59-08002b2f8426", 3] = "NspiQueryRows",
|
|
["e3514235-4b06-11d1-ab04-00c04fc2dcd2", 6] = "DRSReplicaDel",
|
|
["76f03f96-cdfd-44fc-a22c-64950a001209", 48] = "RpcAsyncEnumMonitors",
|
|
["76f03f96-cdfd-44fc-a22c-64950a001209", 50] = "RpcAsyncSetPort",
|
|
["338cd001-2244-31f1-aaaa-900038001003", 12] = "BaseRegGetKeySecurity",
|
|
["45f52c28-7f9f-101a-b52b-08002b2efabe", 9] = "R_WinsPullRange",
|
|
["f5cc59b4-4264-101a-8c59-08002b2f8426", 7] = "FrsBackupComplete",
|
|
["c386ca3e-9061-4a72-821e-498d83be188f", 13] = "AudioSessionGetLastActivation",
|
|
["367abb81-9844-35f1-ad32-98f038001003", 29] = "QueryServiceConfigA",
|
|
["86d35949-83c9-4044-b424-db363231fd0c", 14] = "SchRpcRename",
|
|
["342cfd40-3c6c-11ce-a893-08002b2e9c6d", 58] = "LlsrReplConnect",
|
|
["12345778-1234-abcd-ef00-0123456789ab", 3] = "LsarQuerySecurityObject",
|
|
["76f03f96-cdfd-44fc-a22c-64950a001209", 12] = "RpcAsyncWritePrinter",
|
|
["c386ca3e-9061-4a72-821e-498d83be188f", 47] = "AudioVolumeGetChannelCount",
|
|
["12345778-1234-abcd-ef00-0123456789ab", 38] = "LsarRemoveAccountRights",
|
|
["76f03f96-cdfd-44fc-a22c-64950a001209", 30] = "RpcAsyncDeletePrinterData",
|
|
["45f52c28-7f9f-101a-b52b-08002b2efabe", 10] = "R_WinsSetPriorityClass",
|
|
["342cfd40-3c6c-11ce-a893-08002b2e9c6d", 41] = "LlsrMappingAddA",
|
|
["12345778-1234-abcd-ef00-0123456789ac", 15] = "SamrEnumerateAliasesInDomain",
|
|
["c386ca3e-9061-4a72-821e-498d83be188f", 46] = "AudioVolumeDisconnect",
|
|
["338cd001-2244-31f1-aaaa-900038001003", 20] = "BaseRegSaveKey",
|
|
["5ca4a760-ebb1-11cf-8611-00a0245420ed", 23] = "RpcWinStationActivateLicense",
|
|
["2f5f3220-c126-1076-b549-074d078619da", 8] = "NDdeShareEnumW",
|
|
["e1af8308-5d1f-11c9-91a4-08002b14a0fa", 3] = "ept_map",
|
|
["12345678-1234-abcd-ef00-0123456789ab", 18] = "RpcStartPagePrinter",
|
|
["76f03f96-cdfd-44fc-a22c-64950a001209", 4] = "RpcAsyncEnumJobs",
|
|
["12345778-1234-abcd-ef00-0123456789ab", 47] = "LsarSetInformationPolicy2",
|
|
["12345678-1234-abcd-ef00-01234567cffb", 0] = "NetrLogonUasLogon",
|
|
["e3514235-4b06-11d1-ab04-00c04fc2dcd2", 13] = "DRSWriteSPN",
|
|
["12345778-1234-abcd-ef00-0123456789ab", 48] = "LsarQueryTrustedDomainInfoByName",
|
|
["3c4728c5-f0ab-448b-bda1-6ce01eb0a6d6", 1] = "RpcSrvRenewPrefix",
|
|
["4b324fc8-1670-01d3-1278-5a47bf6ee188", 7] = "NetrCharDevQPurgeSelf",
|
|
["0a74ef1c-41a4-4e06-83ae-dc74fb1cdd53", 0] = "ItSrvRegisterIdleTask",
|
|
["6bffd098-a112-3610-9833-46c3f87e345a", 12] = "NetrMessageBufferSend",
|
|
["12345678-1234-abcd-ef00-0123456789ab", 88] = "RpcXcvData",
|
|
["12345678-1234-abcd-ef00-01234567cffb", 17] = "NetrDatabaseRedo",
|
|
["12345778-1234-abcd-ef00-0123456789ab", 82] = "CredrFindBestCredential",
|
|
["338cd001-2244-31f1-aaaa-900038001003", 2] = "OpenLocalMachine",
|
|
["12345778-1234-abcd-ef00-0123456789ab", 27] = "LsarSetInformationTrustedDomain",
|
|
["4b324fc8-1670-01d3-1278-5a47bf6ee188", 11] = "NetrFileClose",
|
|
["86d35949-83c9-4044-b424-db363231fd0c", 16] = "SchRpcGetLastRunInfo",
|
|
["3c4728c5-f0ab-448b-bda1-6ce01eb0a6d5", 7] = "RpcSrvStaticRefreshParams",
|
|
["5ca4a760-ebb1-11cf-8611-00a0245420ed", 72] = "RpcWinStationUnRegisterNotificationEvent",
|
|
["12345678-1234-abcd-ef00-0123456789ab", 26] = "RpcGetPrinterData",
|
|
["4b324fc8-1670-01d3-1278-5a47bf6ee188", 10] = "NetrFileGetInfo",
|
|
["76f03f96-cdfd-44fc-a22c-64950a001209", 70] = "RpcAsyncGetJobNamedPropertyValue",
|
|
["c386ca3e-9061-4a72-821e-498d83be188f", 19] = "AudioSessionSetSessionClass",
|
|
["6bffd098-a112-3610-9833-46c3f87e345a", 25] = "NetrValidateName2",
|
|
["5ca4a760-ebb1-11cf-8611-00a0245420ed", 3] = "RpcWinStationEnumerate",
|
|
["d6d70ef0-0e3b-11cb-acc3-08002b1d29c4", 9] = "nsi_profile_elt_inq_begin",
|
|
["12345678-1234-abcd-ef00-0123456789ab", 31] = "RpcDeleteForm",
|
|
["12345678-1234-abcd-ef00-01234567cffb", 16] = "NetrDatabaseSync2",
|
|
["45f52c28-7f9f-101a-b52b-08002b2efabe", 19] = "R_WinsDoScavengingNew",
|
|
["4b324fc8-1670-01d3-1278-5a47bf6ee188", 44] = "NetrDfsCreateLocalPartition",
|
|
["c386ca3e-9061-4a72-821e-498d83be188f", 35] = "PolicyConfigGetShareMode",
|
|
["5ca4a760-ebb1-11cf-8611-00a0245420ed", 70] = "RpcWinStationGetAllProcesses_NT6",
|
|
["12345778-1234-abcd-ef00-0123456789ac", 66] = "SamrSetDSRMPassword",
|
|
["342cfd40-3c6c-11ce-a893-08002b2e9c6d", 30] = "LlsrMappingInfoGetW",
