Fair warning

[Solaire]

Just to point out that if you still play GunZ, you should be aware of the following:

[7:45:11 PM] Sahar042 D-Guard: btw
[7:45:14 PM] Sahar042 D-Guard: i have rat
[7:45:16 PM] Sahar042 D-Guard: clean one
[7:45:17 PM] Sahar042 D-Guard: + source
[7:45:20 PM] Sahar042 D-Guard: with 0 viruses
[7:45:26 PM] Sahar042 D-Guard: the problem is
[7:45:37 PM] Sahar042 D-Guard: when i am hooking it to my runnable
[7:45:47 PM] Sahar042 D-Guard: it's freezing the game
[7:45:49 PM] Sahar042 D-Guard: from start
[7:45:54 PM] Sahar042 D-Guard: because in the rat
[7:45:57 PM] Sahar042 D-Guard: have socket connection
[7:45:58 PM] Sahar042 D-Guard: loop
[7:46:06 PM] Sahar042 D-Guard: i tried to create the connection as thread
[7:46:16 PM | Edited 7:46:21 PM] Sahar042 D-Guard: but i still have the problem
[7:46:31 PM] Peter -: you do know that I'll copy/paste this straight to RZ because RAT's are disgusting in the very same way as the people who implement it
[7:47:29 PM] Sahar042 D-Guard: I didn't say i am using it
[7:47:40 PM] Sahar042 D-Guard: the rat have only
[7:47:44 PM] Sahar042 D-Guard: file manager
[7:47:45 PM] Sahar042 D-Guard: that's all
[7:47:49 PM] Sahar042 D-Guard: then i can get the hacks
[7:47:53 PM] Sahar042 D-Guard: from people that hacking my server
[7:48:06 PM] Sahar042 D-Guard: i am not going to use it for any negative things
[7:48:07 PM] Peter -: you were planning on implementing, that's good enough
[7:48:12 PM] Peter -: seriously
[7:48:19 PM] Peter -: RAT's are so fucking awful
[7:48:23 PM] Sahar042 D-Guard: file manager*
[7:48:37 PM] Peter -: you have no right to access files that reside on someone else's compiter
[7:48:41 PM] Sahar042 D-Guard: rat is something worst then
[7:48:42 PM] Sahar042 D-Guard: file manage
[7:48:47 PM] Sahar042 D-Guard: r
[7:48:48 PM] Peter -: it's all the same
[7:48:52 PM] Sahar042 D-Guard: zzz...
[7:49:00 PM] Sahar042 D-Guard: you right
[7:49:01 PM] Sahar042 D-Guard: but
[7:49:09 PM] Sahar042 D-Guard: how you can explain that
[7:49:14 PM] Sahar042 D-Guard: x-traf shit
[7:49:19 PM] Sahar042 D-Guard: allowed to picture screen of
[7:49:21 PM] Sahar042 D-Guard: people
[7:49:23 PM] Sahar042 D-Guard: that hacking
[7:49:34 PM] Sahar042 D-Guard: it's the same.
[7:49:37 PM] Peter -: it's also because of people like you and vitor who implement RAT's in their game that gunz has gone to hell
