actually once it crashed EIP held "00000000"
Its supposed to do that since its no longer held in memory. Without the process up and running there would be no need to store a memory address.