# NmxSvcps.dll

- Path: `C:\Program Files (x86)\ArchestrA\Framework\Bin\NmxSvcps.dll`
- Size: 46464 bytes
- Machine: x86
- PE timestamp: 2020-04-06T01:17:23+00:00
- ImageBase: `0x10000000`

## Exports

| Ordinal | RVA | Name |
| ---: | ---: | --- |
| 1 | 0x00001040 | `DllCanUnloadNow` |
| 2 | 0x00001000 | `DllGetClassObject` |
| 3 | 0x000010a0 | `DllRegisterServer` |
| 4 | 0x000010e0 | `DllUnregisterServer` |

## Imports

- `RPCRT4.dll`: `NdrOleAllocate`, `NdrOleFree`, `IUnknown_QueryInterface_Proxy`, `IUnknown_AddRef_Proxy`, `IUnknown_Release_Proxy`, `CStdStubBuffer_QueryInterface`, `CStdStubBuffer_AddRef`, `CStdStubBuffer_Connect`, `CStdStubBuffer_Disconnect`, `CStdStubBuffer_Invoke`, `CStdStubBuffer_IsIIDSupported`, `CStdStubBuffer_CountRefs`, `CStdStubBuffer_DebugServerQueryInterface`, `CStdStubBuffer_DebugServerRelease`, `NdrDllUnregisterProxy`, `NdrDllRegisterProxy`, `NdrCStdStubBuffer_Release`, `NdrDllCanUnloadNow`, `NdrDllGetClassObject`
- `KERNEL32.dll`: `ExitProcess`, `HeapSize`, `GetStringTypeW`, `MultiByteToWideChar`, `LCMapStringW`, `RtlUnwind`, `GetModuleFileNameW`, `WriteFile`, `GetCurrentProcess`, `TerminateProcess`, `IsDebuggerPresent`, `SetUnhandledExceptionFilter`, `UnhandledExceptionFilter`, `LoadLibraryW`, `HeapReAlloc`, `HeapAlloc`, `DisableThreadLibraryCalls`, `IsValidCodePage`, `GetOEMCP`, `GetACP`, `GetCPInfo`, `EnterCriticalSection`, `GetCurrentThreadId`, `DecodePointer`, `GetCommandLineA`, `EncodePointer`, `TlsAlloc`, `TlsGetValue`, `TlsSetValue`, `TlsFree`, `InterlockedIncrement`, `GetModuleHandleW`, `SetLastError`, `GetLastError`, `InterlockedDecrement`, `GetProcAddress`, `HeapFree`, `Sleep`, `IsProcessorFeaturePresent`, `SetHandleCount`, `GetStdHandle`, `InitializeCriticalSectionAndSpinCount`, `GetFileType`, `GetStartupInfoW`, `DeleteCriticalSection`, `GetModuleFileNameA`, `FreeEnvironmentStringsW`, `WideCharToMultiByte`, `GetEnvironmentStringsW`, `HeapCreate`, `HeapDestroy`, `QueryPerformanceCounter`, `GetTickCount`, `GetCurrentProcessId`, `GetSystemTimeAsFileTime`, `LeaveCriticalSection`
- `OLEAUT32.dll`: `BSTR_UserSize`, `BSTR_UserMarshal`, `BSTR_UserUnmarshal`, `BSTR_UserFree`

## Resources

| Type | ID/name | Lang | RVA | Size |
| --- | --- | ---: | ---: | ---: |
| `16` | `1` | 1033 | 0x0000c0a0 | 972 |
| `24` | `2` | 1033 | 0x0000c46c | 346 |

## GUID hits

(none)

## Interesting strings

- `CStdStubBuffer_AddRef`
- `CStdStubBuffer_Connect`
- `CStdStubBuffer_CountRefs`
- `CStdStubBuffer_DebugServerQueryInterface`
- `CStdStubBuffer_DebugServerRelease`
- `CStdStubBuffer_Disconnect`
- `CStdStubBuffer_Invoke`
- `CStdStubBuffer_IsIIDSupported`
- `CStdStubBuffer_QueryInterface`
- `INmxNotify`
- `INmxService`
- `INmxService2`
- `INmxStatus`
- `INmxSvcCallback`
- `INmxSvcStatistics`
- `IUnknown_AddRef_Proxy`
- `IUnknown_QueryInterface_Proxy`
- `IUnknown_Release_Proxy`
- `NdrCStdStubBuffer_Release`
- `NdrDllCanUnloadNow`
- `NdrDllGetClassObject`
- `NdrDllRegisterProxy`
- `NdrDllUnregisterProxy`
- `NdrOleAllocate`
- `NdrOleFree`
- `NmxSvcPS.dll`
- `NmxSvc_v0032`
- `NmxSvcps Module`
- `NmxSvcps.dll`
- `RPCRT4.dll`
- `WriteFile`
- ``.orpc`