[7:49:53 PM] Peter -: a screenshot of a running game is completely different than being able to access any file
[7:50:05 PM] Sahar042 D-Guard: i am not sure
[7:50:07 PM] Peter -: including files that contain passwords, personal information and what not
[7:50:12 PM] Sahar042 D-Guard: if your web cam is on
[7:50:16 PM] Sahar042 D-Guard: on your pc
[7:50:25 PM] Sahar042 D-Guard: and then they are getting pic of your face
[7:50:33 PM] Peter -: they don't
[7:50:40 PM] Sahar042 D-Guard: How you sure about it
[7:50:41 PM] Peter -: all they do is F12 -> upload to FTP
[7:50:51 PM] Peter -: because I used to bypass x-trap
[7:50:56 PM] Peter -: I know every single byte of it
[7:51:11 PM] Sahar042 D-Guard: I am takling about
[7:51:14 PM] Sahar042 D-Guard: Skype web cam
[7:51:16 PM] Sahar042 D-Guard: or something else
[7:51:22 PM] Peter -: no
[7:51:27 PM] Peter -: they don't
[7:51:36 PM | Edited 7:51:37 PM] Sahar042 D-Guard: But F12 also can get your
[7:51:38 PM] Sahar042 D-Guard: skype
[7:51:46 PM] Sahar042 D-Guard: screen
[7:51:51 PM] Sahar042 D-Guard: so if you have call with someone that
[7:51:54 PM] Sahar042 D-Guard: enabled
[7:51:55 PM] Sahar042 D-Guard: cam
[7:52:04 PM] Peter -: it dumps directx
[7:52:07 PM] Peter -: graphics
[7:52:09 PM] Sahar042 D-Guard: really?
[7:52:11 PM] Sahar042 D-Guard: Ugh
[7:52:16 PM] Peter -: doh
[7:52:23 PM] Sahar042 D-Guard: Ok, sorry
[7:52:27 PM] Sahar042 D-Guard: I will not do that
[7:52:37 PM] Sahar042 D-Guard: You right about it
[7:53:17 PM] Sahar042 D-Guard: Btw,
[7:53:22 PM] Sahar042 D-Guard: You told me there is servers
[7:53:23 PM] Sahar042 D-Guard: that using it
[7:53:26 PM | Edited 7:53:27 PM] Sahar042 D-Guard: can you tell me them
[7:53:31 PM] Sahar042 D-Guard: because i don't want
[7:53:32 PM] Sahar042 D-Guard: login
[7:53:38 PM] Sahar042 D-Guard: to servers that have rat
[7:53:40 PM] Sahar042 D-Guard: lol
[7:53:43 PM] Peter -: UGG
[7:53:51 PM] Sahar042 D-Guard: ugg have
[7:53:54 PM] Sahar042 D-Guard: process list
[7:53:56 PM] Sahar042 D-Guard: view
[7:53:59 PM] Sahar042 D-Guard: i saw in memory
[7:54:04 PM] Peter -: nah
[7:54:06 PM] Peter -: they have a packet
[7:54:10 PM] Peter -: that calls ShellExecute
[7:54:19 PM] Peter -: http://msdn.microsoft.com/en-us/libr...=vs.85%29.aspx

