Not sure if i have done it right but i searched for dmp files around the same time i crashed and i found 3-4 and one of them is called HMA(Hitman Absolution) so i thought it's this one and i used the windows debugger tool to come up with this
Microsoft (R) Windows Debugger Version 6.2.9200.20512 AMD64
Copyright (c) Microsoft Corporation. All rights reserved.
Loading Dump File [C:\Users\Ashraf\Desktop\Crashdumps\HMA.exe.752.dmp]
User Mini Dump File: Only registers, stack and portions of memory are available
Symbol search path is: SRV*c:\symbols*
http://msdl.microsoft.com/download/symbols
Executable search path is:
Windows 7 Version 7600 MP (4 procs) Free x86 compatible
Product: WinNt, suite: SingleUserTS
Machine Name:
Debug session time: Tue Nov 27 11:46:15.000 2012 (UTC + 2:00)
System Uptime: not available
Process Uptime: 0 days 0:44:42.000
................................................................
......................................................
Loading unloaded module list
..........
This dump file has a breakpoint exception stored in it.
The stored exception information can be accessed via .ecxr.
eax=00000000 ebx=397ceea8 ecx=00000000 edx=00000000 esi=00000002 edi=00000000
eip=77a100ed esp=397cee58 ebp=397ceef4 iopl=0 nv up ei pl nz na po nc
cs=0023 ss=002b ds=002b es=002b fs=0053 gs=002b efl=00000202
ntdll!ZwWaitForMultipleObjects+0x15:
77a100ed 83c404 add esp,4
0:020> !analyze -v
*******************************************************************************
* *
* Exception Analysis *
* *
*******************************************************************************
*** WARNING: Unable to verify timestamp for atidxx32.dll
*** ERROR: Module load completed but symbols could not be loaded for atidxx32.dll
*** ERROR: Symbol file could not be found. Defaulted to export symbols for fmodex.dll -
*** ERROR: Symbol file could not be found. Defaulted to export symbols for PhysXCore.DLL -
FAULTING_IP:
HMA!NMP::Memory::Resource:
![:o :o]()
perator=+58d7e
00a8c18e cc int 3
EXCEPTION_RECORD: ffffffff -- (.exr 0xffffffffffffffff)
ExceptionAddress: 00a8c18e (HMA!NMP::Memory::Resource:
![:o :o]()
perator=+0x00058d7e)
ExceptionCode: 80000003 (Break instruction exception)
ExceptionFlags: 00000000
NumberParameters: 1
Parameter[0]: 00000000
DEFAULT_BUCKET_ID: STATUS_BREAKPOINT
PROCESS_NAME: HMA.exe
ERROR_CODE: (NTSTATUS) 0x80000003 - {EXCEPTION} Breakpoint A breakpoint has been reached.
EXCEPTION_CODE: (HRESULT) 0x80000003 (2147483651) - One or more arguments are invalid
EXCEPTION_PARAMETER1: 00000000
NTGLOBALFLAG: 0
APPLICATION_VERIFIER_FLAGS: 0
APP: hma.exe
FAULTING_THREAD: 00000f28
PRIMARY_PROBLEM_CLASS: STATUS_BREAKPOINT
BUGCHECK_STR: APPLICATION_FAULT_STATUS_BREAKPOINT
LAST_CONTROL_TRANSFER: from 00aa333d to 00a8c18e
STACK_TEXT:
WARNING: Stack unwind information not available. Following frames may be wrong.
397cf504 00aa333d 00000000 00000004 00000000 HMA!NMP::Memory::Resource:
![:o :o]()
perator=+0x58d7e
397cf534 00ab29a6 397cf550 13e94520 10d14a10 HMA!NMP::Memory::Resource:
![:o :o]()
perator=+0x6ff2d
397cf6c0 00a98064 397cfde0 1076c060 397cfdd0 HMA!NMP::Memory::Resource:
![:o :o]()
perator=+0x7f596
397cfdd0 00a98deb 00000000 00000000 0126b4f0 HMA!NMP::Memory::Resource:
![:o :o]()
perator=+0x64c54
397cfe00 00a62d14 00000000 1292c790 17ea73f0 HMA!NMP::Memory::Resource:
![:o :o]()
perator=+0x659db
397cff60 007e7b3f 0126b4f0 00000000 00000000 HMA!NMP::Memory::Resource:
![:o :o]()
perator=+0x2f904
397cff88 75553677 10d16b60 397cffd4 77a29f42 HMA!NMP::Vector<int>::numElements+0x1202f
397cff94 77a29f42 10d16b60 4ed909dc 00000000 kernel32!BaseThreadInitThunk+0xe
397cffd4 77a29f15 007e7a90 10d16b60 00000000 ntdll!__RtlUserThreadStart+0x70
397cffec 00000000 007e7a90 10d16b60 00000000 ntdll!_RtlUserThreadStart+0x1b
FOLLOWUP_IP:
HMA!NMP::Memory::Resource:
![:o :o]()
perator=+58d7e
00a8c18e cc int 3
SYMBOL_STACK_INDEX: 0
SYMBOL_NAME: hma!NMP::Memory::Resource:
![:o :o]()
perator=+58d7e
FOLLOWUP_NAME: MachineOwner
MODULE_NAME: HMA
IMAGE_NAME: HMA.exe
DEBUG_FLR_IMAGE_TIMESTAMP: 50a66a1c
STACK_COMMAND: ~20s; .ecxr ; kb
FAILURE_BUCKET_ID: STATUS_BREAKPOINT_80000003_HMA.exe!NMP::Memory::Resource:
![:o :o]()
perator=
BUCKET_ID: APPLICATION_FAULT_STATUS_BREAKPOINT_hma!NMP::Memory::Resource:
![:o :o]()
perator=+58d7e
WATSON_STAGEONE_URL:
http://watson.microsoft.com/StageOne/HMA_exe/1_0_433_1/...
WATSON_IBUCKET: -1031578910
WATSON_IBUCKETTABLE: 1
Followup: MachineOwner
---------