RpcView

Dedicated to experts interested in learning everything about their computer, RpcView is a lightweight, portable and easy-to-use application that facilitates a simple interface for exploring RPC (remote process call) functionalities of running processes. It can also decompile the interfaces.

Since installation is not necessary, you can double-click the .exe from the downloaded archive to reach the main app window right away. Because it's portable, you can also keep the tool stored on a USB flash drive to be able to run it on any PC without setup.

The main window has a clean layout and is split into different docs for viewing interfaces, endpoints, procedures, process and interface properties, as well as decompilation details. Any of them can be hidden from sight.

Currently running processes are autodetected at startup so you don't have to click any buttons to trigger a scan. For any selected process, RpcView analyzes all interfaces and shows the PID, UUID, version, type, stub, callback, base, flags, location, description, and other details.

It's possible to configure symbols, increase or decrease the default refresh speed, refresh all info on the spot, hide any columns from the list, and set the address to absolute or RVA. You can ask the tool to show details for all processes (restarts the app and applies administrative rights), as well as filter data by process, endpoints or interfaces.

The application worked smoothly on Windows 10 in our tests, quickly analyzes processes, and had minimal impact on the computer performance.

All aspects considered, RpcView offers a simple and straightforward interface for analzing the RPCs of active processes and decompiling interfaces, backed by practical customization settings for filtering data. It's wrapped in a lightweight and portable package.