[MentaL]

[Tannous]

Hahaha, that part about ugg & vitor, explains why UGG got hacked recently O.o ... I hate RATs aswell.
LOL, Sahar042 used to treat some people bad, and when people face him with this truth, he thinks of hacking them, this explains why he wanted to merge the RAT with the runnable, he tried once to scam me with RAT too XD...
anyway I don't mean any offense to Sahar042, but he should really stop thinking like this :/
it's GOOD to be GOOD
Thanks for posting

[Hakurah]

Doesn't surprise me. We knew it would get to this at some point. At least I'm staying clean.

[sahar042]

[7:52:23 PM] Sahar042 D-Guard: Ok, sorry
[7:52:27 PM] Sahar042 D-Guard: I will not do that
[7:52:37 PM] Sahar042 D-Guard: You right about it
I already say i am not going to use that.
I will keep be clean with my server .

[Lib]

[7:52:23 PM] Sahar042 D-Guard: Ok, sorry
[7:52:27 PM] Sahar042 D-Guard: I will not do that
[7:52:37 PM] Sahar042 D-Guard: You right about it
I already say i am not going to use that.

Yeah you should, respect the players that enjoy gunz now aday

[sahar042]

Yeah you should, respect the players that enjoy gunz now aday

I didn't want to do it on normal players, I wanted to do it on people that using hacks to keep gunz community on my server. So with file manager I could get their hack tools to patch it, That's all the story.
It is more to think about the players and not harm them, For example there is servers that using it for more things instead of using it on players that using hacks. - That's wasn't my point.


