Forza Horizon 4

Upload your cheat tables here (No requests)
User avatar
RAMIRODARKTEAM
Cheater
Cheater
Posts: 49
Joined: Sun Nov 25, 2018 4:54 pm
Reputation: 10

Re: Forza Horizon 4

Post by RAMIRODARKTEAM » Sun Jun 23, 2019 7:02 pm

I welcome the people of all. I hope you understand how to decipher and create tables. I post static values in which I will describe where everything is.
P.s everyone who has a higher game crashes when hacking the game, your timing is damaged, I recommend doing backup
These addresses were added from the game 06/23/19
7FF673C6FA6A I do not know what he is doing until I found out
7FF673E041CA drift game points,wheelspin&superspin and much more
7FF673F15F5A opens the goliath track and something else
7FF6740EC34A auto finish, driver level, money
7FF6750BA0CA didn't figure out what's doing
Last edited by RAMIRODARKTEAM on Mon Jun 24, 2019 8:46 am, edited 1 time in total.

gdgsdg123
What is cheating?
What is cheating?
Posts: 4
Joined: Tue May 14, 2019 3:52 am
Reputation: 4

Re: Forza Horizon 4

Post by gdgsdg123 » Mon Jun 24, 2019 8:07 am

RAMIRODARKTEAM wrote:
Sun Jun 23, 2019 6:49 pm
Explain in detail if you hacked the game, how exactly does XOR decrypt it? :?:
This is more of a general guideline rather than some specific tutorial...

About XOR based obfuscation... I think I've stated it clear.

Trash420
What is cheating?
What is cheating?
Posts: 1
Joined: Mon Jun 24, 2019 10:05 pm
Reputation: 0

Re: Forza Horizon 4

Post by Trash420 » Mon Jun 24, 2019 10:07 pm

osaj wrote:
Sat Feb 16, 2019 12:17 pm
In latest Forza Horizon 4 version work without tables, only change value when you earn money through 'wheelspin' for example you earn cr 20,000 change the value for more cr.., and sorry for my bad english :ph34r:
thanks mate worked great now i have 999.999.999 cr

powerzhea
Expert Cheater
Expert Cheater
Posts: 52
Joined: Mon Sep 10, 2018 9:44 pm
Reputation: 4

Re: Forza Horizon 4

Post by powerzhea » Wed Aug 07, 2019 6:27 am

Is there a table that allows to edit the skill spoints for car mastery?

UltraShadow
What is cheating?
What is cheating?
Posts: 1
Joined: Thu Aug 08, 2019 1:06 pm
Reputation: 0

Re: Forza Horizon 4

Post by UltraShadow » Thu Aug 08, 2019 1:14 pm

Hi, can somebody please make a script that can change the in game currency to a 700,000 cr. I want to do this as my friend ruined the whole game for me by giving me unlimited money. I do not know cheat engine code. Thank you.

powerzhea
Expert Cheater
Expert Cheater
Posts: 52
Joined: Mon Sep 10, 2018 9:44 pm
Reputation: 4

Re: Forza Horizon 4

Post by powerzhea » Thu Aug 08, 2019 8:23 pm

After talking to the support, i found out these things will get you banned:

1. Change the money/credits
2. Change any scores
3 Change the number of wheelspins

What does your ban basically mean and how to get unbanned:

Your windows, and HDD will be connected to your ban. Not sure if installing windows on same HDD will get you banned or not.
However using a new HDD and new fresh install of windows and new xbox account obviously should do the trick.
Important to remember though, is not to log into the banned account, because that will just screw you over right there on the spot.

Things that are safe to use:

Speed boost, freeze enemies, spin enemies, and bunny hop. Bunny hop is extremely useful to really get car mastery really fast.

powerzhea
Expert Cheater
Expert Cheater
Posts: 52
Joined: Mon Sep 10, 2018 9:44 pm
Reputation: 4

Re: Forza Horizon 4

Post by powerzhea » Thu Aug 08, 2019 8:30 pm

computeur wrote:
Tue Jun 11, 2019 8:42 pm
Lot of peoples write bullshit on this thread.
Forza 4 (and microsoft) don't use HWID detection
I have 2 Forza Horizon 4 accounts (1 banned 1 oher is safe)
I can switch betwin this both like I want

But I will not use cheat engine in Forza 4 it's too risky
So you switch between windows versions and microsoft accounts and also forza 4 accounts on the same harddrive?

chrisreddot3
Cheater
Cheater
Posts: 39
Joined: Sun Mar 24, 2019 1:38 am
Reputation: 1

Re: Forza Horizon 4

Post by chrisreddot3 » Sun Aug 11, 2019 1:00 pm

The game just got craked,the fun begins now!hahaha
Can't find money in cheat engine,any help?

