I use autohotkey and wrote some simple commands into it. Basically it just grinds the auction house like you normally would manually, except it is more accurate and faster.
I have set key delay times of 75ms and that seems like the quickest this game can register the keys.
So I open the game, be at horizon festival auction house, highlight the search car box, start my macro
Macro: enter search, up one, set max bid price(don't wanna pay $20milion), go up few to manufacturer, right arrow to Ford, down one, right arrow to Capri FE, down few, hit enter to search.
Then I set up an if/else for if it finds no result, go back to auction house and search again, if it does find result, it recognize it with a white pixel(part of autohotkey commands) and then it'll go into the buying command. It'll hit the Y-Down-Down-A-A
Then it will back out of the result either success or fail bid and restart the loop again for same car.
I set the loop for 5000 times and then it'll go for a exit game macro( I don't wanna leave the PC on long with the gfx card at full load)
In the past 2 days I let it run while I'm afk and has gotten 2 Ford Capri FE, 2 Austin taxi HF, multiple crown Vic, multpile Porsche and McLaren PO. I'm not a legendary painter so I don't plan on selling these for high prices. Maybe just help people out who doesn't have time to grind.
I have had it fail a few times due to my key press timing, one time I even accidently hit report on the seller when I won the car.
Downside is the macro is specific to my game/windowed mode at certain resolution. Because the pixelsearch command needs an exact xy coordinate. But that can be edited by anyone if you just run the other commands to look for pixels and it's color code.
I'll test it out a few more days before I share it. But again, it needs to be individualized.
Could you make a template?
How to use this cheat table?
Install Cheat Engine
Double-click the .CT file in order to open it.
Click the PC icon in Cheat Engine in order to select the game process.
Keep the list.
Activate the trainer options by checking boxes or setting values from 0 to 1
People need your help here you have the latest update script when it is activated:
auto finish first place + a lot of money and lvl
explain to me on my fingers how to get the script to do only my auto finish in the first place! O_0
p.s who knows how to do jumps in scripts explain to me an example of thisSpoiler
People need your help here you have the latest update script when it is activated:
auto finish first place + a lot of money and lvl
explain to me on my fingers how to get the script to do only my auto finish in the first place! O_0
p.s who knows how to do jumps in scripts explain to me an example of thisSpoiler
I can't seem to get your table to work. Are you sure its working?
What exactly does not work for you? The table works 100% if the other day, of course, there was no update.
I attached an example of the jumping script to explain to me how it works.
just change the item related to credits or do you need to do another step to increase them? Because I had already tried to modify them but without success
I use autohotkey and wrote some simple commands into it. Basically it just grinds the auction house like you normally would manually, except it is more accurate and faster.
I have set key delay times of 75ms and that seems like the quickest this game can register the keys.
So I open the game, be at horizon festival auction house, highlight the search car box, start my macro
...
What's the risk of ban for this?
And where do you find documentation to write up a script?
I've been doing this for about 3 months now. no ban risk. The documentation is within autohotkey itself. it has a big help file that lets you search for specific functions. All i'm doing is setting a keyboard macro, up up up up up up, right right right etc, down down down down down, enter, Y Down A A. =p
I use autohotkey and wrote some simple commands into it. Basically it just grinds the auction house like you normally would manually, except it is more accurate and faster.
I have set key delay times of 75ms and that seems like the quickest this game can register the keys.
So I open the game, be at horizon festival auction house, highlight the search car box, start my macro
Macro: enter search, up one, set max bid price(don't wanna pay $20milion), go up few to manufacturer, right arrow to Ford, down one, right arrow to Capri FE, down few, hit enter to search.
Then I set up an if/else for if it finds no result, go back to auction house and search again, if it does find result, it recognize it with a white pixel(part of autohotkey commands) and then it'll go into the buying command. It'll hit the Y-Down-Down-A-A
Then it will back out of the result either success or fail bid and restart the loop again for same car.
I set the loop for 5000 times and then it'll go for a exit game macro( I don't wanna leave the PC on long with the gfx card at full load)
In the past 2 days I let it run while I'm afk and has gotten 2 Ford Capri FE, 2 Austin taxi HF, multiple crown Vic, multpile Porsche and McLaren PO. I'm not a legendary painter so I don't plan on selling these for high prices. Maybe just help people out who doesn't have time to grind.
I have had it fail a few times due to my key press timing, one time I even accidently hit report on the seller when I won the car.
Downside is the macro is specific to my game/windowed mode at certain resolution. Because the pixelsearch command needs an exact xy coordinate. But that can be edited by anyone if you just run the other commands to look for pixels and it's color code.
I'll test it out a few more days before I share it. But again, it needs to be individualized.
you can't bypass, if you got ban take a 3 month xbox game pass card for 3€ and play forza on another account ( ps : you need to reset your pc, because forza hwid ban)
The money value is encrypted like in forza motorsports 7. I didn't want to bother wasting any time figuring it out adding a credit editor to make it easy to be used online . Besides took an extra ordinary amount of time to figure out how to debug it (thanks matze500 of megadev and dark byte for the tips)
Play around with the encrypted value and you can get the amount you want with little tinkering.