Anyway, I already talked with Peter about it, And I decided that i don't need RAT or anything like this on my server.
*You also can see it on the log Peter post here, Thank you for this Peter.
*My promise

[Tannous]

Sahar042, it's good you decided this, cuz controlling people's coms is a bad thing, eveb if u wanted to do this for patching, it's NOT your right to give them a RATed file..
I'm happy that you've decided not to do this eventually, for people who still enjoy this game.
All the best to you friend

[SecretsOThePast]

I'm sorry but if you even REMOTELY think of adding a RAT to a GunZ server you are hereby expelled from the list of people I will ever trust.
Anything that runs while a game is not running is MALWARE.

Anything that can access your sensitive information (IE; out of the GunZ process space) without your knowledge is MALWARE.

I don't care what you say on these forums to clear your name; I doubt anyone will ever trust you again or play on your servers.
You broke their trust once by admitting that you are purposely maliciously spreading malware, what is stopping you from wanting to do it again?

Saying "Sorry my server is clean" isn't enough. You deserve public humiliation, punishment, and you should be banned from these forums for spreading malware through the advertisements section. That's exactly what this thread is for. This is a serious crime and your first reaction is to go to someone like Wizkid and tell him 'look at all the innocent people i am spying on, but i can't get it to work!'. What a fucking joke.

Fuck off, go get a real job (sorry, scamming/ratting people doesn't count as a legitimate job, neither does a GunZ server - look at Vitor who is being sued for tax evasion) and come back here when your dick isn't 2 centimeters long.

Absolutely disgusting. Do not post here again.

- - - Updated - - -

I didn't want to do it on normal players, I wanted to do it on people that using hacks to keep gunz community on my server. So with file manager I could get their hack tools to patch it, That's all the story.
It is more to think about the players and not harm them, For example there is servers that using it for more things instead of using it on players that using hacks. - That's wasn't my point.


Anyway, I already talked with Peter about it, And I decided that i don't need RAT or anything like this on my server.
*You also can see it on the log Peter post here, Thank you for this Peter.
*My promise

Calling bullshit on this; you want to use them for a botnet so you can make more money - by doing so, your ultimate goal of living with your parents by living a life of crime is achieved. No one RATs for anti-cheat purposes.

It is an international offense to use a tool like this maliciously. I'm warning you for your safety, because it won't be me that screws you over - it will be one of your partners that you sell bots to who are INTERPOL agents.

Instead of a file manager, why not use a function from the WinAPI (IE; LoadLibraryA or ntdll equivilant), hook it, and post the contents of the file to a write-only server via a popular protocol (ftp, sftp, client -> matchserver -> one of these formats, etc) which will do what you need with none of the laziness? Oh, wait, it's because that's not your goal, your goal is to steal personal informations for more money like all the other children running botnets thinking that they can get ahead that way.

But keep on thinking that anyways.

[sahar042]

I'm sorry but if you even REMOTELY think of adding a RAT to a GunZ server you are hereby expelled from the list of people I will ever trust.
Anything that runs while a game is not running is MALWARE.

Anything that can access your sensitive information (IE; out of the GunZ process space) without your knowledge is MALWARE.

I don't care what you say on these forums to clear your name; I doubt anyone will ever trust you again or play on your servers.
You broke their trust once by admitting that you are purposely maliciously spreading malware, what is stopping you from wanting to do it again?

Saying "Sorry my server is clean" isn't enough. You deserve public humiliation, punishment, and you should be banned from these forums for spreading malware through the advertisements section. That's exactly what this thread is for. This is a serious crime and your first reaction is to go to someone like Wizkid and tell him 'look at all the innocent people i am spying on, but i can't get it to work!'. What a fucking joke.

Fuck off, go get a real job (sorry, scamming/ratting people doesn't count as a legitimate job, neither does a GunZ server - look at Vitor who is being sued for tax evasion) and come back here when your dick isn't 2 centimeters long.

Absolutely disgusting. Do not post here again.

