adplus-dvertising
frame-decoration

Question

How does RtlGetElementGenericTable access its parameters?

a.

Using ESP

b.

Using EBP

c.

Using EAX

d.

Using ECX

Posted under Reverse Engineering

Answer: (b).Using EBP Explanation:RtlGetElementGenericTable starts with a conventional stack frame setup sequence, which tells us that this function’s parameters are going to be accessed using EBP instead of ESP.

Engage with the Community - Add Your Comment

Confused About the Answer? Ask for Details Here.

Know the Explanation? Add it Here.

Q. How does RtlGetElementGenericTable access its parameters?