A forum for reverse engineering, OS internals and malware analysis 

Forum for discussion about kernel-mode development.
 #14003  by Xearinox
 Fri Jun 15, 2012 2:40 pm
Hello. Is some way to define custom bug check with own parameters and own text?
Thanks for answer.
 #14005  by iSecure
 Fri Jun 15, 2012 3:36 pm
Look at KeBugCheckEx exported routine: http://msdn.microsoft.com/en-us/library ... s.85).aspx

But its only capable of defining custom bug check code and 4 params, if you want to print custom description (text) on BSOD screen, i guess you need to go lower in kernel, probably hook something underneath KeBugCheckEx rountine.
 #14007  by Xearinox
 Fri Jun 15, 2012 4:56 pm
I know KeBugCheckEx but I want custom bugcheck with full description. :D
 #14008  by Vrtule
 Fri Jun 15, 2012 5:22 pm
I think that Windows gives the same description for all bugcheck. The exception may be name of the driver that probably caused the problem, and a string value for the bugcheck code (i.e. IRQL_NOT_LESS_OR_EQUAL). These string values are defined in ntoskrnl.exe or some other kernel file, if I remember correctly.