When windows start up, First Windows Kernel loaded into the system memory. The Kernel loads at the very high level system memory, “backing up” for enough to meet the needs of the operating system. This area of memory is called Kernel space. Now, Windows moves to the bottom of the pool of system memory and starts loading the various device drivers needed to control your hardware systems.
In vista, when windows first launches the Super fetch technology automatically loads your applications the memory. It uses as perfect prioritization scheme to understand which programs you use most often, and it can differentiate which programs to use at various time. Every application is subdivided into smaller blocks of memory have 2kilobytes size. Each block is loaded separately and it is separated by small boundaries, which ensures that the applications will not be loaded on top of each other by mistake.
Address apace layout randomization used for the application memory are loaded into random addresses in memory. Super fetch is mainly helps to prevent most remote execution process from malicious program. The location of each memory block is detailed in a page table and Windows memory manager use the page table to map the location of memory blocks.
