The Magic Number Database

How does it work?

MagNumDB is a database that contains about 350,000 items. These items are constants, names, values all extracted from more than 6,000 header files (.h, .hxx, .hpp, .idl, etc.) provided by standard Windows and Visual Studio SDKs and WDKs.

Some values have been extracted from the very special uuid.lib file that contains the value of thousands of guids and property keys, not present anywhere else in header files. This can explain some duplicates (because names in uuid.lib are not always exactly the same as names in .h parsed files...).

It also contains around 36,0000 undocumented guids that we found ... meeeeep ...

"C2P5"

To build this database, we have tried many existing parsers, things like CLANG or other fine tools, but they just don't suit our needs. They can't handle thousands of files that don't compile together, they can't handle some specific (or just very old) Microsoft constructs or annotations, they don't remember the stack of #define directives that led to a definition, they only give you a final AST, not a partial one, etc.

So, in the end, we have written a C/C++ parser named C2P5 (for C/CPP/PreProcessor/Parser), tailored specifically for computing constants. C2P5 is capable of preprocessing, parsing and partially evaluating all header files as if they were included in a one big virtual project (that of course, does not compile) on a 32G RAM machine. It currently supports the following preprocessor and C/C++ constructs:

#define preprocessor that define constants
#define preprocessor that define expression to compute constants
C and C++ constants, strings and enum definitions, and some level of pointerness
Special GUID constructs like DECLSPEC_UUID, DEFINE_GUIDSTRUCT, MIDL_INTERFACE, you name it
PROPERTYKEY constructs
Some IDL constructs
Etc.

The parser remembers dynamic preprocessor definitions (#if, #ifdef, etc.) that are conditions for constants definitions and expression computation. All parsed items are saved in the database, as well as the associated conditions. There may be more than one item corresponding to a given name, if there are differences in their associated conditions stack.

C2P5 supports the following types of constants, regardless of the way they are defined in source files:

integer, signed or unsigned, from 8-bit to 128-bit
floating point number, single (32-bit) or double (64-bit)
globally unique identifier, or guid, uuid, CLSID, IID, etc.
string, in narrow, wide, or utf-8/16/32 formats
character, in narrow, wide, or utf-8/16/32 formats
pointer, a constant cast as a pointer
property key, or PROPERTYKEY, or PKEY, a combination of a guid (fmtid) and a 32-bit integer (id).

C2P5 and this MagNumDB web site are written in C# and use a Lucene database as a full-text search engine. C2P5 uses a custom ANTLR4cs C grammar for expression parsing, not for preprocessor parsing.

Frequently Asked Questions

Q: Can I run custom queries?
A: Yes. You can use Lucene's query syntax. Note the Database is case insensitive. Check out the list of columns with their corresponding database column names:
- Index: the item's index.
- Name: the item's name, or title. For enum values, it's prefixed with the enum's name.
  Corresponding database field: title.
- Type: the item's type, expressed in a specific, universal system.
  Corresponding database's field: valuetype, but use the value of the Storage type column for queries on items type.
- Value: the item's value. For string values, it's displayed as is w/o quotes nor escaping.
  Corresponding database field: value. There is also a typedvalue field that can contain database's Int32, Int64, Float, Double or String typed values.
- Hex Value: the item's hexadecimal value, only valid for integer types.
  There is no corresponding database field.
- Signed Value: the item's signed value, only valid for integer and double types. Useful when you found a unsigned number and want to get the corresponding signed value (uint -> int for example).
  There is no corresponding database field.
- Source lines(s): the source lines from which the item was extracted. Comments and characters such as TAB, CR are preserved.
  Corresponding database field: source.
- File path: the file path from which the item was extracted, terminated by the line index.
  Corresponding database field: filepath. There are also directory and filename fields. filename is useful to query for values in a given file.
- Score: Database's score value. Items are returned sorted by score.
- Guid formats: a utility columns that proposes all possible guid formats. Only valid for guid types.
  There is no corresponding database field
- Char type: the character encoding (narrow, wide, etc.). Only valid for char and string values.
  Corresponding database field: chartype.
- Storage type: the exact storage type in the database. Only used for specific queries.
  Corresponding database field: valuetype.
- Conditions: the list of preprocessor conditions for a given item. If a condition is surrounded with a REVERSE function, it means the reverse condition of what's surrounded was the condition.
  Corresponding database field: conditions. There may be multiple conditions fields for one item.
Some important points to note:
- If you search for a negative number (like error codes expressed using signed integers), you can surround the search with double quotes, for example searching for "-2147009290" is equivalent to searching for 0x80073CF6, 80073CF6 (or even 3CF6 in this specific case). If you don't surround negative numbers with double quotes, the system will search for signed and unsigned corresponding values.
- The full-text search uses items' name, value, hex value, guid formats, source lines, etc. so refine your search if you get back too many items.
- You can search for guid binary values using just a part of their full definition. For example, if you search for '79eac9c5', it will get you 3 guid entries
- Leading wild card search (*whatever) is allowed, but it may slow down the search significantly.
Here are some example or custom queries:

