pause (break to the debugger and pause processing kernel packets)

Description of the 'pause' command in HyperDbg.

Command

pause

Syntax

pause

Description

On the remote system, this command halts the system and gives control of the remote system to the debugger. In local debugging, this command stops processing kernel and vmx packets and ignores them.

You can unpause using the g command.

Parameters

None

SDK

To pause the debuggee, you need to use the following function in libhyperdbg:

VOID
hyperdbg_u_pause_debuggee();

Remarks

In remote debugging, pause command or CTRL+C or CTRL+BREAK causes the target system to pause completely, and the target system halts.

In local debugging, pause command or CTRL+C or CTRL+BREAK causes the debugger to stop processing kernel and vmx packets (they won't stop working, we ignore the messages). Also, we don't save messages, so when you pause the debugger, then the logs from the events are ignored, and you can't process them in the future.

Most of the time, this command is used in scripts after the 'sleep' command to block further messages caused by triggering events.