This article has multiple issues. Please helpimprove it or discuss these issues on thetalk page.(Learn how and when to remove these messages) This article'stone or style may not reflect theencyclopedic tone used on Wikipedia. See Wikipedia'sguide to writing better articles for suggestions.(January 2018) (Learn how and when to remove this message) This articlemay beconfusing or unclear to readers. Please helpclarify the article. There might be a discussion about this onthe talk page.(January 2018) (Learn how and when to remove this message) This articleneeds additional citations forverification. Please helpimprove this article byadding citations to reliable sources. Unsourced material may be challenged and removed. Find sources: "Architecture of Windows 9x" – news ·newspapers ·books ·scholar ·JSTOR(January 2018) (Learn how and when to remove this message) (Learn how and when to remove this message)

TheWindows 9x series of operating systems refers to a series of Microsoft Windowsoperating systems produced from 1995 to 2000. They are based on the Windows 95 kernel which is amonolithickernel. The basic code is similar in function toMS-DOS. They are 16-/32-bit hybrids and require support fromMS-DOS to operate.

To start up or boot, Windows 95 and other Windows 9x operating systems require the following set of files:^[1]

32-bit shell and command line interpreter:

• SHELL.DLL andSHELL32.DLL – Shell API
• EXPLORER.EXE – Windows shell and file manager
• COMMAND.COM – Command lineshell executable

Windows 95 core:

• KERNEL32.DLL andKRNL386.EXE – Windows API for Windows resources
• ADVAPI32.DLL – Functionality additional to the kernel with included functions for the Windows registry and shutdown and restart functions
• GDI32.DLL andGDI.EXE – Graphic device interface
• USER32.DLL andUSER.EXE – GUI implementation
• COMMCTRL.DLL andCOMCTL32.DLL – Common controls (user interface)
• DDEML.DLLDynamic Data Exchange Management Library (DDEML) – Provides an interface that simplifies the task of adding DDE capability to an application
• MSGSRV32.EXE – Acts as a 32-bit message server and will never appear in the Windows task list
• WIN.COM – Responsible for loading the GUI and the Windows portion of the system

Registry and other configuration files:

• SYSTEM.DAT,USER.DAT – Contains theWindows Registry
• MSDOS.SYS – Contains some low-levelboot settings and resources such as disabling double-buffering and theGUI logo
• WIN.INI andSYSTEM.INI – Configuration files from Windows 3.1 which are processed in Windows 9x also

Virtual Machine Manager and configuration manager:

• VMM32.VXD – Virtual machine manager and default drivers. It takes over from io.sys as kernel

Installable file System Manager:

• IFSHLP.SYS – Enables Windows to make direct file system calls; bypassing MS-DOS methods
• IFSMGR.VXD – 32-bit driver for the installable file system
• IOS.VXD – I/O supervisor that controls and manages all protected-mode file system and block device drivers
• MPREXE.EXE,MPRSERV.DLL andMPR.DLL – Multiple Provider Router for network authentication and user profiles
• MSPWL32.DLL – Password list management library

Device drivers:

• IO.SYS – Executable handling all of the basic functions, such asI/O routines and also serves as kernel until vmm32.vxd takes over
• HIMEM.SYS – DOS device driver which allows DOS programs to store data in extended memory via the Extended Memory Specification
• SYSTEM.DRV,MMSOUND.DRV,COMM.DRV,VGA.DRV,MOUSE.DRV,BIGMEM.DRV,KEYBOARD.DRV – 16-bit drivers
• CP 1252.NLS,CP 437.NLS,UNICODE.NLS,LOCALE.NLS – Keyboard layouts
• RMM.PDR – Real Mode Mapper Virtual Device

The system may also useCONFIG.SYS, which contains settings and commands executed before loading thecommand interpreter andAUTOEXEC.BAT, which is abatch file automatically executed after loadingCOMMAND.COM. However, these two files are not critical to the boot process, asIO.SYS contains a default setting for both, in case of absence from the system. InWindows Me, CONFIG.SYS and AUTOEXEC.BAT are not processed andLOGO.SYS may be used as a splash screen.

The Windows 9x startup process consists of 6 phases. The first two of these steps are common to anyoperating system booting using the traditional combination ofBIOS andMaster Boot Record.

TheROM BIOS starts the execution at the physical memory address 000FFFF0h. During this phase, BIOS first executes thePower-on self-test, then checks for the existence of a boot disk on drive A. If it is not found in drive A, the ROM BIOS checks for a hard disk. If the computer has a Plug and Play BIOS, in addition, BIOS checks the RAM for I/O port addresses, interrupt lines and DMA channels forPlug and Play devices, disables found devices, creates maps of used and unused resources and re-enables devices.

TheMaster boot record is loaded at address 7C00h and loads theboot sector of the WindowsDisk partition. The boot sector contains the disk boot program andBIOS Parameter Block table which searches for the location of the root directory and IO.SYS file, which then loads the IO.SYS file into memory.

