SOS.dll

Description: Microsoft NTSD extension for .NET Runtime

Authors: © Microsoft Corporation. All rights reserved.

Version: 2.0.50727.9174

Architecture: 64-bit

Operating System: Windows

SHA256: da2289a1bae5c8779fee73c843c18693

File Size: 477.9 KB

Uploaded At: Dec. 1, 2025, 8:29 a.m.

Views: 25

Exported Functions

  • _EFN_GetManagedExcepStack (Ordinal: 1, Address: 0x28fc0)
  • _EFN_GetManagedObjectFieldInfo (Ordinal: 2, Address: 0x24d70)
  • _EFN_GetManagedObjectName (Ordinal: 3, Address: 0x24c10)
  • _EFN_StackTrace (Ordinal: 4, Address: 0x24b10)
  • CLRStack (Ordinal: 5, Address: 0x23350)
  • COMState (Ordinal: 6, Address: 0x2b2f0)
  • ClrStack (Ordinal: 7, Address: 0x23350)
  • DebugExtensionInitialize (Ordinal: 8, Address: 0x2c9d0)
  • DebugExtensionNotify (Ordinal: 9, Address: 0x2c680)
  • DebugExtensionUninitialize (Ordinal: 10, Address: 0x3d8a0)
  • DumpArray (Ordinal: 11, Address: 0x2c0b0)
  • DumpAssembly (Ordinal: 12, Address: 0x1f960)
  • DumpClass (Ordinal: 13, Address: 0x1d410)
  • DumpDomain (Ordinal: 14, Address: 0x1f480)
  • DumpHeap (Ordinal: 15, Address: 0x2a280)
  • DumpIL (Ordinal: 16, Address: 0x1cf50)
  • DumpLog (Ordinal: 17, Address: 0x1ace0)
  • DumpMD (Ordinal: 18, Address: 0x1ce60)
  • DumpMT (Ordinal: 19, Address: 0x1d880)
  • DumpMethodSig (Ordinal: 20, Address: 0x25f70)
  • DumpModule (Ordinal: 21, Address: 0x1efb0)
  • DumpObj (Ordinal: 22, Address: 0x1ded0)
  • DumpRuntimeTypes (Ordinal: 23, Address: 0x1e6d0)
  • DumpSig (Ordinal: 24, Address: 0x26190)
  • DumpStack (Ordinal: 25, Address: 0x1c450)
  • DumpStackObjects (Ordinal: 26, Address: 0x1ca60)
  • DumpVC (Ordinal: 27, Address: 0x1e1d0)
  • Dumplog (Ordinal: 28, Address: 0x1ace0)
  • Dumpruntimetypes (Ordinal: 29, Address: 0x1e6d0)
  • EEHeap (Ordinal: 30, Address: 0x298c0)
  • EEStack (Ordinal: 31, Address: 0x1c650)
  • EEVersion (Ordinal: 32, Address: 0x20cc0)
  • EHInfo (Ordinal: 33, Address: 0x209b0)
  • Ehinfo (Ordinal: 34, Address: 0x209b0)
  • FinalizeQueue (Ordinal: 35, Address: 0x2ae30)
  • FindAppDomain (Ordinal: 36, Address: 0x206b0)
  • Findappdomain (Ordinal: 37, Address: 0x206b0)
  • GCHandleLeaks (Ordinal: 38, Address: 0x22d10)
  • GCHandleleaks (Ordinal: 39, Address: 0x22d10)
  • GCHandles (Ordinal: 40, Address: 0x27d50)
  • GCInfo (Ordinal: 41, Address: 0x2b660)
  • GCRoot (Ordinal: 42, Address: 0x22110)
  • Gchandleleaks (Ordinal: 43, Address: 0x22d10)
  • Help (Ordinal: 44, Address: 0x1bc40)
  • IP2MD (Ordinal: 45, Address: 0x1c2c0)
  • MinidumpMode (Ordinal: 46, Address: 0x1c130)
  • Minidumpmode (Ordinal: 47, Address: 0x1c130)
  • Name2EE (Ordinal: 48, Address: 0x21cb0)
  • ObjSize (Ordinal: 49, Address: 0x22bf0)
  • PrintException (Ordinal: 50, Address: 0x26be0)
  • Printexception (Ordinal: 51, Address: 0x26be0)
  • ProcInfo (Ordinal: 52, Address: 0x20f10)
  • RCWCleanupList (Ordinal: 53, Address: 0x1ede0)
  • Rcwcleanuplist (Ordinal: 54, Address: 0x1ede0)
  • SOSFlush (Ordinal: 55, Address: 0x239c0)
  • SaveModule (Ordinal: 56, Address: 0x23b20)
  • StopOnException (Ordinal: 57, Address: 0x224a0)
  • Stoponexception (Ordinal: 58, Address: 0x224a0)
  • SyncBlk (Ordinal: 59, Address: 0x1e7d0)
