1. This site uses cookies. By continuing to use this site, you are agreeing to our use of cookies. Learn More.

What file contains Windows' Blue Screen messages?

Discussion in 'Computers, Games, Electronics etc' started by DarkHand, Jun 5, 2009.

  1. DarkHand

    DarkHand Senior Member VIP

    Messages:
    5,117
    Likes Received:
    241
    Joined:
    Sep 30, 2002
    Location:
    Chicago, IL
    When a BSOD occurs, where does Windows read the 'Windows has detected a problem and halted the computer blah blah' text from? I've checked the most common suspects like user32.dll and Kernel32.dll, but no luck.

    I'd like to fire up a resource editor and replace this:
    [​IMG]



    With this:
    [​IMG]

    :D
     

    Attached Files:

  2. TurboMirage

    TurboMirage YEEAAAHHH VIP

    Messages:
    24,582
    Likes Received:
    697
    Joined:
    May 20, 2003
    Location:
    Central, MA
    im not so sure you can actually change that.
     
  3. Drake

    Drake Well-Known Member VIP

    Messages:
    8,633
    Likes Received:
    420
    Joined:
    Oct 6, 2003
    I concur. I am pretty sure that bad boy is nested deep within the innards of the Microsoft dungeon.
     
  4. phyregod

    phyregod !!YTINASNI

    Messages:
    9,449
    Likes Received:
    225
    Joined:
    Jun 11, 2005
    Location:
    Central Texas
    In the message table of a file called "ntoskrnl.exe"

    and it looks like jumbled shit without a program to read it.


    A fun thing to do is get a screen shot of the BSOD, customize it a few different ways, then set it up as a slide show screen saver. It'll make your admin twitch.


    Searching around, found a stupid tweak.. But you could make it the RSoD!
     
    Last edited: Jun 5, 2009
  5. DarkHand

    DarkHand Senior Member VIP

    Messages:
    5,117
    Likes Received:
    241
    Joined:
    Sep 30, 2002
    Location:
    Chicago, IL
    Directly in the kernel? Makes sense being such a low level error, but I wonder how they handle different languages... Is the kernel file itself different for versions in other languages?

    Either way, thankya. :) Most messages I've seen that are difficult to mess with are separated with a NUL every other character, I'll just leave those intact and replace the unwanted characters with spaces (yes I'll back up the kernel!). If it works I'll post pictures. :D
     
    Last edited: Jun 5, 2009
  6. TurboMirage

    TurboMirage YEEAAAHHH VIP

    Messages:
    24,582
    Likes Received:
    697
    Joined:
    May 20, 2003
    Location:
    Central, MA
    will be cool if you can figure it out. im in for the solution!
     
  7. jamesA

    jamesA Well known pissed off telephone guy VIP

    Messages:
    16,129
    Likes Received:
    1,020
    Joined:
    Aug 10, 2003
    off topic interjection....


    You are all nerds... and by nerd I mean nerd to the topmost degree.

    Resume your nerd talk. :)
     
  8. DarkHand

    DarkHand Senior Member VIP

    Messages:
    5,117
    Likes Received:
    241
    Joined:
    Sep 30, 2002
    Location:
    Chicago, IL
    Success!

    [​IMG]

    :D:D:D

    That's in XP, now to do it in Windows 7. Haven't had a blue screen in 7 yet though, and I don't know if the 'Force a bluescreen' registry entry still works in later versions of Windows.

    EDIT: It's a bit off center, need to back it up a few characters but I'm too lazy now.
     

    Attached Files:

    Last edited: Jun 6, 2009
  9. Cashizslick

    Cashizslick !i!i!i!i!i!i!i!i!i!i!i!

    Messages:
    5,751
    Likes Received:
    37
    Joined:
    Aug 15, 2003
    Teal Background, Red text

    someone should do this.
     
    Last edited: Jun 6, 2009
  10. Briansol

    Briansol Admins Admin VIP

    Messages:
    21,456
    Likes Received:
    2,117
    Joined:
    Nov 18, 2007
    Location:
    CT
    what did you do? lol
     
  11. DarkHand

    DarkHand Senior Member VIP

    Messages:
    5,117
    Likes Received:
    241
    Joined:
    Sep 30, 2002
    Location:
    Chicago, IL
    Booted into 7, found the message in XPs ntoskrnl.exe (well ntkrnlpa.exe since I seem to have physical address extensions enabled) and replaced it with spaces with a hex editor. :) It wasn't obfuscated with NULs like I thought it would be. Stuck the new message in the middle and booted into XP... Using RDP with my brother's ipod touch has been bluescreening regularly in XP so I tried to run it for a crash, but it was flawless for the first time ever. :p Started shutting down though and got the video drivers to crash. :)
     
    Last edited: Jun 6, 2009
  12. Drake

    Drake Well-Known Member VIP

    Messages:
    8,633
    Likes Received:
    420
    Joined:
    Oct 6, 2003
    That is sweet haha. Good work.
     
Verification:
Draft saved Draft deleted

Share This Page