SOS.dll

Description: Microsoft NTSD extension for .NET Runtime

Authors: © Microsoft Corporation. All rights reserved.

Version: 4.8.4084.0

Architecture: 32-bit

Operating System: Windows

SHA256: 6d4bfaab8a6487ca54be039d295224d2

File Size: 756.8 KB

Uploaded At: Dec. 1, 2025, 8:48 a.m.

Views: 7

Exported Functions

  • AnalyzeOOM (Ordinal: 1, Address: 0x46430)
  • BPMD (Ordinal: 2, Address: 0x56bd0)
  • CLRStack (Ordinal: 3, Address: 0x46ac0)
  • COMState (Ordinal: 4, Address: 0x46710)
  • ClrStack (Ordinal: 5, Address: 0x46ac0)
  • DebugExtensionInitialize (Ordinal: 6, Address: 0x21580)
  • DebugExtensionNotify (Ordinal: 7, Address: 0x217a0)
  • DebugExtensionUninitialize (Ordinal: 8, Address: 0x21900)
  • DumpArray (Ordinal: 9, Address: 0x47070)
  • DumpAssembly (Ordinal: 10, Address: 0x47400)
  • DumpCCW (Ordinal: 11, Address: 0x476c0)
  • DumpClass (Ordinal: 12, Address: 0x47bf0)
  • DumpDomain (Ordinal: 13, Address: 0x48250)
  • DumpGCConfigLog (Ordinal: 14, Address: 0x48800)
  • DumpGCData (Ordinal: 15, Address: 0x48b70)
  • DumpHeap (Ordinal: 16, Address: 0x48e70)
  • DumpIL (Ordinal: 17, Address: 0x49080)
  • DumpLog (Ordinal: 18, Address: 0x495f0)
  • DumpMD (Ordinal: 19, Address: 0x498e0)
  • DumpMT (Ordinal: 20, Address: 0x49ac0)
  • DumpModule (Ordinal: 21, Address: 0x4a360)
  • DumpObj (Ordinal: 22, Address: 0x4a8d0)
  • DumpRCW (Ordinal: 23, Address: 0x4aca0)
  • DumpRuntimeTypes (Ordinal: 24, Address: 0x4b210)
  • DumpSig (Ordinal: 25, Address: 0x4b410)
  • DumpSigElem (Ordinal: 26, Address: 0x4b630)
  • DumpStack (Ordinal: 27, Address: 0x4b850)
  • DumpStackObjects (Ordinal: 28, Address: 0x4bb50)
  • DumpVC (Ordinal: 29, Address: 0x4bd90)
  • Dumpccw (Ordinal: 30, Address: 0x476c0)
  • Dumplog (Ordinal: 31, Address: 0x495f0)
  • Dumprcw (Ordinal: 32, Address: 0x4aca0)
  • Dumpruntimetypes (Ordinal: 33, Address: 0x4b210)
  • EEHeap (Ordinal: 34, Address: 0x4bfb0)
  • EEStack (Ordinal: 35, Address: 0x4c7a0)
  • EEVersion (Ordinal: 36, Address: 0x4cbb0)
  • EHInfo (Ordinal: 37, Address: 0x4ce30)
  • Ehinfo (Ordinal: 38, Address: 0x4ce30)
  • FinalizeQueue (Ordinal: 39, Address: 0x4d1f0)
  • FindAppDomain (Ordinal: 40, Address: 0x4d830)
  • FindRoots (Ordinal: 41, Address: 0x4dc10)
  • Findappdomain (Ordinal: 42, Address: 0x4d830)
  • GCHandleLeaks (Ordinal: 43, Address: 0x4e0f0)
  • GCHandleleaks (Ordinal: 44, Address: 0x4e0f0)
  • GCHandles (Ordinal: 45, Address: 0x4e9a0)
  • GCHeapStat (Ordinal: 46, Address: 0x4eb50)
  • GCInfo (Ordinal: 47, Address: 0x4f570)
  • GCRoot (Ordinal: 48, Address: 0x4fa60)
  • GCWhere (Ordinal: 49, Address: 0x4fd20)
  • GcHeapStat (Ordinal: 50, Address: 0x4eb50)
  • GcWhere (Ordinal: 51, Address: 0x4fd20)
  • Gchandleleaks (Ordinal: 52, Address: 0x4e0f0)
  • HandleCLRN (Ordinal: 53, Address: 0x50350)
  • HeapStat (Ordinal: 54, Address: 0x4eb50)
  • Help (Ordinal: 55, Address: 0x504b0)
  • HistClear (Ordinal: 56, Address: 0x22080)
