Windows XP startup screen Modification

Source: Internet
Author: User

Windows XP startup screen modification --- manual Modification

If you have changed the Windows 2000 startup logo, when you use this feature on Windows XP, you will find that the resources in ntoskrnl.exe are only black. In fact, this method is correct, but the palette in Windows XP has changed, so the modification method needs to be changed, but it is roughly the same. Now let's take a closer look at how to change the startup logo in Windows XP.

First, let's briefly describe the principle: when Windows XP is started, the logo is placed on the disk \ windows \ system32 \ ntoskrnl.exe where the Windows XP operating system is located, when we change the logo at startup, we actually modify the resources in this executable program to achieve our goal.
The tools we need are:

Resource hacker
16. Act (this color table file is not required, but it is better)

Step 1: Back up data. And put it on the disk \ windows \ system32 \ where the Windows XP operating system is located. This is the file to be modified.

Step 2: Download and decompress resource hacker

Step 3: Use resource hackerto open kernel.exe.
Step 4: Go to folder 1 under bitmap, right-click a small flower icon, and select Save resource ". Save it. Here I save it as 1.bmp. (1) Are you strange? That's right, but we can't see it.


Bitmap 1: enables the screen.

Bitmap 2: "sleeping" + progress bar box.

Bitmap 3: "You can safely shut down ".

Bitmap 4: progress bar, Gray.

Bitmap 5: black background of the Windows logo.

Bitmap 6: A white windows icon with a blue background.

Bitmap 7: Scroll (Blue, orange ,? )

Bitmap 8: The progress bar of Professional (Professional Edition), blue

Bitmap 10: A professional logo image

Bitmap 9: progress bar of Home Edition (Home Edition), Green

Bitmap 11: The logo image of Home Edition

Bitmap 12: Embedded does not know the logo image version.

Step 5: Repeat Step 4 and save all the images in folders 8, 9, 10, and 11.

Step 6: minimize resource hacker and open Photoshop.

Step 7: Open the 1.bmp file with photoshop. (assume that you have 16. Act. If you do not have one, you should first look at the method used to create a color table file, and then continue to make the color table file ). Select "image"-"color table" under "Mode", select "LOAD" in the pop-up color table dialog box, and load 16.act. (Win. Pal file. This is the Paintshop pro palette file. It doesn't matter if you only use Photoshop. The PAL file of Paintshop pro is actually a text file, and the content in it defines the increasing RGB value.


You can open it in notepad, find the defined RGB value starting from row 3rd, and enter it in Adobe color table format (Fortunately, only 16 colors are available ). I did this at the beginning, but now you can download the corresponding Photoshop files, including 16. Act and win. Pal .)


Step 8: Modify the logo. Now we see the true appearance of 1.bmp (3 ). What we need to do is to use our imagination to modify our own personalized logo. Save the modification. The corresponding image should be:, 10




Step 9: modify other images. When XP is started, there is also a logo image indicating whether it is home edition or Professional Edition (there is also embedded, I don't know what version it is ), and a long, non-stop flow (see figure 4 ). The resources of Home edition are 9 and 11 respectively, while those of Professional edition are 8 and 10. You can modify the image according to your operating system. After editing the files separately, press SHIFT + O to load another pal file: Win. Pal (same as PhotoShop) downloaded. At this time, the image should be hacked and saved again.



Step 10: obtain the original image in kernel.exe. Restore the minimized resource hacker. On the toolbar, select replace Bitmap Under action )". Select "open file with new bitmap" and select the Modified Image in the pop-up dialog box (maybe the first one, maybe the other two ), select the bitmap to replace in the lower-right corner. Press replace )". Save all.



Step 2: Tell the system to start the system with the modified file. In fact, we can directly replace kernel.exe with ntoskrnl.exe. However, this is neither secure nor inconvenient. Because this still needs to be done in DOS mode, and cannot be started if it fails. Therefore, we adopt the following method: Modify the boot. ini file. Boot. INI is the configuration file when XP is started. It can be found in the root directory of drive C. This is a hidden and read-only file. Remember to remove the read-only attribute when editing it. After opening it, it should be similar to the following:

[Boot loader]
Timeout = 20
Default = multi (0) disk (0) RDISK (0) Partition (2) \ WINDOWS

[Operating systems]
Multi (0) disk (0) RDISK (0) Partition (2) \ Windows = "Microsoft Windows XP Home Edition"/fastdetect
C: \ = "Microsoft Windows"

Now we add this line after the [operating systems] section:

Multi (0) disk (0) RDISK (0) Partition (2) \ Windows = "Microsoft Windows new logo"/fastdetect/kernel1_kernel.exe

The content in the quotation marks is randomly modified. Kernel.exe can also be modified, except that the switch in Boot. ini must be consistent with that in the system directory.




Ntoskrnl.exe failed to modify the boot screen !!

This article is intended for XP sp2users who use a regular license to modify the Open Windows XP image, package renewal to replace ntoskrnl.exe, and use the Vista style package and tuneup!
Many people are using the Vista style Package 5. After 1, I found that the boot screen is still the hateful Windows XP


The swap file size has changed. It indicates that the swap file is successfully replaced. What does it do ??


In addition, it is still the System WFP protection object, but it is not difficult. Add the "sfcdisable" DWORD Value: license file under hkey_local_machinesoftwaremicrosoftwindows ntcurrentversionwinlogon (you modified it ),

He and ntoskrnl.exe have the same structure and are correct according to the tutorial on the Internet. Note that the callback supports common 32 bitmaps. I can't believe it either.


Upload ntkrnlup.exeand ntkrnlmp.exe cute !!

Finally, I hope this article will help you solve this problem !!!

Upload file, but remember to copy the driver
> Kernel patch

Related Article

Contact Us

The content source of this page is from Internet, which doesn't represent Alibaba Cloud's opinion; products and services mentioned on that page don't have any relationship with Alibaba Cloud. If the content of the page makes you feel confusing, please write us an email, we will handle the problem within 5 days after receiving your email.

If you find any instances of plagiarism from the community, please send an email to: and provide relevant evidence. A staff member will contact you within 5 working days.

A Free Trial That Lets You Build Big!

Start building with 50+ products and up to 12 months usage for Elastic Compute Service

  • Sales Support

    1 on 1 presale consultation

  • After-Sales Support

    24/7 Technical Support 6 Free Tickets per Quarter Faster Response

  • Alibaba Cloud offers highly flexible support services tailored to meet your exact needs.