SOS.dll

Description: Microsoft NTSD extension for .NET Runtime

Authors: © Microsoft Corporation. All rights reserved.

Version: 4.8.4645.0

Architecture: 32-bit

Operating System: Windows

SHA256: dbb595074ce6cd0bb93e21eb06dfeb5e

File Size: 750.9 KB

Uploaded At: Dec. 1, 2025, 8:48 a.m.

Views: 6

Exported Functions

  • AnalyzeOOM (Ordinal: 1, Address: 0x46570)
  • BPMD (Ordinal: 2, Address: 0x57020)
  • CLRStack (Ordinal: 3, Address: 0x46c00)
  • COMState (Ordinal: 4, Address: 0x46850)
  • ClrStack (Ordinal: 5, Address: 0x46c00)
  • DebugExtensionInitialize (Ordinal: 6, Address: 0x21730)
  • DebugExtensionNotify (Ordinal: 7, Address: 0x21950)
  • DebugExtensionUninitialize (Ordinal: 8, Address: 0x21ab0)
  • DumpArray (Ordinal: 9, Address: 0x471b0)
  • DumpAssembly (Ordinal: 10, Address: 0x47540)
  • DumpCCW (Ordinal: 11, Address: 0x47800)
  • DumpClass (Ordinal: 12, Address: 0x47d30)
  • DumpDomain (Ordinal: 13, Address: 0x48390)
  • DumpGCConfigLog (Ordinal: 14, Address: 0x48940)
  • DumpGCData (Ordinal: 15, Address: 0x48cb0)
  • DumpGCLog (Ordinal: 16, Address: 0x48fb0)
  • DumpHeap (Ordinal: 17, Address: 0x492d0)
  • DumpIL (Ordinal: 18, Address: 0x494e0)
  • DumpLog (Ordinal: 19, Address: 0x49a50)
  • DumpMD (Ordinal: 20, Address: 0x49d40)
  • DumpMT (Ordinal: 21, Address: 0x49f20)
  • DumpModule (Ordinal: 22, Address: 0x4a7c0)
  • DumpObj (Ordinal: 23, Address: 0x4ad30)
  • DumpRCW (Ordinal: 24, Address: 0x4b0f0)
  • DumpRuntimeTypes (Ordinal: 25, Address: 0x4b660)
  • DumpSig (Ordinal: 26, Address: 0x4b860)
  • DumpSigElem (Ordinal: 27, Address: 0x4ba80)
  • DumpStack (Ordinal: 28, Address: 0x4bca0)
  • DumpStackObjects (Ordinal: 29, Address: 0x4bfa0)
  • DumpVC (Ordinal: 30, Address: 0x4c1e0)
  • Dumpccw (Ordinal: 31, Address: 0x47800)
  • Dumplog (Ordinal: 32, Address: 0x49a50)
  • Dumprcw (Ordinal: 33, Address: 0x4b0f0)
  • Dumpruntimetypes (Ordinal: 34, Address: 0x4b660)
  • EEHeap (Ordinal: 35, Address: 0x4c400)
  • EEStack (Ordinal: 36, Address: 0x4cbf0)
  • EEVersion (Ordinal: 37, Address: 0x4d000)
  • EHInfo (Ordinal: 38, Address: 0x4d280)
  • Ehinfo (Ordinal: 39, Address: 0x4d280)
  • FinalizeQueue (Ordinal: 40, Address: 0x4d640)
  • FindAppDomain (Ordinal: 41, Address: 0x4dc80)
  • FindRoots (Ordinal: 42, Address: 0x4e060)
  • Findappdomain (Ordinal: 43, Address: 0x4dc80)
  • GCHandleLeaks (Ordinal: 44, Address: 0x4e540)
  • GCHandleleaks (Ordinal: 45, Address: 0x4e540)
  • GCHandles (Ordinal: 46, Address: 0x4edf0)
  • GCHeapStat (Ordinal: 47, Address: 0x4efa0)
  • GCInfo (Ordinal: 48, Address: 0x4f9c0)
  • GCRoot (Ordinal: 49, Address: 0x4feb0)
  • GCWhere (Ordinal: 50, Address: 0x50170)
  • GcHeapStat (Ordinal: 51, Address: 0x4efa0)
  • GcWhere (Ordinal: 52, Address: 0x50170)
  • Gchandleleaks (Ordinal: 53, Address: 0x4e540)
  • HandleCLRN (Ordinal: 54, Address: 0x507a0)
  • HeapStat (Ordinal: 55, Address: 0x4efa0)
  • Help (Ordinal: 56, Address: 0x50900)
  • HistClear (Ordinal: 57, Address: 0x22230)
