SOS.dll

Description: Microsoft NTSD extension for .NET Runtime

Authors: © Microsoft Corporation. All rights reserved.

Version: 4.8.9310.0

Architecture: 32-bit

Operating System: Windows

SHA256: d35f016a172a05e13278da2f850a8561

File Size: 761.0 KB

Uploaded At: Dec. 1, 2025, 7:19 a.m.

Views: 21

Exported Functions

  • AnalyzeOOM (Ordinal: 1, Address: 0x47080)
  • BPMD (Ordinal: 2, Address: 0x58c60)
  • CLRStack (Ordinal: 3, Address: 0x47740)
  • COMState (Ordinal: 4, Address: 0x47390)
  • ClrStack (Ordinal: 5, Address: 0x47740)
  • DebugExtensionInitialize (Ordinal: 6, Address: 0x21d90)
  • DebugExtensionNotify (Ordinal: 7, Address: 0x21fb0)
  • DebugExtensionUninitialize (Ordinal: 8, Address: 0x22110)
  • DumpArray (Ordinal: 9, Address: 0x47dc0)
  • DumpAssembly (Ordinal: 10, Address: 0x48150)
  • DumpCCW (Ordinal: 11, Address: 0x48420)
  • DumpClass (Ordinal: 12, Address: 0x48950)
  • DumpDomain (Ordinal: 13, Address: 0x48fe0)
  • DumpGCConfigLog (Ordinal: 14, Address: 0x495f0)
  • DumpGCData (Ordinal: 15, Address: 0x49960)
  • DumpGCLog (Ordinal: 16, Address: 0x49dd0)
  • DumpHeap (Ordinal: 17, Address: 0x4a0f0)
  • DumpIL (Ordinal: 18, Address: 0x4a300)
  • DumpLog (Ordinal: 19, Address: 0x4a820)
  • DumpMD (Ordinal: 20, Address: 0x4ab10)
  • DumpMT (Ordinal: 21, Address: 0x4ace0)
  • DumpModule (Ordinal: 22, Address: 0x4bac0)
  • DumpObj (Ordinal: 23, Address: 0x4c030)
  • DumpRCW (Ordinal: 24, Address: 0x4c4f0)
  • DumpRuntimeTypes (Ordinal: 25, Address: 0x4cad0)
  • DumpSig (Ordinal: 26, Address: 0x4ccd0)
  • DumpSigElem (Ordinal: 27, Address: 0x4cf10)
  • DumpStack (Ordinal: 28, Address: 0x4d150)
  • DumpStackObjects (Ordinal: 29, Address: 0x4d450)
  • DumpVC (Ordinal: 30, Address: 0x4d6b0)
  • Dumpccw (Ordinal: 31, Address: 0x48420)
  • Dumplog (Ordinal: 32, Address: 0x4a820)
  • Dumprcw (Ordinal: 33, Address: 0x4c4f0)
  • Dumpruntimetypes (Ordinal: 34, Address: 0x4cad0)
  • EEHeap (Ordinal: 35, Address: 0x4d8d0)
  • EEStack (Ordinal: 36, Address: 0x4e160)
  • EEVersion (Ordinal: 37, Address: 0x4e5b0)
  • EHInfo (Ordinal: 38, Address: 0x4e830)
  • Ehinfo (Ordinal: 39, Address: 0x4e830)
  • FinalizeQueue (Ordinal: 40, Address: 0x4ebc0)
  • FindAppDomain (Ordinal: 41, Address: 0x4f260)
  • FindRoots (Ordinal: 42, Address: 0x4f640)
  • Findappdomain (Ordinal: 43, Address: 0x4f260)
  • GCHandleLeaks (Ordinal: 44, Address: 0x4fb20)
  • GCHandleleaks (Ordinal: 45, Address: 0x4fb20)
  • GCHandles (Ordinal: 46, Address: 0x50390)
  • GCHeapStat (Ordinal: 47, Address: 0x50540)
  • GCInfo (Ordinal: 48, Address: 0x50fd0)
  • GCRoot (Ordinal: 49, Address: 0x51470)
  • GCWhere (Ordinal: 50, Address: 0x51730)
  • GcHeapStat (Ordinal: 51, Address: 0x50540)
  • GcWhere (Ordinal: 52, Address: 0x51730)
  • Gchandleleaks (Ordinal: 53, Address: 0x4fb20)
  • HandleCLRN (Ordinal: 54, Address: 0x51d10)
  • HeapStat (Ordinal: 55, Address: 0x50540)
  • Help (Ordinal: 56, Address: 0x51f30)
  • HistClear (Ordinal: 57, Address: 0x22830)