  • ThreadPool (Ordinal: 60, Address: 0x20310)
  • Threads (Ordinal: 61, Address: 0x1fb70)
  • Token2EE (Ordinal: 62, Address: 0x21980)
  • TraverseHeap (Ordinal: 63, Address: 0x1e390)
  • Traverseheap (Ordinal: 64, Address: 0x1e390)
  • U (Ordinal: 65, Address: 0x2ba20)
  • VMMap (Ordinal: 66, Address: 0x23900)
  • VMStat (Ordinal: 67, Address: 0x23a60)
  • VerifyDAC (Ordinal: 68, Address: 0x1ffb0)
  • VerifyHeap (Ordinal: 69, Address: 0x2acc0)
  • VerifyStackTrace (Ordinal: 70, Address: 0x28510)
  • Verifyheap (Ordinal: 71, Address: 0x2acc0)
  • WatsonBuckets (Ordinal: 72, Address: 0x1fd10)
  • bpmd (Ordinal: 73, Address: 0x27350)
  • clrstack (Ordinal: 74, Address: 0x23350)
  • comstate (Ordinal: 75, Address: 0x2b2f0)
  • da (Ordinal: 76, Address: 0x2c0b0)
  • do (Ordinal: 77, Address: 0x1ded0)
  • dso (Ordinal: 78, Address: 0x1ca60)
  • dumparray (Ordinal: 79, Address: 0x2c0b0)
  • dumpassembly (Ordinal: 80, Address: 0x1f960)
  • dumpclass (Ordinal: 81, Address: 0x1d410)
  • dumpdomain (Ordinal: 82, Address: 0x1f480)
  • dumpheap (Ordinal: 83, Address: 0x2a280)
  • dumpil (Ordinal: 84, Address: 0x1cf50)
  • dumplog (Ordinal: 85, Address: 0x1ace0)
  • dumpmd (Ordinal: 86, Address: 0x1ce60)
  • dumpmethodsig (Ordinal: 87, Address: 0x25f70)
  • dumpmodule (Ordinal: 88, Address: 0x1efb0)
  • dumpmt (Ordinal: 89, Address: 0x1d880)
  • dumpobj (Ordinal: 90, Address: 0x1ded0)
  • dumpruntimetypes (Ordinal: 91, Address: 0x1e6d0)
  • dumpsig (Ordinal: 92, Address: 0x26190)
  • dumpstack (Ordinal: 93, Address: 0x1c450)
  • dumpstackobjects (Ordinal: 94, Address: 0x1ca60)
  • dumpvc (Ordinal: 95, Address: 0x1e1d0)
  • eeheap (Ordinal: 96, Address: 0x298c0)
  • eestack (Ordinal: 97, Address: 0x1c650)
  • eeversion (Ordinal: 98, Address: 0x20cc0)
  • ehinfo (Ordinal: 99, Address: 0x209b0)
  • finalizequeue (Ordinal: 100, Address: 0x2ae30)
  • findappdomain (Ordinal: 101, Address: 0x206b0)
  • gchandleleaks (Ordinal: 102, Address: 0x22d10)
  • gchandles (Ordinal: 103, Address: 0x27d50)
  • gcinfo (Ordinal: 104, Address: 0x2b660)
  • gcroot (Ordinal: 105, Address: 0x22110)
  • help (Ordinal: 106, Address: 0x1bc40)
  • ip2md (Ordinal: 107, Address: 0x1c2c0)
  • minidumpmode (Ordinal: 108, Address: 0x1c130)
  • name2ee (Ordinal: 109, Address: 0x21cb0)
  • objsize (Ordinal: 110, Address: 0x22bf0)
  • pe (Ordinal: 111, Address: 0x26be0)
  • printexception (Ordinal: 112, Address: 0x26be0)
  • procinfo (Ordinal: 113, Address: 0x20f10)
  • rcwcleanuplist (Ordinal: 114, Address: 0x1ede0)
  • savemodule (Ordinal: 115, Address: 0x23b20)
  • soe (Ordinal: 116, Address: 0x224a0)
  • sosflush (Ordinal: 117, Address: 0x239c0)
  • stoponexception (Ordinal: 118, Address: 0x224a0)
  • syncblk (Ordinal: 119, Address: 0x1e7d0)
  • threadpool (Ordinal: 120, Address: 0x20310)
  • threads (Ordinal: 121, Address: 0x1fb70)
  • token2ee (Ordinal: 122, Address: 0x21980)
  • traverseheap (Ordinal: 123, Address: 0x1e390)
  • tst (Ordinal: 124, Address: 0x23350)
  • u (Ordinal: 125, Address: 0x2ba20)
  • verifyheap (Ordinal: 126, Address: 0x2acc0)
  • vmmap (Ordinal: 127, Address: 0x23900)
  • vmstat (Ordinal: 128, Address: 0x23a60)

