adplus-dvertising
frame-decoration

Question

What does WinDbg support that OllyDbg does not?

a.

Debugging at the primary executable's WinMain

b.

Stepping through the earliest phases of process initialization

c.

GUI-based interface

d.

Disassembling code

Posted under Reverse Engineering

Answer: (b).Stepping through the earliest phases of process initialization Explanation:WinDbg supports stepping through the earliest phases of process initialization, even before statically linked DLLs are initialized. This is different from OllyDbg, where debugging starts at the primary executable's WinMain after all statically linked DLLs are initialized.

Engage with the Community - Add Your Comment

Confused About the Answer? Ask for Details Here.

Know the Explanation? Add it Here.

Q. What does WinDbg support that OllyDbg does not?

Similar Questions

Discover Related MCQs

Q. What type of code is being debugged in the screenshot from WinDbg?

Q. What is the limitation of WinDbg's disassembler?

Q. What is one advantage of WinDbg over OllyDbg?

Q. What can WinDbg's extensions provide information on?

Q. What is one way in which WinDbg differs from OllyDbg in terms of debugging?

Q. What advantage does OllyDbg have over WinDbg?

Q. What is the advantage of having a debugger and a disassembler in one program like IDA Pro?

Q. What is PEBrowse Professional Interactive?

Q. What views does PEBrowse offer on the process being analyzed?

Q. What is the difference between a user-mode debugger and a kernel-mode debugger?

Q. Who are kernel-mode debuggers typically aimed at?

Q. Why are kernel-mode debuggers often helpful for reversers?

Q. What is a kernel-mode debugger?

Q. What are the advantages of using a kernel-mode debugger?

Q. What is the main application of kernel-mode debuggers?

Q. Why might a reverser prefer to use a kernel-mode debugger?

Q. Why might a kernel-mode debugger be useful for reversers?

Q. What is a disadvantage of using a kernel-mode debugger?

Q. Why might a user-mode debugger be preferable to a kernel-mode debugger?

Q. What is a potential application of kernel-mode debuggers?