IO.SYS initialises the minimalFile Allocation Table driver and loadsMSDOS.SYS into memory. It then displays "Starting Windows" depending on the Boot-Delay line in the MSDOS.SYS file. It then loads theLOGO.SYS file and displays astartup image on the screen. If theDRVSPACE.INI orDBLSPACE.INI file exists, it also loads drivers for compressed disks. Windows then attempts to open the registry file SYSTEM.DAT. If that fails, it attempts to open SYSTEM.DA0. If configured in MSDOS.SYS or in the registry, double buffering is also enabled.

Windows 95 andWindows 98 now analyse CONFIG.SYS and load MS-DOSreal mode drivers. Windows Me ignores this.If the CONFIG.SYS file does not exist, the IO.SYS file loads the driversIFSHLP.SYS,HIMEM.SYS andSETVER.EXE. Windows reserves allupper memory blocks for Windows 95 operating system use or forexpanded memory.Windows 95 and 98 executeCOMMAND.COM to process AUTOEXEC.BAT. It loadsterminate and stay resident programs into memory. Windows Me ignores this step, as Real Mode DOS support is disabled and TSRs being loaded can compromise system stability.

IO.SYS now runsWIN.COM. WIN.COM loads theVMM32.VXD file into memory or accesses it from the hard disk. This file contains the most important drivers and the 9x kernel.The real-modevirtual device driver loader checks for duplicate virtual device drivers that exist both in the Windows\System\Vmm32 folder and the VMM32.VXD file. In a case of duplicates, the driver in the Windows\System\Vmm32 directory will be loaded.

Windows 95 to 98 now query real mode drivers callingINT 2Fh and search for drivers in registry entry HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\VxD marked to be loaded as an external file. Vmm32 then analyzes the [386 Enh] section of the Windows\System.ini file and loads drivers listed there. Some important drivers are loaded even if they are not listed in theWindows Registry,SYSTEM.INI or in the Windows\System\Vmm32 directory.

Once the real-mode virtual device drivers are loaded, driver initialisation on Windows 95 and 98 occurs. Vmm32 then switches the CPU fromreal mode toprotected mode. The next step is the initialisation of protected mode drivers, executed in three phases for each device: a critical part of initialisation (while interrupts are disabled), device initialisation (when file I/O is allowed) and InitComplete phase. After initialisation of the display driver, Windows switches tographical mode.

Once all of the drivers are loaded, thekernel32.dll,krnl386.exe,gdi32.dll,gdi.exe,user32.dll,user.exe,shell32.dll andexplorer.exe files are loaded. The next step in the startup process is to load thenetwork environment. The user is prompted to log on to the network that is configured. When a user logs on, their desktop settings are loaded from the registry, or the desktop configuration uses a default desktop. Windows then starts programs defined in theStartUp folder,WIN.INI and programs defined in registry keys Run, RunOnce, RunServices and RunServicesOnce inside the branches HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion and HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\. After each program in the RunOnce registry key is started, the program is removed from the key.

The Windows 9x kernel is a 32-bit kernel withvirtual memory. Drivers are provided by.VXD files or, since Windows 98, the newerWDM drivers can be used.^[2] However, theMS-DOS kernel stays resident in memory. Windows will use the old MS-DOS 16-bit drivers if they are installed, except on Windows Me. In Windows Me, DOS is still running, but Windows will ignore any attempt to load its device drivers when parsing the AUTOEXEC.BAT, and will move the environment variables that it still recognizes from the CONFIG.SYS into the Windows Registry.

• Architecture of Windows NT
• Microsoft Windows
• Caldera v. Microsoft
• WinGlue
• FreeWin95