  • HistInit (Ordinal: 57, Address: 0x221b0)
  • HistObj (Ordinal: 58, Address: 0x22360)
  • HistObjFind (Ordinal: 59, Address: 0x225f0)
  • HistRoot (Ordinal: 60, Address: 0x228d0)
  • HistStats (Ordinal: 61, Address: 0x22bf0)
  • IP2MD (Ordinal: 62, Address: 0x505c0)
  • ListNearObj (Ordinal: 63, Address: 0x50960)
  • MinidumpMode (Ordinal: 64, Address: 0x50f30)
  • Minidumpmode (Ordinal: 65, Address: 0x50f30)
  • Name2EE (Ordinal: 66, Address: 0x51110)
  • ObjSize (Ordinal: 67, Address: 0x51680)
  • PathTo (Ordinal: 68, Address: 0x51930)
  • PrintException (Ordinal: 69, Address: 0x51b60)
  • Printexception (Ordinal: 70, Address: 0x51b60)
  • ProcInfo (Ordinal: 71, Address: 0x520d0)
  • RCWCleanupList (Ordinal: 72, Address: 0x52ab0)
  • Rcwcleanuplist (Ordinal: 73, Address: 0x52ab0)
  • SOSFlush (Ordinal: 74, Address: 0x52cd0)
  • SaveModule (Ordinal: 75, Address: 0x52e10)
  • StopOnException (Ordinal: 76, Address: 0x536a0)
  • Stoponexception (Ordinal: 77, Address: 0x536a0)
  • SyncBlk (Ordinal: 78, Address: 0x53ce0)
  • ThreadPool (Ordinal: 79, Address: 0x542a0)
  • ThreadState (Ordinal: 80, Address: 0x547d0)
  • Threads (Ordinal: 81, Address: 0x548d0)
  • Token2EE (Ordinal: 82, Address: 0x54b40)
  • TraverseHeap (Ordinal: 83, Address: 0x54fa0)
  • Traverseheap (Ordinal: 84, Address: 0x54fa0)
  • U (Ordinal: 85, Address: 0x577d0)
  • VMMap (Ordinal: 86, Address: 0x552c0)
  • VMStat (Ordinal: 87, Address: 0x55410)
  • VerifyHeap (Ordinal: 88, Address: 0x55560)
  • VerifyObj (Ordinal: 89, Address: 0x55830)
  • VerifyStackTrace (Ordinal: 90, Address: 0x55a90)
  • Verifyheap (Ordinal: 91, Address: 0x55560)
  • WatsonBuckets (Ordinal: 92, Address: 0x56100)
  • _EFN_GetManagedExcepStack (Ordinal: 93, Address: 0x563c0)
  • _EFN_GetManagedExcepStackW (Ordinal: 94, Address: 0x56580)
  • _EFN_GetManagedObjectFieldInfo (Ordinal: 95, Address: 0x566c0)
  • _EFN_GetManagedObjectName (Ordinal: 96, Address: 0x568d0)
  • _EFN_StackTrace (Ordinal: 97, Address: 0x56a80)
  • analyzeoom (Ordinal: 98, Address: 0x46430)
  • ao (Ordinal: 99, Address: 0x46430)
  • bpmd (Ordinal: 100, Address: 0x56bd0)
  • clrstack (Ordinal: 101, Address: 0x46ac0)
  • comstate (Ordinal: 102, Address: 0x46710)
  • da (Ordinal: 103, Address: 0x47070)
  • dclog (Ordinal: 104, Address: 0x48800)
  • dgc (Ordinal: 105, Address: 0x48b70)
  • do (Ordinal: 106, Address: 0x4a8d0)
  • dso (Ordinal: 107, Address: 0x4bb50)
  • dumparray (Ordinal: 108, Address: 0x47070)
  • dumpassembly (Ordinal: 109, Address: 0x47400)
  • dumpccw (Ordinal: 110, Address: 0x476c0)
  • dumpclass (Ordinal: 111, Address: 0x47bf0)
  • dumpdomain (Ordinal: 112, Address: 0x48250)
  • dumpgcconfiglog (Ordinal: 113, Address: 0x48800)
  • dumpgcdata (Ordinal: 114, Address: 0x48b70)
  • dumpheap (Ordinal: 115, Address: 0x48e70)
  • dumpil (Ordinal: 116, Address: 0x49080)
  • dumplog (Ordinal: 117, Address: 0x495f0)
