About ROT13

  • Thread starter Thread starter yxq
  • Start date Start date
In Registry, the
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{75048700-EF1F-11D0-9888-006097DEACF9}\Count

Key encrypted by ROT13, what meaning about the REG_BINARY value? i guess it
is date/Time

Thank you
 
Key encrypted by ROT13, what meaning about the REG_BINARY value? i guess it
is date/Time
Click to expand...

It can hold any binary data, and is returned as a byte array to
managed code.



Mattias
 
Here's a ROT13 Function that I have converted from one of my old VB6
projects, which you can use. It can be converted a little more, if you want,
but it doesn't need to:

Public Function Rot13(ByVal sInString As String) As String

Dim intPointer As Integer = 1
Dim strNewChar As String

While intPointer <> sInString.Length
System.Windows.Forms.Application.DoEvents()
Select Case Asc(Mid(sInString, intPointer, 1))
Case 65, 97
strNewChar = "N"
Case 66, 98
strNewChar = "O"
Case 67, 99
strNewChar = "P"
Case 68, 100
strNewChar = "Q"
Case 69, 101
strNewChar = "R"
Case 70, 102
strNewChar = "S"
Case 71, 103
strNewChar = "T"
Case 72, 104
strNewChar = "U"
Case 73, 105
strNewChar = "V"
Case 74, 106
strNewChar = "W"
Case 75, 107
strNewChar = "X"
Case 76, 108
strNewChar = "Y"
Case 77, 109
strNewChar = "Z"
Case 78, 110
strNewChar = "A"
Case 79, 111
strNewChar = "B"
Case 80, 112
strNewChar = "C"
Case 81, 113
strNewChar = "D"
Case 82, 114
strNewChar = "E"
Case 83, 115
strNewChar = "F"
Case 84, 116
strNewChar = "G"
Case 85, 117
strNewChar = "H"
Case 86, 118
strNewChar = "I"
Case 87, 119
strNewChar = "J"
Case 88, 120
strNewChar = "K"
Case 89, 121
strNewChar = "L"
Case 90, 122
strNewChar = "M"
Case Else
strNewChar = Mid(sInString, intPointer, 1)
End Select

If IsUpperCase(Mid(sInString, intPointer, 1)) Then
Mid(sInString, intPointer, 1) = strNewChar
Else
Mid(sInString, intPointer, 1) = strNewChar.ToLower
End If

intPointer += 1
End While

Return sInString

End Function

I hope this is of help to you
 
Thank you, but i have Rot13 function.
When you click the desktop icons, the date and time will be loged to
Registry in XP.

HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{75048700-EF1F-11D0-9888-006097DEACF9}\Count

The date and time wrote to binary value(16 bytes)
i.e. 09 00 00 00 07.... (i think the binary value encrypted).

But you can add a key to let XP will not encrypt the keyname and value
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\Settings

Add Dword value "NoEncrypt" and set to 1

I dont know how to recover the date and time from the binary value.

Please view
http://www.velasco.com.br/explorer_spy.txt
 
Hello,

I was looking through this thread and wondered if anyone from the forum made a simple stand alone program to cut and paste items that decypher for this ROT13

Thank you, have a great weekend.
 
Back
Top