Reworked source. Added support for a search binding handle for querying the endpoint mapper.

Author: tyranid

NtApiDotNet/NtApiDotNet.csproj

@@ -301,6 +301,7 @@
     <Compile Include="Win32\AppModel\AppModelUtils.cs" />
     <Compile Include="Win32\AppModel\IApplicationActivationManager.cs" />
     <Compile Include="Win32\ConsoleSession.cs" />
+    <Compile Include="Win32\Rpc\CrackedBindingString.cs" />
     <Compile Include="Win32\Debugger\ArrayTypeInformation.cs" />
     <Compile Include="Win32\Debugger\BaseTypeInformation.cs" />
     <Compile Include="Win32\Debugger\DataSymbolInformation.cs" />
@@ -359,6 +360,10 @@
     <Compile Include="Win32\RpcServerParserFlags.cs" />
     <Compile Include="Win32\SafeHandles\SafeLsaLogonHandle.cs" />
     <Compile Include="Utilities\ASN1\DERParser.cs" />
+    <Compile Include="Win32\SafeHandles\SafeRpcBindingHandle.cs" />
+    <Compile Include="Win32\SafeHandles\SafeRpcIfIdVectorHandle.cs" />
+    <Compile Include="Win32\SafeHandles\SafeRpcInquiryHandle.cs" />
+    <Compile Include="Win32\SafeHandles\SafeRpcStringHandle.cs" />
     <Compile Include="Win32\Security\Authentication\ASN1AuthenticationToken.cs" />
     <Compile Include="Win32\Security\Authentication\AuthenticationKey.cs" />
     <Compile Include="Win32\Security\Authentication\GSSAPIUtils.cs" />
@@ -557,7 +562,9 @@
   <ItemGroup>
     <None Include="Readme.txt" />
   </ItemGroup>
-  <ItemGroup />
+  <ItemGroup>
+    <Folder Include="Win32\Rpc\Internal\" />
+  </ItemGroup>
   <Import Project="$(MSBuildToolsPath)\Microsoft.CSharp.targets" />
   <!-- To modify your build process, add your task inside one of the targets below and uncomment it. 
        Other similar extension points exist, see Microsoft.Common.targets.

NtApiDotNet/Win32/Rpc/CrackedBindingString.cs

@@ -0,0 +1,66 @@
+//  Copyright 2018 Google Inc. All Rights Reserved.
+//
+//  Licensed under the Apache License, Version 2.0 (the "License");
+//  you may not use this file except in compliance with the License.
+//  You may obtain a copy of the License at
+//
+//  http://www.apache.org/licenses/LICENSE-2.0
+//
+//  Unless required by applicable law or agreed to in writing, software
+//  distributed under the License is distributed on an "AS IS" BASIS,
+//  WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+//  See the License for the specific language governing permissions and
+//  limitations under the License.
+
+using NtApiDotNet.Win32.SafeHandles;
+
+namespace NtApiDotNet.Win32.Rpc
+{
+    internal class CrackedBindingString
+    {
+        public string ObjUuid { get; }
+        public string Protseq { get; }
+        public string NetworkAddr { get; }
+        public string Endpoint { get; }
+        public string NetworkOptions { get; }
+
+        public CrackedBindingString(string string_binding)
+        {
+            SafeRpcStringHandle objuuid = null;
+            SafeRpcStringHandle protseq = null;
+            SafeRpcStringHandle endpoint = null;
+            SafeRpcStringHandle networkaddr = null;
+            SafeRpcStringHandle networkoptions = null;
+
+            try
+            {
+                int status = Win32NativeMethods.RpcStringBindingParse(string_binding,
+                    out objuuid, out protseq, out networkaddr, out endpoint, out networkoptions);
+                if (status == 0)
+                {
+                    ObjUuid = objuuid.ToString();
+                    Protseq = protseq.ToString();
+                    Endpoint = endpoint.ToString();
+                    NetworkAddr = networkaddr.ToString();
+                    NetworkOptions = networkoptions.ToString();
+                }
+                else
+                {
+                    ObjUuid = string.Empty;
+                    Protseq = string.Empty;
+                    Endpoint = string.Empty;
+                    NetworkAddr = string.Empty;
+                    NetworkOptions = string.Empty;
+                }
+            }
+            finally
+            {
+                objuuid?.Dispose();
+                protseq?.Dispose();
+                endpoint?.Dispose();
+                networkaddr?.Dispose();
+                networkoptions?.Dispose();
+            }
+        }
+    }
+}

NtApiDotNet/Win32/Rpc/RpcClientBase.cs

@@ -15,6 +15,7 @@
 using NtApiDotNet.Ndr;
 using NtApiDotNet.Ndr.Marshal;
 using NtApiDotNet.Win32.Rpc.Transport;
+using NtApiDotNet.Win32.SafeHandles;
 using System;
 using System.Collections.Generic;
 using System.Diagnostics;

NtApiDotNet/Win32/RpcEndpoint.cs

@@ -12,7 +12,8 @@
 //  See the License for the specific language governing permissions and
 //  limitations under the License.
 
-using NtApiDotNet.Win32.Rpc;
+using NtApiDotNet.Win32.Rpc;
+using NtApiDotNet.Win32.SafeHandles;
 using System;
 
 namespace NtApiDotNet.Win32