SOS.dll

Description: Microsoft NTSD extension for .NET Runtime

Version: 4.8.9310.0

Architecture: 64-bit

Operating System: Windows

SHA256: 5b2cd0d9341fae3ebabb044295398708

File Size: 836.5 KB

Uploaded At: Dec. 1, 2025, 7:20 a.m.

Views: 13

Exported Functions

AnalyzeOOM (Ordinal: 1, Address: 0x38d20)
BPMD (Ordinal: 2, Address: 0x4ac90)
CLRStack (Ordinal: 3, Address: 0x39420)
COMState (Ordinal: 4, Address: 0x39040)
ClrStack (Ordinal: 5, Address: 0x39420)
DebugExtensionInitialize (Ordinal: 6, Address: 0xde00)
DebugExtensionNotify (Ordinal: 7, Address: 0xe150)
DebugExtensionUninitialize (Ordinal: 8, Address: 0xe2b0)
DumpArray (Ordinal: 9, Address: 0x39940)
DumpAssembly (Ordinal: 10, Address: 0x39c90)
DumpCCW (Ordinal: 11, Address: 0x39f40)
DumpClass (Ordinal: 12, Address: 0x3a4a0)
DumpDomain (Ordinal: 13, Address: 0x3aa50)
DumpGCConfigLog (Ordinal: 14, Address: 0x3b080)
DumpGCData (Ordinal: 15, Address: 0x3b420)
DumpGCLog (Ordinal: 16, Address: 0x3b820)
DumpHeap (Ordinal: 17, Address: 0x3bbc0)
DumpIL (Ordinal: 18, Address: 0x3bdf0)
DumpLog (Ordinal: 19, Address: 0x3c3a0)
DumpMD (Ordinal: 20, Address: 0x3c670)
DumpMT (Ordinal: 21, Address: 0x3c830)
DumpModule (Ordinal: 22, Address: 0x3e160)
DumpObj (Ordinal: 23, Address: 0x3e5f0)
DumpRCW (Ordinal: 24, Address: 0x3ebd0)
DumpRuntimeTypes (Ordinal: 25, Address: 0x3f1a0)
DumpSig (Ordinal: 26, Address: 0x3f380)
DumpSigElem (Ordinal: 27, Address: 0x3f5c0)
DumpStack (Ordinal: 28, Address: 0x3f800)
DumpStackObjects (Ordinal: 29, Address: 0x3fac0)
DumpVC (Ordinal: 30, Address: 0x3fec0)
Dumpccw (Ordinal: 31, Address: 0x39f40)
Dumplog (Ordinal: 32, Address: 0x3c3a0)
Dumprcw (Ordinal: 33, Address: 0x3ebd0)
Dumpruntimetypes (Ordinal: 34, Address: 0x3f1a0)
EEHeap (Ordinal: 35, Address: 0x400d0)
EEStack (Ordinal: 36, Address: 0x408a0)
EEVersion (Ordinal: 37, Address: 0x40c90)
EHInfo (Ordinal: 38, Address: 0x40f20)
Ehinfo (Ordinal: 39, Address: 0x40f20)
FinalizeQueue (Ordinal: 40, Address: 0x412c0)
FindAppDomain (Ordinal: 41, Address: 0x418d0)
FindRoots (Ordinal: 42, Address: 0x41ca0)
Findappdomain (Ordinal: 43, Address: 0x418d0)
GCHandleLeaks (Ordinal: 44, Address: 0x42110)
GCHandleleaks (Ordinal: 45, Address: 0x42110)
GCHandles (Ordinal: 46, Address: 0x427b0)
GCHeapStat (Ordinal: 47, Address: 0x42920)
GCInfo (Ordinal: 48, Address: 0x43580)
GCRoot (Ordinal: 49, Address: 0x43a30)
GCWhere (Ordinal: 50, Address: 0x43ce0)
GcHeapStat (Ordinal: 51, Address: 0x42920)
GcWhere (Ordinal: 52, Address: 0x43ce0)
Gchandleleaks (Ordinal: 53, Address: 0x42110)
HandleCLRN (Ordinal: 54, Address: 0x442d0)
HeapStat (Ordinal: 55, Address: 0x42920)
Help (Ordinal: 56, Address: 0x44540)
HistClear (Ordinal: 57, Address: 0xea40)
