Strings Bypass

375B2D75  |. 68 E44F7437    PUSH CShell.37744FE4                     ;  UNICODE "Xipher"
375B2D7A  |. 8D4C24 18      LEA ECX,DWORD PTR SS:[ESP+18]
375B2D7E  |. E8 0DEEB5FF    CALL CShell.37111B90
375B2D83  |. 8D4424 14      LEA EAX,DWORD PTR SS:[ESP+14]
375B2D87  |. 50             PUSH EAX
375B2D88  |. 8BCE           MOV ECX,ESI
375B2D8A  |. E8 21EEFEFF    CALL CShell.375A1BB0

375B2D8F  |. 68 CC4F7437    PUSH CShell.37744FCC                     ;  UNICODE "TokolocoSK"
375B2D94  |. 8D4C24 18      LEA ECX,DWORD PTR SS:[ESP+18]
375B2D98  |. E8 F3EDB5FF    CALL CShell.37111B90
375B2D9D  |. 8D4C24 14      LEA ECX,DWORD PTR SS:[ESP+14]
375B2DA1  |. 51             PUSH ECX
375B2DA2  |. 8BCE           MOV ECX,ESI
375B2DA4  |. E8 07EEFEFF    CALL CShell.375A1BB0

=>

375A1BB0  /$ 51             PUSH ECX
375A1BB1  |. 56             PUSH ESI
375A1BB2  |. 8BF1           MOV ESI,ECX
375A1BB4  |. 8B4E 04        MOV ECX,DWORD PTR DS:[ESI+4]
375A1BB7  |. 57             PUSH EDI
375A1BB8  |. 85C9           TEST ECX,ECX
375A1BBA  |. 75 04          JNZ SHORT CShell.375A1BC0

375CB7AC  |. 68 04607437    PUSH CShell.37746004                     ;  UNICODE "merda"
375CB7B1  |. 8D4C24 38      LEA ECX,DWORD PTR SS:[ESP+38]
375CB7B5  |. E8 D663B4FF    CALL CShell.37111B90
375CB7BA  |. 68 1C457437    PUSH CShell.3774451C                     ;  UNICODE "**"
375CB7BF  |. 8D4C24 54      LEA ECX,DWORD PTR SS:[ESP+54]
375CB7C3  |. E8 C863B4FF    CALL CShell.37111B90
375CB7C8  |. 8D4424 34      LEA EAX,DWORD PTR SS:[ESP+34]
375CB7CC  |. 50             PUSH EAX
375CB7CD  |. 8BCE           MOV ECX,ESI
375CB7CF  |. E8 4C64FDFF    CALL CShell.375A1C20

=>


375A1C20  /$ 51             PUSH ECX
375A1C21  |. 53             PUSH EBX
375A1C22  |. 55             PUSH EBP
375A1C23  |. 56             PUSH ESI
375A1C24  |. 57             PUSH EDI
375A1C25  |. 8BF9           MOV EDI,ECX
375A1C27  |. 8B6F 04        MOV EBP,DWORD PTR DS:[EDI+4]
375A1C2A  |. 85ED           TEST EBP,EBP
375A1C2C  |. 75 04          JNZ SHORT CShell.375A1C32

VOID StringBypass(VOID)
{
	DWORD dwAdress = 0x375A1BB0; // Strings do Menu
        DWORD pwAdress = 0x375A1C20; // Strings do Chat

	__asm
	{
                MOV ECX, pwAdress;
		MOV EAX, dwAdress;
		MOV DWORD PTR DS:[EAX], 90h
                MOV DWORD PTR DS:[ECX], 90h
	}
}