Modifying the Boot Screen

Warning:  Changing the boot screen palette in Windows XP will involve making changes to the kernel of your system.  If not done correctly, your system can become unstable or even get to the point where it will not boot.

Sorry folks but I need to emphasize that as the Windows XP boot screen is quite difficult to change or modify.   It is not as simple as most older windows operating systems like Windows 95/98.   In fact, it is the most difficult modification of the three we will be looking at today.  There are various methods you can use to change your Windows XP boot screen.  I have explored each and every one and will be showing you the one method I think is the easiest and safest.

Before we begin, you will need a small freeware application called Boot Editor.

You can download it here:  http://members.rogers.com/userxp/indexbe.htm

Boot Editor is a small tool for creating or modifying boot screens in Windows XP (Pro & Home editions).  Main important features are:

• Creates boot screens (the ntoskrnl.exe file)

• Change the default palette of boot screens

• Change the position of the progress bar

The file you will be modifying is located in your \Windows\System32 directory.  Look for a file named "ntoskrnl.exe".   This is the file you will be working with so the first thing you will need to do is make a backup of this file!   This is very important!  Make an additional copy of it that will be used to do your hacking on. 

Extract the Boot Editor application into a directory of choice.  Do not run Boot Editor just yet.  First, place the copy of ntoskrnl.exe in the Boot Editor directory.

Next, open the Boot Editor application.

Click on File then "New Boot Screen".   The following dialog should appear:

Here you will enter a Name for the new boot screen.  For this tutorial, we will be installing the Blue MatrixXP Boot screen which can be downloaded at themexp.org.

We will call this new screen "BlueMatrixXP"

Once you enter the name of the new screen, a folder will be created in the Boot Editor directory with this name.   Boot editor will now open the original windows copy of ntoskrnl.exe as shown below:

Notice the original windows boot screen.   We now have access to this and can make the appropriate changes.

Before we continue, I would like to provide you with more information on the ntoskrnl.exe file so you can familiarize yourself with it and understand what we will be modifying.

When you open ntoskrnl.exe with Boot Editor, ResHacker or any other utility, you will see a series of numbers from 1-18.  These are the actual individual bitmap images that the boot screen contains.  The images you will be changing or modifying will depend on which edition of Windows XP you are running.   Here is an explanation of the main bitmaps we will be modifying:

1 - Number "1" is the main boot logo screen. This is the background image for the boot screen. 

8 - Number "8" is the blue progress bar used by XP Professional Edition.

9 - Number "9" is the green progress bar used by XP Home Edition.

10 - Number "10" is the text overlay for XP Professional Edition.

11 - Number "11" is the text overlay for XP Home Edition.

Most of the boot screens you download from the sites we recommended will contain 2 images.  One will replace number "1" which is the main logo screen, and one will replace number "8" or number "9" depending on which edition of windows you are running.  8 and 9 are for the progress bar.

For this tutorial, we will be modifying bitmaps "1" and "8" since we are using WinXP Professional Edition.

Now that we are more clear as to what images need to be changed, lets go ahead and make the proper changes.

You will notice on the main Boot Editor screenshot above that number "1" has already been opened for you.  Right-click anywhere on the original boot screen image and select "Load New Image" as shown below:

Browse to the location where you have stored the boot screens you have downloaded.   We will be adding the Blue Matrix XP boot screen so we will load image number "1" as shown below:

You should now see the NEW main boot screen image! 

Now I would like to explain why we chose "Boot Editor" as our preferred tool for this modification.  Notice that the color palette for the bitmap has changed on the upper right hand corner of the screenshot above.   Because we have loaded a different image, the color palette has changed.  In order for this Blue MatrixXP Boot screen to show up properly when you boot your computer, we need to save the new color palette.  This palette is "hardcoded" in the ntoskrnl.exe file.   Boot Editor is great cause it will not only allow you to change the image, but also save the new color palette.  What we need to do next is hit the "Save" button located to the left of the bitmap palette on the upper right hand corner.   This will save the palette to current ntoskrnl.exe file.

Now that we have changed the main boot screen properly, let us move to the next bitmap.  Because we are using WinXP Professional, the next bitmap we will change is number "8".  Select this bitmap from the drop down menu located right above the screen preview as shown below:

Right-click anywhere on the image preview as we did with the first bitmap and browse for the new progress bar image.  Again, we will be using the one for the Blue MatrixXP boot screen as shown below:

Again, notice that the color palette to your right for the bitmap has changed.  We need to hit the "Save" button again to save the new palette to the ntoskrnl.exe file.

That's it!  Well, almost.  Now let us save all changes and create the new ntoskrnl.exe file!  right above the image preview window, hit the "Save All" button to save all changed bitmaps.  A confirmation dialog will appear asking if it is ok to save new bitmaps.  Click "OK".   Finally, click on the "Make" button located right next to it. 

The following window should appear:

You can simply click "OK" here and leave everything as is.  You will get a confirmation window indicating the new boot file has been created!

The new ntoskrnl.exe file will then be added to the BlueMatrixXP directory it created.  This will be the new file we will use. 

OK!  So we have the new boot file.  Now what?  

In order to replace this file, we need to restart the computer in "Safe Mode". 

Once you are in Safe Mode, copy this new ntoskrnl.exe file to your \Windows\System32 directory replacing the one that is already there.  Reboot the computer.

Enjoy your new Boot Screen! :)

Here are a couple of shots of some cool boot screens I installed:

As you can see, replacing the Windows XP boot screen has proved to be a difficult task.  There are other ways of doing it but they are more complicated and are not exactly the safest methods.   If you do not understand any part of this tutorial, we recommend that you ask questions in our forums first.  A link to the thread will be provided at the end of this article.

We have a new boot screen!  Now let's work our way up and change the logon screen shall we?

Next: Logon Screen