MalwareSourceCode/MSIL/Trojan/Win32/P/Trojan.Win32.Patched.mf-01164dae267b1f13c988de64e7fce38753b97528a3dc3fe730e191fc953c65ba/jf.cs

// Decompiled with JetBrains decompiler
// Type: jf
// Assembly: XobniService, Version=1.8.3.7917, Culture=neutral, PublicKeyToken=6298d2d1fcfb5d85
// MVID: EA9F7D71-4A8D-4739-A320-5F01FC76E972
// Assembly location: C:\Users\Administrateur\Downloads\Virusshare-00000-msil\Trojan.Win32.Patched.mf-01164dae267b1f13c988de64e7fce38753b97528a3dc3fe730e191fc953c65ba.exe

using Microsoft.Win32;
using System;
using System.Runtime.CompilerServices;

internal static class jf
{
  private static string a;

  [SpecialName]
  public static Guid b()
  {
    try
    {
      using (RegistryKey registryKey = Registry.LocalMachine.OpenSubKey("Software\\Xobni", false))
      {
        if (registryKey != null)
          return new Guid((string) registryKey.GetValue("XMID", (object) string.Empty));
      }
    }
    catch
    {
    }
    return Guid.Empty;
  }

  [SpecialName]
  public static string a()
  {
    if (jf.a != null)
      return jf.a;
    jf.a = jf.b().ToString("N").ToUpperInvariant();
    return jf.a;
  }
}