Customizing the "Resuming Windows" screen - Page 2

BigToach · 11-10-2004, 10:00 PM

if xp wont let you make the file unhidden and not a system file you can do this

1.) first make a copy of the file (i named it ntldr2)
2.) open a command prompt (if you don't know how to do this stop here)
3.) get to your c dir (cd c:\)
4.) find the attribs on the file by typing 'attrib ntldr2' (without quotes)
5.) it should look something like 'A SHR C:\ntldr2'
6.) for the editor to work you just want it to be A so you do 'attrib -s -h -r ntldr2' (w/o quotes)
7.) then 'attrib ntldr2' and the file should have the right permissions

once your finished you can reset the file permissions by doing the same process, but instead of doing 'attrib -s -h -r ntldr2' you do 'attrib +s +h +r ntldr2' then just rename the original ntldr to something like ntldrbackup and then rename ntldr2 to ntldr.
One thing to be aware of, make sure you remember to add the file name after the attributes(ex: attrib -h -s -r ntldr2), or else every file in the directory will be made that format.

OriginalNick2 · 11-11-2004, 05:30 AM

if you set Frodo as the shell..... Would you still see these screens when booting up and waking from hybernation??

If so wantaFRODO109 screen!!

Nick

Stray · 03-01-2005, 08:00 PM

Is there any way to display an image when windows is returning from hibernation instead of showing the text and the progress bar. I want to make it look the same as my boot screen.

davem · 03-06-2005, 08:59 PM

Good question Stray... I don't think it's possible but maybe someone here might know?

Is there a way to display a picture instead of the "resuming windows..." text?

Sonicxtacy02 · 01-11-2006, 03:12 PM

I've been trying to get the resuming windows text today but i'm confused. I open my hex editor.. hit goto 00035990 and this is what i get. What am i doin wrong here

MatrixPC · 01-12-2006, 10:32 AM

Instead of Goto you can try. Edit/Search Find (I use XVI32 HexEditor so it is Search instead of Edit) and look for "Resuming Windows" in text mode instead of Hex.

bimmerpc · 07-01-2006, 04:00 PM

Quote: Originally Posted by davem

Ok, figured out how to do this so here it goes for any of you who wanna customize...

To change the "Resuming Windows" text
(1) Get a hex editor program. Here's a link of what I used. http://www.hhdsoftware.com/hexeditor.html

(2) Look in the root directory of the boot drive (usually the C-drive) for the file C:\NTLDR. Now don't worry if you can't see it, just choose "Tools" > "Folder Options". Then click on the "View" tab and check "Show hidden files and folders" and uncheck "Hide protected operating system files (Recommended)". Now refresh the folder and you'll see it!

(3) Now make a backup copy of this file (just in case).

(4) Change the attributes of this file by selecting the file properties and deselect "read only", "hidden" and "system" checkboxes. Sometimes Windows won't let you do this so you can just download a program that will let you set file permissions.

(5) Use the hex editor program to open the NTLDR file. Go to offset 00035990 and you can change the "Resuming Windows..." text. Be sure NOT to change anything except those letters (meaning what you want to say has to fit within that many characters). Now you can also change the text below the progress bar "For troubleshooting... blah, blah" by changing the text at offset 00035F34, remember don't go over the character limit!

(6) Save the file and you're done!

To change the hibernation screen pics
(1) Download a resource editor, the one I used is Resource Hacker. http://www.users.on.net/johnson/resourcehacker/

(2) Open the file C:\Windows\System32\ntoskrnl.exe. Look at bitmap #2 and bitmap #5. You can right click on the file and choose to save that bitmap file to somewhere on your harddrive. Do this.

(3) Use a photo-editing program to edit the picture as you choose. Remember to keep the original image sizes and color depth.

(4) Now use the resource editor to replace these images with your newly created ones.

(5) Now you can't just save over the files because Windows will just overwrite your changes. Here's what you do... save the file as something else (like ntoskkrnl2.exe).

(6) Reboot Windows into Safe Mode with Command Prompt.

(7) Go to the Windows system directory by typing "cd C:\windows\system32"

(8) Delete the original file by typing "del ntoskrnl.exe" and hitting enter.

(9) Now copy over your file by typing "copy ntoskrnl2.exe ntoskrnl.exe" (assuming you called your new file ntoskrnl2.exe).

(10) Now just reboot and you're done!