|
|
["4b324fc8-1670-01d3-1278-5a47bf6ee188", 2] = "NetrCharDevControl",
|
|
["12345778-1234-abcd-ef00-0123456789ab", 2] = "LsarEnumeratePrivileges",
|
|
["1ff70682-0a51-30e8-076d-740be8cee98b", 0] = "NetrJobAdd",
|
|
["4b324fc8-1670-01d3-1278-5a47bf6ee188", 3] = "NetrCharDevQEnum",
|
|
["12345678-1234-abcd-ef00-0123456789ab", 58] = "RpcReplyOpenPrinter",
|
|
["3faf4738-3a21-4307-b46c-fdda9bb8c0d5", 3] = "gfxRemoveGfx",
|
|
["76f03f96-cdfd-44fc-a22c-64950a001209", 23] = "RpcAsyncGetForm",
|
|
["e3514235-4b06-11d1-ab04-00c04fc2dcd2", 24] = "DRSQuerySitesByCost",
|
|
["12345778-1234-abcd-ef00-0123456789ac", 38] = "SamrChangePasswordUser",
|
|
["338cd001-2244-31f1-aaaa-900038001003", 17] = "BaseRegQueryValue",
|
|
["367abb81-9844-35f1-ad32-98f038001003", 8] = "UnlockServiceDatabase",
|
|
["342cfd40-3c6c-11ce-a893-08002b2e9c6d", 54] = "LlsrServiceInfoGetW",
|
|
["4fc742e0-4a10-11cf-8273-00aa004ae673", 2] = "NetrDfsRemove",
|
|
["d95afe70-a6d5-4259-822e-2c84da1ddb0d", 0] = "WsdrInitiateShutdown",
|
|
["c386ca3e-9061-4a72-821e-498d83be188f", 54] = "AudioVolumeGetChannelVolumeLevel",
|
|
["f309ad18-d86a-11d0-a075-00c04fb68820", 5] = "WBEMLogin",
|
|
["a4f1db00-ca47-1067-b31f-00dd010662da", 12] = "EcUnknown0xC",
|
|
["12345778-1234-abcd-ef00-0123456789ac", 12] = "SamrCreateUserInDomain",
|
|
["5ca4a760-ebb1-11cf-8611-00a0245420ed", 6] = "RpcWinStationSetInformation",
|
|
["3c4728c5-f0ab-448b-bda1-6ce01eb0a6d5", 13] = "RpcSrvEnumInterfaces",
|
|
["338cd001-2244-31f1-aaaa-900038001003", 5] = "BaseRegCloseKey",
|
|
["e1af8308-5d1f-11c9-91a4-08002b14a0fa", 0] = "ept_insert",
|
|
["12345778-1234-abcd-ef00-0123456789ab", 80] = "LsarAdtUnregisterSecurityEventSource",
|
|
["12345678-1234-abcd-ef00-0123456789ab", 53] = "RpcGetPrinterDriver2",
|
|
["8d9f4e40-a03d-11ce-8f69-08003e30051b", 73] = "PNP_SetActiveService",
|
|
["4b324fc8-1670-01d3-1278-5a47bf6ee188", 8] = "NetrConnectionEnum",
|
|
["4b324fc8-1670-01d3-1278-5a47bf6ee188", 18] = "NetrShareDel",
|
|
["5ca4a760-ebb1-11cf-8611-00a0245420ed", 42] = "RpcWinStationCheckForApplicationName",
|
|
["12345778-1234-abcd-ef00-0123456789ab", 28] = "LsarOpenSecret",
|
|
["12345678-1234-abcd-ef00-01234567cffb", 12] = "NetrLogonControl",
|
|
["4b324fc8-1670-01d3-1278-5a47bf6ee188", 0] = "NetrCharDevEnum",
|
|
["c386ca3e-9061-4a72-821e-498d83be188f", 56] = "AudioVolumeSetMute",
|
|
["4b324fc8-1670-01d3-1278-5a47bf6ee188", 9] = "NetrFileEnum",
|
|
["82273fdc-e32a-18c3-3f78-827929dc23ea", 8] = "ElfrRegisterEventSourceW",
|
|
["12345778-1234-abcd-ef00-0123456789ab", 17] = "LsarOpenAccount",
|
|
["4fc742e0-4a10-11cf-8273-00aa004ae673", 20] = "NetrDfsRemove2",
|
|
["3919286a-b10c-11d0-9ba8-00c04fd92ef5", 6] = "DsRolerGetDcOperationResults",
|
|
["82273fdc-e32a-18c3-3f78-827929dc23ea", 15] = "ElfrRegisterEventSourceA",
|
|
["342cfd40-3c6c-11ce-a893-08002b2e9c6d", 32] = "LlsrMappingInfoSetW",
|
|
["5ca4a760-ebb1-11cf-8611-00a0245420ed", 47] = "RpcWinStationBroadcastSystemMessage",
|
|
["12345778-1234-abcd-ef00-0123456789ac", 16] = "SamrGetAliasMembership",
|
|
["50abc2a4-574d-40b3-9d66-ee4fd5fba076", 2] = "DnssrvComplexOperation",
|
|
["6bffd098-a112-3610-9833-46c3f87e345a", 8] = "NetrUseAdd",
|
|
["12345678-1234-abcd-ef00-01234567cffb", 4] = "NetrServerReqChallenge",
|
|
["342cfd40-3c6c-11ce-a893-08002b2e9c6d", 61] = "LlsrReplicationServerAddW",
|
|
["2f5f3220-c126-1076-b549-074d078619da", 2] = "NDdeShareDelW",
|
|
["338cd001-2244-31f1-aaaa-900038001003", 25] = "BaseAbortSystemShutdown",
|
|
["c386ca3e-9061-4a72-821e-498d83be188f", 0] = "AudioServerConnect",
|
|
["0a74ef1c-41a4-4e06-83ae-dc74fb1cdd53", 3] = "ItSrvSetDetectionParameters",
|
|
["f5cc5a18-4264-101a-8c59-08002b2f8426", 0] = "NspiBind",
|
|
["4b324fc8-1670-01d3-1278-5a47bf6ee188", 43] = "NetrDfsGetVersion",
|
|
["367abb81-9844-35f1-ad32-98f038001003", 19] = "StartServiceW",
|
|
["3faf4738-3a21-4307-b46c-fdda9bb8c0d5", 6] = "gfxOpenGfx",
|
|
["6bffd098-a112-3610-9833-46c3f87e345a", 17] = "NetrUnjoinDomain",
|
|
["12345778-1234-abcd-ef00-0123456789ab", 56] = "LsarTestCall",
|
|
["12345778-1234-abcd-ef00-0123456789ac", 10] = "SamrCreateGroupInDomain",
|
|
["367abb81-9844-35f1-ad32-98f038001003", 53] = "ScValidatePnPService",
|
|
["5ca4a760-ebb1-11cf-8611-00a0245420ed", 37] = "RpcWinStationTerminateProcess",
|
|
