ntoskrnl.exe SP2

[BloodStalker]

Ok, I would like to know, if I just replace the bmps for all the necessary files in ntoskrnl.exe SP2 version, should the kernel work when i use it.

[jrzycrim]

It will work but you images will most likely look funny. You have to edit the palette which is stored in a different location in ntoskrnl.exe.

See: http://www.msfn.org/board/index.php?showtopic=24286

[BloodStalker]

I took a look at that, and i don't understand exactly what I'm supposed to do. I tried using ultra edit to find the default palette, but it said that it couldn't find the string this is what i searched for: 00 00 00 00 15 1A 20 00 46 46 46 00 D2 3E 2D 00 01 65 53 00 05 35 B2 00 7E 7E 7E 00 00 92 89 00 FC 7F 5E 00 20 6B F7 00 FF A6 8D 00 04 DC 8E 00 1B BC F3 00 BC BC BC 00 FC FC FC FF FF FF is this what i should be looking for in the sp2 kernel, cause i can't find it. if not what is the string for the hardcoded palette in the sp2 kernel. thanks

[Alanoll]

just do a search (HEX search , not string or the other one) for

00 00 00 00 15 1A 20 00 46 46 46 00 D2 3E 2D 00 01

and that should get you too it.

Also remember that when you edit the pallete..... the format isn't RGB but BGR with 00 spacing each entry.

If you don't find that string above, then you're trying to mod an already altered one, and I suggest you get a fresh copy from I386 or so.

Also be sure to use the right kernel for the right system. (Single Processor kernel vs Multi-Processor Kernel)

[BloodStalker]

Once again alanoll you have come to my rescue, you rock thank you.

[BloodStalker]

Ok one last thing, how do i find out the palette for my custom image, i tried saving the palette with paint shop pro 8 but when i open it in notepad it is just jibberish, not the numbers i was expecting.

[jrzycrim]

Also, the offset for the palette is Hex address 75688. If you go directly to that address you will be at the start of the palette. Address 79C08 in the case of a multi-processor/hyper-threading kernel.

[BloodStalker]

i've found the default pallete but how do i find out what the palette is for my custom image is. I've tried saving the palette using painshop pro 8 but when i open the file with notepad all i get is jibberish not the numbers i need

[jrzycrim]

Ok one last thing, how do i find out the palette for my custom image, i tried saving the palette with paint shop pro 8 but when i open it in notepad it is just jibberish, not the numbers i was expecting.

Try saving it as a PSP palette instead of a Microsoft Palette.

[BloodStalker]

that worked, but now how do i determin what the numbers are in hex, this is my pallette :

JASC-PAL

0100

16

251 254 252

217 167 58

47 176 247

3 69 176

0 0 2

159 107 35

4 29 90

88 33 9

150 234 254

254 220 151

42 9 0

93 105 122

3 6 49

118 65 21

29 68 112

141 154 173

[jrzycrim]

I forgot about those being in decimal. Well, there are two ways to go about this:

1) You can use the Calculator in windows (scientific view) and covert each number. what a pain in the a**.

2) You can go to Edit Palette in PSP and find the actual hex values for each color. They'll be at the bottom. remember, you will have to reverse the order for the custom kernel as Alanoll ponted out.

Select the first color in the edit palette dialogue, reverse those hex pairs:

example: if it's #FFCCEE you will need to use EE CC FF and then add 00 between each color. #F123C6 will convert to C6 23 F1 00, just to be clear...

[BloodStalker]

ok thank you for all your help

[jrzycrim]

I should add that you will need to design a progress bar image (Resource 8) using the same palette as your main image or else it will look weird. Just load that image into PSP and recolor it with the new palette.

[Astalavista]

does anyone know where i can find complete and sp2 compliant ntoskrnl.exe?

the ones from themesxp.org are not sp2 compliant.

thanks

[BloodStalker]

I don't need to edit the progress bar, it is a precustom image i just edited part of it, but left the progress bar part alone, so theoretically it work