Home/ Questions/Q 114593
In Process

The Archive Base Latest Questions

Editorial Team
  • 0
Asked: 2026-05-11T02:53:08+00:00

A client is running my company’s program and it is halting before it gets

  • 0

A client is running my company’s program and it is halting before it gets anywhere. They sent this information from the Windows Event Log:

faulting module program.exe, version 1.2.3.4, fault address 0x00054321.

We don’t have much else to go on so as a last ditch effort I’ve been trying to see if I can find where that position is in a disassembler. I run the program through Visual Studio, pause it, look at the Disassembly window and try scrolling to that address but all I get there is this:

00054321  ???               00054322  ???               00054323  ???               00054324  ???               00054325  ???               00054326  ???               00054327  ???               00054328  ???               00054329  ???               0005432A  ???

Would this be because Visual Studio only disassembles part of the EXE near the pause position or something? It’s hard for me to look through how much is actually disassembled because the scrollbar doesn’t work fully. (I can’t grab and move the scroll position; I have to scroll by line or by page.)

Thanks for any insight you may have!

Share

Leave an answer

You must login to add an answer.

Need An Account,

1 Answer

  1. The fault address could also be caused from a stack corruption problem, ie. the return address could be compromised and jumped back to the wrong address @ 0x54321. Also, depending on the tecnology used (Java, .NET) the code could change it’s position between runs.

    Visual studio makes a disassembly of the whole process space. ???? means that the position is not accessible.

    You’d better need a stack-frame to see what’s happening, from a core dump.

    • 0