Failed to hook GetProAddress with Win10 X64 about quadifier

[jam3sward]

I was able to reproduce the same issue here with a Release x64 build on Windows 10 Pro x64, so this is a confirmed bug.... to be investigated.

[jam3sward]

After some investigation, I found that GetProcAddress is returning a valid pointer,
but Mhook_SetHook fails at this line:
/quadifier/win32/module/source/main.cpp#L556

MHook is a third-party library, so it's possible there might be an updated version with bug-fixes here. Further investigation is needed..

[jam3sward]

I've just tried the latest MHook and the issue is still present, so unfortunately I'm not sure how to fix this, without debugging MHook itself.

[RichardCNN]

Hi,James
I get it.
the function name of "GetProcAddress" in kernel32.dll has changed on win10.
it is still reserved in KERNELBASE.dll. so just take replace kernel32.dll with kernelbase.dll. the bug will be solved.

module -> main.cpp code:
PFNGetProcAddress real_GetProcAddress = reinterpret_cast(
GetProcAddress( GetModuleHandle(L"kernelbase"), "GetProcAddress" ) );

[jam3sward]

Hi Richard
Thanks, that's interesting! Last night I looked at both the 32-bit and 64-bit versions of kernel32.dll using depends.exe and GetProcAddress appears in both DLLs (with different ordinals, but the same name/decoration). Also, GetProcAddress was returning a valid pointer for kernel32/GetProcAddress, but failing at Mhook_SetHook, so I assumed the problem was there.
I'll take a look at kernelbase and the change as suggested above. Thanks!
James

[jam3sward]

I've committed an attempted fix for this at c0e81b0, and tested on Windows 10 x64. This hasn't been tested on Windows 7 at time of writing.

[jam3sward]

I'm closing this as it works for me now.