How does it work?

MagNumDB is a database that contains about 360,000 items. These items are constants, names, values all extracted from more than 9,000 header files (.h, .hxx, .hpp, .idl, etc.) provided by standard Windows and Visual Studio SDKs and WDKs.

Some values have been extracted from the very special uuid.lib file that contains the value of thousands of guids and property keys, not present anywhere else in header files. This can explain some duplicates (because names in uuid.lib are not always exactly the same as names in .h parsed files...).

It also contains around 36,0000 undocumented guids that we found ... meeeeep ...

 "C2P5"

To build this database, we have tried many existing parsers, things like CLANG or other fine tools, but they just don't suit our needs. They can't handle thousands of files that don't compile together, they can't handle some specific (or just very old) Microsoft constructs or annotations, they don't remember the stack of #define directives that led to a definition, they only give you a final AST, not a partial one, etc.

So, in the end, we have written a C/C++ parser named C2P5 (for C/CPP/PreProcessor/Parser), tailored specifically for computing constants. C2P5 is capable of preprocessing, parsing and partially evaluating all header files as if they were included in a one big virtual project (that of course, does not compile) on a 32G RAM machine. It currently supports the following preprocessor and C/C++ constructs:

  • #define preprocessor that define constants
  • #define preprocessor that define expression to compute constants
  • C and C++ constants, strings and enum definitions, and some level of pointerness
  • Special GUID constructs like DECLSPEC_UUID, DEFINE_GUIDSTRUCT, MIDL_INTERFACE, you name it
  • PROPERTYKEY constructs
  • Some IDL constructs
  • Etc.

The parser remembers dynamic preprocessor definitions (#if, #ifdef, etc.) that are conditions for constants definitions and expression computation. All parsed items are saved in the database, as well as the associated conditions. There may be more than one item corresponding to a given name, if there are differences in their associated conditions stack.

C2P5 supports the following types of constants, regardless of the way they are defined in source files:

  • integer, signed or unsigned, from 8-bit to 128-bit
  • floating point number, single (32-bit) or double (64-bit)
  • globally unique identifier, or guid, uuid, CLSID, IID, etc.
  • string, in narrow, wide, or utf-8/16/32 formats
  • character, in narrow, wide, or utf-8/16/32 formats
  • pointer, a constant cast as a pointer
  • property key, or PROPERTYKEY, or PKEY, a combination of a guid (fmtid) and a 32-bit integer (id).

 Powered by

C2P5 and this MagNumDB web site are written in C# and use a Lucene database as a full-text search engine. C2P5 uses a custom ANTLR4cs C grammar for expression parsing, not for preprocessor parsing.

 

 Frequently Asked Questions

  • Q: Can I run custom queries?
    A: Yes. You can use Lucene's query syntax. Note the Database is case insensitive. Check out the list of columns with their corresponding database column names:

    • Index: the item's index.
    • Name: the item's name, or title. For enum values, it's prefixed with the enum's name.
      Corresponding database field: title.
    • Type: the item's type, expressed in a specific, universal system.
      Corresponding database's field: valuetype, but use the value of the Storage type column for queries on items type.
    • Value: the item's value. For string values, it's displayed as is w/o quotes nor escaping.
      Corresponding database field: value. There is also a typedvalue field that can contain database's Int32, Int64, Float, Double or String typed values.
    • Hex Value: the item's hexadecimal value, only valid for integer types.
      There is no corresponding database field.
    • Signed Value: the item's signed value, only valid for integer and double types. Useful when you found a unsigned number and want to get the corresponding signed value (uint -> int for example).
      There is no corresponding database field.
    • Source lines(s): the source lines from which the item was extracted. Comments and characters such as TAB, CR are preserved.
      Corresponding database field: source.
    • File path: the file path from which the item was extracted, terminated by the line index.
      Corresponding database field: filepath. There are also directory and filename fields. filename is useful to query for values in a given file.
    • Score: Database's score value. Items are returned sorted by score.
    • Guid formats: a utility columns that proposes all possible guid formats. Only valid for guid types.
      There is no corresponding database field
    • Char type: the character encoding (narrow, wide, etc.). Only valid for char and string values.
      Corresponding database field: chartype.
    • Storage type: the exact storage type in the database. Only used for specific queries.
      Corresponding database field: valuetype.
    • Conditions: the list of preprocessor conditions for a given item. If a condition is surrounded with a REVERSE function, it means the reverse condition of what's surrounded was the condition.
      Corresponding database field: conditions. There may be multiple conditions fields for one item.

    Some important points to note:

    • If you search for a negative number (like error codes expressed using signed integers), you can surround the search with double quotes, for example searching for "-2147009290" is equivalent to searching for 0x80073CF6, 80073CF6 (or even 3CF6 in this specific case). If you don't surround negative numbers with double quotes, the system will search for signed and unsigned corresponding values.
    • The full-text search uses items' name, value, hex value, guid formats, source lines, etc. so refine your search if you get back too many items.
    • You can search for guid binary values using just a part of their full definition. For example, if you search for '79eac9c5', it will get you 3 guid entries
    • Leading wild card search (*whatever) is allowed, but it may slow down the search significantly.

    Here are some example or custom queries:

    title:wm_user returns the WM_USER Windows message item, not all items that reference the WM_USER token.

    title:wm_u* returns all items (Windows messages probably) whose name starts with WM_U*.

    value:1024 AND title:wm_* returns all items (Windows messages probably) whose name starts with WM_U* and value is 1024. Note AND must be UPPERCASE for database to understand it as an AND operator.

    value:"00000002-0000-0000-C000-000000000046" returns the IMalloc IID guid value.

  • Q: I always get back 400 items at most. Why?
    A: The MagNumDb site currently limits the number of returned items to this value by design. This should be enough for most real search scenarios (like enums with a big list of values).

  • Q: Some values are empty. Why?
    A: The expression evaluator cannot always compute the final value, because it sometimes require contextual information (custom defines, compiler architecture, etc.) that the parser doesn't have at parsing time. You can enable the Source line(s) column to check what's the corresponding source and try to work it out by yourself. The origin file path and line number is also included.

