Taking the Death out of the Blue Screen.
- Taking screenshots of BSoDs in the wild. (Documentation).
- Customizing the message displayed on the Blue Screen. (Documentation).
Make sure memory dumps are enabled if you intend to capture screenshots.
To convert screenshots, make sure you have dbgeng.dll and related DLLs in the same
directory as DrunkenIronman.exe. You can get them from the
Debugging Tools for Windows. For recent releases of the tools
you need to copy at least:
dbgeng.dlldbghelp.dllDbgModel.dll
Note that old releases of dbgeng.dll may not be able to parse dumps created
with newer versions of Windows.
The software has been tested on the following:
| System | VMware Workstation | Physical |
|---|---|---|
| Windows XP SP3 x86 | ✅ | ❌ |
| Windows 10 14393 x86 | ✅ | ❌ |
| Windows 10 19043 x64 | ✅ | ✅ |
YMMV.
DrunkenIronman.exe <subfunction> <subfunction args>
convert [<input>] <output>
Extracts a screenshot from a memory dump.
load
Loads the driver.
unload
Unloads the driver.
bugshot [<width> <height>]
Instructs the driver to capture a screenshot
of the next BSoD.
The width and height parameters are used only on Windows 10+,
to define the maximum size of the captured image. They are ignored
on earlier systems, and on Windows 10 if the BSoD is generated in VGA mode.
If not specified, the default is 640x480.
vanity <string>
Crashes the system and displays the specified string
on the BSoD.
qr
Displays the dimensions of the current QR image.
qr <image>
Sets an image to be used instead of the default QR code.
The image must be a non-compressed BMP
with either 32 or 24 BPP, and with the same dimensions
as the default QR image.
DrunkenIronman.exe convert out.bmp
DrunkenIronman.exe convert C:\Some\Path\MEMORY.DMP out2.bmp
DrunkenIronman.exe vanity IRQL_NOT_LESS_OR_AWESOME
DrunkenIronman.exe qr C:\Some\Path\image.bmp