  • HistInit (Ordinal: 58, Address: 0x22960)
  • HistObj (Ordinal: 59, Address: 0x22b10)
  • HistObjFind (Ordinal: 60, Address: 0x22db0)
  • HistRoot (Ordinal: 61, Address: 0x23090)
  • HistStats (Ordinal: 62, Address: 0x233c0)
  • IP2MD (Ordinal: 63, Address: 0x52040)
  • ListNearObj (Ordinal: 64, Address: 0x523e0)
  • MinidumpMode (Ordinal: 65, Address: 0x52a00)
  • Minidumpmode (Ordinal: 66, Address: 0x52a00)
  • Name2EE (Ordinal: 67, Address: 0x52be0)
  • ObjSize (Ordinal: 68, Address: 0x53150)
  • PathTo (Ordinal: 69, Address: 0x53410)
  • PrintException (Ordinal: 70, Address: 0x53630)
  • Printexception (Ordinal: 71, Address: 0x53630)
  • ProcInfo (Ordinal: 72, Address: 0x53bd0)
  • RCWCleanupList (Ordinal: 73, Address: 0x54910)
  • Rcwcleanuplist (Ordinal: 74, Address: 0x54910)
  • SOSFlush (Ordinal: 75, Address: 0x54b30)
  • SaveModule (Ordinal: 76, Address: 0x54c70)
  • StopOnException (Ordinal: 77, Address: 0x554e0)
  • Stoponexception (Ordinal: 78, Address: 0x554e0)
  • SyncBlk (Ordinal: 79, Address: 0x55c20)
  • ThreadPool (Ordinal: 80, Address: 0x56280)
  • ThreadState (Ordinal: 81, Address: 0x567c0)
  • Threads (Ordinal: 82, Address: 0x568c0)
  • Token2EE (Ordinal: 83, Address: 0x56b50)
  • TraverseHeap (Ordinal: 84, Address: 0x56fc0)
  • Traverseheap (Ordinal: 85, Address: 0x56fc0)
  • U (Ordinal: 86, Address: 0x59b80)
  • VMMap (Ordinal: 87, Address: 0x572f0)
  • VMStat (Ordinal: 88, Address: 0x57440)
  • VerifyHeap (Ordinal: 89, Address: 0x57590)
  • VerifyObj (Ordinal: 90, Address: 0x57860)
  • VerifyStackTrace (Ordinal: 91, Address: 0x57ab0)
  • Verifyheap (Ordinal: 92, Address: 0x57590)
  • WatsonBuckets (Ordinal: 93, Address: 0x58190)
  • _EFN_GetManagedExcepStack (Ordinal: 94, Address: 0x58450)
  • _EFN_GetManagedExcepStackW (Ordinal: 95, Address: 0x58610)
  • _EFN_GetManagedObjectFieldInfo (Ordinal: 96, Address: 0x58750)
  • _EFN_GetManagedObjectName (Ordinal: 97, Address: 0x58960)
  • _EFN_StackTrace (Ordinal: 98, Address: 0x58b10)
  • analyzeoom (Ordinal: 99, Address: 0x47080)
  • ao (Ordinal: 100, Address: 0x47080)
  • bpmd (Ordinal: 101, Address: 0x58c60)
  • clrstack (Ordinal: 102, Address: 0x47740)
  • comstate (Ordinal: 103, Address: 0x47390)
  • da (Ordinal: 104, Address: 0x47dc0)
  • dclog (Ordinal: 105, Address: 0x495f0)
  • dgc (Ordinal: 106, Address: 0x49960)
  • dlog (Ordinal: 107, Address: 0x49dd0)
  • do (Ordinal: 108, Address: 0x4c030)
  • dso (Ordinal: 109, Address: 0x4d450)
  • dumparray (Ordinal: 110, Address: 0x47dc0)
  • dumpassembly (Ordinal: 111, Address: 0x48150)
  • dumpccw (Ordinal: 112, Address: 0x48420)
  • dumpclass (Ordinal: 113, Address: 0x48950)
  • dumpdomain (Ordinal: 114, Address: 0x48fe0)
  • dumpgcconfiglog (Ordinal: 115, Address: 0x495f0)
  • dumpgcdata (Ordinal: 116, Address: 0x49960)
  • dumpgclog (Ordinal: 117, Address: 0x49dd0)
  • dumpheap (Ordinal: 118, Address: 0x4a0f0)
  • dumpil (Ordinal: 119, Address: 0x4a300)