If anybody could make a wheelspin trainer or find the wheelspin encrypted value that would be awesome. I tried my best but was only able to edit the code for the display value so visually I had 40,000 wheelspins, but really only had the 80 that I started with. I can't seem to find the real wheelspin value no matter how many different ways I run my scans.
lol.... everyone having problems? the 15 Mill is normal when u Deactivate the Trainer... you wont Gain any Credits at all until you save n Exit the game n relaunch, unless you want the trainer active 24/7 then you do what STN and everyone said, goto Driving, hit Pause, enable script, exit pause, and re enter pause.... profit!...
also there is no way to edit it so it only changes credits? last few times i used the table it modified stuff like.. the billboards, podiums and such to be that 15 Mill after deactivating the script and i even found all values of that number and tried to revert them all to lower numbers like 1-10.. still did nothing..
So I've compared two scripts from STN 4 and 4.1 and found that there's only 2 differences so I've used free "H&D Hex Editor" to find in process ForzaHorizon4.exe string that is unchanged in both scripts, than found 6 different numbers after that string.
Backup save and tests. Found 2 versions, One is for CR and second for ~1200 Level and about 1700 spins
Files are different, at my computer was difference, but best is that CR comes
U can try edit this script, two lines to change:
1) aobscanmodule(creditss,ForzaHorizon4.exe,48 8D 4C 24 50 38 07 75 31 48 8D 57 16 E8 A1) // should be unique
and
2) "ForzaHorizon4.exe"+9C2927: E8 A1 EC 22 07 - call ForzaHorizon4.exe+7BF1554
I've checked that A1 gives in my pc max lvl and 71 gives CR.
Other not tested values what was on hex editor was: 81 D1
In free time I try to check.
Today @my comp level doesn't do anything, lotery.
Found that 81 do the level and after few sec after disabling script and play again there is "you have new reward" lot of times.
Now I run script lvl and next CR, buy some cars reward pop ups .
I'm newbie in scripts and don't understand what is inside. Final effect is best reward
Script gives different amount of cash when activated.
Usage is as all scripts earlier.... U run game, go driving, run script, go driving, in pause menu U can see even -300M, disable script, return to game and go driving. Again pause menu and It's 6,7M CR, first ver gives more. After next update it will be useless.
Big bonus is or maybe was that this 6,7M didn't loses
ALWAYS - Remember to save Your saves and do it in offline.
Save patch: %LOCALAPPDATA%\Packages\Microsoft.SunriseBaseGame_8wekyb3d8bbwe\SystemAppData\wgs\
mov [rdi], #17396679699 This line in the script determines the remaining level and money after deactivation and the purchase of something. But variations are random
i cant buy anything that costs more than 6,527,986 CR, do you know how i can fix this?
edit: after a game restart my money now goes down... the cheat needs to change my money to at least 10 mil to let me buy everything, idk who else is getting the same money values i am but i sure am not getting 21 mil
Game is protected to cheat, so be happy to have 6 mil...
So some how I got glitched in my game and my millions stayed and now part of the server. I used many of the tables here, including MarkH's poland CT and the v2 after that. But the one that made my money stick was the one he put into an exe v2. I dont know if people are able to replicate it but now i have 600+million in my account after restart/cheat off/online.
I'll try to state what I did,
Pre-cheat was like 7.2million.
Used the latest table because MarkH said we get like 25Million. I activated it, tried and fail to buy the edinburgh house(15million). So i deactivated it and saw I now had 6.5million like everyone did(lowered my credits!). I restarted the game and it was stuck at 6.5m, so i used the .exe v2 instead and F1'ed to activate. Then I did some random vehicle purchases and upgrades, then i played a few races, like the one where you run the highway and the AI takes off-ramp while you don't (it's the custom one) for 3 laps(15mins in my One:1). Then I realize i didn't disable the cheat yet so i disabled it, saw 650million from its 999million. Rebooted the game to see if it stuck and it did. So now I'm 600million rich thanks to you guys and some random glitch.
I'm not saying this is reproducible but just wanna say that it stuck for me.
The script does not work correctly if you have already changed the level and money and the changed data were saved on your account before use. if you hacked and after that your level and money remained at the same level as before the hacking, there is no such bug
Hi All,
Beware of use any tables, but sometimes You will have luck.
Newest working today table is in attachment, Didn't know how much CR stays when disabling, because on every account it will be different number.
You can try edit line: mov [rdi], #49900979999 - that numbers decide how much will stay after disabling script.
Always do copy of old save before cheat.
Save location: c:\Users\#user\AppData\Local\Packages\Microsoft.SunriseBaseGame_#############\SystemAppData\
Always do it offline, then save Your game, run again, buy something cheap, close, run online.