  • Q: Can I get all values for a given enum?
    A: Sure. For example, __VSHPROPID is the name of an enum, and a query like this: parent:__VSHPROPID will get all the enum's values (66 entries).

  • Q: I sometimes get back items whose name starts with "__magnumdb__enum_". Why?
    A: C allows unnamed enums. The MagNumDb parser just gives them a name, using the defining file name and a counter.

  • Q: I sometimes get back the same item/name twice or more with different values. For example:  TARGET_IS_NT60_OR_LATER. Why?
    A: This can be the case with defines. Their value may be different if they were surrounded by # directives (#if, #else, etc.) in the original source code. You can enable the Condition(s) column to check what are the corresponding conditions for a given item.
    Note: if a condition is surrounded with a funny REVERSE function token, it means the reverse condition of what's surrounded.

  • Q: I can't connect from an IP address but from another one, it works. Why?
    A: The server is constantly monitored for excessive usage. It's possible your IP address has been banned because massive sets of queries where observed. If you think this is an error, send us an email.

 Database Metrics

  • Last update date: Thursday October 7, 2021
  • Items count: 362743
  • Parsed files count: 9541
  • Windows SDK version: 10.0.22000.0
  • NetFx SDK version: 4.8
  • MSVC Tools version: 14.29.30133

 Rest API

There is a JSON version API (you will have to figure out the schema, it's pretty obvious) that you can call here (the search query is the 'q' parameter):

   https://www.magnumdb.com/api.aspx?q=0xC000000D&key=you-api-key-goes-here

Note this API also has a 400 items maximum limit and the server is monitored for excessive usage (the key can be removed without notice). If you want to get a key, send us an email.

 

 Contact

We welcome feedback.
Seen anything missing? A bug? A wrong value? Do you have any suggestion for improvements? Do you have an idea for a cool new feature?

Please contact us here

 About MagNumDB

MagNumDB  2017-2022 Simon Mourier V1.4.0. All rights reserved.

Profile for Simon Mourier at Stack Overflow, Q&A for professional and enthusiast programmers


All product names, logos, and brands are property of their respective owners. All company, product and service names used in this website are for identification purposes only.

All values, names, source code fragments displayed here have been extracted from files that are property of their respective owners.

THIS SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND OTHER THAN AS SPECIFICALLY SET FORTH IN THE LICENSE AGREEMENT, INCLUDING WITHOUT LIMITATION WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NON-INFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE.

