SOS.dll

Description: Microsoft NTSD extension for .NET Runtime

Version: 4.8.4645.0

Architecture: 64-bit

Operating System: Windows

SHA256: 0c9dc0c14a6988c705ba9f9683fc27b4

File Size: 901.4 KB

Uploaded At: Dec. 1, 2025, 8:30 a.m.

Views: 16

Exported Functions

AnalyzeOOM (Ordinal: 1, Address: 0x3c700)
BPMD (Ordinal: 2, Address: 0x4da10)
CLRStack (Ordinal: 3, Address: 0x3ced0)
COMState (Ordinal: 4, Address: 0x3ca70)
ClrStack (Ordinal: 5, Address: 0x3ced0)
DebugExtensionInitialize (Ordinal: 6, Address: 0xeeb0)
DebugExtensionNotify (Ordinal: 7, Address: 0xf0d0)
DebugExtensionUninitialize (Ordinal: 8, Address: 0xf290)
DumpArray (Ordinal: 9, Address: 0x3d390)
DumpAssembly (Ordinal: 10, Address: 0x3d700)
DumpCCW (Ordinal: 11, Address: 0x3d9f0)
DumpClass (Ordinal: 12, Address: 0x3df90)
DumpDomain (Ordinal: 13, Address: 0x3e5a0)
DumpGCConfigLog (Ordinal: 14, Address: 0x3ec20)
DumpGCData (Ordinal: 15, Address: 0x3efb0)
DumpGCLog (Ordinal: 16, Address: 0x3f2d0)
DumpHeap (Ordinal: 17, Address: 0x3f680)
DumpIL (Ordinal: 18, Address: 0x3f8d0)
DumpLog (Ordinal: 19, Address: 0x3fe80)
DumpMD (Ordinal: 20, Address: 0x40180)
DumpMT (Ordinal: 21, Address: 0x40370)
DumpModule (Ordinal: 22, Address: 0x40f20)
DumpObj (Ordinal: 23, Address: 0x413f0)
DumpRCW (Ordinal: 24, Address: 0x41880)
DumpRuntimeTypes (Ordinal: 25, Address: 0x41e90)
DumpSig (Ordinal: 26, Address: 0x420b0)
DumpSigElem (Ordinal: 27, Address: 0x42330)
DumpStack (Ordinal: 28, Address: 0x425a0)
DumpStackObjects (Ordinal: 29, Address: 0x428a0)
DumpVC (Ordinal: 30, Address: 0x42af0)
Dumpccw (Ordinal: 31, Address: 0x3d9f0)
Dumplog (Ordinal: 32, Address: 0x3fe80)
Dumprcw (Ordinal: 33, Address: 0x41880)
Dumpruntimetypes (Ordinal: 34, Address: 0x41e90)
EEHeap (Ordinal: 35, Address: 0x42d00)
EEStack (Ordinal: 36, Address: 0x434b0)
EEVersion (Ordinal: 37, Address: 0x438d0)
EHInfo (Ordinal: 38, Address: 0x43b70)
Ehinfo (Ordinal: 39, Address: 0x43b70)
FinalizeQueue (Ordinal: 40, Address: 0x43f50)
FindAppDomain (Ordinal: 41, Address: 0x44570)
FindRoots (Ordinal: 42, Address: 0x44980)
Findappdomain (Ordinal: 43, Address: 0x44570)
GCHandleLeaks (Ordinal: 44, Address: 0x44e20)
GCHandleleaks (Ordinal: 45, Address: 0x44e20)
GCHandles (Ordinal: 46, Address: 0x454c0)
GCHeapStat (Ordinal: 47, Address: 0x45650)
GCInfo (Ordinal: 48, Address: 0x460c0)
GCRoot (Ordinal: 49, Address: 0x465b0)
GCWhere (Ordinal: 50, Address: 0x46890)
GcHeapStat (Ordinal: 51, Address: 0x45650)
GcWhere (Ordinal: 52, Address: 0x46890)
Gchandleleaks (Ordinal: 53, Address: 0x44e20)
HandleCLRN (Ordinal: 54, Address: 0x46f80)
HeapStat (Ordinal: 55, Address: 0x45650)
Help (Ordinal: 56, Address: 0x470c0)
HistClear (Ordinal: 57, Address: 0xfb00)