In latest Forza Horizon 4 version work without tables, only change value when you earn money through 'wheelspin' for example you earn cr 20,000 change the value for more cr.., and sorry for my bad english
It's usually people with decent English who say "sorry for my bad english" at the end of their posts
Anyway, while there are no public tables you can hack Forza by following the steps mentioned in the message above or watching the video guide (turn on the subtitles!):
Spoiler
[video][/video]
From your reports, I can basically conclude that the game has utilized sort of obfuscation on important values in the memory.
And it's quite probable that it has used techniques like "Byte Fragmentation" (which results in the Bytes of the sample data stored in a scattered, potentially mixed way) alike. As the plain value doesn't seem to be used for the representations in the memory, and blind alterations on-target almost always result in changes of other things.
Explain of the Situation
Software protection, a losing battle from the very beginning.
No matter how hard it's attempted, all that could be done only delay the inevitable... at most.
With a cheating cooperator, all means of cryptography have been rendered completely useless.
Not quite on-topic but the situation resembles extreme similarity: How to conceal your intentions?.. When you've been identified and put under heavy surveillance.
Summary of the Game
Better than none... not serious at all. Just a game, after all.
Actually not that much can be done for something that actually works. (unless you're counting malwares...)
Bit Flipping [Link] the bits of the sample data's binary representation. In an attempt to thwart simple data analysis.
Can be considered as 2 types:
Simple (flipping every bit), the simplest and fastest way. (the most common also...) Confusing data analysis based on delta (amount of the value changed).
Interpreting as [Link] type, the effect of increase (+delta) and decrease (-delta) are inversed, while the [Link] of the delta remains the same (so analysis based on the magnitude is uninfluenced). Interpreting as [Link] type... the relationships are basically screwed up. (float type use an entirely different schema for representing values... a schema that just happened to amplify this sort of obfuscation)
Adaptive (flipping based on certain pattern), extra computing power is required to enforce the pattern (thus slower).
Well essentially anything you do with a computer can be considered as this... and not necessarily the purpose of obfuscation. (precisely, any event in a specific system)
Simple examples:
[Link] based obfuscation. (how?.. in brief: (a XOR b) XOR a = b; (a XOR b) XOR b = a)
Byte fragmentation. (mentioned above)
Mathematical interpolation. (e.g. multiplication by 8 in some Flash games)
Encryption and Obfuscation
The 2 concepts may appear very similar at first glance... and indeed they're very similar, except 1 key difference: "Key", a concept exclusive to encryption.
For obfuscation, if the algorithm is known... well then there's no more obfuscation. (or maybe it can be considered as a special case of encryption... where the algorithm is the "Key"?)
While for encryption, in many cases the algorithm is even public... I think you have the key now. (but if you had the "Key" involved as part of the algorithm... we ain't talking about the same algorithm)
as for the Wheelspins, Im certain they are Server sided in FH4... i had no luck so far.. as its part of Horizon Life Section of the menu... hopefully Im wrong..
You're absolutely wrong
The game is fully functional offline. (obviously except those explicit online functions...)
Note:
If the game failed to launch (crashs inexplicably on start-up) without valid Internet connection, it's actually due to the license check (which might demand Internet connection).
and yes the anticheat isa real Pain in the ass! lol.. finished a bottle of Vodka before i cracked 1 layer for the wheelspins.. 10+ to go.. >;O
Speaking of pointer finding by tracing... Do take extra caution with the "Count" of the instructions.
Before blindly following the instructions, 1 thing the majority had generally ignored is: "The registers shown here are AFTER the instruction has been executed". (it's not accurate enough though... precisely: "The registers shown here are AFTER the 1st occurrence of the instruction has been executed" *)
It should have explained why at times you ain't getting anything through "Find out what accesses this address"... Do see the gap in between don't you? And there's so much potential...
From deliberately leading you to a completely invalid path, or a seemingly valid one (and actually invalid for sure), or worse... (something with even more malicious intentions)
And do be clear with instructions like: mov rcx,[rcx]
[Link]
Horizon 4 has gone a bit too far to evade debuggers... by rejecting hooking completely (self-crash upon any hooking attempt). Which in turn resulted quite some exasperation (and refunds likely...) due to constant inexplicable crashs (hooking attempt by Bandicam, OBS, RivaTuner, etc).
Forget to mention, we have kernelmode debugger.
* This is true for "VEH Debugger" and "windows debugger", while I haven't tested for "kernelmode debugger".
Lastly I admit this might be a little off-topic but anyway... it does apply to this game.
Last edited by gdgsdg123 on Sat Jun 01, 2019 1:10 pm, edited 1 time in total.
you can't bypass, if you got ban take a 3 month xbox game pass card for 3€ and play forza on another account ( ps : you need to reset your pc, because forza hwid ban)
. Besides took an extra ordinary amount of time to figure out how to debug it (thanks matze500 of megadev and dark byte for the tips) 