  • dumpmd (Ordinal: 118, Address: 0x498e0)
  • dumpmodule (Ordinal: 119, Address: 0x4a360)
  • dumpmt (Ordinal: 120, Address: 0x49ac0)
  • dumpobj (Ordinal: 121, Address: 0x4a8d0)
  • dumprcw (Ordinal: 122, Address: 0x4aca0)
  • dumpruntimetypes (Ordinal: 123, Address: 0x4b210)
  • dumpsig (Ordinal: 124, Address: 0x4b410)
  • dumpsigelem (Ordinal: 125, Address: 0x4b630)
  • dumpstack (Ordinal: 126, Address: 0x4b850)
  • dumpstackobjects (Ordinal: 127, Address: 0x4bb50)
  • dumpvc (Ordinal: 128, Address: 0x4bd90)
  • eeheap (Ordinal: 129, Address: 0x4bfb0)
  • eestack (Ordinal: 130, Address: 0x4c7a0)
  • eeversion (Ordinal: 131, Address: 0x4cbb0)
  • ehinfo (Ordinal: 132, Address: 0x4ce30)
  • finalizequeue (Ordinal: 133, Address: 0x4d1f0)
  • findappdomain (Ordinal: 134, Address: 0x4d830)
  • findroots (Ordinal: 135, Address: 0x4dc10)
  • fq (Ordinal: 136, Address: 0x4d1f0)
  • gchandleleaks (Ordinal: 137, Address: 0x4e0f0)
  • gchandles (Ordinal: 138, Address: 0x4e9a0)
  • gcheapstat (Ordinal: 139, Address: 0x4eb50)
  • gcinfo (Ordinal: 140, Address: 0x4f570)
  • gcroot (Ordinal: 141, Address: 0x4fa60)
  • gcwhere (Ordinal: 142, Address: 0x4fd20)
  • heapstat (Ordinal: 143, Address: 0x4eb50)
  • help (Ordinal: 144, Address: 0x504b0)
  • histclear (Ordinal: 145, Address: 0x22080)
  • histinit (Ordinal: 146, Address: 0x221b0)
  • histobj (Ordinal: 147, Address: 0x22360)
  • histobjfind (Ordinal: 148, Address: 0x225f0)
  • histroot (Ordinal: 149, Address: 0x228d0)
  • histstats (Ordinal: 150, Address: 0x22bf0)
  • hof (Ordinal: 151, Address: 0x225f0)
  • ip2md (Ordinal: 152, Address: 0x505c0)
  • listnearobj (Ordinal: 153, Address: 0x50960)
  • lno (Ordinal: 154, Address: 0x50960)
  • minidumpmode (Ordinal: 155, Address: 0x50f30)
  • name2ee (Ordinal: 156, Address: 0x51110)
  • objsize (Ordinal: 157, Address: 0x51680)
  • pathto (Ordinal: 158, Address: 0x51930)
  • pe (Ordinal: 159, Address: 0x51b60)
  • printexception (Ordinal: 160, Address: 0x51b60)
  • procinfo (Ordinal: 161, Address: 0x520d0)
  • rcwcleanuplist (Ordinal: 162, Address: 0x52ab0)
  • savemodule (Ordinal: 163, Address: 0x52e10)
  • soe (Ordinal: 164, Address: 0x536a0)
  • sosflush (Ordinal: 165, Address: 0x52cd0)
  • stoponexception (Ordinal: 166, Address: 0x536a0)
  • syncblk (Ordinal: 167, Address: 0x53ce0)
  • t (Ordinal: 168, Address: 0x548d0)
  • threadpool (Ordinal: 169, Address: 0x542a0)
  • threads (Ordinal: 170, Address: 0x548d0)
  • threadstate (Ordinal: 171, Address: 0x547d0)
  • token2ee (Ordinal: 172, Address: 0x54b40)
  • tp (Ordinal: 173, Address: 0x542a0)
  • traverseheap (Ordinal: 174, Address: 0x54fa0)
  • u (Ordinal: 175, Address: 0x577d0)
  • verifyheap (Ordinal: 176, Address: 0x55560)
  • verifyobj (Ordinal: 177, Address: 0x55830)
  • vh (Ordinal: 178, Address: 0x55560)
  • vmmap (Ordinal: 179, Address: 0x552c0)
  • vmstat (Ordinal: 180, Address: 0x55410)
  • vo (Ordinal: 181, Address: 0x55830)

