From 3713e0482a00649ae76c2aaf1cad608df4b59b49 Mon Sep 17 00:00:00 2001
From: vm-packages <vm-packages@mandiant.com>
Date: Wed, 18 Oct 2023 16:32:42 +0000
Subject: [PATCH 1/2] Add rpcview.vm

Closes https://github.com/mandiant/VM-Packages/issues/691.
---
 packages/rpcview.vm/rpcview.vm.nuspec             | 12 ++++++++++++
 packages/rpcview.vm/tools/chocolateyinstall.ps1   | 10 ++++++++++
 packages/rpcview.vm/tools/chocolateyuninstall.ps1 |  7 +++++++
 3 files changed, 29 insertions(+)
 create mode 100644 packages/rpcview.vm/rpcview.vm.nuspec
 create mode 100644 packages/rpcview.vm/tools/chocolateyinstall.ps1
 create mode 100644 packages/rpcview.vm/tools/chocolateyuninstall.ps1

diff --git a/packages/rpcview.vm/rpcview.vm.nuspec b/packages/rpcview.vm/rpcview.vm.nuspec
new file mode 100644
index 000000000..9e6e64a19
--- /dev/null
+++ b/packages/rpcview.vm/rpcview.vm.nuspec
@@ -0,0 +1,12 @@
+<?xml version="1.0" encoding="utf-8"?>
+<package xmlns="http://schemas.microsoft.com/packaging/2015/06/nuspec.xsd">
+  <metadata>
+    <id>rpcview.vm</id>
+    <version>0.3.1.20231018</version>
+    <authors>silverf0x</authors>
+    <description>RpcView is an open-source tool to explore and decompile all RPC functionalities present on a Microsoft system</description>
+    <dependencies>
+      <dependency id="common.vm" />
+    </dependencies>
+  </metadata>
+</package>
diff --git a/packages/rpcview.vm/tools/chocolateyinstall.ps1 b/packages/rpcview.vm/tools/chocolateyinstall.ps1
new file mode 100644
index 000000000..7746e1283
--- /dev/null
+++ b/packages/rpcview.vm/tools/chocolateyinstall.ps1
@@ -0,0 +1,10 @@
+$ErrorActionPreference = 'Stop'
+Import-Module vm.common -Force -DisableNameChecking
+
+$toolName = 'RpcView'
+$category = 'Utilities'
+
+$zipUrl = 'https://github.com/silverf0x/RpcView/releases/download/v0.3.1.90/RpcView64.7z'
+$zipSha256 = 'a1d89c9d81a2e9c7558e8f0c91ec8652d40af94726f3125f9fe31206adb528de'
+
+VM-Install-From-Zip $toolName $category $zipUrl -zipSha256 $zipSha256 -consoleApp $false
diff --git a/packages/rpcview.vm/tools/chocolateyuninstall.ps1 b/packages/rpcview.vm/tools/chocolateyuninstall.ps1
new file mode 100644
index 000000000..04405cb1f
--- /dev/null
+++ b/packages/rpcview.vm/tools/chocolateyuninstall.ps1
@@ -0,0 +1,7 @@
+$ErrorActionPreference = 'Continue'
+Import-Module vm.common -Force -DisableNameChecking
+
+$toolName = 'RpcView'
+$category = 'Utilities'
+
+VM-Uninstall $toolName $category

From be88660d9ac06723894a8befec6accb2fa3a75e6 Mon Sep 17 00:00:00 2001
From: Genwei Jiang <binjo.cn@gmail.com>
Date: Mon, 23 Oct 2023 12:25:31 +0800
Subject: [PATCH 2/2] Update rpcview.vm: chocolateyinstall.ps1

---
 packages/rpcview.vm/rpcview.vm.nuspec           | 1 +
 packages/rpcview.vm/tools/chocolateyinstall.ps1 | 2 +-
 2 files changed, 2 insertions(+), 1 deletion(-)

diff --git a/packages/rpcview.vm/rpcview.vm.nuspec b/packages/rpcview.vm/rpcview.vm.nuspec
index 9e6e64a19..0988c7f7a 100644
--- a/packages/rpcview.vm/rpcview.vm.nuspec
+++ b/packages/rpcview.vm/rpcview.vm.nuspec
@@ -7,6 +7,7 @@
     <description>RpcView is an open-source tool to explore and decompile all RPC functionalities present on a Microsoft system</description>
     <dependencies>
       <dependency id="common.vm" />
+      <dependency id="vcredist140" version="[14.36.32532]" />
     </dependencies>
   </metadata>
 </package>
diff --git a/packages/rpcview.vm/tools/chocolateyinstall.ps1 b/packages/rpcview.vm/tools/chocolateyinstall.ps1
index 7746e1283..1cbc4abe0 100644
--- a/packages/rpcview.vm/tools/chocolateyinstall.ps1
+++ b/packages/rpcview.vm/tools/chocolateyinstall.ps1
@@ -7,4 +7,4 @@ $category = 'Utilities'
 $zipUrl = 'https://github.com/silverf0x/RpcView/releases/download/v0.3.1.90/RpcView64.7z'
 $zipSha256 = 'a1d89c9d81a2e9c7558e8f0c91ec8652d40af94726f3125f9fe31206adb528de'
 
-VM-Install-From-Zip $toolName $category $zipUrl -zipSha256 $zipSha256 -consoleApp $false
+VM-Install-From-Zip $toolName $category $zipUrl -zipSha256 $zipSha256 -consoleApp $false -innerFolder $true