["c386ca3e-9061-4a72-821e-498d83be188f", 48] = "AudioVolumeSetMasterVolumeLevel",
|
|
["12345678-1234-abcd-ef00-0123456789ab", 102] = "RpcCorePrinterDriverInstalled",
|
|
["a4f1db00-ca47-1067-b31f-00dd010662da", 10] = "EcDoConnectEx",
|
|
["3c4728c5-f0ab-448b-bda1-6ce01eb0a6d5", 20] = "RpcSrvGetOriginalSubnetMask",
|
|
["342cfd40-3c6c-11ce-a893-08002b2e9c6d", 36] = "LlsrMappingUserAddW",
|
|
["c386ca3e-9061-4a72-821e-498d83be188f", 65] = "AudioVolumeStepUp",
|
|
["12345678-1234-abcd-ef00-0123456789ab", 48] = "RpcDeletePrintProcessor",
|
|
["367abb81-9844-35f1-ad32-98f038001003", 37] = "ChangeServiceConfig2W",
|
|
["367abb81-9844-35f1-ad32-98f038001003", 30] = "QueryServiceLockStatusA",
|
|
["12345778-1234-abcd-ef00-0123456789ac", 51] = "SamrQueryDisplayInformation3",
|
|
["8d0ffe72-d252-11d0-bf8f-00c04fd9126b", 6] = "KeyrSetDefaultProvider",
|
|
["86d35949-83c9-4044-b424-db363231fd0c", 13] = "SchRpcDelete",
|
|
["8d9f4e40-a03d-11ce-8f69-08003e30051b", 13] = "PNP_GetDeviceRegProp",
|
|
["8d9f4e40-a03d-11ce-8f69-08003e30051b", 38] = "PNP_IsDockStationPresent",
|
|
["5ca4a760-ebb1-11cf-8611-00a0245420ed", 11] = "RpcWinStationVirtualOpen",
|
|
["12345778-1234-abcd-ef00-0123456789ac", 28] = "SamrQueryInformationAlias",
|
|
["4fc742e0-4a10-11cf-8273-00aa004ae673", 17] = "NetrDfsSetDcAddress",
|
|
["d6d70ef0-0e3b-11cb-acc3-08002b1d29c4", 11] = "nsi_profile_elt_inq_done",
|
|
["8d9f4e40-a03d-11ce-8f69-08003e30051b", 0] = "PNP_Disconnect",
|
|
["76f03f96-cdfd-44fc-a22c-64950a001209", 9] = "RpcAsyncGetPrinter",
|
|
["12345678-1234-abcd-ef00-0123456789ab", 80] = "RpcEnumPrinterKey",
|
|
["4fc742e0-4a10-11cf-8273-00aa004ae673", 5] = "NetrDfsEnum",
|
|
["3faf4738-3a21-4307-b46c-fdda9bb8c0d5", 5] = "gfxModifyGx",
|
|
["4b324fc8-1670-01d3-1278-5a47bf6ee188", 50] = "NetrDfsModifyPrefix",
|
|
["4fc742e0-4a10-11cf-8273-00aa004ae673", 13] = "NetrDfsRemoveStdRoot",
|
|
["76f03f96-cdfd-44fc-a22c-64950a001209", 15] = "RpcAsyncAbortPrinter",
|
|
["86d35949-83c9-4044-b424-db363231fd0c", 11] = "SchRpcStop",
|
|
["5ca4a760-ebb1-11cf-8611-00a0245420ed", 48] = "RpcWinStationSendWindowMessage",
|
|
["000001a0-0000-0000-c000-000000000046", 0] = "QueryInterfaceIRemoteSCMActivator",
|
|
["c386ca3e-9061-4a72-821e-498d83be188f", 61] = "AudioMeterGetChannelsRMS",
|
|
["d6d70ef0-0e3b-11cb-acc3-08002b1d29c4", 4] = "nsi_group_mbr_inq_next",
|
|
["99fcfec4-5260-101b-bbcb-00aa0021347a", 1] = "SimplePing",
|
|
["d3fbb514-0e3b-11cb-8fad-08002b1d29c3", 2] = "nsi_binding_lookup_next",
|
|
["76f03f96-cdfd-44fc-a22c-64950a001209", 52] = "RpcAsyncDeleteMonitor",
|
|
["12345778-1234-abcd-ef00-0123456789ac", 25] = "SamrGetMembersInGroup",
|
|
["5ca4a760-ebb1-11cf-8611-00a0245420ed", 69] = "RpcRemoteAssistancePrepareSystemRestore",
|
|
["8d9f4e40-a03d-11ce-8f69-08003e30051b", 54] = "PNP_QueryResConfList",
|
|
["f50aac00-c7f3-428e-a022-a6b71bfb9d43", 2] = "SSCatDBEnumCatalogs",
|
|
["8d0ffe72-d252-11d0-bf8f-00c04fd9126b", 2] = "KeyrEnumerateProviderTypes",
|
|
["12345778-1234-abcd-ef00-0123456789ac", 14] = "SamrCreateAliasInDomain",
|
|
["12345678-1234-abcd-ef00-01234567cffb", 19] = "NetrEnumerateTrustedDomains",
|
|
["3faf4738-3a21-4307-b46c-fdda9bb8c0d5", 12] = "wdmDriverOpenDrvRegKey",
|
|
["342cfd40-3c6c-11ce-a893-08002b2e9c6d", 72] = "LlsrCertificateClaimEnumW",
|
|
["342cfd40-3c6c-11ce-a893-08002b2e9c6d", 75] = "LlsrCertificateClaimAddA",
|
|
["338cd001-2244-31f1-aaaa-900038001003", 24] = "BaseInitiateSystemShutdown",
|
|
["338cd001-2244-31f1-aaaa-900038001003", 21] = "BaseRegSetKeySecurity",
|
|
["12345678-1234-abcd-ef00-0123456789ab", 28] = "RpcWaitForPrinterChange",
|
|
["76f03f96-cdfd-44fc-a22c-64950a001209", 68] = "RpcAsyncReadPrinter",
|
|
["12345678-1234-abcd-ef00-0123456789ab", 54] = "RpcClientFindFirstPrinterChangeNotification",
|
|
["12345678-1234-abcd-ef00-0123456789ab", 104] = "RpcReportJobProcessingProgress",
|
|
["0d72a7d4-6148-11d1-b4aa-00c04fb66ea0", 0] = "SSCertProtectFunction",
|
|
["12345778-1234-abcd-ef00-0123456789ab", 84] = "LsarQueryAuditPolicy",
|
|
["12345778-1234-abcd-ef00-0123456789ac", 2] = "SamrSetSecurityObject",
|
|
["3c4728c5-f0ab-448b-bda1-6ce01eb0a6d5", 1] = "RpcSrvRenewLease",
|
|
["c386ca3e-9061-4a72-821e-498d83be188f", 7] = "AudioServerGetMixFormat",
|
|
["9556dc99-828c-11cf-a37e-00aa003240c7", 16] = "DeleteClass",
|
|