title:wm_user returns the WM_USER Windows message item, not all items that reference the WM_USER token.

title:wm_u* returns all items (Windows messages probably) whose name starts with WM_U*.

value:1024 AND title:wm_* returns all items (Windows messages probably) whose name starts with WM_U* and value is 1024. Note AND must be UPPERCASE for database to understand it as an AND operator.

value:"00000002-0000-0000-C000-000000000046" returns the IMalloc IID guid value.
Q: I always get back 400 items at most. Why?
A: The MagNumDb site currently limits the number of returned items to this value by design. This should be enough for most real search scenarios (like enums with a big list of values).
Q: Some values are empty. Why?
A: The expression evaluator cannot always compute the final value, because it sometimes require contextual information (custom defines, compiler architecture, etc.) that the parser doesn't have at parsing time. You can enable the Source line(s) column to check what's the corresponding source and try to work it out by yourself. The origin file path and line number is also included.
Q: Can I get all values for a given enum?
A: Sure. For example, __VSHPROPID is the name of an enum, and a query like this: parent:__VSHPROPID will get all the enum's values (66 entries).
Q: I sometimes get back items whose name starts with "__magnumdb__enum_". Why?
A: C allows unnamed enums. The MagNumDb parser just gives them a name, using the defining file name and a counter.
Q: I sometimes get back the same item/name twice or more with different values. For example: TARGET_IS_NT60_OR_LATER. Why?
A: This can be the case with defines. Their value may be different if they were surrounded by # directives (#if, #else, etc.) in the original source code. You can enable the Condition(s) column to check what are the corresponding conditions for a given item.
Note: if a condition is surrounded with a funny REVERSE function token, it means the reverse condition of what's surrounded.
Q: I can't connect from an IP address but from another one, it works. Why?
A: The server is constantly monitored for excessive usage. It's possible your IP address has been banned because massive sets of queries where observed. If you think this is an error, send us an email.

Database Metrics

Last update date: Thursday May 13, 2020
Items count: 340878
Parsed files count: 8447
Windows SDK version: 10.0.19041.0
NetFx SDK version: 4.8
MSVC Tools version: 14.25.28610

Rest API

There is a JSON version API (you will have to figure out the schema, it's pretty obvious) that you can call here (the search query is the 'q' parameter):

https://www.magnumdb.com/api.aspx?q=0xC000000D&key=you-api-key-goes-here

Note this API also has a 400 items maximum limit and the server is monitored for excessive usage (the key can be removed without notice). If you want to get a key, send us an email.

Contact

We welcome feedback.
Seen anything missing? A bug? A wrong value? Do you have any suggestion for improvements? Do you have an idea for a cool new feature?

Please contact us here

About MagNumDB

All product names, logos, and brands are property of their respective owners. All company, product and service names used in this website are for identification purposes only.

All values, names, source code fragments displayed here have been extracted from files that are property of their respective owners.