Index Score Name Type Value Hex value Signed value Guid formats Char type Storage type Source line(s) File path Condition(s)
Index Score Name Type Value Hex value Signed value Guid formats Char type Storage type Source line(s) File path Condition(s)
1 9.005658 WELL_KNOWN_SID_TYPE::WinNullSid Int32 0 0x00000000 0 System.Int32
WinNullSid                                  = 0,
%ProgramFiles(x86)%\Windows Kits\10\Include\10.0.22000.0\um\winnt.h(10600,0)
2 9.005658 WELL_KNOWN_SID_TYPE::WinWorldSid Int32 1 0x00000001 1 System.Int32
WinWorldSid                                 = 1,
%ProgramFiles(x86)%\Windows Kits\10\Include\10.0.22000.0\um\winnt.h(10601,0)
3 9.005658 WELL_KNOWN_SID_TYPE::WinLocalSid Int32 2 0x00000002 2 System.Int32
WinLocalSid                                 = 2,
%ProgramFiles(x86)%\Windows Kits\10\Include\10.0.22000.0\um\winnt.h(10602,0)
4 9.005658 WELL_KNOWN_SID_TYPE::WinCreatorOwnerSid Int32 3 0x00000003 3 System.Int32
WinCreatorOwnerSid                          = 3,
%ProgramFiles(x86)%\Windows Kits\10\Include\10.0.22000.0\um\winnt.h(10603,0)
5 9.005658 WELL_KNOWN_SID_TYPE::WinCreatorGroupSid Int32 4 0x00000004 4 System.Int32
WinCreatorGroupSid                          = 4,
%ProgramFiles(x86)%\Windows Kits\10\Include\10.0.22000.0\um\winnt.h(10604,0)
6 9.005658 WELL_KNOWN_SID_TYPE::WinCreatorOwnerServerSid Int32 5 0x00000005 5 System.Int32
WinCreatorOwnerServerSid                    = 5,
%ProgramFiles(x86)%\Windows Kits\10\Include\10.0.22000.0\um\winnt.h(10605,0)
7 9.005658 WELL_KNOWN_SID_TYPE::WinCreatorGroupServerSid Int32 6 0x00000006 6 System.Int32
WinCreatorGroupServerSid                    = 6,
%ProgramFiles(x86)%\Windows Kits\10\Include\10.0.22000.0\um\winnt.h(10606,0)
8 9.005658 WELL_KNOWN_SID_TYPE::WinNtAuthoritySid Int32 7 0x00000007 7 System.Int32
WinNtAuthoritySid                           = 7,
%ProgramFiles(x86)%\Windows Kits\10\Include\10.0.22000.0\um\winnt.h(10607,0)
9 9.005658 WELL_KNOWN_SID_TYPE::WinDialupSid Int32 8 0x00000008 8 System.Int32
WinDialupSid                                = 8,
%ProgramFiles(x86)%\Windows Kits\10\Include\10.0.22000.0\um\winnt.h(10608,0)
10 9.005658 WELL_KNOWN_SID_TYPE::WinNetworkSid Int32 9 0x00000009 9 System.Int32
WinNetworkSid                               = 9,
%ProgramFiles(x86)%\Windows Kits\10\Include\10.0.22000.0\um\winnt.h(10609,0)
11 9.005658 WELL_KNOWN_SID_TYPE::WinBatchSid Int32 10 0x0000000A 10 System.Int32
WinBatchSid                                 = 10,
%ProgramFiles(x86)%\Windows Kits\10\Include\10.0.22000.0\um\winnt.h(10610,0)
12 9.005658 WELL_KNOWN_SID_TYPE::WinInteractiveSid Int32 11 0x0000000B 11 System.Int32
WinInteractiveSid                           = 11,
%ProgramFiles(x86)%\Windows Kits\10\Include\10.0.22000.0\um\winnt.h(10611,0)
13 9.005658 WELL_KNOWN_SID_TYPE::WinServiceSid Int32 12 0x0000000C 12 System.Int32
WinServiceSid                               = 12,
%ProgramFiles(x86)%\Windows Kits\10\Include\10.0.22000.0\um\winnt.h(10612,0)
14 9.005658 WELL_KNOWN_SID_TYPE::WinAnonymousSid Int32 13 0x0000000D 13 System.Int32
WinAnonymousSid                             = 13,
%ProgramFiles(x86)%\Windows Kits\10\Include\10.0.22000.0\um\winnt.h(10613,0)
15 9.005658 WELL_KNOWN_SID_TYPE::WinProxySid Int32 14 0x0000000E 14 System.Int32
WinProxySid                                 = 14,
%ProgramFiles(x86)%\Windows Kits\10\Include\10.0.22000.0\um\winnt.h(10614,0)
16 9.005658 WELL_KNOWN_SID_TYPE::WinEnterpriseControllersSid Int32 15 0x0000000F 15 System.Int32
WinEnterpriseControllersSid                 = 15,
%ProgramFiles(x86)%\Windows Kits\10\Include\10.0.22000.0\um\winnt.h(10615,0)
17 9.005658 WELL_KNOWN_SID_TYPE::WinSelfSid Int32 16 0x00000010 16 System.Int32
WinSelfSid                                  = 16,
%ProgramFiles(x86)%\Windows Kits\10\Include\10.0.22000.0\um\winnt.h(10616,0)
18 9.005658 WELL_KNOWN_SID_TYPE::WinAuthenticatedUserSid Int32 17 0x00000011 17 System.Int32
WinAuthenticatedUserSid                     = 17,
%ProgramFiles(x86)%\Windows Kits\10\Include\10.0.22000.0\um\winnt.h(10617,0)
19 9.005658 WELL_KNOWN_SID_TYPE::WinRestrictedCodeSid Int32 18 0x00000012 18 System.Int32
WinRestrictedCodeSid                        = 18,
%ProgramFiles(x86)%\Windows Kits\10\Include\10.0.22000.0\um\winnt.h(10618,0)
20 9.005658 WELL_KNOWN_SID_TYPE::WinTerminalServerSid Int32 19 0x00000013 19 System.Int32
WinTerminalServerSid                        = 19,
%ProgramFiles(x86)%\Windows Kits\10\Include\10.0.22000.0\um\winnt.h(10619,0)