["e1af8308-5d1f-11c9-91a4-08002b14a0fa", 6] = "ept_mgmt_delete",
|
|
["a4f1db00-ca47-1067-b31f-00dd010662da", 0] = "EcDoConnect",
|
|
["c386ca3e-9061-4a72-821e-498d83be188f", 63] = "AudioMeterGetChannelsPeakValues",
|
|
["12345678-1234-abcd-ef00-0123456789ab", 45] = "RpcPrinterMessageBox",
|
|
["6bffd098-a112-3610-9833-46c3f87e345a", 6] = "NetrWkstaTransportAdd",
|
|
["00000143-0000-0000-c000-000000000046", 4] = "RemAddRef",
|
|
["e3514235-4b06-11d1-ab04-00c04fc2dcd2", 0] = "DRSBind",
|
|
["5a7b91f8-ff00-11d0-a9b2-00c04fb6e6fc", 0] = "NetrSendMessage",
|
|
["12345678-1234-abcd-ef00-0123456789ab", 4] = "RpcEnumJobs",
|
|
["86d35949-83c9-4044-b424-db363231fd0c", 10] = "SchRpcStopInstance",
|
|
["4b324fc8-1670-01d3-1278-5a47bf6ee188", 20] = "NetrShareCheck",
|
|
["8d9f4e40-a03d-11ce-8f69-08003e30051b", 48] = "PNP_FreeResDes",
|
|
["12345678-1234-abcd-ef00-0123456789ab", 103] = "RpcGetPrinterDriverPackagePath",
|
|
["367abb81-9844-35f1-ad32-98f038001003", 31] = "StartServiceA",
|
|
["367abb81-9844-35f1-ad32-98f038001003", 36] = "ChangeServiceConfig2A",
|
|
["a4f1db00-ca47-1067-b31f-00dd010662da", 8] = "EcRNetGetDCName",
|
|
["5ca4a760-ebb1-11cf-8611-00a0245420ed", 1] = "RpcWinStationCloseServer",
|
|
["76f03f96-cdfd-44fc-a22c-64950a001209", 47] = "RpcAsyncEnumPorts",
|
|
["6bffd098-a112-3610-9833-012892020162", 2] = "BrowserrQueryOtherDomains",
|
|
["76f03f96-cdfd-44fc-a22c-64950a001209", 59] = "RpcSyncUnRegisterForRemoteNotifications",
|
|
["367abb81-9844-35f1-ad32-98f038001003", 49] = "CloseNotifyHandle",
|
|
["12345678-1234-abcd-ef00-0123456789ab", 29] = "RpcClosePrinter",
|
|
["5ca4a760-ebb1-11cf-8611-00a0245420ed", 19] = "RpcWinStationShadowTarget",
|
|
["12345678-1234-abcd-ef00-0123456789ab", 62] = "RpcRemoteFindFirstPrinterChangeNotification",
|
|
["3c4728c5-f0ab-448b-bda1-6ce01eb0a6d5", 25] = "RpcSrvGetNotificationStatus",
|
|
["342cfd40-3c6c-11ce-a893-08002b2e9c6d", 78] = "LlsrReplicationProductSecurityAddW",
|
|
["12345678-1234-abcd-ef00-0123456789ab", 66] = "RpcRouterReplyPrinterEx",
|
|
["8d9f4e40-a03d-11ce-8f69-08003e30051b", 61] = "PNP_GetCustomDevProp",
|
|
["d6d70ef0-0e3b-11cb-acc3-08002b1d29c4", 16] = "nsi_mgmt_binding_unexport",
|
|
["6bffd098-a112-3610-9833-46c3f87e345a", 30] = "NetrEnumerateComputerNames",
|
|
["12345778-1234-abcd-ef00-0123456789ac", 62] = "SamrConnect4",
|
|
["12345678-1234-abcd-ef00-0123456789ab", 5] = "RpcAddPrinter",
|
|
["86d35949-83c9-4044-b424-db363231fd0c", 2] = "SchRpcRetrieveTask",
|
|
["367abb81-9844-35f1-ad32-98f038001003", 27] = "OpenSCManagerA",
|
|
["12345778-1234-abcd-ef00-0123456789ab", 13] = "LsarEnumerateTrustedDomains",
|
|
["2f5f3220-c126-1076-b549-074d078619da", 14] = "NDdeGetTrustedShareW",
|
|
["4b324fc8-1670-01d3-1278-5a47bf6ee188", 21] = "NetrServerGetInfo",
|
|
["12345678-1234-abcd-ef00-01234567cffb", 11] = "NetrGetDCName",
|
|
["12345678-1234-abcd-ef00-0123456789ab", 57] = "RpcRouterFindFirstPrinterChangeNotificationOld",
|
|
["2f5f3220-c126-1076-b549-074d078619da", 10] = "NDdeShareSetInfoW",
|
|
["45f52c28-7f9f-101a-b52b-08002b2efabe", 2] = "R_WinsTrigger",
|
|
["5ca4a760-ebb1-11cf-8611-00a0245420ed", 12] = "RpcWinStationBeepOpen",
|
|
["82273fdc-e32a-18c3-3f78-827929dc23ea", 5] = "ElfrOldestRecord",
|
|
["76f03f96-cdfd-44fc-a22c-64950a001209", 22] = "RpcAsyncDeleteForm",
|
|
["82273fdc-e32a-18c3-3f78-827929dc23ea", 20] = "ElfrDeregisterClusterSvc",
|
|
["4fc742e0-4a10-11cf-8273-00aa004ae673", 11] = "NetrDfsRemoveFtRoot",
|
|
["e3514235-4b06-11d1-ab04-00c04fc2dcd2", 17] = "DRSAddEntry",
|
|
["f5cc59b4-4264-101a-8c59-08002b2f8426", 8] = "FrsBackupComplete",
|
|
["342cfd40-3c6c-11ce-a893-08002b2e9c6d", 60] = "LlsrReplicationRequestW",
|
|
["17fdd703-1827-4e34-79d4-24a55c53bb37", 0] = "NetrMessageNameAdd",
|
|
["3919286a-b10c-11d0-9ba8-00c04fd92ef5", 3] = "DsRolerDcAsReplica",
|
|
["c386ca3e-9061-4a72-821e-498d83be188f", 40] = "AudioSessionManagerGetCurrentSession",
|
|
["342cfd40-3c6c-11ce-a893-08002b2e9c6d", 46] = "LlsrServerProductEnumW",
|
|
["12345678-1234-abcd-ef00-0123456789ab", 63] = "RpcSpoolerInit",
|
|
["367abb81-9844-35f1-ad32-98f038001003", 6] = "QueryServiceStatus",
|
|
["e3514235-4b06-11d1-ab04-00c04fc2dcd2", 21] = "DRSGetMemberships2",
|
|
["3faf4738-3a21-4307-b46c-fdda9bb8c0d5", 4] = "gfxAddGfx",
|
|
["3faf4738-3a21-4307-b46c-fdda9bb8c0d5", 2] = "gfxCreateGfxList",