THIS SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND OTHER THAN AS SPECIFICALLY SET FORTH IN THE LICENSE AGREEMENT, INCLUDING WITHOUT LIMITATION WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NON-INFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE.



static const int Branch = 312;
#define IMAGE_REL_PPC_BRTAKEN           0x0200  // fix branch prediction bit to predict branch taken
#define IMAGE_REL_PPC_BRNTAKEN          0x0400  // fix branch prediction bit to predict branch not taken
#define IMAGE_REL_AMD64_IMPORT_BR       0x0012  // Indirect branch to an import
#define KRB_NT_MS_BRANCH_ID         -133        // Branch ID
#define TMSUCCESS		0x04000000L						/* dissociate caller from transaction branch */
#define TMSUCCESS		0x04000000L						/* dissociate caller from transaction branch */
#define TMJOIN			0x00200000L						/* caller is joining existing transaction branch */
#define TMJOIN			0x00200000L						/* caller is joining existing transaction branch */
#define TM_JOIN			2								/* caller is joining existing transaction branch */
#define TM_JOIN			2								/* caller is joining existing transaction branch */
#define XA_RBTRANSIENT	XA_RBBASE+7						/* May retry the transaction branch */
#define XA_RBTRANSIENT	XA_RBBASE+7						/* May retry the transaction branch */
#define TMFAIL			0x20000000L						/* dissociates caller and marks transaction branch rollback-only */
#define TMFAIL			0x20000000L						/* dissociates caller and marks transaction branch rollback-only */
#define TMRESUME		0x08000000L						/* caller is resuming association with suspended transaction branch */
#define TMRESUME		0x08000000L						/* caller is resuming association with suspended transaction branch */
#define TM_RESUME		1								/* caller is resuming association with suspended transaction branch */
#define TM_RESUME		1								/* caller is resuming association with suspended transaction branch */
#define XA_RBOTHER		XA_RBBASE+4						/* The resource manager rolled back the transaction branch for a reason not on this list */
#define XA_RBOTHER		XA_RBBASE+4						/* The resource manager rolled back the transaction branch for a reason not on this list */
#define XA_RBTIMEOUT	XA_RBBASE+6						/* A transaction branch took too long */
#define XA_RBTIMEOUT	XA_RBBASE+6						/* A transaction branch took too long */
#define XA_HEURHAZ		8								/* the transaction branch may have been heuristically completed */
#define XA_HEURHAZ		8								/* the transaction branch may have been heuristically completed */
#define XA_HEURCOM		7								/* the transaction branch has been heuristically committed */
#define XA_HEURCOM		7								/* the transaction branch has been heuristically committed */
#define XA_HEURRB		6								/* the transaction branch has been heuristically rolled back */
#define XA_HEURRB		6								/* the transaction branch has been heuristically rolled back */
#define XA_HEURMIX		5								/* the transaction branch has been heuristically committed and rolled back */
#define XA_HEURMIX		5								/* the transaction branch has been heuristically committed and rolled back */
#define XA_RDONLY		3								/* the transaction branch was read-only and has been committed */
#define XA_RDONLY		3								/* the transaction branch was read-only and has been committed */
#define XAER_RMERR		(-3)							/* a resource manager error occurred in the transaction branch */
#define XAER_RMERR		(-3)							/* a resource manager error occurred in the transaction branch */
#define IMAGE_REL_PPC_ADDR24            0x0003  // 26-bit address, shifted left 2 (branch absolute)
#define IMAGE_REL_AMD64_CFG_BR          0x0014  // Indirect branch to a CFG check
#define IMAGE_REL_AMD64_CFG_BR_REX      0x0015  // Indirect branch to a CFG check, with REX.W prefix
#define IMAGE_REL_AMD64_INDIR_BR        0x0017  // Indirect branch to a target in RAX (no CFG)
#define IMAGE_REL_AMD64_INDIR_BR_REX    0x0018  // Indirect branch to a target in RAX, with REX.W prefix (no CFG)
#define IMAGE_REL_AMD64_INDIR_BR_SWITCHTABLE_FIRST  0x0020 // Indirect branch for a switch table using Reg 0 (RAX)
#define IMAGE_REL_AMD64_INDIR_BR_SWITCHTABLE_LAST   0x002F // Indirect branch for a switch table using Reg 15 (R15)
#define DIOCR_INSTALLER   0x00000001    // class installer registry branch
#define DIOCR_INTERFACE   0x00000002    // interface class registry branch
InlineBrTarget	= 4,    // branch target        (I4 (I1 if Short on))
#define IMAGE_REL_PPC_REL24             0x0006  // 26-bit PC-relative offset, shifted left 2 (branch relative)
typedef enum opcode_format_t 
{
	InlineNone		= 0,	// no inline args       
	InlineVar		= 1,	// local variable       (U2 (U1 if Short on))
	InlineI			= 2,	// an signed integer    (I4 (I1 if Short on))
	InlineR			= 3,	// a real number        (R8 (R4 if Short on))
	InlineBrTarget	= 4,    // branch target        (I4 (I1 if Short on))
	InlineI8		= 5,
	InlineMethod	= 6,   // method token (U4)
	InlineField		= 7,   // field token  (U4)
	InlineType		= 8,   // type token   (U4)
	InlineString	= 9,   // string TOKEN (U4)
	InlineSig		= 10,  // signature tok (U4)
	InlineRVA		= 11,  // ldptr token  (U4)
	InlineTok		= 12,  // a meta-data token of unknown type (U4)
	InlineSwitch	= 13,  // count (U4), pcrel1 (U4) .... pcrelN (U4)
	InlinePhi		= 14,  // count (U1), var1 (U2) ... varN (U2) 