21 9.005658 WELL_KNOWN_SID_TYPE::WinRemoteLogonIdSid Int32 20 0x00000014 20 System.Int32
WinRemoteLogonIdSid                         = 20,
%ProgramFiles(x86)%\Windows Kits\10\Include\10.0.22000.0\um\winnt.h(10620,0)
22 9.005658 WELL_KNOWN_SID_TYPE::WinLogonIdsSid Int32 21 0x00000015 21 System.Int32
WinLogonIdsSid                              = 21,
%ProgramFiles(x86)%\Windows Kits\10\Include\10.0.22000.0\um\winnt.h(10621,0)
23 9.005658 WELL_KNOWN_SID_TYPE::WinLocalSystemSid Int32 22 0x00000016 22 System.Int32
WinLocalSystemSid                           = 22,
%ProgramFiles(x86)%\Windows Kits\10\Include\10.0.22000.0\um\winnt.h(10622,0)
24 9.005658 WELL_KNOWN_SID_TYPE::WinLocalServiceSid Int32 23 0x00000017 23 System.Int32
WinLocalServiceSid                          = 23,
%ProgramFiles(x86)%\Windows Kits\10\Include\10.0.22000.0\um\winnt.h(10623,0)
25 9.005658 WELL_KNOWN_SID_TYPE::WinNetworkServiceSid Int32 24 0x00000018 24 System.Int32
WinNetworkServiceSid                        = 24,
%ProgramFiles(x86)%\Windows Kits\10\Include\10.0.22000.0\um\winnt.h(10624,0)
26 9.005658 WELL_KNOWN_SID_TYPE::WinBuiltinDomainSid Int32 25 0x00000019 25 System.Int32
WinBuiltinDomainSid                         = 25,
%ProgramFiles(x86)%\Windows Kits\10\Include\10.0.22000.0\um\winnt.h(10625,0)
27 9.005658 WELL_KNOWN_SID_TYPE::WinBuiltinAdministratorsSid Int32 26 0x0000001A 26 System.Int32
WinBuiltinAdministratorsSid                 = 26,
%ProgramFiles(x86)%\Windows Kits\10\Include\10.0.22000.0\um\winnt.h(10626,0)
28 9.005658 WELL_KNOWN_SID_TYPE::WinBuiltinUsersSid Int32 27 0x0000001B 27 System.Int32
WinBuiltinUsersSid                          = 27,
%ProgramFiles(x86)%\Windows Kits\10\Include\10.0.22000.0\um\winnt.h(10627,0)
29 9.005658 WELL_KNOWN_SID_TYPE::WinBuiltinGuestsSid Int32 28 0x0000001C 28 System.Int32
WinBuiltinGuestsSid                         = 28,
%ProgramFiles(x86)%\Windows Kits\10\Include\10.0.22000.0\um\winnt.h(10628,0)
30 9.005658 WELL_KNOWN_SID_TYPE::WinBuiltinPowerUsersSid Int32 29 0x0000001D 29 System.Int32
WinBuiltinPowerUsersSid                     = 29,
%ProgramFiles(x86)%\Windows Kits\10\Include\10.0.22000.0\um\winnt.h(10629,0)
31 9.005658 WELL_KNOWN_SID_TYPE::WinBuiltinAccountOperatorsSid Int32 30 0x0000001E 30 System.Int32
WinBuiltinAccountOperatorsSid               = 30,
%ProgramFiles(x86)%\Windows Kits\10\Include\10.0.22000.0\um\winnt.h(10630,0)
32 9.005658 WELL_KNOWN_SID_TYPE::WinBuiltinSystemOperatorsSid Int32 31 0x0000001F 31 System.Int32
WinBuiltinSystemOperatorsSid                = 31,
%ProgramFiles(x86)%\Windows Kits\10\Include\10.0.22000.0\um\winnt.h(10631,0)
33 9.005658 WELL_KNOWN_SID_TYPE::WinBuiltinPrintOperatorsSid Int32 32 0x00000020 32 System.Int32
WinBuiltinPrintOperatorsSid                 = 32,
%ProgramFiles(x86)%\Windows Kits\10\Include\10.0.22000.0\um\winnt.h(10632,0)
34 9.005658 WELL_KNOWN_SID_TYPE::WinBuiltinBackupOperatorsSid Int32 33 0x00000021 33 System.Int32
WinBuiltinBackupOperatorsSid                = 33,
%ProgramFiles(x86)%\Windows Kits\10\Include\10.0.22000.0\um\winnt.h(10633,0)
35 9.005658 WELL_KNOWN_SID_TYPE::WinBuiltinReplicatorSid Int32 34 0x00000022 34 System.Int32
WinBuiltinReplicatorSid                     = 34,
%ProgramFiles(x86)%\Windows Kits\10\Include\10.0.22000.0\um\winnt.h(10634,0)
36 9.005658 WELL_KNOWN_SID_TYPE::WinBuiltinPreWindows2000CompatibleAccessSid Int32 35 0x00000023 35 System.Int32
WinBuiltinPreWindows2000CompatibleAccessSid = 35,
%ProgramFiles(x86)%\Windows Kits\10\Include\10.0.22000.0\um\winnt.h(10635,0)
37 9.005658 WELL_KNOWN_SID_TYPE::WinBuiltinRemoteDesktopUsersSid Int32 36 0x00000024 36 System.Int32
WinBuiltinRemoteDesktopUsersSid             = 36,
%ProgramFiles(x86)%\Windows Kits\10\Include\10.0.22000.0\um\winnt.h(10636,0)
38 9.005658 WELL_KNOWN_SID_TYPE::WinBuiltinNetworkConfigurationOperatorsSid Int32 37 0x00000025 37 System.Int32
WinBuiltinNetworkConfigurationOperatorsSid  = 37,
%ProgramFiles(x86)%\Windows Kits\10\Include\10.0.22000.0\um\winnt.h(10637,0)
39 9.005658 WELL_KNOWN_SID_TYPE::WinAccountAdministratorSid Int32 38 0x00000026 38 System.Int32
WinAccountAdministratorSid                  = 38,
%ProgramFiles(x86)%\Windows Kits\10\Include\10.0.22000.0\um\winnt.h(10638,0)
40 9.005658 WELL_KNOWN_SID_TYPE::WinAccountGuestSid Int32 39 0x00000027 39 System.Int32
WinAccountGuestSid                          = 39,
%ProgramFiles(x86)%\Windows Kits\10\Include\10.0.22000.0\um\winnt.h(10639,0)
41 9.005658 WELL_KNOWN_SID_TYPE::WinAccountKrbtgtSid Int32 40 0x00000028 40 System.Int32