HistInit (Ordinal: 58, Address: 0xfc10)
HistObj (Ordinal: 59, Address: 0xfdc0)
HistObjFind (Ordinal: 60, Address: 0x10060)
HistRoot (Ordinal: 61, Address: 0x10360)
HistStats (Ordinal: 62, Address: 0x106f0)
IP2MD (Ordinal: 63, Address: 0x471d0)
ListNearObj (Ordinal: 64, Address: 0x47530)
MinidumpMode (Ordinal: 65, Address: 0x47b50)
Minidumpmode (Ordinal: 66, Address: 0x47b50)
Name2EE (Ordinal: 67, Address: 0x47d40)
ObjSize (Ordinal: 68, Address: 0x481f0)
PathTo (Ordinal: 69, Address: 0x484c0)
PrintException (Ordinal: 70, Address: 0x48700)
Printexception (Ordinal: 71, Address: 0x48700)
ProcInfo (Ordinal: 72, Address: 0x48c50)
RCWCleanupList (Ordinal: 73, Address: 0x496f0)
Rcwcleanuplist (Ordinal: 74, Address: 0x496f0)
SOSFlush (Ordinal: 75, Address: 0x49910)
SaveModule (Ordinal: 76, Address: 0x49a40)
StopOnException (Ordinal: 77, Address: 0x4a240)
Stoponexception (Ordinal: 78, Address: 0x4a240)
SyncBlk (Ordinal: 79, Address: 0x4a810)
ThreadPool (Ordinal: 80, Address: 0x4aea0)
ThreadState (Ordinal: 81, Address: 0x4b430)
Threads (Ordinal: 82, Address: 0x4b540)
Token2EE (Ordinal: 83, Address: 0x4b800)
TraverseHeap (Ordinal: 84, Address: 0x4bba0)
Traverseheap (Ordinal: 85, Address: 0x4bba0)
U (Ordinal: 86, Address: 0x4e6c0)
VMMap (Ordinal: 87, Address: 0x4bee0)
VMStat (Ordinal: 88, Address: 0x4c010)
VerifyHeap (Ordinal: 89, Address: 0x4c140)
VerifyObj (Ordinal: 90, Address: 0x4c450)
VerifyStackTrace (Ordinal: 91, Address: 0x4c6b0)
Verifyheap (Ordinal: 92, Address: 0x4c140)
WatsonBuckets (Ordinal: 93, Address: 0x4ce60)
_EFN_GetManagedExcepStack (Ordinal: 94, Address: 0x4d120)
_EFN_GetManagedExcepStackW (Ordinal: 95, Address: 0x4d2f0)
_EFN_GetManagedObjectFieldInfo (Ordinal: 96, Address: 0x4d430)
_EFN_GetManagedObjectName (Ordinal: 97, Address: 0x4d6c0)
_EFN_StackTrace (Ordinal: 98, Address: 0x4d8a0)
analyzeoom (Ordinal: 99, Address: 0x3c700)
ao (Ordinal: 100, Address: 0x3c700)
bpmd (Ordinal: 101, Address: 0x4da10)
clrstack (Ordinal: 102, Address: 0x3ced0)
comstate (Ordinal: 103, Address: 0x3ca70)
da (Ordinal: 104, Address: 0x3d390)
dclog (Ordinal: 105, Address: 0x3ec20)
dgc (Ordinal: 106, Address: 0x3efb0)
dlog (Ordinal: 107, Address: 0x3f2d0)
do (Ordinal: 108, Address: 0x413f0)
dso (Ordinal: 109, Address: 0x428a0)
dumparray (Ordinal: 110, Address: 0x3d390)
dumpassembly (Ordinal: 111, Address: 0x3d700)
dumpccw (Ordinal: 112, Address: 0x3d9f0)
dumpclass (Ordinal: 113, Address: 0x3df90)
dumpdomain (Ordinal: 114, Address: 0x3e5a0)
dumpgcconfiglog (Ordinal: 115, Address: 0x3ec20)
dumpgcdata (Ordinal: 116, Address: 0x3efb0)
dumpgclog (Ordinal: 117, Address: 0x3f2d0)
dumpheap (Ordinal: 118, Address: 0x3f680)
dumpil (Ordinal: 119, Address: 0x3f8d0)