|
|
["3c4728c5-f0ab-448b-bda1-6ce01eb0a6d6", 0] = "RpcSrvRequestPrefix",
|
|
["8d9f4e40-a03d-11ce-8f69-08003e30051b", 6] = "PNP_ValidateDeviceInstance",
|
|
["76f03f96-cdfd-44fc-a22c-64950a001209", 7] = "RpcAsyncDeletePrinter",
|
|
["12345778-1234-abcd-ef00-0123456789ab", 16] = "LsarCreateSecret",
|
|
["367abb81-9844-35f1-ad32-98f038001003", 5] = "SetServiceObjectSecurity",
|
|
["12345778-1234-abcd-ef00-0123456789ab", 6] = "LsarOpenPolicy",
|
|
["2f59a331-bf7d-48cb-9ec5-7c090d76e8b8", 0] = "RpcLicensingOpenServer",
|
|
["12345778-1234-abcd-ef00-0123456789ab", 86] = "LsarEnumerateAuditCategories",
|
|
["c386ca3e-9061-4a72-821e-498d83be188f", 9] = "AudioServerGetDevicePeriod",
|
|
["342cfd40-3c6c-11ce-a893-08002b2e9c6d", 62] = "LlsrReplicationServerServiceAddW",
|
|
["4fc742e0-4a10-11cf-8273-00aa004ae673", 15] = "NetrDfsAddStdRootForced",
|
|
["5ca4a760-ebb1-11cf-8611-00a0245420ed", 64] = "RpcWinStationFUSCanRemoteUserDisconnect",
|
|
["12345678-1234-abcd-ef00-0123456789ab", 76] = "RpcClusterSplIsAlive",
|
|
["342cfd40-3c6c-11ce-a893-08002b2e9c6d", 7] = "LlsrProductEnumA",
|
|
["a4f1db00-ca47-1067-b31f-00dd010662da", 9] = "EcDoRpcExt",
|
|
["367abb81-9844-35f1-ad32-98f038001003", 12] = "CreateServiceW",
|
|
["12345778-1234-abcd-ef00-0123456789ab", 29] = "LsarSetSecret",
|
|
["6bffd098-a112-3610-9833-46c3f87e345a", 3] = "NetrWkstaUserGetInfo",
|
|
["8d9f4e40-a03d-11ce-8f69-08003e30051b", 1] = "PNP_Connect",
|
|
["12345678-1234-abcd-ef00-01234567cffb", 43] = "DsrGetForestTrustInformation",
|
|
["5ca4a760-ebb1-11cf-8611-00a0245420ed", 36] = "RpcWinStationEnumerateProcesses",
|
|
["12345778-1234-abcd-ef00-0123456789ac", 42] = "SamrTestPrivateFunctionsDomain",
|
|
["e3514235-4b06-11d1-ab04-00c04fc2dcd2", 19] = "DRSGetReplInfo",
|
|
["12345778-1234-abcd-ef00-0123456789ac", 44] = "SamrGetUserDomainPasswordInformation",
|
|
["e3514235-4b06-11d1-ab04-00c04fc2dcd2", 8] = "DRSVerifyNames",
|
|
["342cfd40-3c6c-11ce-a893-08002b2e9c6d", 59] = "LlsrReplClose",
|
|
["12345778-1234-abcd-ef00-0123456789ab", 75] = "CredrRename",
|
|
["8d9f4e40-a03d-11ce-8f69-08003e30051b", 67] = "PNP_SetObjectProp",
|
|
["4b324fc8-1670-01d3-1278-5a47bf6ee188", 42] = "NetrServerSetServiceBitsEx",
|
|
["c386ca3e-9061-4a72-821e-498d83be188f", 1] = "AudioServerDisconnect",
|
|
["12345778-1234-abcd-ef00-0123456789ab", 65] = "CredrDelete",
|
|
["86d35949-83c9-4044-b424-db363231fd0c", 0] = "SchRpcHighestVersion",
|
|
["76f03f96-cdfd-44fc-a22c-64950a001209", 42] = "RpcAsyncDeletePrinterDriver",
|
|
["12345778-1234-abcd-ef00-0123456789ab", 36] = "LsarEnumerateAccountRights",
|
|
["82273fdc-e32a-18c3-3f78-827929dc23ea", 23] = "ElfrFlushEL",
|
|
["12345678-1234-abcd-ef00-01234567cffb", 32] = "NetrLogonSendToSam",
|
|
["4b324fc8-1670-01d3-1278-5a47bf6ee188", 22] = "NetrServerSetInfo",
|
|
["2f59a331-bf7d-48cb-9ec5-7c090d76e8b8", 2] = "RpcLicensingLoadPolicy",
|
|
["9556dc99-828c-11cf-a37e-00aa003240c7", 22] = "ExecNotificationQuery",
|
|
["342cfd40-3c6c-11ce-a893-08002b2e9c6d", 43] = "LlsrMappingDeleteA",
|
|
["d6d70ef0-0e3b-11cb-acc3-08002b1d29c4", 21] = "nsi_mgmt_inq_set_age",
|
|
["5ca4a760-ebb1-11cf-8611-00a0245420ed", 56] = "RpcWinStationRegisterConsoleNotification",
|
|
["12345778-1234-abcd-ef00-0123456789ac", 58] = "SamrSetInformationUser2",
|
|
["3c4728c5-f0ab-448b-bda1-6ce01eb0a6d5", 8] = "RpcSrvRemoveDnsRegistrations",
|
|
["5ca4a760-ebb1-11cf-8611-00a0245420ed", 59] = "RpcWinStationShadowStop",
|
|
["12345778-1234-abcd-ef00-0123456789ac", 60] = "SamrGetBootKeyInformation",
|
|
["2f5f3220-c126-1076-b549-074d078619da", 3] = "NDdeGetShareSecurityA",
|
|
["12345778-1234-abcd-ef00-0123456789ac", 13] = "SamrEnumerateUsersInDomain",
|
|
["f309ad18-d86a-11d0-a075-00c04fb68820", 3] = "EstablishPosition",
|
|
["a4f1db00-ca47-1067-b31f-00dd010662da", 5] = "EcRUnregisterPushNotification",
|
|
["12345678-1234-abcd-ef00-0123456789ab", 85] = "RpcAddPerMachineConnection",
|
|
["378e52b0-c0a9-11cf-822d-00aa0051e40f", 3] = "SAGetAccountInformation",
|
|
["4fc742e0-4a10-11cf-8273-00aa004ae673", 7] = "NetrDfsMove",
|
|
["367abb81-9844-35f1-ad32-98f038001003", 51] = "ControlServiceExW",
|
|
["4b324fc8-1670-01d3-1278-5a47bf6ee188", 33] = "NetprNameValidate",
|
|
["82273fdc-e32a-18c3-3f78-827929dc23ea", 3] = "ElfrDeregisterEventSource",
|
|