  • HistInit (Ordinal: 58, Address: 0x22360)
  • HistObj (Ordinal: 59, Address: 0x22510)
  • HistObjFind (Ordinal: 60, Address: 0x227a0)
  • HistRoot (Ordinal: 61, Address: 0x22a80)
  • HistStats (Ordinal: 62, Address: 0x22da0)
  • IP2MD (Ordinal: 63, Address: 0x50a10)
  • ListNearObj (Ordinal: 64, Address: 0x50db0)
  • MinidumpMode (Ordinal: 65, Address: 0x51380)
  • Minidumpmode (Ordinal: 66, Address: 0x51380)
  • Name2EE (Ordinal: 67, Address: 0x51560)
  • ObjSize (Ordinal: 68, Address: 0x51ad0)
  • PathTo (Ordinal: 69, Address: 0x51d80)
  • PrintException (Ordinal: 70, Address: 0x51fb0)
  • Printexception (Ordinal: 71, Address: 0x51fb0)
  • ProcInfo (Ordinal: 72, Address: 0x52520)
  • RCWCleanupList (Ordinal: 73, Address: 0x52f00)
  • Rcwcleanuplist (Ordinal: 74, Address: 0x52f00)
  • SOSFlush (Ordinal: 75, Address: 0x53120)
  • SaveModule (Ordinal: 76, Address: 0x53260)
  • StopOnException (Ordinal: 77, Address: 0x53af0)
  • Stoponexception (Ordinal: 78, Address: 0x53af0)
  • SyncBlk (Ordinal: 79, Address: 0x54130)
  • ThreadPool (Ordinal: 80, Address: 0x546f0)
  • ThreadState (Ordinal: 81, Address: 0x54c20)
  • Threads (Ordinal: 82, Address: 0x54d20)
  • Token2EE (Ordinal: 83, Address: 0x54f90)
  • TraverseHeap (Ordinal: 84, Address: 0x553f0)
  • Traverseheap (Ordinal: 85, Address: 0x553f0)
  • U (Ordinal: 86, Address: 0x57c20)
  • VMMap (Ordinal: 87, Address: 0x55710)
  • VMStat (Ordinal: 88, Address: 0x55860)
  • VerifyHeap (Ordinal: 89, Address: 0x559b0)
  • VerifyObj (Ordinal: 90, Address: 0x55c80)
  • VerifyStackTrace (Ordinal: 91, Address: 0x55ee0)
  • Verifyheap (Ordinal: 92, Address: 0x559b0)
  • WatsonBuckets (Ordinal: 93, Address: 0x56550)
  • _EFN_GetManagedExcepStack (Ordinal: 94, Address: 0x56810)
  • _EFN_GetManagedExcepStackW (Ordinal: 95, Address: 0x569d0)
  • _EFN_GetManagedObjectFieldInfo (Ordinal: 96, Address: 0x56b10)
  • _EFN_GetManagedObjectName (Ordinal: 97, Address: 0x56d20)
  • _EFN_StackTrace (Ordinal: 98, Address: 0x56ed0)
  • analyzeoom (Ordinal: 99, Address: 0x46570)
  • ao (Ordinal: 100, Address: 0x46570)
  • bpmd (Ordinal: 101, Address: 0x57020)
  • clrstack (Ordinal: 102, Address: 0x46c00)
  • comstate (Ordinal: 103, Address: 0x46850)
  • da (Ordinal: 104, Address: 0x471b0)
  • dclog (Ordinal: 105, Address: 0x48940)
  • dgc (Ordinal: 106, Address: 0x48cb0)
  • dlog (Ordinal: 107, Address: 0x48fb0)
  • do (Ordinal: 108, Address: 0x4ad30)
  • dso (Ordinal: 109, Address: 0x4bfa0)
  • dumparray (Ordinal: 110, Address: 0x471b0)
  • dumpassembly (Ordinal: 111, Address: 0x47540)
  • dumpccw (Ordinal: 112, Address: 0x47800)
  • dumpclass (Ordinal: 113, Address: 0x47d30)
  • dumpdomain (Ordinal: 114, Address: 0x48390)
  • dumpgcconfiglog (Ordinal: 115, Address: 0x48940)
  • dumpgcdata (Ordinal: 116, Address: 0x48cb0)
  • dumpgclog (Ordinal: 117, Address: 0x48fb0)
  • dumpheap (Ordinal: 118, Address: 0x492d0)
  • dumpil (Ordinal: 119, Address: 0x494e0)
