maybe running enforcer wouldnt be that bad idea after all, with the -v option we could roughly see where the write hits are coming from. then we could inspect suspicious segment of code closer, even if with deadwoods method inserting debug statements by hand. or maybe someone familiar with uae debugger could help single step it. it woul probably be the content of one function, wouldnt it?