	ShortInline 	= 16,						// if this bit is set, the format is the 'short' format
	PrimaryMask   	= (ShortInline-1),			// mask these off to get primary enumeration above
	ShortInlineVar 	= (ShortInline + InlineVar),
	ShortInlineI	= (ShortInline + InlineI),
	ShortInlineR	= (ShortInline + InlineR),
	ShortInlineBrTarget = (ShortInline + InlineBrTarget),
	InlineOpcode	= (ShortInline + InlineNone),    // This is only used internally.  It means the 'opcode' is two byte instead of 1
} OPCODE_FORMAT;

Index	Score	Name	Type	Value	Hex value	Signed value	Guid formats	Char type	Storage type	Source line(s)	File path	Condition(s)
Index	Score	Name	Type	Value	Hex value	Signed value	Guid formats	Char type	Storage type	Source line(s)	File path	Condition(s)
1	4.526709	Branch	Int32	312	0x00000138	312			System.Int32	static const int Branch = 312;	%ProgramFiles(x86)%\Microsoft Visual Studio\2019\Professional\VSSDK\VisualStudioIntegration\Common\Inc\KnownImageIds.h(375,0)
2	3.621367	IMAGE_REL_PPC_BRTAKEN	Int32	512	0x00000200	512			System.Int32	#define IMAGE_REL_PPC_BRTAKEN 0x0200 // fix branch prediction bit to predict branch taken	%ProgramFiles(x86)%\Windows Kits\10\Include\10.0.19041.0\um\winnt.h(17727,0)
3	3.621367	IMAGE_REL_PPC_BRNTAKEN	Int32	1024	0x00000400	1024			System.Int32	#define IMAGE_REL_PPC_BRNTAKEN 0x0400 // fix branch prediction bit to predict branch not taken	%ProgramFiles(x86)%\Windows Kits\10\Include\10.0.19041.0\um\winnt.h(17728,0)
4	3.200866	IMAGE_REL_AMD64_IMPORT_BR	Int32	18	0x00000012	18			System.Int32	#define IMAGE_REL_AMD64_IMPORT_BR 0x0012 // Indirect branch to an import	%ProgramFiles(x86)%\Windows Kits\10\Include\10.0.19041.0\um\winnt.h(17843,0)
5	3.200866	KRB_NT_MS_BRANCH_ID	Int32	-133	0xFFFFFF7B	-133			System.Int32	#define KRB_NT_MS_BRANCH_ID -133 // Branch ID	%ProgramFiles(x86)%\Windows Kits\10\Include\10.0.19041.0\um\NTSecAPI.h(4293,0)	If WINAPI_FAMILY_PARTITION(WINAPI_PARTITION_DESKTOP \| WINAPI_PARTITION_SYSTEM) If (_WIN32_WINNT >= 0x0501)
6	3.168696	TMSUCCESS	Int32	67108864	0x04000000	67108864			System.Int32	#define TMSUCCESS 0x04000000L /* dissociate caller from transaction branch / #define TMSUCCESS 0x04000000L / dissociate caller from transaction branch */	%ProgramFiles(x86)%\Windows Kits\10\Include\10.0.19041.0\um\xa.h(107,0)	If WINAPI_FAMILY_PARTITION(WINAPI_PARTITION_DESKTOP)
7	3.168696	TMJOIN	Int32	2097152	0x00200000	2097152			System.Int32	#define TMJOIN 0x00200000L /* caller is joining existing transaction branch / #define TMJOIN 0x00200000L / caller is joining existing transaction branch */	%ProgramFiles(x86)%\Windows Kits\10\Include\10.0.19041.0\um\xa.h(112,0)	If WINAPI_FAMILY_PARTITION(WINAPI_PARTITION_DESKTOP)
8	3.168696	TM_JOIN	Int32	2	0x00000002	2			System.Int32	#define TM_JOIN 2 /* caller is joining existing transaction branch / #define TM_JOIN 2 / caller is joining existing transaction branch */	%ProgramFiles(x86)%\Windows Kits\10\Include\10.0.19041.0\um\xa.h(117,0)	If WINAPI_FAMILY_PARTITION(WINAPI_PARTITION_DESKTOP)
