00647910 55 PUSH EBP 00647911 8BEC MOV EBP,ESP 00647913 83EC 08 SUB ESP,8 00647916 894D FC MOV DWORD PTR SS:[EBP-4],ECX 00647919 8B45 FC MOV EAX,DWORD PTR SS:[EBP-4] 0064791C 0FB688 93000000 MOVZX ECX,BYTE PTR DS:[EAX+93] 00647923 81F9 FF000000 CMP ECX,0FF //////////////////cmp ecx,255 00647929 7C 17 JL SHORT crossfir.00647942//////////here nop or JG 0064792B 8B55 FC MOV EDX,DWORD PTR SS:[EBP-4] 0064792E 8B82 88000000 MOV EAX,DWORD PTR DS:[EDX+88] 00647934 83E0 42 AND EAX,42/////////////////////66 00647937 75 09 JNZ SHORT crossfir.00647942 00647939 C745 F8 00000000 MOV DWORD PTR SS:[EBP-8],0 00647940 EB 07 JMP SHORT crossfir.00647949 00647942 C745 F8 01000000 MOV DWORD PTR SS:[EBP-8],1 00647949 8A45 F8 MOV AL,BYTE PTR SS:[EBP-8] 0064794C 8BE5 MOV ESP,EBP 0064794E 5D POP EBP 0064794F C3 RETN
0069F580 55 PUSH EBP 0069F581 8BEC MOV EBP,ESP 0069F583 6A 00 PUSH 0 //push 1 value 0069F585 68 D0FC6B00 PUSH crossfir.006BFCD0 ; ASCII "ModelDebug_DrawBoxes" 0069F58A B9 74CE7000 MOV ECX,crossfir.0070CE74 //follow this to a jmp patch that will draw boxes also 0069F58F E8 2CE8ECFF CALL crossfir.0056DDC0 0069F594 5D POP EBP 0069F595 C3 RETN