- - - Updated - - -



Calling bullshit on this; you want to use them for a botnet so you can make more money - by doing so, your ultimate goal of living with your parents by living a life of crime is achieved. No one RATs for anti-cheat purposes.

It is an international offense to use a tool like this maliciously. I'm warning you for your safety, because it won't be me that screws you over - it will be one of your partners that you sell bots to who are INTERPOL agents.

Instead of a file manager, why not use a function from the WinAPI (IE; LoadLibraryA or ntdll equivilant), hook it, and post the contents of the file to a write-only server via a popular protocol (ftp, sftp, client -> matchserver -> one of these formats, etc) which will do what you need with none of the laziness? Oh, wait, it's because that's not your goal, your goal is to steal personal informations for more money like all the other children running botnets thinking that they can get ahead that way.

But keep on thinking that anyways.

Never, And I even can't believe that you think I planned to use it for all those things you wrote their ^, It was only for Anti cheat, Because the rat i wanted to use is only with file manager.
*And i have real job if you interested to know.



I also never used it, I just planned to use it, So don't make something that you even don't know to worst, Because I never planned to use something like that to harm people on my server, With your response your are trying to make this into to something worse than it was, Peter helped me to find the correct way.
Anyway, Peter I am sure that you know I planned to use it only as anti cheat.

[GentleTouch]

Since when does Peter have a conscience?

Reference: /admin_reload_hash

[Tannous]

Since when does Peter have a conscience?

Reference: /admin_reload_hash

LOL Peter always been like this now and forever :o .. you can't say anything about that !
and Yeah, by posting this right now, I admire him even much more, I think everybody agrees

[Solaire]

Since when does Peter have a conscience?

Reference: /admin_reload_hash

Since I grew up a couple years ago. Not sure where you're coming from but I've been like this for years now.

[sahar042]

I'm sorry but if you even REMOTELY think of adding a RAT to a GunZ server you are hereby expelled from the list of people I will ever trust.
Anything that runs while a game is not running is MALWARE.

Anything that can access your sensitive information (IE; out of the GunZ process space) without your knowledge is MALWARE.

I don't care what you say on these forums to clear your name; I doubt anyone will ever trust you again or play on your servers.
You broke their trust once by admitting that you are purposely maliciously spreading malware, what is stopping you from wanting to do it again?

Saying "Sorry my server is clean" isn't enough. You deserve public humiliation, punishment, and you should be banned from these forums for spreading malware through the advertisements section. That's exactly what this thread is for. This is a serious crime and your first reaction is to go to someone like Wizkid and tell him 'look at all the innocent people i am spying on, but i can't get it to work!'. What a fucking joke.

Fuck off, go get a real job (sorry, scamming/ratting people doesn't count as a legitimate job, neither does a GunZ server - look at Vitor who is being sued for tax evasion) and come back here when your dick isn't 2 centimeters long.

Absolutely disgusting. Do not post here again.

- - - Updated - - -



Calling bullshit on this; you want to use them for a botnet so you can make more money - by doing so, your ultimate goal of living with your parents by living a life of crime is achieved. No one RATs for anti-cheat purposes.

It is an international offense to use a tool like this maliciously. I'm warning you for your safety, because it won't be me that screws you over - it will be one of your partners that you sell bots to who are INTERPOL agents.

Instead of a file manager, why not use a function from the WinAPI (IE; LoadLibraryA or ntdll equivilant), hook it, and post the contents of the file to a write-only server via a popular protocol (ftp, sftp, client -> matchserver -> one of these formats, etc) which will do what you need with none of the laziness? Oh, wait, it's because that's not your goal, your goal is to steal personal informations for more money like all the other children running botnets thinking that they can get ahead that way.

But keep on thinking that anyways.

