adplus-dvertising
frame-decoration

Question

What is the difference between RtlGetElementGenericTable and RtlLookupElementGenericTable?

a.

RtlGetElementGenericTable provides direct access to an element, while RtlLookupElementGenericTable searches for the right element.

b.

RtlLookupElementGenericTable provides direct access to an element, while RtlGetElementGenericTable searches for the right element.

c.

Both functions provide direct access to an element, but in different ways.

d.

Both functions search for the right element, but in different ways.

Posted under Reverse Engineering

Answer: (a).RtlGetElementGenericTable provides direct access to an element, while RtlLookupElementGenericTable searches for the right element. Explanation:It is impossible to know the exact difference between RtlGetElementGenericTable and RtlLookupElementGenericTable without looking at the code, but the author's guess is that RtlGetElementGenericTable provides direct access to an element (probably using an index), while RtlLookupElementGenericTable searches for the right element.

Engage with the Community - Add Your Comment

Confused About the Answer? Ask for Details Here.

Know the Explanation? Add it Here.

Q. What is the difference between RtlGetElementGenericTable and RtlLookupElementGenericTable?

Similar Questions

Discover Related MCQs

Q. Which function in the generic table API is likely to be the simpler function of the two?

Q. What is the purpose of RtlGetElementGenericTable?

Q. How does RtlGetElementGenericTable access its parameters?

Q. What is interleaved code?

Q. What is the purpose of the RtlGetElementGenericTable function?

Q. Which offset contains the total number of elements in the table in RtlGetElementGenericTable?

Q. What does the comparison of EDI against -1 in RtlGetElementGenericTable signify?

Q. What is the purpose of the LEA instruction in RtlGetElementGenericTable?

Q. Which conditional jump instruction is used in RtlGetElementGenericTable for the comparison of EBX and EDX?

Q. What is the purpose of the JE instruction?

Q. What is the purpose of the JA instruction?

Q. What is the meaning of CF in the context of JA instruction?

Q. What does the comparison of EBX against EDX indicate?

Q. What is the significance of reconstructing the source code of RtlGetElementGenericTable?

Q. What is the main purpose of reversing a function?

Q. What is the purpose of the callback function used in the code?

Q. What is a splay tree?

Q. How does RtlSplay affect the organization of a splay tree?

Q. Why is it advisable to prepare a document after completing a reversing session?

Q. What is the purpose of the generic table API definition?