LOG3 v1.2 [modified LOG2] ========================= why : since LOG2 plugs included in TRW2000 v1.22/ v1.23 package was logs execution path only [in hex, not str], and i felt it's useless, so i coded LOG3 that logs the unassembly from execution path, and make it worth by filters the EIP in range : 400000...1000000, which most applications resides. when : 08-15-2002 v1.2 added auto cmt for some opcode 08-01-2002 v1.1 little bug fixed, no logs limit anymore :) 07-29-2002 v1.0 first release how : LOG3 LOG3 [filename] LOG3 OFF case : select and load a file [if u want it :p], then type: :log3 c:\whatever.txt LOG3 begins to log now... :g if(eax==007007) :log3 off Logs were written successfully :) note : some opcode commented are: - push reg32 ie: push eax - push rel32 ie: push 12345678 - mov reg32,reg32 ie: mov esi,eax unreadable ref would be cmt-ed with reg32 content msgs : in these 2 weeks, i'm busy with trw internal could anyone help me out? full source code included. if you use this code, at least mention the credits somewhere ;) any helps and feedbacks very welcomed... :) todo : adds more opcode that mostly refer to strings if asked, directs cmd so no need to type g if... if possible, doing 'on the fly' FLIRT =) mail : daner@go.cc dion @2002