GEGeek 
   I don't reinvent the wheel, I just link to it.                                                                          Control-F To Search This Page!
Cheat Sheets Search Engines Diagnostics Misc Tech

GEGeek's Articles

Home

Windows

Software

How To Guides

Tutorials

Hardware

Security

Linux

GEGeek Articles

 

 

 

 

 

 

 

 

 

 

 

 

 

   
 

he XP Boot Process: Step by Step Summary


  • Summary

  • The Power Supply is Switched On.

  • The power supply will performs a self-test.

  • The signal PWR_OK is sent to the Mobo.

  • The CPU starts executing the ROM BIOS code at address FFFF:0000

  • A jump instruction then points to the actual address of the ROM BIOS code.

  • The ROM BIOS performs a basic test of hardware to verify that basic functionality is indeed present.

  • The ROM BIOS Code will "initialize only" several core motherboard components and peripherals.

  • The BIOS then searches for adapters that may need to load their own ROM BIOS routines

  • The ROM BIOS then executes what is called a full POST (Power On Self Test).

  •  Next the BIOS Checks the Boot Order, Defined by You in the CMOS.

  •  Having identified its target boot drive, via the CMOS settings, the BIOS looks for boot information to start the operating system boot process.

  •  It looks for a master boot record (MBR) at cylinder 0, head 0, sector 1 (the first sector on the disk).

  •  At this point, the code in the boot sector of the hard drive takes over from the BIOS.

  •  The partition loader (or Boot Loader) examines the partition table for a partition marked as active indicated by  the boot flag.

  •  The partition loader then searches that very first sector of that partition for a Boot Record.

  •  The Boot Record is also 512 bytes and it too contains a table that describes the characteristics of that partition

  •  The Boot Record also contains the jump code that locates the beginning of the operating system files.

  •  The BIOS reads the first physical sector ("Sector 0") on the active disk, called the Master Boot Sector, and loads  an image of it into memory.

  •  The BIOS then transfers execution to that image of the Master Boot Sector on that disk.

  •  This program locates the NTLDR file on the active partition and passes control to it.

  •  The loading of Windows OS is then controlled by the file NTLDR.

  •  NTLDR will continue to load XP. Control is now passed to NTLDR.

  •  NTLDR is composed of two modules: The StartUp module and the OS Loader module.

  •  The StartUp module switches the CPU from Real Mode to Protected mode. 

  •  The StartUp module then loads and launches OS loader.

  •  OS loader includes basic functionality to access disks formatted with a recognized file system.

  •  The boot loader then reads the contents of the boot.ini file to locate even more information about the system volume.

  •  NTLDR Now runs a Program Called NTDetect.exe

  •  NTdetect.com gathers basic information about the computer's hardware as reported by the BIOS.

  •  This information is then passed onto Ntoskrnl.exe, The Windows Kernel.

  •  The Windows kernel Ntoskrnl.exe and the Hardware Abstraction Layer ( hal.dll ) are read into memory.

  •  With the kernel in memory, boot-time device drivers are loaded (but not yet initialized).

  •  This information (along with information on all detected hardware and Windows Services) is stored in the registry  ControlSet

  •  All drivers are now fully loaded.

  •  The Windows Logo Screen – Finally

  •  Once all the Boot and System drivers have been loaded, the kernel starts the Session Mgr Subsystem.

  •  Win32 subsystem which switches Windows into graphical mode.

  •  Creates virtual memory paging files.

  •  Starts the Windows Logon Manager (winlogon.exe).

          Here's another nice layout of the sequence

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

   
   

hit counter