based on rpcextract @ http://sourceforge.net/projects/openchange/files/Tools/rpcextract-1.0/