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
For Secret, First of all I have to say that your comment is too excessive, I never though to use anything of what you wrote their, The plan was only to use for anti cheat, Peter also helped me with some patches, And I though if i will use File manager as anti cheat it will be better for me to get hacks that people made on my server and patch them.
I know that RAT is not legit, And even disgusting, Peter told me where your comment comes from, But I still think you excessive with your comment about me, All the story is to use file manager as protect on my server.
My personality is to help, And keep mind on players that playing on my server I also happy with the 20 onlines players I have, Money? I never will do something like that to anyone, I have my own work to get money.
Anyway, I have to say that your comment absolutely hurt my personality.
That's all what I have to say, Thanks.

[Tannous]

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
For Secret, First of all I have to say that your comment is too excessive, I never though to use anything of what you wrote their, The plan was only to use for anti cheat, Peter also helped me with some patches, And I though if i will use File manager as anti cheat it will be better for me to get hacks that people made on my server and patch them.
I know that RAT is not legit, And even disgusting, Peter told me where your comment comes from, But I still think you excessive with your comment about me, All the story is to use file manager as protect on my server.
Anyway, I have to say that your comment absolutely hurt my personality.
That's all what I have to say, Thanks.

I think what Secrects meant, is that even if you want to protect your server you should'nt use things unlegit like these, cuz u don't have the right of controlling others' PCs

[sahar042]

I think what Secrects meant, is that even if you want to protect your server you should'nt use things unlegit like these, cuz u don't have the right of controlling others' PCs

No, Read it again... It's about something else.
Money / Botnet etc.

[Solaire]

Had some spare time so I figured I should look into the latest UGG release (their V10 client).

Long story short, they're malicious as fuck, having the following commands (filtered them on sight, haven't traced others so there might be more than just this):

/procdll <nome>
/procprocess <nome>
/procwin <nome>
/prochide <nome>

Here's a list of their functionality:

/procdll -> Lists the DLL's that are currently injected into game memory
/procprocess -> Lists the processes that are currently running
/procwin -> Launches any process as admin
/prochide -> Hides any process from task manager

ASM:

Commands:

00437205  |.  68 77D97500   PUSH OFFSET 0075D977                     ; /Arg7 = UGGunz.75D977
0043720A  |.  68 A80D7600   PUSH OFFSET 00760DA8                     ; |Arg6 = ASCII "/procdll <nome>"
0043720F  |.  6A 01         PUSH 1                                   ; |Arg5 = 1
00437211  |.  68 80000000   PUSH 80                                  ; |Arg4 = 80
00437216  |.  68 D0854300   PUSH 004385D0                            ; |Arg3 = UGGunz.4385D0, Entry point
0043721B  |.  68 B80D7600   PUSH OFFSET 00760DB8                     ; |Arg2 = ASCII "procdll"
00437220  |.  6A 00         PUSH 0                                   ; |Arg1 = 0
00437222  |.  B2 01         MOV DL,1                                 ; |
00437224  |.  8BCE          MOV ECX,ESI                              ; |
00437226  |.  E8 E54D0000   CALL 0043C010                            ; \UGGunz.0043C010
0043722B  |.  68 77D97500   PUSH OFFSET 0075D977                     ; /Arg7 = UGGunz.75D977
00437230  |.  68 C00D7600   PUSH OFFSET 00760DC0                     ; |Arg6 = ASCII "/procprocess <nome>"
00437235  |.  6A 01         PUSH 1                                   ; |Arg5 = 1
00437237  |.  68 80000000   PUSH 80                                  ; |Arg4 = 80
0043723C  |.  68 C0864300   PUSH 004386C0                            ; |Arg3 = UGGunz.4386C0, Entry point
00437241  |.  68 D40D7600   PUSH OFFSET 00760DD4                     ; |Arg2 = ASCII "procprocess"
00437246  |.  6A 00         PUSH 0                                   ; |Arg1 = 0
00437248  |.  B2 01         MOV DL,1                                 ; |
0043724A  |.  8BCE          MOV ECX,ESI                              ; |
0043724C  |.  E8 BF4D0000   CALL 0043C010                            ; \UGGunz.0043C010
00437251  |.  68 77D97500   PUSH OFFSET 0075D977                     ; /Arg7 = UGGunz.75D977
00437256  |.  68 E00D7600   PUSH OFFSET 00760DE0                     ; |Arg6 = ASCII "/procwin <nome>"
0043725B  |.  6A 01         PUSH 1                                   ; |Arg5 = 1
0043725D  |.  68 80000000   PUSH 80                                  ; |Arg4 = 80
00437262  |.  68 B0874300   PUSH 004387B0                            ; |Arg3 = UGGunz.4387B0, Entry point
00437267  |.  68 F00D7600   PUSH OFFSET 00760DF0                     ; |Arg2 = ASCII "procwin"
0043726C  |.  6A 00         PUSH 0                                   ; |Arg1 = 0
0043726E  |.  B2 01         MOV DL,1                                 ; |
00437270  |.  8BCE          MOV ECX,ESI                              ; |
00437272  |.  E8 994D0000   CALL 0043C010                            ; \UGGunz.0043C010
00437277  |.  68 77D97500   PUSH OFFSET 0075D977                     ; /Arg7 = UGGunz.75D977
0043727C  |.  68 E00D7600   PUSH OFFSET 00760DE0                     ; |Arg6 = ASCII "/procwin <nome>"
00437281  |.  6A 01         PUSH 1                                   ; |Arg5 = 1
00437283  |.  68 80000000   PUSH 80                                  ; |Arg4 = 80
00437288  |.  68 A0884300   PUSH 004388A0                            ; |Arg3 = UGGunz.4388A0, Entry point
0043728D  |.  68 F80D7600   PUSH OFFSET 00760DF8                     ; |Arg2 = ASCII "prochide"
00437292  |.  6A 00         PUSH 0                                   ; |Arg1 = 0
00437294  |.  B2 01         MOV DL,1                                 ; |
00437296  |.  8BCE          MOV ECX,ESI                              ; |
00437298  |.  E8 734D0000   CALL 0043C010                            ; \UGGunz.0043C010