9	3.168696	XA_RBTRANSIENT	Int32	107	0x0000006B	107			System.Int32	#define XA_RBTRANSIENT XA_RBBASE+7 /* May retry the transaction branch / #define XA_RBTRANSIENT XA_RBBASE+7 / May retry the transaction branch */	%ProgramFiles(x86)%\Windows Kits\10\Include\10.0.19041.0\um\xa.h(134,0)	If WINAPI_FAMILY_PARTITION(WINAPI_PARTITION_DESKTOP)
10	2.716025	TMFAIL	Int32	536870912	0x20000000	536870912			System.Int32	#define TMFAIL 0x20000000L /* dissociates caller and marks transaction branch rollback-only / #define TMFAIL 0x20000000L / dissociates caller and marks transaction branch rollback-only */	%ProgramFiles(x86)%\Windows Kits\10\Include\10.0.19041.0\um\xa.h(104,0)	If WINAPI_FAMILY_PARTITION(WINAPI_PARTITION_DESKTOP)
11	2.716025	TMRESUME	Int32	134217728	0x08000000	134217728			System.Int32	#define TMRESUME 0x08000000L /* caller is resuming association with suspended transaction branch / #define TMRESUME 0x08000000L / caller is resuming association with suspended transaction branch */	%ProgramFiles(x86)%\Windows Kits\10\Include\10.0.19041.0\um\xa.h(106,0)	If WINAPI_FAMILY_PARTITION(WINAPI_PARTITION_DESKTOP)
12	2.716025	TM_RESUME	Int32	1	0x00000001	1			System.Int32	#define TM_RESUME 1 /* caller is resuming association with suspended transaction branch / #define TM_RESUME 1 / caller is resuming association with suspended transaction branch */	%ProgramFiles(x86)%\Windows Kits\10\Include\10.0.19041.0\um\xa.h(118,0)	If WINAPI_FAMILY_PARTITION(WINAPI_PARTITION_DESKTOP)
13	2.716025	XA_RBOTHER	Int32	104	0x00000068	104			System.Int32	#define XA_RBOTHER XA_RBBASE+4 /* The resource manager rolled back the transaction branch for a reason not on this list / #define XA_RBOTHER XA_RBBASE+4 / The resource manager rolled back the transaction branch for a reason not on this list */	%ProgramFiles(x86)%\Windows Kits\10\Include\10.0.19041.0\um\xa.h(131,0)	If WINAPI_FAMILY_PARTITION(WINAPI_PARTITION_DESKTOP)
14	2.716025	XA_RBTIMEOUT	Int32	106	0x0000006A	106			System.Int32	#define XA_RBTIMEOUT XA_RBBASE+6 /* A transaction branch took too long / #define XA_RBTIMEOUT XA_RBBASE+6 / A transaction branch took too long */	%ProgramFiles(x86)%\Windows Kits\10\Include\10.0.19041.0\um\xa.h(133,0)	If WINAPI_FAMILY_PARTITION(WINAPI_PARTITION_DESKTOP)
15	2.716025	XA_HEURHAZ	Int32	8	0x00000008	8			System.Int32	#define XA_HEURHAZ 8 /* the transaction branch may have been heuristically completed / #define XA_HEURHAZ 8 / the transaction branch may have been heuristically completed */	%ProgramFiles(x86)%\Windows Kits\10\Include\10.0.19041.0\um\xa.h(138,0)	If WINAPI_FAMILY_PARTITION(WINAPI_PARTITION_DESKTOP)
