windowsmemory-managementmemory-addressollydbgvirtualalloc

determine the address of the allocated region in VirtualAlloc?


According to this VirtualAlloc allows the value of address parameter to be null and the "the system determines where to allocate the region."

The question is, is there a way to know the allocated address? If yes, how?


Solution

  • The same reference document about VirtualAlloc states concerning the value returned by the function:

    If the function succeeds, the return value is the base address of the allocated region of pages.