Imported DLLs & Functions

dbgeng.dll
  • DebugCreate (Address: 0x100a9194)
dbghelp.dll
  • SymFindFileInPathW (Address: 0x100a919c)
KERNEL32.dll
  • CloseHandle (Address: 0x100a9008)
  • ConvertThreadToFiber (Address: 0x100a906c)
  • CreateEventW (Address: 0x100a90e4)
  • CreateFiber (Address: 0x100a9064)
  • CreateFileA (Address: 0x100a9000)
  • CreateFileMappingA (Address: 0x100a9020)
  • CreateFileW (Address: 0x100a90a8)
  • DebugBreak (Address: 0x100a904c)
  • DecodePointer (Address: 0x100a9174)
  • DeleteCriticalSection (Address: 0x100a90d4)
  • DeleteFiber (Address: 0x100a9068)
  • EncodePointer (Address: 0x100a9128)
  • EnterCriticalSection (Address: 0x100a90cc)
  • ExitProcess (Address: 0x100a912c)
  • FileTimeToLocalFileTime (Address: 0x100a9040)
  • FileTimeToSystemTime (Address: 0x100a9038)
  • FindClose (Address: 0x100a9080)
  • FindFirstFileExA (Address: 0x100a9150)
  • FindNextFileA (Address: 0x100a9154)
  • FindResourceA (Address: 0x100a9078)
  • FlushFileBuffers (Address: 0x100a90b8)
  • FreeEnvironmentStringsW (Address: 0x100a9170)
  • FreeLibrary (Address: 0x100a9050)
  • GetACP (Address: 0x100a9138)
  • GetCommandLineA (Address: 0x100a9164)
  • GetCommandLineW (Address: 0x100a9168)
  • GetConsoleCP (Address: 0x100a90b4)
  • GetConsoleMode (Address: 0x100a90b0)
  • GetCPInfo (Address: 0x100a9160)
  • GetCurrentProcess (Address: 0x100a9084)
  • GetCurrentProcessId (Address: 0x100a90f0)
  • GetCurrentThreadId (Address: 0x100a90f4)
  • GetEnvironmentStringsW (Address: 0x100a916c)
  • GetFileSize (Address: 0x100a9004)
  • GetFileType (Address: 0x100a9144)
  • GetLastError (Address: 0x100a9030)
  • GetModuleFileNameA (Address: 0x100a9134)
  • GetModuleFileNameW (Address: 0x100a9088)
  • GetModuleHandleExW (Address: 0x100a9130)
  • GetModuleHandleW (Address: 0x100a90e8)
  • GetOEMCP (Address: 0x100a915c)
  • GetProcAddress (Address: 0x100a9054)
  • GetProcessHeap (Address: 0x100a9014)
  • GetStartupInfoW (Address: 0x100a9104)
  • GetStdHandle (Address: 0x100a9140)
  • GetStringTypeW (Address: 0x100a9148)
  • GetSystemTimeAsFileTime (Address: 0x100a90f8)
  • GetTimeFormatW (Address: 0x100a903c)
  • GlobalMemoryStatus (Address: 0x100a9060)
  • HeapAlloc (Address: 0x100a900c)
