Part 1: x86 Architecture for Exploit Developers — Program Memory, the Stack, and CPU Registers

TL;DR — A 32-bit Windows process lives in 0x00000000–0x7FFFFFFF. The stack is a per-thread LIFO area (PUSH/POP) holding arguments, locals, and return addresses, bundled per call into a stack frame (pr