  • dumplog (Ordinal: 120, Address: 0x49a50)
  • dumpmd (Ordinal: 121, Address: 0x49d40)
  • dumpmodule (Ordinal: 122, Address: 0x4a7c0)
  • dumpmt (Ordinal: 123, Address: 0x49f20)
  • dumpobj (Ordinal: 124, Address: 0x4ad30)
  • dumprcw (Ordinal: 125, Address: 0x4b0f0)
  • dumpruntimetypes (Ordinal: 126, Address: 0x4b660)
  • dumpsig (Ordinal: 127, Address: 0x4b860)
  • dumpsigelem (Ordinal: 128, Address: 0x4ba80)
  • dumpstack (Ordinal: 129, Address: 0x4bca0)
  • dumpstackobjects (Ordinal: 130, Address: 0x4bfa0)
  • dumpvc (Ordinal: 131, Address: 0x4c1e0)
  • eeheap (Ordinal: 132, Address: 0x4c400)
  • eestack (Ordinal: 133, Address: 0x4cbf0)
  • eeversion (Ordinal: 134, Address: 0x4d000)
  • ehinfo (Ordinal: 135, Address: 0x4d280)
  • finalizequeue (Ordinal: 136, Address: 0x4d640)
  • findappdomain (Ordinal: 137, Address: 0x4dc80)
  • findroots (Ordinal: 138, Address: 0x4e060)
  • fq (Ordinal: 139, Address: 0x4d640)
  • gchandleleaks (Ordinal: 140, Address: 0x4e540)
  • gchandles (Ordinal: 141, Address: 0x4edf0)
  • gcheapstat (Ordinal: 142, Address: 0x4efa0)
  • gcinfo (Ordinal: 143, Address: 0x4f9c0)
  • gcroot (Ordinal: 144, Address: 0x4feb0)
  • gcwhere (Ordinal: 145, Address: 0x50170)
  • heapstat (Ordinal: 146, Address: 0x4efa0)
  • help (Ordinal: 147, Address: 0x50900)
  • histclear (Ordinal: 148, Address: 0x22230)
  • histinit (Ordinal: 149, Address: 0x22360)
  • histobj (Ordinal: 150, Address: 0x22510)
  • histobjfind (Ordinal: 151, Address: 0x227a0)
  • histroot (Ordinal: 152, Address: 0x22a80)
  • histstats (Ordinal: 153, Address: 0x22da0)
  • hof (Ordinal: 154, Address: 0x227a0)
  • ip2md (Ordinal: 155, Address: 0x50a10)
  • listnearobj (Ordinal: 156, Address: 0x50db0)
  • lno (Ordinal: 157, Address: 0x50db0)
  • minidumpmode (Ordinal: 158, Address: 0x51380)
  • name2ee (Ordinal: 159, Address: 0x51560)
  • objsize (Ordinal: 160, Address: 0x51ad0)
  • pathto (Ordinal: 161, Address: 0x51d80)
  • pe (Ordinal: 162, Address: 0x51fb0)
  • printexception (Ordinal: 163, Address: 0x51fb0)
  • procinfo (Ordinal: 164, Address: 0x52520)
  • rcwcleanuplist (Ordinal: 165, Address: 0x52f00)
  • savemodule (Ordinal: 166, Address: 0x53260)
  • soe (Ordinal: 167, Address: 0x53af0)
  • sosflush (Ordinal: 168, Address: 0x53120)
  • stoponexception (Ordinal: 169, Address: 0x53af0)
  • syncblk (Ordinal: 170, Address: 0x54130)
  • t (Ordinal: 171, Address: 0x54d20)
  • threadpool (Ordinal: 172, Address: 0x546f0)
  • threads (Ordinal: 173, Address: 0x54d20)
  • threadstate (Ordinal: 174, Address: 0x54c20)
  • token2ee (Ordinal: 175, Address: 0x54f90)
  • tp (Ordinal: 176, Address: 0x546f0)
  • traverseheap (Ordinal: 177, Address: 0x553f0)
  • u (Ordinal: 178, Address: 0x57c20)
  • verifyheap (Ordinal: 179, Address: 0x559b0)
  • verifyobj (Ordinal: 180, Address: 0x55c80)
  • vh (Ordinal: 181, Address: 0x559b0)
  • vmmap (Ordinal: 182, Address: 0x55710)
  • vmstat (Ordinal: 183, Address: 0x55860)
  • vo (Ordinal: 184, Address: 0x55c80)

