debugger
debugger copied to clipboard
WinDbg TTD sometimes does not capture the buffer content
The issue is during TTD replay, the content of a buffer is inaccessible despite it has been both written to and read from by the recorded process. You can see in the attached screenshot that the content of the rdi buffer is accessible during a live debugging session, and inaccessible from a TTD replay.
I have verified that this is not a bug caused by the Binary Ninja debugger -- the same issue can be observed in WinDbg as well.