Cheat Engine

[abinning]

I want to break an Undo button in a program. (Synchro 6)

When something changes it adds to the undo list, I want to noop the function that adds to the list. Basically I want to remove the Undo function from the program.

I tried searching for unknown initial value, then scanning for changed values after doing something that would change the undo list. After doing that several times I did nothing and scanned for unchanged values.

Does anyone have any ideas to help me break this function?

[Dark Byte]

This is tricky as you need to find out what undo accesses, then debug there and trace back to the caller, and nop that call.

One method that can make this easier for you is ultimap. Problem is that only a few select systems are capably of running dbvm which it requires, and the specific debugctl version

If you're one of those:
Start it (never click stop, ever)
Click undo, and say that the code got executed
now do other stuff and say that the code did not get executed
Repeat a few times, then filter out all the jumps that did not original from a CALL
And you'll be left with function addresses that are only called when undo is clicked
E.g, buttonclick handler, undo function, screen update, etc...