16	2.716025	XA_HEURCOM	Int32	7	0x00000007	7			System.Int32	#define XA_HEURCOM 7 /* the transaction branch has been heuristically committed / #define XA_HEURCOM 7 / the transaction branch has been heuristically committed */	%ProgramFiles(x86)%\Windows Kits\10\Include\10.0.19041.0\um\xa.h(139,0)	If WINAPI_FAMILY_PARTITION(WINAPI_PARTITION_DESKTOP)
17	2.716025	XA_HEURRB	Int32	6	0x00000006	6			System.Int32	#define XA_HEURRB 6 /* the transaction branch has been heuristically rolled back / #define XA_HEURRB 6 / the transaction branch has been heuristically rolled back */	%ProgramFiles(x86)%\Windows Kits\10\Include\10.0.19041.0\um\xa.h(140,0)	If WINAPI_FAMILY_PARTITION(WINAPI_PARTITION_DESKTOP)
18	2.716025	XA_HEURMIX	Int32	5	0x00000005	5			System.Int32	#define XA_HEURMIX 5 /* the transaction branch has been heuristically committed and rolled back / #define XA_HEURMIX 5 / the transaction branch has been heuristically committed and rolled back */	%ProgramFiles(x86)%\Windows Kits\10\Include\10.0.19041.0\um\xa.h(141,0)	If WINAPI_FAMILY_PARTITION(WINAPI_PARTITION_DESKTOP)
19	2.716025	XA_RDONLY	Int32	3	0x00000003	3			System.Int32	#define XA_RDONLY 3 /* the transaction branch was read-only and has been committed / #define XA_RDONLY 3 / the transaction branch was read-only and has been committed */	%ProgramFiles(x86)%\Windows Kits\10\Include\10.0.19041.0\um\xa.h(143,0)	If WINAPI_FAMILY_PARTITION(WINAPI_PARTITION_DESKTOP)
20	2.716025	XAER_RMERR	Int32	-3	0xFFFFFFFD	-3			System.Int32	#define XAER_RMERR (-3) /* a resource manager error occurred in the transaction branch / #define XAER_RMERR (-3) / a resource manager error occurred in the transaction branch */	%ProgramFiles(x86)%\Windows Kits\10\Include\10.0.19041.0\um\xa.h(146,0)	If WINAPI_FAMILY_PARTITION(WINAPI_PARTITION_DESKTOP)
21	2.560693	IMAGE_REL_PPC_ADDR24	Int32	3	0x00000003	3			System.Int32	#define IMAGE_REL_PPC_ADDR24 0x0003 // 26-bit address, shifted left 2 (branch absolute)	%ProgramFiles(x86)%\Windows Kits\10\Include\10.0.19041.0\um\winnt.h(17700,0)
22	2.560693	IMAGE_REL_AMD64_CFG_BR	Int32	20	0x00000014	20			System.Int32	#define IMAGE_REL_AMD64_CFG_BR 0x0014 // Indirect branch to a CFG check	%ProgramFiles(x86)%\Windows Kits\10\Include\10.0.19041.0\um\winnt.h(17845,0)
23	2.560693	IMAGE_REL_AMD64_CFG_BR_REX	Int32	21	0x00000015	21			System.Int32	#define IMAGE_REL_AMD64_CFG_BR_REX 0x0015 // Indirect branch to a CFG check, with REX.W prefix	%ProgramFiles(x86)%\Windows Kits\10\Include\10.0.19041.0\um\winnt.h(17846,0)
24	2.560693	IMAGE_REL_AMD64_INDIR_BR	Int32	23	0x00000017	23			System.Int32	#define IMAGE_REL_AMD64_INDIR_BR 0x0017 // Indirect branch to a target in RAX (no CFG)	%ProgramFiles(x86)%\Windows Kits\10\Include\10.0.19041.0\um\winnt.h(17848,0)
25	2.560693	IMAGE_REL_AMD64_INDIR_BR_REX	Int32	24	0x00000018	24			System.Int32	#define IMAGE_REL_AMD64_INDIR_BR_REX 0x0018 // Indirect branch to a target in RAX, with REX.W prefix (no CFG)	%ProgramFiles(x86)%\Windows Kits\10\Include\10.0.19041.0\um\winnt.h(17849,0)
