Some discovery scripts

rpc_discovery.ps1

Set-GlobalSymbolResolver -DbgHelpPath 'C:\Program Files (x86)\Windows Kits\10\Debuggers\x64\dbghelp.dll'

function Process-RpcProcedure {
    param (
        [string]$Path
    )

    $dllHash = (Get-FileHash -Path $Path).Hash
    $rpcs = Get-RpcServer -Path $Path

    if ($rpcs.Procedures.Count -gt 0) {
        foreach ($rpc in $rpcs) {
            foreach ($procedure in $rpc.Procedures) {
                [PSCustomObject]@{
                    Dll = $Path
                    DllHash = $dllHash
                    Name = $procedure.Name
                    ProcNum = $procedure.ProcNum
                }
            }
        }
    }
}

function Get-RpcProceduresFromService {
    Get-Win32Service | ?{$_.ServiceDll -ne ""} | %{$_.ServiceDLL} | ForEach-Object {
        Process-RpcProcedure -Path $_
    }
}

function Get-RpcProceduresFromPath {
    [CmdletBinding()]
    param (
        [string]$Root = "C:\"
    )

    Get-ChildItem -Path $Root -Recurse -Include "*.dll","*.exe" | ForEach-Object -Parallel {
        . .\importer.ps1
        Process-RpcProcedure -Path $_.FullName
    } -ThrottleLimit 30
}