HistInit (Ordinal: 58, Address: 0xeb40)
HistObj (Ordinal: 59, Address: 0xecb0)
HistObjFind (Ordinal: 60, Address: 0xef40)
HistRoot (Ordinal: 61, Address: 0xf220)
HistStats (Ordinal: 62, Address: 0xf580)
IP2MD (Ordinal: 63, Address: 0x44640)
ListNearObj (Ordinal: 64, Address: 0x44970)
MinidumpMode (Ordinal: 65, Address: 0x44fb0)
Minidumpmode (Ordinal: 66, Address: 0x44fb0)
Name2EE (Ordinal: 67, Address: 0x45180)
ObjSize (Ordinal: 68, Address: 0x45640)
PathTo (Ordinal: 69, Address: 0x458f0)
PrintException (Ordinal: 70, Address: 0x45b10)
Printexception (Ordinal: 71, Address: 0x45b10)
ProcInfo (Ordinal: 72, Address: 0x46050)
RCWCleanupList (Ordinal: 73, Address: 0x46a70)
Rcwcleanuplist (Ordinal: 74, Address: 0x46a70)
SOSFlush (Ordinal: 75, Address: 0x46c60)
SaveModule (Ordinal: 76, Address: 0x46d60)
StopOnException (Ordinal: 77, Address: 0x474a0)
Stoponexception (Ordinal: 78, Address: 0x474a0)
SyncBlk (Ordinal: 79, Address: 0x47b10)
ThreadPool (Ordinal: 80, Address: 0x48160)
ThreadState (Ordinal: 81, Address: 0x486b0)
Threads (Ordinal: 82, Address: 0x487a0)
Token2EE (Ordinal: 83, Address: 0x48a40)
TraverseHeap (Ordinal: 84, Address: 0x48df0)
Traverseheap (Ordinal: 85, Address: 0x48df0)
U (Ordinal: 86, Address: 0x4bb70)
VMMap (Ordinal: 87, Address: 0x49120)
VMStat (Ordinal: 88, Address: 0x49240)
VerifyHeap (Ordinal: 89, Address: 0x49360)
VerifyObj (Ordinal: 90, Address: 0x49650)
VerifyStackTrace (Ordinal: 91, Address: 0x49890)
Verifyheap (Ordinal: 92, Address: 0x49360)
WatsonBuckets (Ordinal: 93, Address: 0x4a040)
_EFN_GetManagedExcepStack (Ordinal: 94, Address: 0x4a2f0)
_EFN_GetManagedExcepStackW (Ordinal: 95, Address: 0x4a5f0)
_EFN_GetManagedObjectFieldInfo (Ordinal: 96, Address: 0x4a720)
_EFN_GetManagedObjectName (Ordinal: 97, Address: 0x4a970)
_EFN_StackTrace (Ordinal: 98, Address: 0x4ab40)
analyzeoom (Ordinal: 99, Address: 0x38d20)
ao (Ordinal: 100, Address: 0x38d20)
bpmd (Ordinal: 101, Address: 0x4ac90)
clrstack (Ordinal: 102, Address: 0x39420)
comstate (Ordinal: 103, Address: 0x39040)
da (Ordinal: 104, Address: 0x39940)
dclog (Ordinal: 105, Address: 0x3b080)
dgc (Ordinal: 106, Address: 0x3b420)
dlog (Ordinal: 107, Address: 0x3b820)
do (Ordinal: 108, Address: 0x3e5f0)
dso (Ordinal: 109, Address: 0x3fac0)
dumparray (Ordinal: 110, Address: 0x39940)
dumpassembly (Ordinal: 111, Address: 0x39c90)
dumpccw (Ordinal: 112, Address: 0x39f40)
dumpclass (Ordinal: 113, Address: 0x3a4a0)
dumpdomain (Ordinal: 114, Address: 0x3aa50)
dumpgcconfiglog (Ordinal: 115, Address: 0x3b080)
dumpgcdata (Ordinal: 116, Address: 0x3b420)
dumpgclog (Ordinal: 117, Address: 0x3b820)
dumpheap (Ordinal: 118, Address: 0x3bbc0)
dumpil (Ordinal: 119, Address: 0x3bdf0)
