MalwareSourceCode/MSIL/Trojan/Win32/P/Trojan.Win32.Patched.mf-01164dae267b1f13c988de64e7fce38753b97528a3dc3fe730e191fc953c65ba/u5.cs

// Decompiled with JetBrains decompiler
// Type: u5
// Assembly: XobniService, Version=1.8.3.7917, Culture=neutral, PublicKeyToken=6298d2d1fcfb5d85
// MVID: EA9F7D71-4A8D-4739-A320-5F01FC76E972
// Assembly location: C:\Users\Administrateur\Downloads\Virusshare-00000-msil\Trojan.Win32.Patched.mf-01164dae267b1f13c988de64e7fce38753b97528a3dc3fe730e191fc953c65ba.exe

using Microsoft.Win32;
using System;
using System.Runtime.CompilerServices;

internal static class u5
{
  private const string a = "Software\\Xobni\\Settings";
  private static string b;

  [SpecialName]
  public static string a()
  {
    if (u5.b != null)
      return u5.b;
    try
    {
      u5.b = u5.a("XobniDomain");
      if (u5.b != null)
        return u5.b;
    }
    catch (Exception ex)
    {
    }
    u5.b = "xobni.com";
    return u5.b;
  }

  [SpecialName]
  public static void b(string A_0) => u5.b = A_0;

  private static string a(string A_0)
  {
    using (RegistryKey registryKey1 = Registry.LocalMachine.OpenSubKey("Software\\Xobni\\Settings", false))
    {
      if (registryKey1 != null)
        return registryKey1.GetValue(A_0, (object) null) as string;
      using (RegistryKey registryKey2 = Registry.LocalMachine.OpenSubKey("Software\\Xobni\\Settings", false))
        return registryKey2 == null ? (string) null : registryKey2.GetValue(A_0, (object) null) as string;
    }
  }
}