Thanks Frodobaggins and Ninja Monkey for being the one's who showed me the right files to look in (without that all this would not be possible)! Hope this helps out... I am a new member but this forum is great, it gives everyone good ideas and helps out huge.

I did exactly as those link expalined
Thanks for getting it ALMOST 100%

I could change the Resuming from hibernate text to anything within the same amount of characters (nice!)

I still cannot understand why this is occuring:
I open reshacker and edit the bitmap 2 and 5 to be all black, save them back and restart xp in safe mode with command prompt. Replace the deleted original ntoskrnl.exe with my recently edited copy with the black bitmaps. I then restart, and then when back in xp, look at ntoskrnl.exe and see if the bitmap 2 and 5 have changed, yes they have - all black. I do a "hibernate" ...... STILL the same pictures in the hibernate screen.... WHHHHYYYYYY????
Is this candid camera?

bneises · 07-07-2006, 06:17 AM

I have the same issue as bimmerpc. any ideas?

Sonicxtacy02 · 07-07-2006, 08:50 AM

windows file protection is gettin ya somehow. Only thing i can think of. get tweakui or search for ways to disable it.

bimmerpc · 07-07-2006, 03:09 PM

but if I recall correct the ntoskrnl.exe did change, so the pictures must be taken from another file

lloydy · 09-12-2006, 12:57 AM

For anyone still following this thread I found that the hex positions were different in my NTLDR file. I used a different hex editor to edit my file and then searched for the text strings "resuming" and "troubleshooting". Using these search terms you can find the location you want to edit. Remember, don't use delete to remove the text - if you want to blank it all out (which is what I have done) just press spacebar over each character. As mentioned you will also need an attribute changer to change the attributes of the system file before you can save your new edited version (Windows won't let you) - I found a decent freeware one called - you guessed it - Attribute Changer! Links for the software I used are below:

http://www.softpedia.com/progDownloa...load_locations
http://www.hhdsoftware.com/Family/hex-editor.html

EDIT: Sorry - just realised I was looking at the single post and there were more posts on the whole thread. Hope my info helps anyway.

LLOYDY

deus ex machina · 10-23-2006, 02:02 AM

You can remove the "Resuming Windows..." text by replacing it with spaces, then, instead use the "For troubleshooting and advanced startup options for Windows, press F8." string area for your loading message. This puts the message on the bottom of the progress bar and gives you a lot more room.

I used "Initializing System..." as my message. Post any cool-sounding phrases you've thought up for this area. I really want to put something there more carputer-specific, but I can think of anything I like.

AllThingsEnd · 10-23-2006, 02:06 AM

Quote: Originally Posted by deus ex machina

You can remove the "Resuming Windows..." text by replacing it with spaces, then, instead use the "For troubleshooting and advanced startup options for Windows, press F8." string area for your loading message. This puts the message on the bottom of the progress bar and gives you a lot more room.

I used "Initializing System..." as my message. Post any cool-sounding phrases you've thought up for this area. I really want to put something there more carputer-specific, but I can think of anything I like.

what about "Hello Michael....."

SentraVIP · 11-07-2006, 11:53 PM

Guys, dunno if this might help but changing the ntoskrnl.exe might not be enough. I've changed ntkrnlop.exe ntkrnlmp (DLL Cache). They're all the same file with the same bitmap. Hope this helps?

As for my results... I got a black screen. I think it has got to do with me replacing different bitmaps on each file. Don't ask me why though...

I'm guessing these 3 files is cross referencing with each other for the hibernation?

Cheers!

aec merlin · 11-15-2006, 03:31 AM

Quote: Originally Posted by SentraVIP

Guys, dunno if this might help but changing the ntoskrnl.exe might not be enough. I've changed ntkrnlop.exe ntkrnlmp (DLL Cache). They're all the same file with the same bitmap. Hope this helps?

As for my results... I got a black screen. I think it has got to do with me replacing different bitmaps on each file. Don't ask me why though...

I'm guessing these 3 files is cross referencing with each other for the hibernation?

Cheers!

I bet you made new files in mspaint (or you selected "Copy" from ResHacker). The best way to modify the logos is to export the bitmaps from reshacker then edit them, which will preserve the depth and size of the bitmap.

I had the same problem as you (blank screen), then I realized that my new edited bitmaps had a depth of 24 bits, whereas the original ones were 4 bits (16 colors). After I corrected this, my new logos worked perfectly.