dumplog (Ordinal: 120, Address: 0x3fe80)
dumpmd (Ordinal: 121, Address: 0x40180)
dumpmodule (Ordinal: 122, Address: 0x40f20)
dumpmt (Ordinal: 123, Address: 0x40370)
dumpobj (Ordinal: 124, Address: 0x413f0)
dumprcw (Ordinal: 125, Address: 0x41880)
dumpruntimetypes (Ordinal: 126, Address: 0x41e90)
dumpsig (Ordinal: 127, Address: 0x420b0)
dumpsigelem (Ordinal: 128, Address: 0x42330)
dumpstack (Ordinal: 129, Address: 0x425a0)
dumpstackobjects (Ordinal: 130, Address: 0x428a0)
dumpvc (Ordinal: 131, Address: 0x42af0)
eeheap (Ordinal: 132, Address: 0x42d00)
eestack (Ordinal: 133, Address: 0x434b0)
eeversion (Ordinal: 134, Address: 0x438d0)
ehinfo (Ordinal: 135, Address: 0x43b70)
finalizequeue (Ordinal: 136, Address: 0x43f50)
findappdomain (Ordinal: 137, Address: 0x44570)
findroots (Ordinal: 138, Address: 0x44980)
fq (Ordinal: 139, Address: 0x43f50)
gchandleleaks (Ordinal: 140, Address: 0x44e20)
gchandles (Ordinal: 141, Address: 0x454c0)
gcheapstat (Ordinal: 142, Address: 0x45650)
gcinfo (Ordinal: 143, Address: 0x460c0)
gcroot (Ordinal: 144, Address: 0x465b0)
gcwhere (Ordinal: 145, Address: 0x46890)
heapstat (Ordinal: 146, Address: 0x45650)
help (Ordinal: 147, Address: 0x470c0)
histclear (Ordinal: 148, Address: 0xfb00)
histinit (Ordinal: 149, Address: 0xfc10)
histobj (Ordinal: 150, Address: 0xfdc0)
histobjfind (Ordinal: 151, Address: 0x10060)
histroot (Ordinal: 152, Address: 0x10360)
histstats (Ordinal: 153, Address: 0x106f0)
hof (Ordinal: 154, Address: 0x10060)
ip2md (Ordinal: 155, Address: 0x471d0)
listnearobj (Ordinal: 156, Address: 0x47530)
lno (Ordinal: 157, Address: 0x47530)
minidumpmode (Ordinal: 158, Address: 0x47b50)
name2ee (Ordinal: 159, Address: 0x47d40)
objsize (Ordinal: 160, Address: 0x481f0)
pathto (Ordinal: 161, Address: 0x484c0)
pe (Ordinal: 162, Address: 0x48700)
printexception (Ordinal: 163, Address: 0x48700)
procinfo (Ordinal: 164, Address: 0x48c50)
rcwcleanuplist (Ordinal: 165, Address: 0x496f0)
savemodule (Ordinal: 166, Address: 0x49a40)
soe (Ordinal: 167, Address: 0x4a240)
sosflush (Ordinal: 168, Address: 0x49910)
stoponexception (Ordinal: 169, Address: 0x4a240)
syncblk (Ordinal: 170, Address: 0x4a810)
t (Ordinal: 171, Address: 0x4b540)
threadpool (Ordinal: 172, Address: 0x4aea0)
threads (Ordinal: 173, Address: 0x4b540)
threadstate (Ordinal: 174, Address: 0x4b430)
token2ee (Ordinal: 175, Address: 0x4b800)
tp (Ordinal: 176, Address: 0x4aea0)
traverseheap (Ordinal: 177, Address: 0x4bba0)
u (Ordinal: 178, Address: 0x4e6c0)
verifyheap (Ordinal: 179, Address: 0x4c140)
verifyobj (Ordinal: 180, Address: 0x4c450)
vh (Ordinal: 181, Address: 0x4c140)
vmmap (Ordinal: 182, Address: 0x4bee0)
vmstat (Ordinal: 183, Address: 0x4c010)
vo (Ordinal: 184, Address: 0x4c450)