WinAccountKrbtgtSid                         = 40,
%ProgramFiles(x86)%\Windows Kits\10\Include\10.0.22000.0\um\winnt.h(10640,0)
42 9.005658 WELL_KNOWN_SID_TYPE::WinAccountDomainAdminsSid Int32 41 0x00000029 41 System.Int32
WinAccountDomainAdminsSid                   = 41,
%ProgramFiles(x86)%\Windows Kits\10\Include\10.0.22000.0\um\winnt.h(10641,0)
43 9.005658 WELL_KNOWN_SID_TYPE::WinAccountDomainUsersSid Int32 42 0x0000002A 42 System.Int32
WinAccountDomainUsersSid                    = 42,
%ProgramFiles(x86)%\Windows Kits\10\Include\10.0.22000.0\um\winnt.h(10642,0)
44 9.005658 WELL_KNOWN_SID_TYPE::WinAccountDomainGuestsSid Int32 43 0x0000002B 43 System.Int32
WinAccountDomainGuestsSid                   = 43,
%ProgramFiles(x86)%\Windows Kits\10\Include\10.0.22000.0\um\winnt.h(10643,0)
45 9.005658 WELL_KNOWN_SID_TYPE::WinAccountComputersSid Int32 44 0x0000002C 44 System.Int32
WinAccountComputersSid                      = 44,
%ProgramFiles(x86)%\Windows Kits\10\Include\10.0.22000.0\um\winnt.h(10644,0)
46 9.005658 WELL_KNOWN_SID_TYPE::WinAccountControllersSid Int32 45 0x0000002D 45 System.Int32
WinAccountControllersSid                    = 45,
%ProgramFiles(x86)%\Windows Kits\10\Include\10.0.22000.0\um\winnt.h(10645,0)
47 9.005658 WELL_KNOWN_SID_TYPE::WinAccountCertAdminsSid Int32 46 0x0000002E 46 System.Int32
WinAccountCertAdminsSid                     = 46,
%ProgramFiles(x86)%\Windows Kits\10\Include\10.0.22000.0\um\winnt.h(10646,0)
48 9.005658 WELL_KNOWN_SID_TYPE::WinAccountSchemaAdminsSid Int32 47 0x0000002F 47 System.Int32
WinAccountSchemaAdminsSid                   = 47,
%ProgramFiles(x86)%\Windows Kits\10\Include\10.0.22000.0\um\winnt.h(10647,0)
49 9.005658 WELL_KNOWN_SID_TYPE::WinAccountEnterpriseAdminsSid Int32 48 0x00000030 48 System.Int32
WinAccountEnterpriseAdminsSid               = 48,
%ProgramFiles(x86)%\Windows Kits\10\Include\10.0.22000.0\um\winnt.h(10648,0)
50 9.005658 WELL_KNOWN_SID_TYPE::WinAccountPolicyAdminsSid Int32 49 0x00000031 49 System.Int32
WinAccountPolicyAdminsSid                   = 49,
%ProgramFiles(x86)%\Windows Kits\10\Include\10.0.22000.0\um\winnt.h(10649,0)
51 9.005658 WELL_KNOWN_SID_TYPE::WinAccountRasAndIasServersSid Int32 50 0x00000032 50 System.Int32
WinAccountRasAndIasServersSid               = 50,
%ProgramFiles(x86)%\Windows Kits\10\Include\10.0.22000.0\um\winnt.h(10650,0)
52 9.005658 WELL_KNOWN_SID_TYPE::WinNTLMAuthenticationSid Int32 51 0x00000033 51 System.Int32
WinNTLMAuthenticationSid                    = 51,
%ProgramFiles(x86)%\Windows Kits\10\Include\10.0.22000.0\um\winnt.h(10651,0)
53 9.005658 WELL_KNOWN_SID_TYPE::WinDigestAuthenticationSid Int32 52 0x00000034 52 System.Int32
WinDigestAuthenticationSid                  = 52,
%ProgramFiles(x86)%\Windows Kits\10\Include\10.0.22000.0\um\winnt.h(10652,0)
54 9.005658 WELL_KNOWN_SID_TYPE::WinSChannelAuthenticationSid Int32 53 0x00000035 53 System.Int32
WinSChannelAuthenticationSid                = 53,
%ProgramFiles(x86)%\Windows Kits\10\Include\10.0.22000.0\um\winnt.h(10653,0)
55 9.005658 WELL_KNOWN_SID_TYPE::WinThisOrganizationSid Int32 54 0x00000036 54 System.Int32
WinThisOrganizationSid                      = 54,
%ProgramFiles(x86)%\Windows Kits\10\Include\10.0.22000.0\um\winnt.h(10654,0)
56 9.005658 WELL_KNOWN_SID_TYPE::WinOtherOrganizationSid Int32 55 0x00000037 55 System.Int32
WinOtherOrganizationSid                     = 55,
%ProgramFiles(x86)%\Windows Kits\10\Include\10.0.22000.0\um\winnt.h(10655,0)
57 9.005658 WELL_KNOWN_SID_TYPE::WinBuiltinIncomingForestTrustBuildersSid Int32 56 0x00000038 56 System.Int32
WinBuiltinIncomingForestTrustBuildersSid    = 56,
%ProgramFiles(x86)%\Windows Kits\10\Include\10.0.22000.0\um\winnt.h(10656,0)
58 9.005658 WELL_KNOWN_SID_TYPE::WinBuiltinPerfMonitoringUsersSid Int32 57 0x00000039 57 System.Int32
WinBuiltinPerfMonitoringUsersSid            = 57,
%ProgramFiles(x86)%\Windows Kits\10\Include\10.0.22000.0\um\winnt.h(10657,0)
59 9.005658 WELL_KNOWN_SID_TYPE::WinBuiltinPerfLoggingUsersSid Int32 58 0x0000003A 58 System.Int32
WinBuiltinPerfLoggingUsersSid               = 58,
%ProgramFiles(x86)%\Windows Kits\10\Include\10.0.22000.0\um\winnt.h(10658,0)
60 9.005658 WELL_KNOWN_SID_TYPE::WinBuiltinAuthorizationAccessSid Int32 59 0x0000003B 59 System.Int32
WinBuiltinAuthorizationAccessSid            = 59,
%ProgramFiles(x86)%\Windows Kits\10\Include\10.0.22000.0\um\winnt.h(10659,0)
61 9.005658 WELL_KNOWN_SID_TYPE::WinBuiltinTerminalServerLicenseServersSid Int32 60 0x0000003C 60 System.Int32
WinBuiltinTerminalServerLicenseServersSid   = 60,