• Schulman, Andrew (November 1994).Unauthorized Windows 95 – Developer's Resource Kit (1st ed.). Foster City, California, USA:John Wiley & Sons, Inc.ISBN 1-56884-305-4.ISBN 978-1-56884-305-6.
• Schulman, Andrew;Brown, Ralf D.; Maxey, David; Michels, Raymond J.; Kyle, Jim (1994) [November 1993].Undocumented DOS: A programmer's guide to reserved MS-DOS functions and data structures - expanded to include MS-DOS 6, Novell DOS and Windows 3.1 (2 ed.). Reading, Massachusetts:Addison Wesley.ISBN 0-201-63287-X.ISBN 978-0-201-63287-3. (xviii+856+vi pages, 3.5"-floppy) Errata:[1][2]
• Paul, Matthias R. (2002-04-10)."[fd-dev] HMA access from TSR".freedos-dev.Archived from the original on 2017-09-09. Retrieved2017-09-09.[...]MS-DOS 7.0+ [...] introduced a [...] for the most part undocumented RMD data structure usually located in theHMA. The kernel collects and records configuration and Real Mode Driver data during boot (type of driver, interrupts hooked by driver,CONFIG.SYS line of invocation, etc.) and stores this information in a [...] complicated [...] growing data structure. Presumably [...] meant to be used by the Windows core to get a better picture of the loaded Real Mode drivers [...] or even attempt to unhook or unload some of them, [...] it is only used to a very limited extent ([...] some of the info reflected in the log files created on [...] startup, and some parts of the [...] configuration manager also make use of it), [...] leaving room [...] beyond the technical side [...] because nothing of the interesting stuff is documented [...]
• Paul, Matthias R. (2002-08-13)."Suche freien Speicherbereich unterhalb von 1 MB, der nicht von OS überschrieben wird" (in German).Newsgroup: de.comp.lang.assembler.x86.Archived from the original on 2017-09-04. Retrieved2017-09-03. (NB. Also on MS-DOS 7+ HMA usage and \WINDOWS\IOS.LOG.)
• Sweger, Kristofer (2007) [2002-07-15]."ANSIPLUS and Windows".Archived from the original on 2021-11-28. Retrieved2021-11-28.[…] ANSIPLUS's code cannot be loaded to theHMA underMS-DOS 7 (Windows 9x only) because there apparently is not enough unused HMA memory available. […]
• Paul, Matthias R. (2004-06-17)."Re: Random Lockups with DR-DOS 7.03".opendos@delorie.com;FidoNet conference: ALT_DOS. Archived fromthe original on 2019-04-28. Retrieved2019-04-28.[...] all MS-DOS versions prior to Windows 95 [...] used a COM style COMMAND.COM file which has a special signature at the start of the file [...] queried by the MS-DOS BIOS before it loads the shell, but not by the DR-DOS BIOS [...] COMMAND.COM would [...] check that it is running on the "correct" DOS version, so if you would load their COMMAND.COM under DR-DOS, you would receive a "Bad version" error message and their COMMAND.COM would exit, so DR-DOS would [...] display an error message "Bad or missing command interpreter" (if DR-DOS was trying to load the SHELL= command processor after having finished CONFIG.SYS processing). In this case, you could enter the path to a valid DR-DOS COMMAND.COM (C:\DRDOS\COMMAND.COM) and everything was fine. Now, things have changed since MS-DOS 7.0 [...] COMMAND.COM has internally become an EXE style file, so there is no magic [...] signature [...] to check [...] thus no way for DR-DOS to rule out an incompatible COMMAND.COM. Further, their COMMAND.COM no longer does any version checks, but [...] does not work under DR-DOS [...] just crashes [...] the PC DOS COMMAND.COM works fine under DR-DOS [...][3][4]
• King, Adrian (1994).Inside Microsoft Windows 95 (2nd ed.). Redmond, Washington, USA:Microsoft Press.ISBN 1-55615-626-X.ISBN 978-1-55615-626-7.
• Programmer's Guide to Microsoft Windows 95: Key Topics on Programming for Windows from the Microsoft Windows Development Team (1st ed.). Redmond, Washington, USA:Microsoft Press. 1995-07-01.ISBN 1-55615-834-3.ISBN 978-1-55615-834-6. Retrieved2016-05-26.{{cite book}}:|work= ignored (help)
• Oney, Walter (1995).Systems Programming for Windows 95 (1st ed.). Redmond, Washington, USA:Microsoft Press.ISBN 1-55615-949-8.ISBN 978-1-55615-949-7.
• Pietrek, Matt (November 1995).Windows 95 System Programming Secrets (1st ed.).John Wiley & Sons, Inc.ISBN 1-56884-318-6.ISBN 978-156884-318-6. Retrieved2016-05-26.{{cite book}}:|work= ignored (help)
• Hazzah, Karen (1997).Writing Windows VxDs and Device Drivers – Programming Secrets for Virtual Device Drivers (2nd printing, 2nd ed.). Lawrence, Kansas, USA:Miller Freeman, Inc.ISBN 0-87930-438-3.ISBN 978-0-87930-438-6.
• Mitchell, Stan (1997-05-11). Schulman, Andrew (ed.).Inside the Windows 95 File System (1st ed.). Sebastopol, California, USA:O'Reilly & Associates, Inc.ISBN 1-56592-200-X.ISBN 978-1-56592-200-6. Retrieved2016-05-26.{{cite book}}:|work= ignored (help)

• Microsoft (2014-02-20)."Windows 95 Architecture Components".Microsoft.Archived from the original on 2014-10-17. Retrieved2016-05-27.
• Microsoft (2006-11-15)."Description of the Windows 95 Startup Process". 1.1.Microsoft. Q174018.Archived from the original on 2014-02-14. Retrieved2016-05-27.
• Microsoft (2013-10-26)."Understanding Win16Mutex". 5.0.Microsoft. KB125867. Q125867. Archived fromthe original on 2014-01-16. Retrieved2016-05-27.

• Monolithic kernels
• Operating systems by architecture
• Windows 95
• Windows 98
• Windows ME

• Wikipedia articles with style issues from January 2018
• All articles with style issues
• Wikipedia articles needing clarification from January 2018
• All Wikipedia articles needing clarification
• Articles needing additional references from January 2018
• All articles needing additional references
• Articles with multiple maintenance issues
• Use dmy dates from May 2019
• Use list-defined references from December 2021
• Wikipedia articles needing clarification from May 2016
• CS1 German-language sources (de)
• CS1 errors: periodical ignored