Imported DLLs & Functions

dbgeng.dll

DebugCreate (Address: 0x18008b310)

dbghelp.dll

SymFindFileInPathW (Address: 0x18008b320)

KERNEL32.dll

CloseHandle (Address: 0x18008b010)
ConvertThreadToFiber (Address: 0x18008b0c8)
CreateEventW (Address: 0x18008b1d0)
CreateFiber (Address: 0x18008b0b8)
CreateFileA (Address: 0x18008b000)
CreateFileMappingA (Address: 0x18008b040)
CreateFileW (Address: 0x18008b158)
DebugBreak (Address: 0x18008b088)
DeleteCriticalSection (Address: 0x18008b1b0)
DeleteFiber (Address: 0x18008b0c0)
EncodePointer (Address: 0x18008b258)
EnterCriticalSection (Address: 0x18008b1a0)
ExitProcess (Address: 0x18008b260)
FileTimeToLocalFileTime (Address: 0x18008b070)
FileTimeToSystemTime (Address: 0x18008b060)
FindClose (Address: 0x18008b0f0)
FindFirstFileExA (Address: 0x18008b2a8)
FindNextFileA (Address: 0x18008b2b0)
FindResourceA (Address: 0x18008b0e0)
FlushFileBuffers (Address: 0x18008b150)
FreeEnvironmentStringsW (Address: 0x18008b168)
FreeLibrary (Address: 0x18008b090)
GetACP (Address: 0x18008b278)
GetCommandLineA (Address: 0x18008b2d0)
GetCommandLineW (Address: 0x18008b178)
GetConsoleCP (Address: 0x18008b148)
GetConsoleMode (Address: 0x18008b140)
GetCPInfo (Address: 0x18008b2c8)
GetCurrentProcess (Address: 0x18008b0f8)
GetCurrentProcessId (Address: 0x18008b1e8)
GetCurrentThreadId (Address: 0x18008b1f0)
GetEnvironmentStringsW (Address: 0x18008b170)
GetFileSize (Address: 0x18008b008)
GetFileType (Address: 0x18008b290)
GetLastError (Address: 0x18008b050)
GetModuleFileNameA (Address: 0x18008b270)
GetModuleFileNameW (Address: 0x18008b100)
GetModuleHandleExW (Address: 0x18008b268)
GetModuleHandleW (Address: 0x18008b1d8)
GetOEMCP (Address: 0x18008b2c0)
GetProcAddress (Address: 0x18008b098)
GetProcessHeap (Address: 0x18008b028)
GetStartupInfoW (Address: 0x18008b210)
GetStdHandle (Address: 0x18008b288)
GetStringTypeW (Address: 0x18008b280)
GetSystemTimeAsFileTime (Address: 0x18008b1f8)
GetTimeFormatW (Address: 0x18008b068)
GlobalMemoryStatus (Address: 0x18008b0b0)
HeapAlloc (Address: 0x18008b018)
HeapFree (Address: 0x18008b020)
HeapReAlloc (Address: 0x18008b298)
HeapSize (Address: 0x18008b138)
InitializeCriticalSectionAndSpinCount (Address: 0x18008b220)
InitializeSListHead (Address: 0x18008b200)
InterlockedFlushSList (Address: 0x18008b248)
IsDebuggerPresent (Address: 0x18008b208)
IsProcessorFeaturePresent (Address: 0x18008b198)
IsValidCodePage (Address: 0x18008b2b8)
LCMapStringW (Address: 0x18008b2a0)
LeaveCriticalSection (Address: 0x18008b1a8)
LoadLibraryA (Address: 0x18008b0d8)
LoadLibraryExW (Address: 0x18008b108)
LoadResource (Address: 0x18008b0a0)
LockResource (Address: 0x18008b0a8)
MapViewOfFile (Address: 0x18008b030)
MultiByteToWideChar (Address: 0x18008b048)
QueryPerformanceCounter (Address: 0x18008b1e0)
RaiseException (Address: 0x18008b218)
ReadConsoleW (Address: 0x18008b120)
ReadFile (Address: 0x18008b128)
ResetEvent (Address: 0x18008b1c0)
SetEndOfFile (Address: 0x18008b118)
SetEvent (Address: 0x18008b1b8)
SetFilePointer (Address: 0x18008b078)
SetFilePointerEx (Address: 0x18008b130)
SetLastError (Address: 0x18008b250)
SetStdHandle (Address: 0x18008b160)
SetUnhandledExceptionFilter (Address: 0x18008b188)
SwitchToFiber (Address: 0x18008b0d0)
SystemTimeToTzSpecificLocalTime (Address: 0x18008b058)
TerminateProcess (Address: 0x18008b190)
TlsAlloc (Address: 0x18008b228)
TlsFree (Address: 0x18008b240)
TlsGetValue (Address: 0x18008b230)
TlsSetValue (Address: 0x18008b238)
UnhandledExceptionFilter (Address: 0x18008b180)
UnmapViewOfFile (Address: 0x18008b038)
WaitForSingleObjectEx (Address: 0x18008b1c8)
WideCharToMultiByte (Address: 0x18008b0e8)
WriteConsoleW (Address: 0x18008b110)
WriteFile (Address: 0x18008b080)

ntdll.dll

RtlCaptureContext (Address: 0x18008b350)
RtlLookupFunctionEntry (Address: 0x18008b348)
RtlPcToFileHeader (Address: 0x18008b338)
RtlUnwindEx (Address: 0x18008b330)
RtlVirtualUnwind (Address: 0x18008b340)

ole32.dll

CoCreateInstance (Address: 0x18008b360)
CoInitialize (Address: 0x18008b368)

PSAPI.DLL

GetModuleInformation (Address: 0x18008b2e0)

VERSION.dll

GetFileVersionInfoSizeW (Address: 0x18008b300)
GetFileVersionInfoW (Address: 0x18008b2f8)
VerQueryValueA (Address: 0x18008b2f0)