["5ca4a760-ebb1-11cf-8611-00a0245420ed", 49] = "RpcWinStationNotifyNewSession",
|
|
["6bffd098-a112-3610-9833-46c3f87e345a", 27] = "NetrAddAlternateComputerName",
|
|
["4b324fc8-1670-01d3-1278-5a47bf6ee188", 36] = "NetrShareEnumSticky",
|
|
["342cfd40-3c6c-11ce-a893-08002b2e9c6d", 57] = "LlsrServiceInfoSetA",
|
|
["d6d70ef0-0e3b-11cb-acc3-08002b1d29c4", 19] = "nsi_mgmt_entry_inq_if_ids",
|
|
["12345678-1234-abcd-ef00-01234567cffb", 49] = "NetrChainSetClientAttributes",
|
|
["12345678-1234-abcd-ef00-0123456789ab", 69] = "RpcSplOpenPrinter",
|
|
["12345678-1234-abcd-ef00-01234567cffb", 5] = "NetrServerAuthenticate",
|
|
["12345678-1234-abcd-ef00-0123456789ab", 21] = "RpcAbortPrinter",
|
|
["4fc742e0-4a10-11cf-8273-00aa004ae673", 8] = "NetrDfsManagerGetConfigInfo",
|
|
["82273fdc-e32a-18c3-3f78-827929dc23ea", 22] = "ElfrGetLogInformation",
|
|
["12345778-1234-abcd-ef00-0123456789ab", 52] = "LsarCloseTrustedDomainEx",
|
|
["342cfd40-3c6c-11ce-a893-08002b2e9c6d", 85] = "LlsrLocalServiceInfoSetW",
|
|
["342cfd40-3c6c-11ce-a893-08002b2e9c6d", 27] = "LlsrUserProductDeleteA",
|
|
["45f52c28-7f9f-101a-b52b-08002b2efabe", 17] = "R_WinsGetDbRecsByName",
|
|
["342cfd40-3c6c-11ce-a893-08002b2e9c6d", 66] = "LlsrProductSecurityGetA",
|
|
["367abb81-9844-35f1-ad32-98f038001003", 10] = "ScSetServiceBitsW",
|
|
["9556dc99-828c-11cf-a37e-00aa003240c7", 13] = "CreateClassEnumAsync",
|
|
["338cd001-2244-31f1-aaaa-900038001003", 10] = "BaseRegEnumValue",
|
|
["12345778-1234-abcd-ef00-0123456789ab", 4] = "LsarSetSecurityObject",
|
|
["00000143-0000-0000-c000-000000000046", 2] = "Release",
|
|
["12345678-1234-abcd-ef00-0123456789ab", 19] = "RpcWritePrinter",
|
|
["12345678-1234-abcd-ef00-01234567cffb", 22] = "NetrLogonSetServiceBits",
|
|
["50abc2a4-574d-40b3-9d66-ee4fd5fba076", 4] = "DnssrvUpdateRecord",
|
|
["5ca4a760-ebb1-11cf-8611-00a0245420ed", 14] = "RpcWinStationReset",
|
|
["e3514235-4b06-11d1-ab04-00c04fc2dcd2", 22] = "DRSReplicaVerifyObjects",
|
|
["12345678-1234-abcd-ef00-01234567cffb", 25] = "NetrLogonComputeClientDigest",
|
|
["76f03f96-cdfd-44fc-a22c-64950a001209", 25] = "RpcAsyncEnumForms",
|
|
["8d9f4e40-a03d-11ce-8f69-08003e30051b", 24] = "PNP_RegisterDeviceClassAssociation",
|
|
["a4f1db00-ca47-1067-b31f-00dd010662da", 11] = "EcDoRpcExt2",
|
|
["367abb81-9844-35f1-ad32-98f038001003", 15] = "OpenSCManagerW",
|
|
["00000143-0000-0000-c000-000000000046", 6] = "RemQueryInterface2",
|
|
["d6d70ef0-0e3b-11cb-acc3-08002b1d29c4", 12] = "nsi_entry_object_inq_begin",
|
|
["2f59a331-bf7d-48cb-9ec5-7c090d76e8b8", 3] = "RpcLicensingUnloadPolicy",
|
|
["3c4728c5-f0ab-448b-bda1-6ce01eb0a6d5", 4] = "RpcSrvSetFallbackParams",
|
|
["e3514235-4b06-11d1-ab04-00c04fc2dcd2", 3] = "DRSGetNCChanges",
|
|
["3c4728c5-f0ab-448b-bda1-6ce01eb0a6d5", 5] = "RpcSrvGetFallbackParams",
|
|
["76f03f96-cdfd-44fc-a22c-64950a001209", 40] = "RpcAsyncEnumPrinterDrivers",
|
|
["6bffd098-a112-3610-9833-46c3f87e345a", 13] = "NetrWorkstationStatisticsGet",
|
|
["342cfd40-3c6c-11ce-a893-08002b2e9c6d", 82] = "LlsrLocalServiceEnumA",
|
|
["342cfd40-3c6c-11ce-a893-08002b2e9c6d", 34] = "LlsrMappingUserEnumW",
|
|
["12345778-1234-abcd-ef00-0123456789ab", 60] = "CredrWrite",
|
|
["86d35949-83c9-4044-b424-db363231fd0c", 8] = "SchRpcEnumInstances",
|
|
["76f03f96-cdfd-44fc-a22c-64950a001209", 17] = "RpcAsyncGetPrinterDataEx",
|
|
["367abb81-9844-35f1-ad32-98f038001003", 39] = "QueryServiceConfig2W",
|
|
["342cfd40-3c6c-11ce-a893-08002b2e9c6d", 35] = "LlsrMappingUserEnumA",
|
|
["6bffd098-a112-3610-9833-46c3f87e345a", 7] = "NetrWkstaTransportDel",
|
|
["12345778-1234-abcd-ef00-0123456789ac", 50] = "SamrCreateUser2InDomain",
|
|
["12345778-1234-abcd-ef00-0123456789ab", 21] = "LsarGetQuotasForAccount",
|
|
["4b324fc8-1670-01d3-1278-5a47bf6ee188", 26] = "NetrServerTransportEnum",
|
|
["5ca4a760-ebb1-11cf-8611-00a0245420ed", 31] = "RpcWinStationWaitForConnect",
|
|
["5ca4a760-ebb1-11cf-8611-00a0245420ed", 50] = "RpcServerGetInternetConnectorStatus",
|
|
["6bffd098-a112-3610-9833-46c3f87e345a", 16] = "NetrJoinDomain",
|
|
["12345678-1234-abcd-ef00-0123456789ab", 73] = "RpcDeletePrinterData",
|
|
["8d0ffe72-d252-11d0-bf8f-00c04fd9126b", 7] = "KeyrEnroll",
|
|
["338cd001-2244-31f1-aaaa-900038001003", 1] = "OpenCurrentUser",
|
|
["76f03f96-cdfd-44fc-a22c-64950a001209", 6] = "RpcAsyncScheduleJob",
|
|