Imported DLLs & Functions

dbgeng.dll
  • DebugCreate (Address: 0x100aa194)
dbghelp.dll
  • SymFindFileInPathW (Address: 0x100aa19c)
KERNEL32.dll
  • CloseHandle (Address: 0x100aa008)
  • ConvertThreadToFiber (Address: 0x100aa06c)
  • CreateEventW (Address: 0x100aa0e4)
  • CreateFiber (Address: 0x100aa064)
  • CreateFileA (Address: 0x100aa000)
  • CreateFileMappingA (Address: 0x100aa020)
  • CreateFileW (Address: 0x100aa0a8)
  • DebugBreak (Address: 0x100aa04c)
  • DecodePointer (Address: 0x100aa174)
  • DeleteCriticalSection (Address: 0x100aa0d4)
  • DeleteFiber (Address: 0x100aa068)
  • EncodePointer (Address: 0x100aa128)
  • EnterCriticalSection (Address: 0x100aa0cc)
  • ExitProcess (Address: 0x100aa12c)
  • FileTimeToLocalFileTime (Address: 0x100aa040)
  • FileTimeToSystemTime (Address: 0x100aa038)
  • FindClose (Address: 0x100aa080)
  • FindFirstFileExA (Address: 0x100aa150)
  • FindNextFileA (Address: 0x100aa154)
  • FindResourceA (Address: 0x100aa078)
  • FlushFileBuffers (Address: 0x100aa0b8)
  • FreeEnvironmentStringsW (Address: 0x100aa170)
  • FreeLibrary (Address: 0x100aa050)
  • GetACP (Address: 0x100aa138)
  • GetCommandLineA (Address: 0x100aa164)
  • GetCommandLineW (Address: 0x100aa168)
  • GetConsoleCP (Address: 0x100aa0b4)
  • GetConsoleMode (Address: 0x100aa0b0)
  • GetCPInfo (Address: 0x100aa160)
  • GetCurrentProcess (Address: 0x100aa084)
  • GetCurrentProcessId (Address: 0x100aa0f0)
  • GetCurrentThreadId (Address: 0x100aa0f4)
  • GetEnvironmentStringsW (Address: 0x100aa16c)
  • GetFileSize (Address: 0x100aa004)
  • GetFileType (Address: 0x100aa144)
  • GetLastError (Address: 0x100aa030)
  • GetModuleFileNameA (Address: 0x100aa134)
  • GetModuleFileNameW (Address: 0x100aa088)
  • GetModuleHandleExW (Address: 0x100aa130)
  • GetModuleHandleW (Address: 0x100aa0e8)
  • GetOEMCP (Address: 0x100aa15c)
  • GetProcAddress (Address: 0x100aa054)
  • GetProcessHeap (Address: 0x100aa014)
  • GetStartupInfoW (Address: 0x100aa104)
  • GetStdHandle (Address: 0x100aa140)
  • GetStringTypeW (Address: 0x100aa148)
  • GetSystemTimeAsFileTime (Address: 0x100aa0f8)
  • GetTimeFormatW (Address: 0x100aa03c)
  • GlobalMemoryStatus (Address: 0x100aa060)
  • HeapAlloc (Address: 0x100aa00c)
