Ran it in QEMU - it flashes too fast (you have replaced the printf with a bmp_printf, right?), but it's 1AE followed by some zeros. That should give around 27 MB, so it's 0x1ae0000.
NotifyBox will redraw the message in background, should it get erased, while bmp_printf just prints it once.