["c386ca3e-9061-4a72-821e-498d83be188f", 28] = "AudioSessionGetAllVolumes",
|
|
["5ca4a760-ebb1-11cf-8611-00a0245420ed", 45] = "RpcWinStationGetTermSrvCountersValue",
|
|
["12345678-1234-abcd-ef00-0123456789ab", 74] = "RpcClusterSplOpen",
|
|
["86d35949-83c9-4044-b424-db363231fd0c", 15] = "SchRpcScheduledRuntimes",
|
|
["76f03f96-cdfd-44fc-a22c-64950a001209", 60] = "RpcSyncRefreshRemoteNotifications",
|
|
["2f5f3220-c126-1076-b549-074d078619da", 11] = "NDdeSetTrustedShareA",
|
|
["12345778-1234-abcd-ef00-0123456789ab", 42] = "LsarStorePrivateData",
|
|
["e3514235-4b06-11d1-ab04-00c04fc2dcd2", 23] = "DRSGetObjectExistence",
|
|
["f50aac00-c7f3-428e-a022-a6b71bfb9d43", 1] = "SSCatDBDeleteCatalog",
|
|
["45f52c28-7f9f-101a-b52b-08002b2efabe", 15] = "R_WinsDeleteWins",
|
|
["d6d70ef0-0e3b-11cb-acc3-08002b1d29c4", 8] = "nsi_profile_elt_remove",
|
|
["2f5f3220-c126-1076-b549-074d078619da", 1] = "NDdeShareDelA",
|
|
["3faf4738-3a21-4307-b46c-fdda9bb8c0d5", 13] = "winmmAdvisePreferredDeviceChange",
|
|
["83da7c00-e84f-11d2-9807-00c04f8ec850", 4] = "SfcSrv_PurgeCache",
|
|
["e1af8308-5d1f-11c9-91a4-08002b14a0fa", 1] = "ept_delete",
|
|
["12345778-1234-abcd-ef00-0123456789ac", 35] = "SamrDeleteUser",
|
|
["12345778-1234-abcd-ef00-0123456789ab", 46] = "LsarQueryInformationPolicy2",
|
|
["c386ca3e-9061-4a72-821e-498d83be188f", 62] = "AudioMeterGetPeakValue",
|
|
["3c4728c5-f0ab-448b-bda1-6ce01eb0a6d5", 26] = "RpcSrvGetDhcpServicedConnections",
|
|
["3919286a-b10c-11d0-9ba8-00c04fd92ef5", 7] = "DsRolerCancel",
|
|
["3faf4738-3a21-4307-b46c-fdda9bb8c0d5", 1] = "gfxCreateGfxFactoriesList",
|
|
["8d9f4e40-a03d-11ce-8f69-08003e30051b", 66] = "PNP_GetObjectProp",
|
|
["12345778-1234-abcd-ef00-0123456789ac", 53] = "SamrRemoveMultipleMembersFromAlias",
|
|
["12345678-1234-abcd-ef00-0123456789ab", 64] = "RpcResetPrinterEx",
|
|
["342cfd40-3c6c-11ce-a893-08002b2e9c6d", 16] = "LlsrUserEnumW",
|
|
["12345778-1234-abcd-ef00-0123456789ab", 69] = "CredrGetSessionTypes",
|
|
["0a74ef1c-41a4-4e06-83ae-dc74fb1cdd53", 2] = "ItSrvProcessIdleTasks",
|
|
["e1af8308-5d1f-11c9-91a4-08002b14a0fa", 4] = "ept_lookup_handle_free",
|
|
["4b324fc8-1670-01d3-1278-5a47bf6ee188", 14] = "NetrShareAdd",
|
|
["c386ca3e-9061-4a72-821e-498d83be188f", 41] = "AudioSessionManagerGetExistingSession",
|
|
["12345678-1234-abcd-ef00-0123456789ab", 86] = "RpcDeletePerMachineConnection",
|
|
["8d0ffe72-d252-11d0-bf8f-00c04fd9126b", 5] = "KeyrGetDefaultProvider",
|
|
["76f03f96-cdfd-44fc-a22c-64950a001209", 10] = "RpcAsyncStartDocPrinter",
|
|
["338cd001-2244-31f1-aaaa-900038001003", 4] = "OpenUsers",
|
|
["3faf4738-3a21-4307-b46c-fdda9bb8c0d5", 0] = "gfxCreateZoneFactoriesList",
|
|
["9556dc99-828c-11cf-a37e-00aa003240c7", 8] = "PutClass",
|
|
["342cfd40-3c6c-11ce-a893-08002b2e9c6d", 40] = "LlsrMappingAddW",
|
|
["4fc742e0-4a10-11cf-8273-00aa004ae673", 10] = "NetrDfsAddFtRoot",
|
|
["e3514235-4b06-11d1-ab04-00c04fc2dcd2", 2] = "DRSReplicaSync",
|
|
["9556dc99-828c-11cf-a37e-00aa003240c7", 23] = "ExecNotificationQueryAsync",
|
|
["12345678-1234-abcd-ef00-0123456789ab", 35] = "RpcEnumPorts",
|
|
["45f52c28-7f9f-101a-b52b-08002b2efabe", 18] = "R_WinsStatusWHdl",
|
|
["367abb81-9844-35f1-ad32-98f038001003", 13] = "EnumDependentServicesW",
|
|
["12345778-1234-abcd-ef00-0123456789ab", 74] = "LsarSetForestTrustInformation",
|
|
["2f5f3220-c126-1076-b549-074d078619da", 9] = "NDdeShareGetInfoW",
|
|
["4fc742e0-4a10-11cf-8273-00aa004ae673", 0] = "NetrDfsManagerGetVersion",
|
|
["45f52c28-7f9f-101a-b52b-08002b2efabe", 6] = "R_WinsTerm",
|
|
["12345678-1234-abcd-ef00-01234567cffb", 2] = "NetrLogonSamLogon",
|
|
["c386ca3e-9061-4a72-821e-498d83be188f", 6] = "AudioServerGetStreamLatency",
|
|
["342cfd40-3c6c-11ce-a893-08002b2e9c6d", 11] = "LlsrProductUserEnumA"
|
|
}
|
|
|
|
|
|
.. bro:id:: DCE_RPC::pipe_name_to_common_uuid
|
|
|
|
:Type: :bro:type:`table` [:bro:type:`string`] of :bro:type:`string`
|
|
:Attributes: :bro:attr:`&redef`
|
|
:Default:
|
|
|
|
::
|
|
|
|
{
|
|
["srvsvc"] = "4b324fc8-1670-01d3-1278-5a47bf6ee188",
|
|
["winreg"] = "338cd001-2244-31f1-aaaa-900038001003",
|
|
["spoolss"] = "12345678-1234-abcd-ef00-0123456789ab"
|
|
}
|
|
|
|
This table is to map pipe names to the most common
|
|
service used over that pipe. It helps in cases
|
|
where the pipe binding wasn't seen.