  • dumplog (Ordinal: 120, Address: 0x4a820)
  • dumpmd (Ordinal: 121, Address: 0x4ab10)
  • dumpmodule (Ordinal: 122, Address: 0x4bac0)
  • dumpmt (Ordinal: 123, Address: 0x4ace0)
  • dumpobj (Ordinal: 124, Address: 0x4c030)
  • dumprcw (Ordinal: 125, Address: 0x4c4f0)
  • dumpruntimetypes (Ordinal: 126, Address: 0x4cad0)
  • dumpsig (Ordinal: 127, Address: 0x4ccd0)
  • dumpsigelem (Ordinal: 128, Address: 0x4cf10)
  • dumpstack (Ordinal: 129, Address: 0x4d150)
  • dumpstackobjects (Ordinal: 130, Address: 0x4d450)
  • dumpvc (Ordinal: 131, Address: 0x4d6b0)
  • eeheap (Ordinal: 132, Address: 0x4d8d0)
  • eestack (Ordinal: 133, Address: 0x4e160)
  • eeversion (Ordinal: 134, Address: 0x4e5b0)
  • ehinfo (Ordinal: 135, Address: 0x4e830)
  • finalizequeue (Ordinal: 136, Address: 0x4ebc0)
  • findappdomain (Ordinal: 137, Address: 0x4f260)
  • findroots (Ordinal: 138, Address: 0x4f640)
  • fq (Ordinal: 139, Address: 0x4ebc0)
  • gchandleleaks (Ordinal: 140, Address: 0x4fb20)
  • gchandles (Ordinal: 141, Address: 0x50390)
  • gcheapstat (Ordinal: 142, Address: 0x50540)
  • gcinfo (Ordinal: 143, Address: 0x50fd0)
  • gcroot (Ordinal: 144, Address: 0x51470)
  • gcwhere (Ordinal: 145, Address: 0x51730)
  • heapstat (Ordinal: 146, Address: 0x50540)
  • help (Ordinal: 147, Address: 0x51f30)
  • histclear (Ordinal: 148, Address: 0x22830)
  • histinit (Ordinal: 149, Address: 0x22960)
  • histobj (Ordinal: 150, Address: 0x22b10)
  • histobjfind (Ordinal: 151, Address: 0x22db0)
  • histroot (Ordinal: 152, Address: 0x23090)
  • histstats (Ordinal: 153, Address: 0x233c0)
  • hof (Ordinal: 154, Address: 0x22db0)
  • ip2md (Ordinal: 155, Address: 0x52040)
  • listnearobj (Ordinal: 156, Address: 0x523e0)
  • lno (Ordinal: 157, Address: 0x523e0)
  • minidumpmode (Ordinal: 158, Address: 0x52a00)
  • name2ee (Ordinal: 159, Address: 0x52be0)
  • objsize (Ordinal: 160, Address: 0x53150)
  • pathto (Ordinal: 161, Address: 0x53410)
  • pe (Ordinal: 162, Address: 0x53630)
  • printexception (Ordinal: 163, Address: 0x53630)
  • procinfo (Ordinal: 164, Address: 0x53bd0)
  • rcwcleanuplist (Ordinal: 165, Address: 0x54910)
  • savemodule (Ordinal: 166, Address: 0x54c70)
  • soe (Ordinal: 167, Address: 0x554e0)
  • sosflush (Ordinal: 168, Address: 0x54b30)
  • stoponexception (Ordinal: 169, Address: 0x554e0)
  • syncblk (Ordinal: 170, Address: 0x55c20)
  • t (Ordinal: 171, Address: 0x568c0)
  • threadpool (Ordinal: 172, Address: 0x56280)
  • threads (Ordinal: 173, Address: 0x568c0)
  • threadstate (Ordinal: 174, Address: 0x567c0)
  • token2ee (Ordinal: 175, Address: 0x56b50)
  • tp (Ordinal: 176, Address: 0x56280)
  • traverseheap (Ordinal: 177, Address: 0x56fc0)
  • u (Ordinal: 178, Address: 0x59b80)
  • verifyheap (Ordinal: 179, Address: 0x57590)
  • verifyobj (Ordinal: 180, Address: 0x57860)
  • vh (Ordinal: 181, Address: 0x57590)
  • vmmap (Ordinal: 182, Address: 0x572f0)
  • vmstat (Ordinal: 183, Address: 0x57440)
  • vo (Ordinal: 184, Address: 0x57860)