26	2.560693	IMAGE_REL_AMD64_INDIR_BR_SWITCHTABLE_FIRST	Int32	32	0x00000020	32			System.Int32	#define IMAGE_REL_AMD64_INDIR_BR_SWITCHTABLE_FIRST 0x0020 // Indirect branch for a switch table using Reg 0 (RAX)	%ProgramFiles(x86)%\Windows Kits\10\Include\10.0.19041.0\um\winnt.h(17851,0)
27	2.560693	IMAGE_REL_AMD64_INDIR_BR_SWITCHTABLE_LAST	Int32	47	0x0000002F	47			System.Int32	#define IMAGE_REL_AMD64_INDIR_BR_SWITCHTABLE_LAST 0x002F // Indirect branch for a switch table using Reg 15 (R15)	%ProgramFiles(x86)%\Windows Kits\10\Include\10.0.19041.0\um\winnt.h(17852,0)
28	2.560693	DIOCR_INSTALLER	Int32	1	0x00000001	1			System.Int32	#define DIOCR_INSTALLER 0x00000001 // class installer registry branch	%ProgramFiles(x86)%\Windows Kits\10\Include\10.0.19041.0\um\setupapi.h(6067,0)	If WINAPI_FAMILY_PARTITION(WINAPI_PARTITION_DESKTOP)
29	2.560693	DIOCR_INTERFACE	Int32	2	0x00000002	2			System.Int32	#define DIOCR_INTERFACE 0x00000002 // interface class registry branch	%ProgramFiles(x86)%\Windows Kits\10\Include\10.0.19041.0\um\setupapi.h(6068,0)	If WINAPI_FAMILY_PARTITION(WINAPI_PARTITION_DESKTOP)
30	2.560693	OPCODE_FORMAT::InlineBrTarget	Int32	4	0x00000004	4			System.Int32	InlineBrTarget = 4, // branch target (I4 (I1 if Short on))	%ProgramFiles(x86)%\Windows Kits\NETFXSDK\4.8\include\um\openum.h(25,0)
31	2.240606	IMAGE_REL_PPC_REL24	Int32	6	0x00000006	6			System.Int32	#define IMAGE_REL_PPC_REL24 0x0006 // 26-bit PC-relative offset, shifted left 2 (branch relative)	%ProgramFiles(x86)%\Windows Kits\10\Include\10.0.19041.0\um\winnt.h(17703,0)
32	0.8002166	OPCODE_FORMAT	Enum							typedef enum opcode_format_t { InlineNone = 0, // no inline args InlineVar = 1, // local variable (U2 (U1 if Short on)) InlineI = 2, // an signed integer (I4 (I1 if Short on)) InlineR = 3, // a real number (R8 (R4 if Short on)) InlineBrTarget = 4, // branch target (I4 (I1 if Short on)) InlineI8 = 5, InlineMethod = 6, // method token (U4) InlineField = 7, // field token (U4) InlineType = 8, // type token (U4) InlineString = 9, // string TOKEN (U4) InlineSig = 10, // signature tok (U4) InlineRVA = 11, // ldptr token (U4) InlineTok = 12, // a meta-data token of unknown type (U4) InlineSwitch = 13, // count (U4), pcrel1 (U4) .... pcrelN (U4) InlinePhi = 14, // count (U1), var1 (U2) ... varN (U2) ShortInline = 16, // if this bit is set, the format is the 'short' format PrimaryMask = (ShortInline-1), // mask these off to get primary enumeration above ShortInlineVar = (ShortInline + InlineVar), ShortInlineI = (ShortInline + InlineI), ShortInlineR = (ShortInline + InlineR), ShortInlineBrTarget = (ShortInline + InlineBrTarget), InlineOpcode = (ShortInline + InlineNone), // This is only used internally. It means the 'opcode' is two byte instead of 1 } OPCODE_FORMAT;	%ProgramFiles(x86)%\Windows Kits\NETFXSDK\4.8\include\um\openum.h(19,0)