%ProgramFiles(x86)%\Windows Kits\10\Include\10.0.22000.0\um\winnt.h(10660,0)
62 9.005658 WELL_KNOWN_SID_TYPE::WinBuiltinDCOMUsersSid Int32 61 0x0000003D 61 System.Int32
WinBuiltinDCOMUsersSid                      = 61,
%ProgramFiles(x86)%\Windows Kits\10\Include\10.0.22000.0\um\winnt.h(10661,0)
63 9.005658 WELL_KNOWN_SID_TYPE::WinBuiltinIUsersSid Int32 62 0x0000003E 62 System.Int32
WinBuiltinIUsersSid                         = 62,
%ProgramFiles(x86)%\Windows Kits\10\Include\10.0.22000.0\um\winnt.h(10662,0)
64 9.005658 WELL_KNOWN_SID_TYPE::WinIUserSid Int32 63 0x0000003F 63 System.Int32
WinIUserSid                                 = 63,
%ProgramFiles(x86)%\Windows Kits\10\Include\10.0.22000.0\um\winnt.h(10663,0)
65 9.005658 WELL_KNOWN_SID_TYPE::WinBuiltinCryptoOperatorsSid Int32 64 0x00000040 64 System.Int32
WinBuiltinCryptoOperatorsSid                = 64,
%ProgramFiles(x86)%\Windows Kits\10\Include\10.0.22000.0\um\winnt.h(10664,0)
66 9.005658 WELL_KNOWN_SID_TYPE::WinUntrustedLabelSid Int32 65 0x00000041 65 System.Int32
WinUntrustedLabelSid                        = 65,
%ProgramFiles(x86)%\Windows Kits\10\Include\10.0.22000.0\um\winnt.h(10665,0)
67 9.005658 WELL_KNOWN_SID_TYPE::WinLowLabelSid Int32 66 0x00000042 66 System.Int32
WinLowLabelSid                              = 66,
%ProgramFiles(x86)%\Windows Kits\10\Include\10.0.22000.0\um\winnt.h(10666,0)
68 9.005658 WELL_KNOWN_SID_TYPE::WinMediumLabelSid Int32 67 0x00000043 67 System.Int32
WinMediumLabelSid                           = 67,
%ProgramFiles(x86)%\Windows Kits\10\Include\10.0.22000.0\um\winnt.h(10667,0)
69 9.005658 WELL_KNOWN_SID_TYPE::WinHighLabelSid Int32 68 0x00000044 68 System.Int32
WinHighLabelSid                             = 68,
%ProgramFiles(x86)%\Windows Kits\10\Include\10.0.22000.0\um\winnt.h(10668,0)
70 9.005658 WELL_KNOWN_SID_TYPE::WinSystemLabelSid Int32 69 0x00000045 69 System.Int32
WinSystemLabelSid                           = 69,
%ProgramFiles(x86)%\Windows Kits\10\Include\10.0.22000.0\um\winnt.h(10669,0)
71 9.005658 WELL_KNOWN_SID_TYPE::WinWriteRestrictedCodeSid Int32 70 0x00000046 70 System.Int32
WinWriteRestrictedCodeSid                   = 70,
%ProgramFiles(x86)%\Windows Kits\10\Include\10.0.22000.0\um\winnt.h(10670,0)
72 9.005658 WELL_KNOWN_SID_TYPE::WinCreatorOwnerRightsSid Int32 71 0x00000047 71 System.Int32
WinCreatorOwnerRightsSid                    = 71,
%ProgramFiles(x86)%\Windows Kits\10\Include\10.0.22000.0\um\winnt.h(10671,0)
73 9.005658 WELL_KNOWN_SID_TYPE::WinCacheablePrincipalsGroupSid Int32 72 0x00000048 72 System.Int32
WinCacheablePrincipalsGroupSid              = 72,
%ProgramFiles(x86)%\Windows Kits\10\Include\10.0.22000.0\um\winnt.h(10672,0)
74 9.005658 WELL_KNOWN_SID_TYPE::WinNonCacheablePrincipalsGroupSid Int32 73 0x00000049 73 System.Int32
WinNonCacheablePrincipalsGroupSid           = 73,
%ProgramFiles(x86)%\Windows Kits\10\Include\10.0.22000.0\um\winnt.h(10673,0)
75 9.005658 WELL_KNOWN_SID_TYPE::WinEnterpriseReadonlyControllersSid Int32 74 0x0000004A 74 System.Int32
WinEnterpriseReadonlyControllersSid         = 74,
%ProgramFiles(x86)%\Windows Kits\10\Include\10.0.22000.0\um\winnt.h(10674,0)
76 9.005658 WELL_KNOWN_SID_TYPE::WinAccountReadonlyControllersSid Int32 75 0x0000004B 75 System.Int32
WinAccountReadonlyControllersSid            = 75,
%ProgramFiles(x86)%\Windows Kits\10\Include\10.0.22000.0\um\winnt.h(10675,0)
77 9.005658 WELL_KNOWN_SID_TYPE::WinBuiltinEventLogReadersGroup Int32 76 0x0000004C 76 System.Int32
WinBuiltinEventLogReadersGroup              = 76,
%ProgramFiles(x86)%\Windows Kits\10\Include\10.0.22000.0\um\winnt.h(10676,0)
78 9.005658 WELL_KNOWN_SID_TYPE::WinNewEnterpriseReadonlyControllersSid Int32 77 0x0000004D 77 System.Int32
WinNewEnterpriseReadonlyControllersSid      = 77,
%ProgramFiles(x86)%\Windows Kits\10\Include\10.0.22000.0\um\winnt.h(10677,0)
79 9.005658 WELL_KNOWN_SID_TYPE::WinBuiltinCertSvcDComAccessGroup Int32 78 0x0000004E 78 System.Int32
WinBuiltinCertSvcDComAccessGroup            = 78,
%ProgramFiles(x86)%\Windows Kits\10\Include\10.0.22000.0\um\winnt.h(10678,0)
80 9.005658 WELL_KNOWN_SID_TYPE::WinMediumPlusLabelSid Int32 79 0x0000004F 79 System.Int32
WinMediumPlusLabelSid                       = 79,
%ProgramFiles(x86)%\Windows Kits\10\Include\10.0.22000.0\um\winnt.h(10679,0)
81 9.005658 WELL_KNOWN_SID_TYPE::WinLocalLogonSid Int32 80 0x00000050 80 System.Int32
WinLocalLogonSid                            = 80,
%ProgramFiles(x86)%\Windows Kits\10\Include\10.0.22000.0\um\winnt.h(10680,0)
