(C++) Interrupts by Unprotect

Created the Tuesday 06 December 2022. Updated 3 days, 8 hours ago.

Description:

This code defines a function named IsDebuggerPresent that uses a try-except block to trigger an interrupt instruction and generate an exception. If the exception is handled, it means the code is being executed in a debugger and the function returns true. If the exception is not handled, it means the code is not being executed in a debugger and the function returns false. The main function calls IsDebuggerPresent and takes appropriate action based on the result. This is just an example and more advanced implementations may be needed for more complex scenarios.

Code

            #include <iostream>
#include <Windows.h>

// Function to check if the code is being executed in a debugger
bool IsDebuggerPresent()
{
    __try
    {
        // Trigger an interrupt instruction to generate an exception
        __debugbreak();
    }
    __except (EXCEPTION_EXECUTE_HANDLER)
    {
        // If the exception is handled, it means the code is being executed in a debugger
        return true;
    }

    // If the exception is not handled, it means the code is not being executed in a debugger
    return false;
}

int main()
{
    if (IsDebuggerPresent())
    {
        std::cout << "Debugger detected" << std::endl;
        // Take appropriate action, such as exiting or altering behavior
    }
    else
    {
        std::cout << "No debugger detected" << std::endl;
        // Continue with normal execution
    }

    return 0;
}

Download Raw