Page 1 of 1

VMProtectIsDebuggerPresent on v3.8.8.2040

Posted: Wed Apr 10, 2024 7:18 am
by Robustelli
Hello there,

I noticed a different behavior using the function VMProtectIsDebuggerPresent with the latest revision v3.8.8.2040.
The function returns 256 (decimal) even though no debugger is running
Same project compiled with v3.8.7.xxx works correctly.
Can someone confirm ?

Re: VMProtectIsDebuggerPresent on v3.8.8.2040

Posted: Wed Apr 10, 2024 7:29 am
by Admin
Show me your VMProtectIsDebuggerPresent declaration.

Re: VMProtectIsDebuggerPresent on v3.8.8.2040

Posted: Wed Apr 10, 2024 7:33 am
by Robustelli
It's declared in WMProtectSDK.h

VMP_IMPORT bool VMP_API VMProtectIsDebuggerPresent(bool);

Re: VMProtectIsDebuggerPresent on v3.8.8.2040

Posted: Wed Apr 10, 2024 7:41 am
by Admin
The size of "bool" is one byte, so 0x100 is equal "false"

Re: VMProtectIsDebuggerPresent on v3.8.8.2040

Posted: Wed Apr 10, 2024 7:47 am
by Robustelli
My bad... I wrongly defined bool as an int
Thanks for your quick support