Symbol resolution for native Windows crashes: read minidumps, find PDBs on symbol servers and name the function an address lies in. Package winsym, module github.com/Rethunk-Tech/go-winsym.
It works without dbghelp or Windows, on files and servers it does not trust, using only the standard library. Every format it reads is Microsoft's and documented.
go get github.com/Rethunk-Tech/go-winsymA worked example and the contracts: HUMANS.md.
- Minidump reader: exception code, address, faulting module and offset, and the module's CodeView record.
- CodeView from a PE file on disk, with the symbol-store key for its PDB.
- PDB lookup: the public function at or below an address, partly undecorated.
- Symbol-server fetch into a size-capped cache in the standard symbol-store layout, downloaded once however many callers wait.
- Crash discovery (
crashdump): the minidumps WER and Unity crash folders leave, Application Error and .NET faults from the Windows event log, and systemd core dumps, each as oneFaultnaming the module, offset and exception. - Server lists you choose, so a module's name goes only to servers that publish it.
| Doc | Audience |
|---|---|
| HUMANS.md | Running and using the package |
| AGENTS.md | Internals, invariants, and why |
| CONTRIBUTING.md | Process — commits, tests, docs |
| SECURITY.md | Vulnerability disclosure |
| CHANGELOG.md | Release notes |
MIT — see LICENSE. © 2026 Rethunk.Tech, LLC.