Log in

View Full Version : Stop a process from exiting


thatsgreat2345
November 20th, 2005, 14:43
I modifyed a jump to jump past the first exitprocess but on the second i cant get it cuz there arent any jumps that jump by it and it gets called by something but when ever i bp it and run it to get the call stack the OEP changes so yeah 0058665B &#92;. FF15 C8347000 CALL DWORD PTR DS:[<&kernel32.ExitProces>; &#92;ExitProcess

thats what it is and like it calls to a MOV ,EDI,EDI and im just super lost now can anyone help me

ColdWinterWind
November 29th, 2005, 23:14
I'm new to Olly, but damn I love it! I've seen some references to setting a conditional breakpoint - in meatspeak "If <some.condition=true THEN Break>". So, if EDI points to .ExitProcess then activate BP. The EIP will show the instruction where the condition evaluated as true. Sorry, but I don't know the syntax for it.