$string=readvalue()
$=writeprofilestring("differs.txt","compare me","original",$string)
$=writeprofilestring("differs.txt","compare me","converted",RegBinaryToString($regval))
$=writeprofilestring("differs.txt","compare me","decyphered",Rot13RegBinaryToString($regval))
and you might want to remove:
if $value<>0
as we would want the whole string.
I found this technical documentation>
The notification settings for the task tray are stored in the registry at HKCUSoftwareClassesLocal SettingsMicrosoftWindowsCurrentVersionTrayNotify in the IconStreams value as a binary registry key. Luckly for us, the organization of the key is not nearly as hard to understand as the Favorites Bar. The binary stream begins with a 20 byte header followed by X number of 1640 byte items where X is the number of items that have notification settings. Each 1640 byte block is comprised of at least (one of the sections is not fully decoded so it may be made up of 2 or more sections) 5 fixed byte width sections as follows:
528 bytes – Path to the executable
4 bytes – Notification visibility setting
512 bytes – Last visible tooltip
592 bytes - Unknown (Seems to have a second tool-tip embeded in it but the starting position in the block changes)
4 bytes – ID?
from http://xtremeconsulting.com/blog/windows...ry-rabbit-hole/
anyways, in the end, you want to look for cypher text version of dropbox.exe or wtf ever it is called since nobody cares to actually post this info.
once found, read about 1kbytes and you have your status message.
_________________________
!download
KiXnet
