A forum for reverse engineering, OS internals and malware analysis 

Ask your beginner questions here.
 #8101  by utsav.0202
 Thu Aug 18, 2011 9:54 am
Hi

I have written a driver that uses "ObRegisterCallbacks"
When build in Vista environment it works fine.
The driver is also used in XP and Windows Server 2003 as it does some other things too. It can't be built in Windows Server 2003 environment as ObRegisterCallbacks is available only in Vista and above OS
I want one driver that can be used in XP and above OS
For that if the OS is Vista or above then I will find the address of ObRegisterCallbacks dynamically otherwise skip.
How to find the address of the routine dynamically?
or is there any other way I can get only one driver?

Thanks and Regards
Utsav