// Decompiled with JetBrains decompiler // Type: p3 // Assembly: XobniService, Version=1.8.3.7917, Culture=neutral, PublicKeyToken=6298d2d1fcfb5d85 // MVID: EA9F7D71-4A8D-4739-A320-5F01FC76E972 // Assembly location: C:\Users\Administrateur\Downloads\Virusshare-00000-msil\Trojan.Win32.Patched.mf-01164dae267b1f13c988de64e7fce38753b97528a3dc3fe730e191fc953c65ba.exe using Microsoft.Win32; using System.Runtime.CompilerServices; internal static class p3 { private static string a = string.Empty; [SpecialName] public static string a() { if (p3.a == null || string.Empty.Equals(p3.a)) { using (RegistryKey registryKey = Registry.CurrentUser.OpenSubKey("Software\\Xobni", false)) { if (registryKey != null) { if (registryKey.GetValue("XIID", (object) string.Empty) is string str) p3.a = str; } } } return p3.a; } }