[WINDOWS_EDITION]
Name=Windows NT 4.0
Version=4.00
Build=1381 (Retail)
Codename=Cairo (UI) / Shell Update / Daytona NT4
ReleaseDate=1996-07-29
ReleaseType=Retail / Enterprise
[KERNEL]
File=NTOSKRNL.EXE
Version=4.00.1381
Architecture=x86 (32-bit), DEC Alpha AXP, MIPS R4000 (early), PowerPC 604 (early)
ExecutionModel=Fully Preemptive Multitasking
MemoryModel=Flat 32-bit Protected Mode
Exports=PsCreateProcess, PsCreateThread, MmAllocateVirtualMemory, ZwCalls, ObjectManager, SecurityReferenceMonitor, GDIInKernelHooks
[EXECUTIVE]
Components=Object Manager, I/O Manager, Security Reference Monitor, Process Manager, Memory Manager, LPC, Cache Manager
Subsystems=Win32 (primary), POSIX, OS/2 (text-mode only)
HAL=HAL.DLL (updated for SMP + new ACPI groundwork)
[USER]
File=USER32.DLL
Version=4.00.1381
UIModel=Windows 95 Explorer Shell (Start Menu + Taskbar)
Exports=WndCreate, MsgDispatch, MenuProc, InputLoop, HotkeyManager, ShellIntegration
[GDI]
File=GDI32.DLL
Version=4.00.1381
Drivers=VGA, SVGA, OEM display drivers
Exports=BitBlt, StretchBlt, LineTo, FontLoad, BrushCreate, RegionOps, KernelModeGDI
[SYSTEM_FILES]
NTOSKRNL.EXE=Core Kernel
HAL.DLL=Hardware Abstraction Layer
WINLOGON.EXE=Logon Manager
CSRSS.EXE=Client/Server Runtime Subsystem
SMSS.EXE=Session Manager
EXPLORER.EXE=New Shell (replaces Program Manager)
SYSTEM32=Primary System Directory
[DRIVERS]
DisplayDrivers=VGA.SYS, SVGA OEM drivers (kernel-mode GDI)
InputDrivers=KBDCLASS.SYS, MOUCLASS.SYS
StorageDrivers=SCSIPORT.SYS, ATAPI.SYS
OtherDrivers=NDIS.SYS (updated), TCPIP.SYS (rewritten), SERIAL.SYS, PARALLEL.SYS, RASPPPOE.SYS (later)
[APPS]
CoreApps=NOTEPAD.EXE, WORDPAD.EXE, MSPAINT.EXE
Utilities=EXPLORER.EXE, CONTROL.EXE, REGEDT32.EXE, TASKMGR.EXE, CMD.EXE
AdminTools=USERMAN.EXE, SRVMGR.EXE, PERFMON.EXE, EVENTVWR.EXE, BACKUP.EXE, NTDIAG.EXE
[BOOT]
BootMethod=NTLDR -> NTOSKRNL.EXE -> SMSS.EXE -> WINLOGON.EXE -> Explorer Shell
EntryPoint=NTLDR
FileSystem=FAT16 / NTFS 3.0
BootLoader=BOOT.INI
[MEMORY]
Mode=32-bit Protected Mode
MaxAddressSpace=4 GB (2 GB user / 2 GB kernel)
VirtualMemory=Yes (pagefile)
PagingFile=PAGEFILE.SYS
KernelModeGDI=Enabled (major architectural change)
[UI]
Windowing=Overlapping Windows
ColorDepth=256-color, 16-bit, 24-bit, 32-bit (OEM)
Input=Keyboard + Microsoft Mouse
Shell=Windows Explorer (Start Menu + Taskbar)
[NOTES]
Massive UI overhaul: replaced Program Manager with the Windows 95 Explorer shell. Moved GDI into kernel mode for performance, improving speed but reducing stability. One of the most widely deployed NT versions in corporate environments.