Imported DLLs & Functions

dbgeng.dll
  • DebugCreate (Address: 0x100ac194)
dbghelp.dll
  • SymFindFileInPathW (Address: 0x100ac19c)
KERNEL32.dll
  • CloseHandle (Address: 0x100ac008)
  • ConvertThreadToFiber (Address: 0x100ac06c)
  • CreateEventW (Address: 0x100ac0dc)
  • CreateFiber (Address: 0x100ac064)
  • CreateFileA (Address: 0x100ac000)
  • CreateFileMappingA (Address: 0x100ac020)
  • CreateFileW (Address: 0x100ac0a8)
  • DebugBreak (Address: 0x100ac04c)
  • DecodePointer (Address: 0x100ac150)
  • DeleteCriticalSection (Address: 0x100ac0cc)
  • DeleteFiber (Address: 0x100ac068)
  • EncodePointer (Address: 0x100ac11c)
  • EnterCriticalSection (Address: 0x100ac0c0)
  • ExitProcess (Address: 0x100ac130)
  • FileTimeToLocalFileTime (Address: 0x100ac040)
  • FileTimeToSystemTime (Address: 0x100ac038)
  • FindClose (Address: 0x100ac080)
  • FindFirstFileExA (Address: 0x100ac158)
  • FindNextFileA (Address: 0x100ac15c)
  • FindResourceA (Address: 0x100ac078)
  • FlushFileBuffers (Address: 0x100ac0b8)
  • FreeEnvironmentStringsW (Address: 0x100ac0bc)
  • FreeLibrary (Address: 0x100ac050)
  • GetACP (Address: 0x100ac13c)
  • GetCommandLineA (Address: 0x100ac16c)
  • GetCommandLineW (Address: 0x100ac170)
  • GetConsoleCP (Address: 0x100ac0b4)
  • GetConsoleMode (Address: 0x100ac0b0)
  • GetCPInfo (Address: 0x100ac168)
  • GetCurrentProcess (Address: 0x100ac084)
  • GetCurrentProcessId (Address: 0x100ac0f8)
  • GetCurrentThreadId (Address: 0x100ac0fc)
  • GetEnvironmentStringsW (Address: 0x100ac174)
  • GetFileSize (Address: 0x100ac004)
  • GetFileType (Address: 0x100ac148)
  • GetLastError (Address: 0x100ac030)
  • GetModuleFileNameA (Address: 0x100ac138)
  • GetModuleFileNameW (Address: 0x100ac088)
  • GetModuleHandleExW (Address: 0x100ac134)
  • GetModuleHandleW (Address: 0x100ac0e0)
  • GetOEMCP (Address: 0x100ac164)
  • GetProcAddress (Address: 0x100ac054)
  • GetProcessHeap (Address: 0x100ac014)
  • GetStartupInfoW (Address: 0x100ac10c)
  • GetStdHandle (Address: 0x100ac144)
  • GetStringTypeW (Address: 0x100ac14c)
  • GetSystemTimeAsFileTime (Address: 0x100ac100)
  • GetTimeFormatW (Address: 0x100ac03c)
  • GlobalMemoryStatus (Address: 0x100ac060)
  • HeapAlloc (Address: 0x100ac00c)