Imported DLLs & Functions

dbgeng.dll
  • DebugCreate (Address: 0x642ffcb1318)
KERNEL32.dll
  • CloseHandle (Address: 0x642ffcb1060)
  • ConvertThreadToFiber (Address: 0x642ffcb10e0)
  • CreateFiber (Address: 0x642ffcb10d8)
  • CreateFileA (Address: 0x642ffcb1070)
  • CreateFileMappingA (Address: 0x642ffcb1058)
  • DeleteCriticalSection (Address: 0x642ffcb11d8)
  • DeleteFiber (Address: 0x642ffcb10d0)
  • EnterCriticalSection (Address: 0x642ffcb1268)
  • ExitProcess (Address: 0x642ffcb1160)
  • FileTimeToLocalFileTime (Address: 0x642ffcb10a8)
  • FileTimeToSystemTime (Address: 0x642ffcb1040)
  • FindResourceA (Address: 0x642ffcb1098)
  • FlsAlloc (Address: 0x642ffcb1190)
  • FlsFree (Address: 0x642ffcb1178)
  • FlsGetValue (Address: 0x642ffcb1168)
  • FlsSetValue (Address: 0x642ffcb10f0)
  • FlushFileBuffers (Address: 0x642ffcb12b8)
  • FreeEnvironmentStringsA (Address: 0x642ffcb11e8)
  • FreeEnvironmentStringsW (Address: 0x642ffcb11f8)
  • FreeLibrary (Address: 0x642ffcb10b0)
  • GetACP (Address: 0x642ffcb1240)
  • GetCommandLineA (Address: 0x642ffcb10f8)
  • GetConsoleCP (Address: 0x642ffcb12a8)
  • GetConsoleMode (Address: 0x642ffcb12b0)
  • GetConsoleOutputCP (Address: 0x642ffcb12d0)
  • GetCPInfo (Address: 0x642ffcb1238)
  • GetCurrentProcess (Address: 0x642ffcb1130)
  • GetCurrentProcessId (Address: 0x642ffcb1218)
  • GetCurrentThreadId (Address: 0x642ffcb10e8)
  • GetEnvironmentStrings (Address: 0x642ffcb11f0)
  • GetEnvironmentStringsW (Address: 0x642ffcb1200)
  • GetFileSize (Address: 0x642ffcb1068)
  • GetFileType (Address: 0x642ffcb11c8)
  • GetLastError (Address: 0x642ffcb1048)
  • GetLocaleInfoA (Address: 0x642ffcb1298)
  • GetModuleFileNameA (Address: 0x642ffcb11e0)
  • GetModuleHandleA (Address: 0x642ffcb1158)
  • GetOEMCP (Address: 0x642ffcb1248)
  • GetProcAddress (Address: 0x642ffcb10b8)
  • GetProcessHeap (Address: 0x642ffcb1018)
  • GetStartupInfoA (Address: 0x642ffcb11d0)
  • GetStdHandle (Address: 0x642ffcb11c0)
  • GetStringTypeA (Address: 0x642ffcb1288)
  • GetStringTypeW (Address: 0x642ffcb1290)
  • GetSystemTimeAsFileTime (Address: 0x642ffcb1220)
  • GetTickCount (Address: 0x642ffcb1210)
  • GetTimeFormatW (Address: 0x642ffcb1030)
  • GetVersionExA (Address: 0x642ffcb1100)
