From aldeid
Jump to navigation Jump to search


Checks to see if a specific process (including your own) is being debugged.

This function is sometimes used as part of an anti-debugging technique.


BOOL WINAPI CheckRemoteDebuggerPresent(
  _In_    HANDLE hProcess,
  _Inout_ PBOOL  pbDebuggerPresent


hProcess [in]
A handle to the process.
pbDebuggerPresent [in, out]
A pointer to a variable that the function sets to TRUE if the specified process is being debugged, or FALSE otherwise.

Return value

If the function succeeds, the return value is nonzero.

If the function fails, the return value is zero. To get extended error information, call GetLastError.