  • HeapFree (Address: 0x100ac010)
  • HeapReAlloc (Address: 0x100ac154)
  • HeapSize (Address: 0x100ac0a4)
  • InitializeCriticalSectionAndSpinCount (Address: 0x100ac0c8)
  • InitializeSListHead (Address: 0x100ac104)
  • InterlockedDecrement (Address: 0x100ac02c)
  • InterlockedFlushSList (Address: 0x100ac114)
  • InterlockedIncrement (Address: 0x100ac028)
  • IsDebuggerPresent (Address: 0x100ac108)
  • IsProcessorFeaturePresent (Address: 0x100ac0f0)
  • IsValidCodePage (Address: 0x100ac160)
  • LCMapStringW (Address: 0x100ac140)
  • LeaveCriticalSection (Address: 0x100ac0c4)
  • LoadLibraryA (Address: 0x100ac074)
  • LoadLibraryExW (Address: 0x100ac08c)
  • LoadResource (Address: 0x100ac058)
  • LockResource (Address: 0x100ac05c)
  • MapViewOfFile (Address: 0x100ac018)
  • MultiByteToWideChar (Address: 0x100ac024)
  • QueryPerformanceCounter (Address: 0x100ac0f4)
  • RaiseException (Address: 0x100ac110)
  • ReadConsoleW (Address: 0x100ac094)
  • ReadFile (Address: 0x100ac098)
  • ResetEvent (Address: 0x100ac0d4)
  • SetEndOfFile (Address: 0x100ac090)
  • SetEvent (Address: 0x100ac0d0)
  • SetFilePointer (Address: 0x100ac044)
  • SetFilePointerEx (Address: 0x100ac0a0)
  • SetLastError (Address: 0x100ac118)
  • SetStdHandle (Address: 0x100ac0ac)
  • SetUnhandledExceptionFilter (Address: 0x100ac0e8)
  • SwitchToFiber (Address: 0x100ac070)
  • SystemTimeToTzSpecificLocalTime (Address: 0x100ac034)
  • TerminateProcess (Address: 0x100ac0ec)
  • TlsAlloc (Address: 0x100ac120)
  • TlsFree (Address: 0x100ac12c)
  • TlsGetValue (Address: 0x100ac124)
  • TlsSetValue (Address: 0x100ac128)
  • UnhandledExceptionFilter (Address: 0x100ac0e4)
  • UnmapViewOfFile (Address: 0x100ac01c)
  • WaitForSingleObjectEx (Address: 0x100ac0d8)
  • WideCharToMultiByte (Address: 0x100ac07c)
  • WriteConsoleW (Address: 0x100ac09c)
  • WriteFile (Address: 0x100ac048)
ntdll.dll
  • RtlUnwind (Address: 0x100ac1a4)
ole32.dll
  • CoCreateInstance (Address: 0x100ac1ac)
  • CoInitialize (Address: 0x100ac1b0)
PSAPI.DLL
  • GetModuleInformation (Address: 0x100ac17c)
VERSION.dll
  • GetFileVersionInfoSizeW (Address: 0x100ac184)
  • GetFileVersionInfoW (Address: 0x100ac188)
  • VerQueryValueA (Address: 0x100ac18c)