When the process starts, the Windows OS kernel is accessed to add the necessary modules (not from KnownList) to the process to add memory to the address space (from 0x00000000-0x7FFFFFFF)?
If this is approximately the case, then how are the functions called for which they are responsible and is it possible to be implemented in them.
I do not need to open the process to find out the address, I want to know how it is formed.
