link to book "windows Internals"
http://www.itpub.net/thread-1263721-1-1.html
The Traning of Windows debug
LSA ShellLocal Security Access ShellFor the user login/domain control, Isass.exe PAEPhysical Address ExtensionsWindows kernel move to the memory address higher than 4G and give app more mem...