  • HeapFree (Address: 0x100a9010)
  • HeapReAlloc (Address: 0x100a914c)
  • HeapSize (Address: 0x100a90a4)
  • InitializeCriticalSectionAndSpinCount (Address: 0x100a910c)
  • InitializeSListHead (Address: 0x100a90fc)
  • InterlockedDecrement (Address: 0x100a902c)
  • InterlockedFlushSList (Address: 0x100a9120)
  • InterlockedIncrement (Address: 0x100a9028)
  • IsDebuggerPresent (Address: 0x100a9100)
  • IsProcessorFeaturePresent (Address: 0x100a90c8)
  • IsValidCodePage (Address: 0x100a9158)
  • LCMapStringW (Address: 0x100a913c)
  • LeaveCriticalSection (Address: 0x100a90d0)
  • LoadLibraryA (Address: 0x100a9074)
  • LoadLibraryExW (Address: 0x100a908c)
  • LoadResource (Address: 0x100a9058)
  • LockResource (Address: 0x100a905c)
  • MapViewOfFile (Address: 0x100a9018)
  • MultiByteToWideChar (Address: 0x100a9024)
  • QueryPerformanceCounter (Address: 0x100a90ec)
  • RaiseException (Address: 0x100a9108)
  • ReadConsoleW (Address: 0x100a9094)
  • ReadFile (Address: 0x100a9098)
  • ResetEvent (Address: 0x100a90dc)
  • SetEndOfFile (Address: 0x100a9090)
  • SetEvent (Address: 0x100a90d8)
  • SetFilePointer (Address: 0x100a9044)
  • SetFilePointerEx (Address: 0x100a90a0)
  • SetLastError (Address: 0x100a9124)
  • SetStdHandle (Address: 0x100a90ac)
  • SetUnhandledExceptionFilter (Address: 0x100a90c0)
  • SwitchToFiber (Address: 0x100a9070)
  • SystemTimeToTzSpecificLocalTime (Address: 0x100a9034)
  • TerminateProcess (Address: 0x100a90c4)
  • TlsAlloc (Address: 0x100a9110)
  • TlsFree (Address: 0x100a911c)
  • TlsGetValue (Address: 0x100a9114)
  • TlsSetValue (Address: 0x100a9118)
  • UnhandledExceptionFilter (Address: 0x100a90bc)
  • UnmapViewOfFile (Address: 0x100a901c)
  • WaitForSingleObjectEx (Address: 0x100a90e0)
  • WideCharToMultiByte (Address: 0x100a907c)
  • WriteConsoleW (Address: 0x100a909c)
  • WriteFile (Address: 0x100a9048)
ntdll.dll
  • RtlUnwind (Address: 0x100a91a4)
ole32.dll
  • CoCreateInstance (Address: 0x100a91ac)
  • CoInitialize (Address: 0x100a91b0)
PSAPI.DLL
  • GetModuleInformation (Address: 0x100a917c)
VERSION.dll
  • GetFileVersionInfoSizeW (Address: 0x100a9184)
  • GetFileVersionInfoW (Address: 0x100a9188)
  • VerQueryValueA (Address: 0x100a918c)