Draw 100 Magic (not thoroughly tested, probably buggy):
[ENABLE]
FF8_EN.exe+86A89:
mov al,64
mov [ecx],al
nop
nop
nop
nop
pop edi
pop esi
nop
nop
[DISABLE]
FF8_EN.exe+86A89:
mov al,[ecx]
cmp al,64
jnl FF8_EN.exe+86A75
inc al
pop edi
pop esi
mov [ecx],al
I will look more into the drawing 100 magic tomorrow night, if I can, so that will have to do for now.
"Notes" for breaking 2 byte damage limit:
[ENABLE]
ALLOC(newmem,1024)
newmem:
mov edx,[FF8_EN.exe+1927AE4]
mov [eax+04],cx
mov ecx,[FF8_EN.exe+1927AE8]
mov [eax+06],edx
jmp returnhere
FF8_EN.exe+8EFC4:
jmp newmem
nop
nop
db 90 90 90 90 // mov [eax+04],cx
db 90 90 90 90 90 90 // mov ecx,[FF8_EN.exe+1927AE8]
db 90 90 90 90 // mov [eax+06],dx
returnhere:
FF8_EN.exe+9113D:
mov esi,0001869F // F423F
nop
db 90 90 // jmp FF8_EN.exe+9114F
db 90 90 // xor ecx,ecx
db 90 90 // test esi,esi
db 90 90 90 // setl cl
db 90 // dec ecx
db 90 90 // and esi,ecx
FF8_EN.exe+93F24:
mov ecx,[ebp+06]
nop
FF8_EN.exe+106920:
mov esi,[edi+06]
nop
[DISABLE]
FF8_EN.exe+106920:
mov si,[edi+06]
FF8_EN.exe+93F24:
mov cx,[ebp+06]
FF8_EN.exe+9113D:
cmp esi,ecx
jle FF8_EN.exe+91145
mov esi,ecx
jmp FF8_EN.exe+9114F
xor ecx,ecx
test esi,esi
setl cl
dec ecx
and esi,ecx
FF8_EN.exe+8EFC4:
mov dx,[FF8_EN.exe+1927AE4]
mov [eax+04],cx
mov ecx,[FF8_EN.exe+1927AE8]
mov [eax+06],dx
DEALLOC(newmem)