Trace of /procwin:

004387B0  /.  55            PUSH EBP
004387B1  |.  8BEC          MOV EBP,ESP
004387B3  |.  83E4 F8       AND ESP,FFFFFFF8                         ; QWORD (8.-byte) stack alignment
004387B6  |.  81EC 14020000 SUB ESP,214
004387BC  |.  A1 F01E7B00   MOV EAX,DWORD PTR DS:[7B1EF0]
004387C1  |.  33C4          XOR EAX,ESP
004387C3  |.  898424 100200 MOV DWORD PTR SS:[LOCAL.1],EAX
004387CA  |.  837D 0C 02    CMP DWORD PTR SS:[ARG.2],2
004387CE  |.  56            PUSH ESI
004387CF  |.  8B75 10       MOV ESI,DWORD PTR SS:[ARG.3]
004387D2  |.  7D 1E         JGE SHORT 004387F2
004387D4  |.  8B06          MOV EAX,DWORD PTR DS:[ESI]
004387D6  |.  50            PUSH EAX                                 ; /Arg1
004387D7  |.  E8 84F1FFFF   CALL 00437960                            ; \UGGunz.00437960
004387DC  |.  83C4 04       ADD ESP,4
004387DF  |.  5E            POP ESI
004387E0  |.  8B8C24 100200 MOV ECX,DWORD PTR SS:[LOCAL.1]
004387E7  |.  33CC          XOR ECX,ESP
004387E9  |.  E8 184B2700   CALL 006AD306
004387EE  |.  8BE5          MOV ESP,EBP
004387F0  |.  5D            POP EBP
004387F1  |.  C3            RETN
004387F2  |>  8B4E 04       MOV ECX,DWORD PTR DS:[ESI+4]
004387F5  |.  51            PUSH ECX                                 ; /<%s>
004387F6  |.  8D5424 14     LEA EDX,[LOCAL.130]                      ; |
004387FA  |.  68 D0117600   PUSH OFFSET 007611D0                     ; |Format = "Scanner : %s"
004387FF  |.  52            PUSH EDX                                 ; |Arg1 => OFFSET LOCAL.130
00438800  |.  E8 18562700   CALL 006ADE1D                            ; \UGGunz.006ADE1D
00438805  |.  83C4 0C       ADD ESP,0C
00438808  |.  C74424 08 00F MOV DWORD PTR SS:[LOCAL.132],FF00FF00
00438810  |.  8B4424 08     MOV EAX,DWORD PTR SS:[LOCAL.132]
00438814  |.  50            PUSH EAX
00438815  |.  6A 00         PUSH 0
00438817  |.  8D4C24 18     LEA ECX,[LOCAL.130]
0043881B  |.  6A 01         PUSH 1                                   ; /Format
0043881D  |.  51            PUSH ECX                                 ; |Arg1 => OFFSET LOCAL.130
0043881E  |.  E8 DDCAFFFF   CALL 00435300                            ; \UGGunz.00435300
00438823  |.  8B56 04       MOV EDX,DWORD PTR DS:[ESI+4]
00438826  |.  52            PUSH EDX                                 ; /<%s>
00438827  |.  8D8424 240100 LEA EAX,[ESP+124]                        ; |
0043882E  |.  68 00127600   PUSH OFFSET 00761200                     ; |Format = "@adminproz %s"
00438833  |.  50            PUSH EAX                                 ; |Arg1
00438834  |.  E8 E4552700   CALL 006ADE1D                            ; \UGGunz.006ADE1D
00438839  |.  A1 5C1F1902   MOV EAX,DWORD PTR DS:[2191F5C]
0043883E  |.  83C4 1C       ADD ESP,1C
00438841  |.  85C0          TEST EAX,EAX
00438843  |.  74 0D         JZ SHORT 00438852
00438845  |.  8378 08 00    CMP DWORD PTR DS:[EAX+8],0
00438849  |.  74 07         JE SHORT 00438852
0043884B  |.  A1 381F1902   MOV EAX,DWORD PTR DS:[2191F38]           ; PTR to ASCII "@OV"
00438850  |.  EB 02         JMP SHORT 00438854
00438852  |>  33C0          XOR EAX,EAX
00438854  |>  8B88 A0010000 MOV ECX,DWORD PTR DS:[EAX+1A0]
0043885A  |.  8B90 A4010000 MOV EDX,DWORD PTR DS:[EAX+1A4]
00438860  |.  6A 00         PUSH 0                                   ; /Arg3 = 0
00438862  |.  8D8424 140100 LEA EAX,[ESP+114]                        ; |
00438869  |.  894C24 0C     MOV DWORD PTR SS:[ESP+0C],ECX            ; |
0043886D  |.  50            PUSH EAX                                 ; |Arg2
0043886E  |.  8D4C24 10     LEA ECX,[ESP+10]                         ; |
00438872  |.  51            PUSH ECX                                 ; |Arg1
00438873  |.  895424 18     MOV DWORD PTR SS:[ESP+18],EDX            ; |
00438877  |.  E8 442E0000   CALL 0043B6C0                            ; \UGGunz.0043B6C0
0043887C  |.  8B8C24 200200 MOV ECX,DWORD PTR SS:[ESP+220]
00438883  |.  83C4 0C       ADD ESP,0C
00438886  |.  5E            POP ESI
00438887  |.  33CC          XOR ECX,ESP
00438889  |.  E8 784A2700   CALL 006AD306
0043888E  |.  8BE5          MOV ESP,EBP
00438890  |.  5D            POP EBP
00438891  \.  C3            RETN

[GentleTouch]

It's been a while since I've spoken to you. Glad to see you've grown up.

[Solaire]

It's been a while since I've spoken to you. Glad to see you've grown up.

I guess so, your name doesn't ring a bell though. Mind PM-ing me your Skype or Steam of whatever? I'm curious.