Info on editing XP SP2 boot screen

[ChiDragon]

If you go to http://www.virtualplastic.net/html/logo_scr.html and scroll down to "XP - bootscreen", you can find info on how to edit the XP boot screen.

However, some of the info is out of date... All of the strings are the same as mentioned on that site, but the addresses are different. After doing a little hacking and checking, I found the proper addresses to manually edit the kernel in order to apply the right palette and to move the status bar's position for the XP SP2 final kernel.

Hex addresses 75688 to 756C6 contain the screen's palette.

Hex addresses 37344 to 37347, 3912D to 39130, and 391B9 to 391BC contain the first progress bar string (62 01 00 00).

Hex addresses 373C2 to 373C5 and 391AF to 391B2 contain the second progress bar string (6A 01 00 00).

Also, Photoshop was a b***h about changing the 4-bit boot screen's palette to all-black (which makes it so there isn't a flash of color before the boot screen fades in). I hex edited my bitmaps' palettes, which were located at hex addresses 36 to 74. Everything from address 36 to 74 should be changed to "00". Not sure if that applies to every indexed 4-bit bitmap or just mine, though.

Hope this helps someone else wanting to edit the newest kernel for their boot screen.

[prathapml]

Thanks for filling in on that info.

First off to use it will be me.

Gotta get back that **** "Professional" on the boot-screen. Looks kinda bald without it.

[ChiDragon]

No problem. I agree that it doesn't look right somehow. Though the actual #10 bitmap is removed from the SP2 kernel (and whichever number the Home graphic is... #7?), so probably the only way to get it back would be to add the Professional text straight onto the #1 bitmap instead of using overlay.

[Lost Soul]

does any one know the first hex string for the screen's palette because im not sure if im at the right spot on my editing for the palette

[Lost Soul]

n/m i just realised a needed to add a 0x infront of the addy for the correct line to pop up,, thanks for the update on a great find

[jrzycrim]

Here are the offsets for ntkrnlmp.exe:

Palette: 79c08

First progress bar string:

3984c; 3b072; 3b08c (62 01 00 00)

Second progress bar string:

398ca; 3b082 (6a 01 00 00)

[shamshasan]

Could some one help me out here... i'm following instructions on the site listed and correction provided.

However i cannot seem to replace the image (1) with my own one. I try and try and doens't give any errors or signs. After hitting replace and selecting graphic and hitting 'ok' nothing is out of the ordinary. However at reboot while the colors are those of the edited palette of the btkrnl.exe (hacked ntoskrnl.exe) the image is still the regular XP flag image.

Details follow (thanks in advance!):

1) The original graphic i started working on: 1.psd (got it from deviantart.com).

2) I used Photoshop 7 to Index it and used 16 colors saved it to bmp (1_clr.bmp)

3) then i saved the 16 color palette (1_boot.act).

4) created a text file of my colors in HEX and reverse:

R   G   B      R  G  B
000 000 000 :: 00 00 00 :: 00 00 00
255 255 255 :: FF FF FF :: FF FF FF
034 028 029 :: 1D 18 19 :: 19 18 1d
220 221 219 :: EA ED E9 :: e9 ed ea
203 203 201 :: DC DE DB :: db de dc
246 206 006 :: C5 C5 C2 :: c2 c5 c5
166 164 162 :: D1 D1 CF :: cf d1 d1
185 183 181 :: B8 B7 B4 :: b4 b7 b8
165 136 118 :: A7 A5 A2 :: a2 a5 a7
097 093 092 :: C1 83 4D :: 4d 83 c1
122 118 117 :: 94 91 90 :: 90 91 94
066 061 061 :: 6D 68 67 :: 67 68 6d
143 142 142 :: 54 4E 4D :: 4d 4e 54
254 254 254 :: 39 33 33 :: 33 33 39
255 255 255 :: 82 7D 7D :: 7d 7d 82
237 239 236 :: FC FC FC :: fc fc fc

5) converted 1_clr.bmp to a black image by converting all 16 colors to black. image saved as 1_blk.bmp.

6) The 16xblack palette is saved as well as 1_boot_blk.act.

7) the image (1_blk.bmp) is saved again as 1.bmp and ChiDragon's change made as due to Photoshop being a b***h and, 'changing the 4-bit boot screen's palette to all-black (which makes it so there isn't a flash of color before the boot screen fades in)'

8) ResHack used to replace 1 with 1.bmp created in step 7.

9) btkrnl.exe edited with HexEditor to take care of palette.

10) boot.ini line added to allow choice of kernel to load.

loads with colors of btkrnl.exe, but image is like regular boot screen. swap never occurs.

Attempting debug:

After moving btkrnl.exe to another machine i extract the current 1 image and sure enough it is the regular XP boot image. I take care in replacing the image with mine again and again and it doesn't work.

Any ideas?

Thanks!

Shams

[shamshasan]

he he he he... ooops.... didn't check image resolution... wahay too late into the night. came back and i was like, "d'OH!"

Thanks anyway... VERY useful thread

[coch]

Hi, anybody also notices the progress bar is screwed up in SP2 boot screens? or is it only me?. All sp2 bootscreens I have downloaded ot made myself have a missing section or the progress bar border (in the top right area).

Any input appreciated.

[coch]

so everybodyès progress bar is correct then?

[harryharry]

Maybe one could change the winbrand.dll in winbrand.dl_? it seems to have those bootscreens in it, with palette if im correct. What if one would change that? Maybe you can use it to re-add the Pro text

[machkris]

Can someone HELP me?

I am trying to make my Boot Screen look like the one [attachment=15897:attachment], but when Windows is booting up it is showing up as these [attachment=15898:attachment] [attachment=15899:attachment] with distorted colors. Which file I need to edit in the Windows XP Pro CD and what do I need to do to correct this problem?