The Query menu controls searching for symbols.

 

 

 

Query > Find Symbol with Absolute Address...

 

Use this option to turn an absolute address in a process into a symbol, filename and line number.

 

See Decoding an absolute crash address for more details.

 

Query > Find Symbol with DLL Relative Address...

 

Use this option to turn a relative address inside a DLL into a symbol, filename and line number.

 

See Decoding a relative crash address for more details.

 

Query > Find Symbol with Symbol Relative Address...

 

Use this option to turn an address that is relative to a symbol inside a DLL into a symbol, filename and line number.

 

See Decoding a symbol relative crash address for more details.

 

Query > Find Symbol from Event Viewer XML crash log...

 

Use this option to turn an XML crash log from the Microsoft Event Viewer to a symbol inside a DLL into a symbol, filename and line number.

 

See Decoding an Event Viewer XML crash log for more details.

 

 

.Net, .Net Core

 

The query options are not available for .Net and .Net executables as there is no direct translation from a crash address/offset to a .Net symbol.

 

Without having access to the compiled .Net method address and the compiled address to ILASM instruction offset data it is impossible to translate crash addresses/offsets to .Net functions.
 
The compiled address to ILAMS instruction offset data is only available in the context of a running .Net application attached to a .Net debugger or a .Net profiler.