MalwareSourceCode/MSIL/Trojan/Win32/P/Trojan.Win32.Patched.mf-01164dae267b1f13c988de64e7fce38753b97528a3dc3fe730e191fc953c65ba/p3.cs

// Decompiled with JetBrains decompiler
// Type: p3
// Assembly: XobniService, Version=1.8.3.7917, Culture=neutral, PublicKeyToken=6298d2d1fcfb5d85
// MVID: EA9F7D71-4A8D-4739-A320-5F01FC76E972
// Assembly location: C:\Users\Administrateur\Downloads\Virusshare-00000-msil\Trojan.Win32.Patched.mf-01164dae267b1f13c988de64e7fce38753b97528a3dc3fe730e191fc953c65ba.exe

using Microsoft.Win32;
using System.Runtime.CompilerServices;

internal static class p3
{
  private static string a = string.Empty;

  [SpecialName]
  public static string a()
  {
    if (p3.a == null || string.Empty.Equals(p3.a))
    {
      using (RegistryKey registryKey = Registry.CurrentUser.OpenSubKey("Software\\Xobni", false))
      {
        if (registryKey != null)
        {
          if (registryKey.GetValue("XIID", (object) string.Empty) is string str)
            p3.a = str;
        }
      }
    }
    return p3.a;
  }
}