82 9.005658 WELL_KNOWN_SID_TYPE::WinConsoleLogonSid Int32 81 0x00000051 81 System.Int32
WinConsoleLogonSid                          = 81,
%ProgramFiles(x86)%\Windows Kits\10\Include\10.0.22000.0\um\winnt.h(10681,0)
83 9.005658 WELL_KNOWN_SID_TYPE::WinThisOrganizationCertificateSid Int32 82 0x00000052 82 System.Int32
WinThisOrganizationCertificateSid           = 82,
%ProgramFiles(x86)%\Windows Kits\10\Include\10.0.22000.0\um\winnt.h(10682,0)
84 9.005658 WELL_KNOWN_SID_TYPE::WinApplicationPackageAuthoritySid Int32 83 0x00000053 83 System.Int32
WinApplicationPackageAuthoritySid           = 83,
%ProgramFiles(x86)%\Windows Kits\10\Include\10.0.22000.0\um\winnt.h(10683,0)
85 9.005658 WELL_KNOWN_SID_TYPE::WinBuiltinAnyPackageSid Int32 84 0x00000054 84 System.Int32
WinBuiltinAnyPackageSid                     = 84,
%ProgramFiles(x86)%\Windows Kits\10\Include\10.0.22000.0\um\winnt.h(10684,0)
86 9.005658 WELL_KNOWN_SID_TYPE::WinCapabilityInternetClientSid Int32 85 0x00000055 85 System.Int32
WinCapabilityInternetClientSid              = 85,
%ProgramFiles(x86)%\Windows Kits\10\Include\10.0.22000.0\um\winnt.h(10685,0)
87 9.005658 WELL_KNOWN_SID_TYPE::WinCapabilityInternetClientServerSid Int32 86 0x00000056 86 System.Int32
WinCapabilityInternetClientServerSid        = 86,
%ProgramFiles(x86)%\Windows Kits\10\Include\10.0.22000.0\um\winnt.h(10686,0)
88 9.005658 WELL_KNOWN_SID_TYPE::WinCapabilityPrivateNetworkClientServerSid Int32 87 0x00000057 87 System.Int32
WinCapabilityPrivateNetworkClientServerSid  = 87,
%ProgramFiles(x86)%\Windows Kits\10\Include\10.0.22000.0\um\winnt.h(10687,0)
89 9.005658 WELL_KNOWN_SID_TYPE::WinCapabilityPicturesLibrarySid Int32 88 0x00000058 88 System.Int32
WinCapabilityPicturesLibrarySid             = 88,
%ProgramFiles(x86)%\Windows Kits\10\Include\10.0.22000.0\um\winnt.h(10688,0)
90 9.005658 WELL_KNOWN_SID_TYPE::WinCapabilityVideosLibrarySid Int32 89 0x00000059 89 System.Int32
WinCapabilityVideosLibrarySid               = 89,
%ProgramFiles(x86)%\Windows Kits\10\Include\10.0.22000.0\um\winnt.h(10689,0)
91 9.005658 WELL_KNOWN_SID_TYPE::WinCapabilityMusicLibrarySid Int32 90 0x0000005A 90 System.Int32
WinCapabilityMusicLibrarySid                = 90,
%ProgramFiles(x86)%\Windows Kits\10\Include\10.0.22000.0\um\winnt.h(10690,0)
92 9.005658 WELL_KNOWN_SID_TYPE::WinCapabilityDocumentsLibrarySid Int32 91 0x0000005B 91 System.Int32
WinCapabilityDocumentsLibrarySid            = 91,
%ProgramFiles(x86)%\Windows Kits\10\Include\10.0.22000.0\um\winnt.h(10691,0)
93 9.005658 WELL_KNOWN_SID_TYPE::WinCapabilitySharedUserCertificatesSid Int32 92 0x0000005C 92 System.Int32
WinCapabilitySharedUserCertificatesSid      = 92,
%ProgramFiles(x86)%\Windows Kits\10\Include\10.0.22000.0\um\winnt.h(10692,0)
94 9.005658 WELL_KNOWN_SID_TYPE::WinCapabilityEnterpriseAuthenticationSid Int32 93 0x0000005D 93 System.Int32
WinCapabilityEnterpriseAuthenticationSid    = 93,
%ProgramFiles(x86)%\Windows Kits\10\Include\10.0.22000.0\um\winnt.h(10693,0)
95 9.005658 WELL_KNOWN_SID_TYPE::WinCapabilityRemovableStorageSid Int32 94 0x0000005E 94 System.Int32
WinCapabilityRemovableStorageSid            = 94,
%ProgramFiles(x86)%\Windows Kits\10\Include\10.0.22000.0\um\winnt.h(10694,0)
96 9.005658 WELL_KNOWN_SID_TYPE::WinBuiltinRDSRemoteAccessServersSid Int32 95 0x0000005F 95 System.Int32
WinBuiltinRDSRemoteAccessServersSid         = 95,
%ProgramFiles(x86)%\Windows Kits\10\Include\10.0.22000.0\um\winnt.h(10695,0)
97 9.005658 WELL_KNOWN_SID_TYPE::WinBuiltinRDSEndpointServersSid Int32 96 0x00000060 96 System.Int32
WinBuiltinRDSEndpointServersSid             = 96,
%ProgramFiles(x86)%\Windows Kits\10\Include\10.0.22000.0\um\winnt.h(10696,0)
98 9.005658 WELL_KNOWN_SID_TYPE::WinBuiltinRDSManagementServersSid Int32 97 0x00000061 97 System.Int32
WinBuiltinRDSManagementServersSid           = 97,
%ProgramFiles(x86)%\Windows Kits\10\Include\10.0.22000.0\um\winnt.h(10697,0)
99 9.005658 WELL_KNOWN_SID_TYPE::WinUserModeDriversSid Int32 98 0x00000062 98 System.Int32
WinUserModeDriversSid                       = 98,
%ProgramFiles(x86)%\Windows Kits\10\Include\10.0.22000.0\um\winnt.h(10698,0)
100 9.005658 WELL_KNOWN_SID_TYPE::WinBuiltinHyperVAdminsSid Int32 99 0x00000063 99 System.Int32
WinBuiltinHyperVAdminsSid                   = 99,
%ProgramFiles(x86)%\Windows Kits\10\Include\10.0.22000.0\um\winnt.h(10699,0)
101 9.005658 WELL_KNOWN_SID_TYPE::WinAccountCloneableControllersSid Int32 100 0x00000064 100 System.Int32
WinAccountCloneableControllersSid           = 100,