dumplog (Ordinal: 120, Address: 0x3c3a0)
dumpmd (Ordinal: 121, Address: 0x3c670)
dumpmodule (Ordinal: 122, Address: 0x3e160)
dumpmt (Ordinal: 123, Address: 0x3c830)
dumpobj (Ordinal: 124, Address: 0x3e5f0)
dumprcw (Ordinal: 125, Address: 0x3ebd0)
dumpruntimetypes (Ordinal: 126, Address: 0x3f1a0)
dumpsig (Ordinal: 127, Address: 0x3f380)
dumpsigelem (Ordinal: 128, Address: 0x3f5c0)
dumpstack (Ordinal: 129, Address: 0x3f800)
dumpstackobjects (Ordinal: 130, Address: 0x3fac0)
dumpvc (Ordinal: 131, Address: 0x3fec0)
eeheap (Ordinal: 132, Address: 0x400d0)
eestack (Ordinal: 133, Address: 0x408a0)
eeversion (Ordinal: 134, Address: 0x40c90)
ehinfo (Ordinal: 135, Address: 0x40f20)
finalizequeue (Ordinal: 136, Address: 0x412c0)
findappdomain (Ordinal: 137, Address: 0x418d0)
findroots (Ordinal: 138, Address: 0x41ca0)
fq (Ordinal: 139, Address: 0x412c0)
gchandleleaks (Ordinal: 140, Address: 0x42110)
gchandles (Ordinal: 141, Address: 0x427b0)
gcheapstat (Ordinal: 142, Address: 0x42920)
gcinfo (Ordinal: 143, Address: 0x43580)
gcroot (Ordinal: 144, Address: 0x43a30)
gcwhere (Ordinal: 145, Address: 0x43ce0)
heapstat (Ordinal: 146, Address: 0x42920)
help (Ordinal: 147, Address: 0x44540)
histclear (Ordinal: 148, Address: 0xea40)
histinit (Ordinal: 149, Address: 0xeb40)
histobj (Ordinal: 150, Address: 0xecb0)
histobjfind (Ordinal: 151, Address: 0xef40)
histroot (Ordinal: 152, Address: 0xf220)
histstats (Ordinal: 153, Address: 0xf580)
hof (Ordinal: 154, Address: 0xef40)
ip2md (Ordinal: 155, Address: 0x44640)
listnearobj (Ordinal: 156, Address: 0x44970)
lno (Ordinal: 157, Address: 0x44970)
minidumpmode (Ordinal: 158, Address: 0x44fb0)
name2ee (Ordinal: 159, Address: 0x45180)
objsize (Ordinal: 160, Address: 0x45640)
pathto (Ordinal: 161, Address: 0x458f0)
pe (Ordinal: 162, Address: 0x45b10)
printexception (Ordinal: 163, Address: 0x45b10)
procinfo (Ordinal: 164, Address: 0x46050)
rcwcleanuplist (Ordinal: 165, Address: 0x46a70)
savemodule (Ordinal: 166, Address: 0x46d60)
soe (Ordinal: 167, Address: 0x474a0)
sosflush (Ordinal: 168, Address: 0x46c60)
stoponexception (Ordinal: 169, Address: 0x474a0)
syncblk (Ordinal: 170, Address: 0x47b10)
t (Ordinal: 171, Address: 0x487a0)
threadpool (Ordinal: 172, Address: 0x48160)
threads (Ordinal: 173, Address: 0x487a0)
threadstate (Ordinal: 174, Address: 0x486b0)
token2ee (Ordinal: 175, Address: 0x48a40)
tp (Ordinal: 176, Address: 0x48160)
traverseheap (Ordinal: 177, Address: 0x48df0)
u (Ordinal: 178, Address: 0x4bb70)
verifyheap (Ordinal: 179, Address: 0x49360)
verifyobj (Ordinal: 180, Address: 0x49650)
vh (Ordinal: 181, Address: 0x49360)
vmmap (Ordinal: 182, Address: 0x49120)
vmstat (Ordinal: 183, Address: 0x49240)
vo (Ordinal: 184, Address: 0x49650)

