// Decompiled with JetBrains decompiler // Type: u5 // Assembly: XobniService, Version=1.8.3.7917, Culture=neutral, PublicKeyToken=6298d2d1fcfb5d85 // MVID: EA9F7D71-4A8D-4739-A320-5F01FC76E972 // Assembly location: C:\Users\Administrateur\Downloads\Virusshare-00000-msil\Trojan.Win32.Patched.mf-01164dae267b1f13c988de64e7fce38753b97528a3dc3fe730e191fc953c65ba.exe using Microsoft.Win32; using System; using System.Runtime.CompilerServices; internal static class u5 { private const string a = "Software\\Xobni\\Settings"; private static string b; [SpecialName] public static string a() { if (u5.b != null) return u5.b; try { u5.b = u5.a("XobniDomain"); if (u5.b != null) return u5.b; } catch (Exception ex) { } u5.b = "xobni.com"; return u5.b; } [SpecialName] public static void b(string A_0) => u5.b = A_0; private static string a(string A_0) { using (RegistryKey registryKey1 = Registry.LocalMachine.OpenSubKey("Software\\Xobni\\Settings", false)) { if (registryKey1 != null) return registryKey1.GetValue(A_0, (object) null) as string; using (RegistryKey registryKey2 = Registry.LocalMachine.OpenSubKey("Software\\Xobni\\Settings", false)) return registryKey2 == null ? (string) null : registryKey2.GetValue(A_0, (object) null) as string; } } }