  • HeapFree (Address: 0x100aa010)
  • HeapReAlloc (Address: 0x100aa14c)
  • HeapSize (Address: 0x100aa0a4)
  • InitializeCriticalSectionAndSpinCount (Address: 0x100aa10c)
  • InitializeSListHead (Address: 0x100aa0fc)
  • InterlockedDecrement (Address: 0x100aa02c)
  • InterlockedFlushSList (Address: 0x100aa120)
  • InterlockedIncrement (Address: 0x100aa028)
  • IsDebuggerPresent (Address: 0x100aa100)
  • IsProcessorFeaturePresent (Address: 0x100aa0c8)
  • IsValidCodePage (Address: 0x100aa158)
  • LCMapStringW (Address: 0x100aa13c)
  • LeaveCriticalSection (Address: 0x100aa0d0)
  • LoadLibraryA (Address: 0x100aa074)
  • LoadLibraryExW (Address: 0x100aa08c)
  • LoadResource (Address: 0x100aa058)
  • LockResource (Address: 0x100aa05c)
  • MapViewOfFile (Address: 0x100aa018)
  • MultiByteToWideChar (Address: 0x100aa024)
  • QueryPerformanceCounter (Address: 0x100aa0ec)
  • RaiseException (Address: 0x100aa108)
  • ReadConsoleW (Address: 0x100aa094)
  • ReadFile (Address: 0x100aa098)
  • ResetEvent (Address: 0x100aa0dc)
  • SetEndOfFile (Address: 0x100aa090)
  • SetEvent (Address: 0x100aa0d8)
  • SetFilePointer (Address: 0x100aa044)
  • SetFilePointerEx (Address: 0x100aa0a0)
  • SetLastError (Address: 0x100aa124)
  • SetStdHandle (Address: 0x100aa0ac)
  • SetUnhandledExceptionFilter (Address: 0x100aa0c0)
  • SwitchToFiber (Address: 0x100aa070)
  • SystemTimeToTzSpecificLocalTime (Address: 0x100aa034)
  • TerminateProcess (Address: 0x100aa0c4)
  • TlsAlloc (Address: 0x100aa110)
  • TlsFree (Address: 0x100aa11c)
  • TlsGetValue (Address: 0x100aa114)
  • TlsSetValue (Address: 0x100aa118)
  • UnhandledExceptionFilter (Address: 0x100aa0bc)
  • UnmapViewOfFile (Address: 0x100aa01c)
  • WaitForSingleObjectEx (Address: 0x100aa0e0)
  • WideCharToMultiByte (Address: 0x100aa07c)
  • WriteConsoleW (Address: 0x100aa09c)
  • WriteFile (Address: 0x100aa048)
ntdll.dll
  • RtlUnwind (Address: 0x100aa1a4)
ole32.dll
  • CoCreateInstance (Address: 0x100aa1ac)
  • CoInitialize (Address: 0x100aa1b0)
PSAPI.DLL
  • GetModuleInformation (Address: 0x100aa17c)
VERSION.dll
  • GetFileVersionInfoSizeW (Address: 0x100aa184)
  • GetFileVersionInfoW (Address: 0x100aa188)
  • VerQueryValueA (Address: 0x100aa18c)