|
|
|
|
.. bro:id:: DCE_RPC::uuid_endpoint_map
|
|
|
|
:Type: :bro:type:`table` [:bro:type:`string`] of :bro:type:`string`
|
|
:Attributes: :bro:attr:`&redef` :bro:attr:`&default` = :bro:type:`function` :bro:attr:`&optional`
|
|
:Default:
|
|
|
|
::
|
|
|
|
{
|
|
["82273fdc-e32a-18c3-3f78-827929dc23ea"] = "eventlog",
|
|
["51c82175-844e-4750-b0d8-ec255555bc06"] = "KMS",
|
|
["17fdd703-1827-4e34-79d4-24a55c53bb37"] = "msgsvc",
|
|
["dc12a681-737f-11cf-884d-00aa004b2e24"] = "IWbemClassObject interface",
|
|
["338cd001-2244-31f1-aaaa-900038001003"] = "winreg",
|
|
["68b58241-c259-4f03-a2e5-a2651dcbc930"] = "IKeySvc2",
|
|
["c49e32c6-bc8b-11d2-85d4-00105a1f8304"] = "IWbemBackupRestoreEx interface",
|
|
["2f59a331-bf7d-48cb-9ec5-7c090d76e8b8"] = "lcrpc",
|
|
["44aca674-e8fc-11d0-a07c-00c04fb68820"] = "IWbemContext interface",
|
|
["0b6edbfa-4a24-4fc6-8a23-942b1eca65d1"] = "IRPCAsyncNotify",
|
|
["7c857801-7381-11cf-884d-00aa004b2e24"] = "IWbemObjectSink interface",
|
|
["45f52c28-7f9f-101a-b52b-08002b2efabe"] = "winspipe",
|
|
["8d9f4e40-a03d-11ce-8f69-08003e30051b"] = "pnp",
|
|
["423ec01e-2e35-11d2-b604-00104b703efd"] = "IWbemWCOSmartEnum interface",
|
|
["e3514235-4b06-11d1-ab04-00c04fc2dcd2"] = "drsuapi",
|
|
["6bffd098-a112-3610-9833-46c3f87e345a"] = "wkssvc",
|
|
["1ff70682-0a51-30e8-076d-740be8cee98b"] = "atsvc",
|
|
["d95afe70-a6d5-4259-822e-2c84da1ddb0d"] = "WindowsShutdown",
|
|
["12b81e99-f207-4a4c-85d3-77b42f76fd14"] = "ISeclogon",
|
|
["342cfd40-3c6c-11ce-a893-08002b2e9c6d"] = "llsrpc",
|
|
["99fcfec4-5260-101b-bbcb-00aa0021347a"] = "IObjectExporter",
|
|
["44aca675-e8fc-11d0-a07c-00c04fb68820"] = "IWbemCallResult interface",
|
|
["12345778-1234-abcd-ef00-0123456789ab"] = "lsarpc",
|
|
["5ca4a760-ebb1-11cf-8611-00a0245420ed"] = "winstation_rpc",
|
|
["76f03f96-cdfd-44fc-a22c-64950a001209"] = "IRemoteWinspool",
|
|
["3d267954-eeb7-11d1-b94e-00c04fa3080d"] = "HydraLsPipe",
|
|
["d6d70ef0-0e3b-11cb-acc3-08002b1d29c4"] = "NsiM",
|
|
["6bffd098-a112-3610-9833-012892020162"] = "browser",
|
|
["f50aac00-c7f3-428e-a022-a6b71bfb9d43"] = "ICatDBSvc",
|
|
["541679AB-2E5F-11d3-B34E-00104BCC4B4A"] = "IWbemLoginHelper interface",
|
|
["f5cc5a18-4264-101a-8c59-08002b2f8426"] = "nspi",
|
|
["2f5f3220-c126-1076-b549-074d078619da"] = "nddeapi",
|
|
["3919286a-b10c-11d0-9ba8-00c04fd92ef5"] = "dssetup",
|
|
["f309ad18-d86a-11d0-a075-00c04fb68820"] = "IWbemLevel1Login",
|
|
["12345778-1234-abcd-ef00-0123456789ac"] = "samr",
|
|
["e1af8308-5d1f-11c9-91a4-08002b14a0fa"] = "epmapper",
|
|
["378e52b0-c0a9-11cf-822d-00aa0051e40f"] = "sasec",
|
|
["afa8bd80-7d8a-11c9-bef4-08002b102989"] = "mgmt",
|
|
["12345678-1234-abcd-ef00-0123456789ab"] = "spoolss",
|
|
["a4f1db00-ca47-1067-b31f-00dd010662da"] = "exchange_mapi",
|
|
["894de0c0-0d55-11d3-a322-00c04fa321a1"] = "InitShutdown",
|
|
["ae33069b-a2a8-46ee-a235-ddfd339be281"] = "IRPCRemoteObject",
|
|
["f5cc59b4-4264-101a-8c59-08002b2f8426"] = "FrsRpc",
|
|
["3c4728c5-f0ab-448b-bda1-6ce01eb0a6d6"] = "dhcpcsvc6",
|
|
["d4781cd6-e5d3-44df-ad94-930efe48a887"] = "IWbemLoginClientID",
|
|
["3dde7c30-165d-11d1-ab8f-00805f14db40"] = "BackupKey",
|
|
["d6d70ef0-0e3b-11cb-acc3-08002b1d29c3"] = "NsiS",
|
|
["00000143-0000-0000-c000-000000000046"] = "IRemUnknown2",
|
|
["906b0ce0-c70b-1067-b317-00dd010662da"] = "IXnRemote",
|
|
["4590f812-1d3a-11d0-891f-00aa004b2e24"] = "IWbemClassObject unmarshaler",
|
|
["9a653086-174f-11d2-b5f9-00104b703efd"] = "IWbemClassObject interface",
|
|
["674b6698-ee92-11d0-ad71-00c04fd8fdff"] = "IWbemContext unmarshaler",
|
|
["3faf4738-3a21-4307-b46c-fdda9bb8c0d5"] = "AudioSrv",
|
|
["3c4728c5-f0ab-448b-bda1-6ce01eb0a6d5"] = "RpcSrvDHCPC",
|
|
["4d9f4ab8-7d1c-11cf-861e-0020af6e7c57"] = "IActivation",
|
|
["83da7c00-e84f-11d2-9807-00c04f8ec850"] = "sfcapi",
|
|
["c49e32c7-bc8b-11d2-85d4-00105a1f8304"] = "IWbemBackupRestore interface",
|
|
["5a7b91f8-ff00-11d0-a9b2-00c04fb6e6fc"] = "msgsvcsend",
|
|
["57674cd0-5200-11ce-a897-08002b2e9c6d"] = "lls_license",
|
|
["000001a0-0000-0000-c000-000000000046"] = "IRemoteSCMActivator",
|
|
["1c1c45ee-4395-11d2-b60b-00104b703efd"] = "IWbemFetchSmartEnum interface",
|
|
["4fc742e0-4a10-11cf-8273-00aa004ae673"] = "netdfs",
|
|
["027947e1-d731-11ce-a357-000000000001"] = "IEnumWbemClassObject interface",
|
|
["367abb81-9844-35f1-ad32-98f038001003"] = "svcctl",
|
|
["c8cb7687-e6d3-11d2-a958-00c04f682e16"] = "DAV RPC SERVICE",
|
|
["1544f5e0-613c-11d1-93df-00c04fd7bd09"] = "exchange_rfr",
|
|
["0d72a7d4-6148-11d1-b4aa-00c04fb66ea0"] = "ICertProtect",
|
|
["2c9273e0-1dc3-11d3-b364-00105a1f8177"] = "IWbemRefreshingServices interface",
|
|
["4b324fc8-1670-01d3-1278-5a47bf6ee188"] = "srvsvc",
|
|
["50abc2a4-574d-40b3-9d66-ee4fd5fba076"] = "dnsserver",
|
|
["f1e9c5b2-f59b-11d2-b362-00105a1f8177"] = "IWbemRemoteRefresher interface",
|
|
["9556dc99-828c-11cf-a37e-00aa003240c7"] = "IWbemServices",
|
|
["12345678-1234-abcd-ef00-01234567cffb"] = "netlogon",
|
|
["8d0ffe72-d252-11d0-bf8f-00c04fd9126b"] = "IKeySvc",
|
|
["86d35949-83c9-4044-b424-db363231fd0c"] = "ITaskSchedulerService",
|
|
["91ae6020-9e3c-11cf-8d7c-00aa00c091be"] = "ICertPassage",
|
|
["0a74ef1c-41a4-4e06-83ae-dc74fb1cdd53"] = "idletask",
|
|
["c386ca3e-9061-4a72-821e-498d83be188f"] = "AudioRpc",
|
|
["5261574a-4572-206e-b268-6b199213b4e4"] = "AsyncEMSMDB",
|
|
["a359dec5-e813-4834-8a2a-ba7f1d777d76"] = "IWbemBackupRestoreEx interface",
|
|
["d3fbb514-0e3b-11cb-8fad-08002b1d29c3"] = "NsiC"
|
|
}
|
|
|
|
|
|
|