HyperDbg/hyperdbg/libhyperdbg/code/debugger/commands/debugging-commands/pause.cpp

/**
 * @file pause.cpp
 * @author Sina Karvandi (sina@hyperdbg.org)
 * @brief pause command
 * @details
 * @version 0.1
 * @date 2020-07-25
 *
 * @copyright This project is released under the GNU Public License v3.
 *
 */
#include "pch.h"

//
// Global Variables
//
extern BOOLEAN                  g_BreakPrintingOutput;
extern BOOLEAN                  g_IsConnectedToRemoteDebuggee;
extern ACTIVE_DEBUGGING_PROCESS g_ActiveProcessDebuggingState;

/**
 * @brief help of the pause command
 *
 * @return VOID
 */
VOID
CommandPauseHelp()
{
    ShowMessages("pause : pauses the kernel events.\n\n");

    ShowMessages("syntax : \tpause \n");
}

/**
 * @brief request to pause
 *
 * @return VOID
 */
VOID
CommandPauseRequest()
{
    //
    // Set the g_BreakPrintingOutput to TRUE
    //
    g_BreakPrintingOutput = TRUE;
    ShowMessages("pausing...\n");

    //
    // If it's a remote debugger then we send the remote debuggee a 'g'
    //
    if (g_IsConnectedToRemoteDebuggee)
    {
        RemoteConnectionSendCommand("pause", (UINT32)strlen("pause") + 1);
    }
    else if (g_ActiveProcessDebuggingState.IsActive && UdPauseProcess(g_ActiveProcessDebuggingState.ProcessDebuggingToken))
    {
        ShowMessages("please keep interacting with the process until all the threads are intercepted "
                     "and halted; you can run the 'g' command to continue the debuggee\n");
    }
}

/**
 * @brief pause command handler
 *
 * @param CommandTokens
 * @param Command
 *
 * @return VOID
 */
VOID
CommandPause(vector<CommandToken> CommandTokens, string Command)
{
    if (CommandTokens.size() != 1)
    {
        ShowMessages("incorrect use of the '%s'\n\n",
                     GetCaseSensitiveStringFromCommandToken(CommandTokens.at(0)).c_str());
        CommandPauseHelp();
        return;
    }

    //
    // request to pause
    //
    CommandPauseRequest();
}