Process Address Space and Modules

• Each Windows process has its own virtual address space (isolated from other processes by default).
• A module is a loaded image mapped into that space: the main .exe plus its DLLs.
• DLLs export functions that other code can call by name or by ordinal.
• Cross-process access requires the OS to grant a handle with the right rights (this is the gate injection must pass).