Imported DLLs & Functions

dbgeng.dll

DebugCreate (Address: 0x180087310)

dbghelp.dll

SymFindFileInPathW (Address: 0x180087320)

KERNEL32.dll

CloseHandle (Address: 0x180087010)
ConvertThreadToFiber (Address: 0x1800870c8)
CreateEventW (Address: 0x1800871b8)
CreateFiber (Address: 0x1800870b8)
CreateFileA (Address: 0x180087000)
CreateFileMappingA (Address: 0x180087040)
CreateFileW (Address: 0x180087158)
DebugBreak (Address: 0x180087088)
DeleteCriticalSection (Address: 0x180087198)
DeleteFiber (Address: 0x1800870c0)
EncodePointer (Address: 0x180087238)
EnterCriticalSection (Address: 0x180087180)
ExitProcess (Address: 0x180087260)
FileTimeToLocalFileTime (Address: 0x180087070)
FileTimeToSystemTime (Address: 0x180087060)
FindClose (Address: 0x1800870f0)
FindFirstFileExA (Address: 0x1800872a8)
FindNextFileA (Address: 0x1800872b0)
FindResourceA (Address: 0x1800870e0)
FlushFileBuffers (Address: 0x180087150)
FreeEnvironmentStringsW (Address: 0x180087168)
FreeLibrary (Address: 0x180087090)
GetACP (Address: 0x180087278)
GetCommandLineA (Address: 0x1800872d0)
GetCommandLineW (Address: 0x180087178)
GetConsoleCP (Address: 0x180087148)
GetConsoleMode (Address: 0x180087140)
GetCPInfo (Address: 0x1800872c8)
GetCurrentProcess (Address: 0x1800870f8)
GetCurrentProcessId (Address: 0x1800871f0)
GetCurrentThreadId (Address: 0x1800871f8)
GetEnvironmentStringsW (Address: 0x180087170)
GetFileSize (Address: 0x180087008)
GetFileType (Address: 0x180087290)
GetLastError (Address: 0x180087050)
GetModuleFileNameA (Address: 0x180087270)
GetModuleFileNameW (Address: 0x180087100)
GetModuleHandleExW (Address: 0x180087268)
GetModuleHandleW (Address: 0x1800871c0)
GetOEMCP (Address: 0x1800872c0)
GetProcAddress (Address: 0x180087098)
GetProcessHeap (Address: 0x180087028)
GetStartupInfoW (Address: 0x180087218)
GetStdHandle (Address: 0x180087288)
GetStringTypeW (Address: 0x180087280)
GetSystemTimeAsFileTime (Address: 0x180087200)
GetTimeFormatW (Address: 0x180087068)
GlobalMemoryStatus (Address: 0x1800870b0)
HeapAlloc (Address: 0x180087018)
HeapFree (Address: 0x180087020)
HeapReAlloc (Address: 0x180087298)
HeapSize (Address: 0x180087138)
InitializeCriticalSectionAndSpinCount (Address: 0x180087190)
InitializeSListHead (Address: 0x180087208)
InterlockedFlushSList (Address: 0x180087228)
IsDebuggerPresent (Address: 0x180087210)
IsProcessorFeaturePresent (Address: 0x1800871e0)
IsValidCodePage (Address: 0x1800872b8)
LCMapStringW (Address: 0x1800872a0)
LeaveCriticalSection (Address: 0x180087188)
LoadLibraryA (Address: 0x1800870d8)
LoadLibraryExW (Address: 0x180087108)
LoadResource (Address: 0x1800870a0)
LockResource (Address: 0x1800870a8)
MapViewOfFile (Address: 0x180087030)
MultiByteToWideChar (Address: 0x180087048)
QueryPerformanceCounter (Address: 0x1800871e8)
RaiseException (Address: 0x180087220)
ReadConsoleW (Address: 0x180087120)
ReadFile (Address: 0x180087128)
ResetEvent (Address: 0x1800871a8)
SetEndOfFile (Address: 0x180087118)
SetEvent (Address: 0x1800871a0)
SetFilePointer (Address: 0x180087078)
SetFilePointerEx (Address: 0x180087130)
SetLastError (Address: 0x180087230)
SetStdHandle (Address: 0x180087160)
SetUnhandledExceptionFilter (Address: 0x1800871d0)
SwitchToFiber (Address: 0x1800870d0)
SystemTimeToTzSpecificLocalTime (Address: 0x180087058)
TerminateProcess (Address: 0x1800871d8)
TlsAlloc (Address: 0x180087240)
TlsFree (Address: 0x180087258)
TlsGetValue (Address: 0x180087248)
TlsSetValue (Address: 0x180087250)
UnhandledExceptionFilter (Address: 0x1800871c8)
UnmapViewOfFile (Address: 0x180087038)
WaitForSingleObjectEx (Address: 0x1800871b0)
WideCharToMultiByte (Address: 0x1800870e8)
WriteConsoleW (Address: 0x180087110)
WriteFile (Address: 0x180087080)

ntdll.dll

RtlCaptureContext (Address: 0x180087350)
RtlLookupFunctionEntry (Address: 0x180087340)
RtlPcToFileHeader (Address: 0x180087338)
RtlUnwindEx (Address: 0x180087330)
RtlVirtualUnwind (Address: 0x180087348)

ole32.dll

CoCreateInstance (Address: 0x180087360)
CoInitialize (Address: 0x180087368)

PSAPI.DLL

GetModuleInformation (Address: 0x1800872e0)

VERSION.dll

GetFileVersionInfoSizeW (Address: 0x180087300)
GetFileVersionInfoW (Address: 0x1800872f8)
VerQueryValueA (Address: 0x1800872f0)