So I have a function called _invoke_watson, and one line of this function is:

Call IsDebuggerPresent

Now how do I follow the value of IsDebuggerPresent?

Another general question , if I'm completely stuck at a point , is it ok to ask on stack exchange on how to progress. As if I have no clue and I ask someone else there is blah blah , what steps do I take?

  • 2
    What do you mean by "the value of IsDebuggerPresent"? The API itself or the output? – EWD-0- Dec 15 '17 at 9:09

What debugger / disassembler are you using? Please include this in your question, but assuming its IDA, double click on "IsDebuggerPresent", or if its x32dbg / x64dbg you can right click on it -> follow in disassembly -> IsDebuggerPresent


I see you tagged IDA, so what you need to do is double click on IsDebuggerPresent

  • So if I double click IsDebuggerPresent , it will show me it's value , if there isn't a debugger it should be zero , and if not any other number. – Ayazasker Dec 15 '17 at 7:38
  • 1
    What do you mean value? The disassembly of the function? Yes, that is what should happen. – Graham Best Dec 15 '17 at 13:32

Not the answer you're looking for? Browse other questions tagged or ask your own question.