  • GlobalMemoryStatus (Address: 0x642ffcb10a0)
  • HeapAlloc (Address: 0x642ffcb1028)
  • HeapCreate (Address: 0x642ffcb11a8)
  • HeapDestroy (Address: 0x642ffcb11b0)
  • HeapFree (Address: 0x642ffcb1010)
  • HeapReAlloc (Address: 0x642ffcb1110)
  • HeapSetInformation (Address: 0x642ffcb11a0)
  • HeapSize (Address: 0x642ffcb1278)
  • InitializeCriticalSection (Address: 0x642ffcb1280)
  • IsDebuggerPresent (Address: 0x642ffcb1148)
  • IsValidCodePage (Address: 0x642ffcb1250)
  • LCMapStringA (Address: 0x642ffcb1258)
  • LCMapStringW (Address: 0x642ffcb1260)
  • LeaveCriticalSection (Address: 0x642ffcb1270)
  • LoadLibraryA (Address: 0x642ffcb10c0)
  • LoadResource (Address: 0x642ffcb1090)
  • LockResource (Address: 0x642ffcb1088)
  • MapViewOfFile (Address: 0x642ffcb1050)
  • MultiByteToWideChar (Address: 0x642ffcb1008)
  • QueryPerformanceCounter (Address: 0x642ffcb1208)
  • RaiseException (Address: 0x642ffcb1118)
  • ReadFile (Address: 0x642ffcb12e8)
  • RtlCaptureContext (Address: 0x642ffcb1150)
  • RtlLookupFunctionEntry (Address: 0x642ffcb1230)
  • RtlPcToFileHeader (Address: 0x642ffcb1120)
  • RtlUnwindEx (Address: 0x642ffcb1108)
  • RtlVirtualUnwind (Address: 0x642ffcb1228)
  • RtlZeroMemory (Address: 0x642ffcb1000)
  • SetEndOfFile (Address: 0x642ffcb12e0)
  • SetFilePointer (Address: 0x642ffcb12c0)
  • SetHandleCount (Address: 0x642ffcb11b8)
  • SetLastError (Address: 0x642ffcb1180)
  • SetStdHandle (Address: 0x642ffcb12a0)
  • SetUnhandledExceptionFilter (Address: 0x642ffcb1140)
  • Sleep (Address: 0x642ffcb1198)
  • SwitchToFiber (Address: 0x642ffcb1080)
  • SystemTimeToTzSpecificLocalTime (Address: 0x642ffcb1038)
  • TerminateProcess (Address: 0x642ffcb1128)
  • TlsFree (Address: 0x642ffcb1170)
  • TlsSetValue (Address: 0x642ffcb1188)
  • UnhandledExceptionFilter (Address: 0x642ffcb1138)
  • UnmapViewOfFile (Address: 0x642ffcb1078)
  • WideCharToMultiByte (Address: 0x642ffcb1020)
  • WriteConsoleA (Address: 0x642ffcb12c8)
  • WriteConsoleW (Address: 0x642ffcb12d8)
  • WriteFile (Address: 0x642ffcb10c8)
VERSION.dll
  • GetFileVersionInfoA (Address: 0x642ffcb12f8)
  • GetFileVersionInfoSizeA (Address: 0x642ffcb1300)
  • VerQueryValueA (Address: 0x642ffcb1308)