When I'm using Windbg (in kernel mode) to step into assembly, I would encounter context switching once in a while - which is annoying.

So, for example, I placed a breakpoint for a process - let's call it A.exe using bp /1 /p <EPROCESS OF A> nt!NtDeviceIoControlFile. A runs, hits the breakpoint and as I am stepping into the assembly, sometimes, the context switches - so the current process, instead of A, becomes B.

Is there anyway to prevent this from happening?

  • how are you stepping using t or p p allows free execution try to stick to t or use a process specific bp one time bp on next instruction prior to p
    – blabb
    May 31 '18 at 10:17
  • @blabb what do u mean? I couldnt catch you
    – Kyoma
    May 31 '18 at 10:20
  • @Kyoma: how do you "step into assembly"? what exact command/hotkey are you using?
    – Igor Skochinsky
    May 31 '18 at 17:33
  • @IgorSkochinsky F11
    – Kyoma
    Jun 1 '18 at 0:19

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Browse other questions tagged or ask your own question.