%ProgramFiles(x86)%\Windows Kits\10\Include\10.0.22000.0\um\winnt.h(10700,0)
102 9.005658 WELL_KNOWN_SID_TYPE::WinBuiltinAccessControlAssistanceOperatorsSid Int32 101 0x00000065 101 System.Int32
WinBuiltinAccessControlAssistanceOperatorsSid = 101,
%ProgramFiles(x86)%\Windows Kits\10\Include\10.0.22000.0\um\winnt.h(10701,0)
103 9.005658 WELL_KNOWN_SID_TYPE::WinBuiltinRemoteManagementUsersSid Int32 102 0x00000066 102 System.Int32
WinBuiltinRemoteManagementUsersSid          = 102,
%ProgramFiles(x86)%\Windows Kits\10\Include\10.0.22000.0\um\winnt.h(10702,0)
104 9.005658 WELL_KNOWN_SID_TYPE::WinAuthenticationAuthorityAssertedSid Int32 103 0x00000067 103 System.Int32
WinAuthenticationAuthorityAssertedSid       = 103,
%ProgramFiles(x86)%\Windows Kits\10\Include\10.0.22000.0\um\winnt.h(10703,0)
105 9.005658 WELL_KNOWN_SID_TYPE::WinAuthenticationServiceAssertedSid Int32 104 0x00000068 104 System.Int32
WinAuthenticationServiceAssertedSid         = 104,
%ProgramFiles(x86)%\Windows Kits\10\Include\10.0.22000.0\um\winnt.h(10704,0)
106 9.005658 WELL_KNOWN_SID_TYPE::WinLocalAccountSid Int32 105 0x00000069 105 System.Int32
WinLocalAccountSid                          = 105,
%ProgramFiles(x86)%\Windows Kits\10\Include\10.0.22000.0\um\winnt.h(10705,0)
107 9.005658 WELL_KNOWN_SID_TYPE::WinLocalAccountAndAdministratorSid Int32 106 0x0000006A 106 System.Int32
WinLocalAccountAndAdministratorSid          = 106,
%ProgramFiles(x86)%\Windows Kits\10\Include\10.0.22000.0\um\winnt.h(10706,0)
108 9.005658 WELL_KNOWN_SID_TYPE::WinAccountProtectedUsersSid Int32 107 0x0000006B 107 System.Int32
WinAccountProtectedUsersSid                 = 107,
%ProgramFiles(x86)%\Windows Kits\10\Include\10.0.22000.0\um\winnt.h(10707,0)
109 9.005658 WELL_KNOWN_SID_TYPE::WinCapabilityAppointmentsSid Int32 108 0x0000006C 108 System.Int32
WinCapabilityAppointmentsSid                = 108,
%ProgramFiles(x86)%\Windows Kits\10\Include\10.0.22000.0\um\winnt.h(10708,0)
110 9.005658 WELL_KNOWN_SID_TYPE::WinCapabilityContactsSid Int32 109 0x0000006D 109 System.Int32
WinCapabilityContactsSid                    = 109,
%ProgramFiles(x86)%\Windows Kits\10\Include\10.0.22000.0\um\winnt.h(10709,0)
111 9.005658 WELL_KNOWN_SID_TYPE::WinAccountDefaultSystemManagedSid Int32 110 0x0000006E 110 System.Int32
WinAccountDefaultSystemManagedSid           = 110,
%ProgramFiles(x86)%\Windows Kits\10\Include\10.0.22000.0\um\winnt.h(10710,0)
112 9.005658 WELL_KNOWN_SID_TYPE::WinBuiltinDefaultSystemManagedGroupSid Int32 111 0x0000006F 111 System.Int32
WinBuiltinDefaultSystemManagedGroupSid      = 111,
%ProgramFiles(x86)%\Windows Kits\10\Include\10.0.22000.0\um\winnt.h(10711,0)
113 9.005658 WELL_KNOWN_SID_TYPE::WinBuiltinStorageReplicaAdminsSid Int32 112 0x00000070 112 System.Int32
WinBuiltinStorageReplicaAdminsSid           = 112,
%ProgramFiles(x86)%\Windows Kits\10\Include\10.0.22000.0\um\winnt.h(10712,0)
114 9.005658 WELL_KNOWN_SID_TYPE::WinAccountKeyAdminsSid Int32 113 0x00000071 113 System.Int32
WinAccountKeyAdminsSid                      = 113,
%ProgramFiles(x86)%\Windows Kits\10\Include\10.0.22000.0\um\winnt.h(10713,0)
115 9.005658 WELL_KNOWN_SID_TYPE::WinAccountEnterpriseKeyAdminsSid Int32 114 0x00000072 114 System.Int32
WinAccountEnterpriseKeyAdminsSid            = 114,
%ProgramFiles(x86)%\Windows Kits\10\Include\10.0.22000.0\um\winnt.h(10714,0)
116 9.005658 WELL_KNOWN_SID_TYPE::WinAuthenticationKeyTrustSid Int32 115 0x00000073 115 System.Int32
WinAuthenticationKeyTrustSid                = 115,
%ProgramFiles(x86)%\Windows Kits\10\Include\10.0.22000.0\um\winnt.h(10715,0)
117 9.005658 WELL_KNOWN_SID_TYPE::WinAuthenticationKeyPropertyMFASid Int32 116 0x00000074 116 System.Int32
WinAuthenticationKeyPropertyMFASid          = 116,
%ProgramFiles(x86)%\Windows Kits\10\Include\10.0.22000.0\um\winnt.h(10716,0)
118 9.005658 WELL_KNOWN_SID_TYPE::WinAuthenticationKeyPropertyAttestationSid Int32 117 0x00000075 117 System.Int32
WinAuthenticationKeyPropertyAttestationSid  = 117,
%ProgramFiles(x86)%\Windows Kits\10\Include\10.0.22000.0\um\winnt.h(10717,0)
119 9.005658 WELL_KNOWN_SID_TYPE::WinAuthenticationFreshKeyAuthSid Int32 118 0x00000076 118 System.Int32
WinAuthenticationFreshKeyAuthSid            = 118,
%ProgramFiles(x86)%\Windows Kits\10\Include\10.0.22000.0\um\winnt.h(10718,0)
120 9.005658 WELL_KNOWN_SID_TYPE::WinBuiltinDeviceOwnersSid Int32 119 0x00000077 119 System.Int32
WinBuiltinDeviceOwnersSid                   = 119,
%ProgramFiles(x86)%\Windows Kits\10\Include\10.0.22000.0\um\winnt.h(10719,0)