vmi_utils

Module interceptor

Source
Expand description

Simple software breakpoint management.

Provides the fundamental mechanisms for inserting and removing breakpoint instructions in guest memory using shadow pages. It serves as a building block for higher-level breakpoint management systems like the BreakpointController.

When a breakpoint is inserted, the Interceptor:

  • Creates a shadow copy of the target page
  • Replaces the target instruction with a breakpoint instruction
  • Remaps the guest’s view to the shadow page

The original page content is preserved, allowing the Interceptor to restore the original state when breakpoints are removed.

Structs§

  • Core implementation of software breakpoint handling.