Hondaswap.com | Honda Technical & JDM styling Forums

DarkHand · 06-05-2009, 12:19 AM

When a BSOD occurs, where does Windows read the 'Windows has detected a problem and halted the computer blah blah' text from? I've checked the most common suspects like user32.dll and Kernel32.dll, but no luck.

I'd like to fire up a resource editor and replace this:

With this:

TurboMirage · 06-05-2009, 10:17 AM

im not so sure you can actually change that.

Drake · 06-05-2009, 10:51 AM

Quote:

Originally Posted by TurboMirage

I'm not so sure you can actually change that.

I concur. I am pretty sure that bad boy is nested deep within the innards of the Microsoft dungeon.

phyregod · 06-05-2009, 10:52 AM

In the message table of a file called "ntoskrnl.exe"

and it looks like jumbled shit without a program to read it.

A fun thing to do is get a screen shot of the BSOD, customize it a few different ways, then set it up as a slide show screen saver. It'll make your admin twitch.

Searching around, found a stupid tweak.. But you could make it the RSoD!

Quote:

In Windows 2000/XP/2003, each time the Windows Kernel crashes, a blue screen appears, giving the administrator some clues and information as to what has caused the error. This screen, because of its blue color and catastrophic nature, was nicknamed BSOD - Blue Screen Of Death.
Why blue - no one knows, but what I do know is the fact that the blue screen can be changed to a different color, thus creating your own YSOD or RSOD or even WSOD...
To do so follow these steps:

Open the SYSTEM.INI file found in the %systemroot% folder (i.e. C:'Windows or other). You can easily open the file by running SYSEDIT from the Run command, or by using Notepad.exe.
Locate the [386enh] section in the file:
If not already present, create the following new entries:

MessageBackColor= MessageTextColor=

and give it a value according to the following list:

0 = black
1 = blue
2 = green
3 = cyan
4 = red
5 = magenta
6 = yellow/brown
7 = white
8 = gray
9 = bright blue
A = bright green
B = bright cyan
C = bright red
D = bright magenta
E = bright yellow
F = bright white

For example:

MessageBackColor=2MessageTextColor=F

will change the BSOD to Green with bright white text.
Note: Use CAPITAL LETTERS, i.e. F and not f.

Close SYSTEM.INI while saving your changes.
Restart the computer.

Now wait for the system to crash (supposedly it shouldn't be crashing so often...) and behold the horror.
The reason behind this tweak is for people that have certain forms of visual impairment and are only able to use Windows when it is set to high contrast mode. This setting allows the BSOD to be set to high contrast colors as well, making it easier for the visually impaired to read the information in them.

DarkHand · 06-05-2009, 02:35 PM

Quote:

Originally Posted by phyregod

In the message table of a file called "ntoskrnl.exe"

and it looks like jumbled shit without a program to read it.

Directly in the kernel? Makes sense being such a low level error, but I wonder how they handle different languages... Is the kernel file itself different for versions in other languages?

Either way, thankya.

Most messages I've seen that are difficult to mess with are separated with a NUL every other character, I'll just leave those intact and replace the unwanted characters with spaces (yes I'll back up the kernel!). If it works I'll post pictures.

TurboMirage · 06-05-2009, 03:27 PM

will be cool if you can figure it out. im in for the solution!

2000Si · 06-05-2009, 05:45 PM

off topic interjection....

You are all nerds... and by nerd I mean nerd to the topmost degree.

Resume your nerd talk.

DarkHand · 06-06-2009, 01:12 AM

Success!

That's in XP, now to do it in Windows 7. Haven't had a blue screen in 7 yet though, and I don't know if the 'Force a bluescreen' registry entry still works in later versions of Windows.

EDIT: It's a bit off center, need to back it up a few characters but I'm too lazy now.

Cashizslick · 06-06-2009, 01:18 AM

Teal Background, Red text

someone should do this.

B · 06-06-2009, 01:19 AM

what did you do? lol

DarkHand · 06-06-2009, 01:37 AM

Quote:

Originally Posted by B

what did you do? lol

Booted into 7, found the message in XPs ntoskrnl.exe (well ntkrnlpa.exe since I seem to have physical address extensions enabled) and replaced it with spaces with a hex editor.

It wasn't obfuscated with NULs like I thought it would be. Stuck the new message in the middle and booted into XP... Using RDP with my brother's ipod touch has been bluescreening regularly in XP so I tried to run it for a crash, but it was flawless for the first time ever. :P Started shutting down though and got the video drivers to crash.

Drake · 06-08-2009, 06:28 PM

That is sweet haha. Good work.

06-05-2009, 10:17 AM	#2
TurboMirage Running on two cylinders Join Date: May 2003 Location: Southbridge, MA Age: 25 Posts: 18,155 iTrader: 1 / 100% Ride: 2000 Mitsubishi Lancer RPW E5 Coupe Rep Power: 337	im not so sure you can actually change that. __________________ Home of the RPW built 2000 Lancer CC Coupe. See what is done to the little Evo5. "If you don't like what I've done with my car, I will gladly refund all the money you put into it."

06-05-2009, 03:27 PM	#6
TurboMirage Running on two cylinders Join Date: May 2003 Location: Southbridge, MA Age: 25 Posts: 18,155 iTrader: 1 / 100% Ride: 2000 Mitsubishi Lancer RPW E5 Coupe Rep Power: 337	will be cool if you can figure it out. im in for the solution! __________________ Home of the RPW built 2000 Lancer CC Coupe. See what is done to the little Evo5. "If you don't like what I've done with my car, I will gladly refund all the money you put into it."

Similar Threads
Thread	Thread Starter	Forum	Replies	Last Post
haha...Brian, I love the "personalized" messages at the top of the page...	hosmer	Members' Lounge	8	09-04-2006 06:03 PM
HELP!! blue screen of death	Dustin_m	Computers, Games, Electronics etc	5	04-25-2006 07:08 AM
Blue Screen Of Death	caffeind	Members' Lounge	22	01-19-2005 08:21 PM
What do I Do With A RAR file?	Dustin_m	Computers, Games, Electronics etc	24	12-11-2004 04:16 PM
Why Men Shouldn't Take Messages...	MaaseyRacer	Members' Lounge	13	04-15-2003 01:09 AM


Welcome, Guest! Please Register or Login: User Name Password Members have access to more features, better search, and see fewer ads! It's free, what are you waiting for?

Hondaswap.com | Honda Technical & JDM styling Forums

What file contains Windows' Blue Screen messages?