User avatar
computeur
Novice Cheater
Novice Cheater
Posts: 17
Joined: Tue Dec 05, 2017 10:27 am
Reputation: 0

Re: Forza Horizon 4

Post by computeur » Mon Aug 12, 2019 12:46 am

chrisreddot3 wrote:
Sun Aug 11, 2019 1:00 pm
The game just got craked,the fun begins now!hahaha
Can't find money in cheat engine,any help?
With CE maybe but if you find the good stuff your game's money jump to the ceiling
Image

minomx
Noobzor
Noobzor
Posts: 7
Joined: Mon Aug 12, 2019 9:22 am
Reputation: 0

Re: Forza Horizon 4

Post by minomx » Mon Aug 12, 2019 9:24 am

may i ask how did u find the CR value?

minomx
Noobzor
Noobzor
Posts: 7
Joined: Mon Aug 12, 2019 9:22 am
Reputation: 0

Re: Forza Horizon 4

Post by minomx » Mon Aug 12, 2019 9:25 am

computeur wrote:
Mon Aug 12, 2019 12:46 am
chrisreddot3 wrote:
Sun Aug 11, 2019 1:00 pm
The game just got craked,the fun begins now!hahaha
Can't find money in cheat engine,any help?
With CE maybe but if you find the good stuff your game's money jump to the ceiling
Image
may i ask how did u find the CR value?

pigeon
Expert Cheater
Expert Cheater
Posts: 80
Joined: Sat Mar 04, 2017 11:37 am
Reputation: 35

Re: Forza Horizon 4

Post by pigeon » Mon Aug 12, 2019 11:44 am

Time of day script:

Code: Select all

globalalloc(cheatTimeOn,4) // global variable for createThread on/off
cheatTimeOn:
dd 0

[ENABLE]

aobscanmodule(manual_time,Microsoft.SunriseBaseGame_1.332.904.2_x64__8wekyb3d8bbwe.exe,F2 0F 11 43 08 48 83) // should be unique
alloc(newmem,$1000,manual_time)

label(code)
label(return)

label(time)
registersymbol(time)
label(taketime)
registersymbol(taketime)

newmem:
  cmp [taketime],0
  jne short @f
  movsd [time],xmm0 // grab current in-game time once at script start
  mov [taketime],1
    @@:
    movsd xmm0,[time]
    movsd [rbx+08],xmm0
    jmp return

code:
  movsd [rbx+08],xmm0
  jmp return

taketime:
dd 0
time:
dq (double)0.0

manual_time:
  jmp newmem
return:
registersymbol(manual_time)

{$lua}

local changeTime = 10.0
local changeTimeFast = 100.0

createThread(function(timer2)
  sleep(500) -- delay for giving script time to write for "cheatTimeOn" proper value
  while readFloat("cheatTimeOn") == 0 do -- while "cheatTimeOn" value equal "0" this cheat work
    sleep(10) -- like timer interval

-- Hotkeys for time rewind
    local addTime = isKeyPressed(VK_CONTROL) and isKeyPressed(VK_NUMPAD8)
    local subTime = isKeyPressed(VK_CONTROL) and isKeyPressed(VK_NUMPAD5)
    local addTimeFast = isKeyPressed(VK_CONTROL) and isKeyPressed(VK_MENU) and isKeyPressed(VK_NUMPAD8)
    local subTimeFast = isKeyPressed(VK_CONTROL) and isKeyPressed(VK_MENU) and isKeyPressed(VK_NUMPAD5)

-- Time rewind
    if addTime then -- rewind forward
      writeDouble("time", readDouble("time") + changeTime)
    elseif readDouble("time") > 93600.0001 then
      writeDouble("time", readDouble("time") - 93600.0)
    end

    if subTime then -- rewind backward
      writeDouble("time", readDouble("time") - changeTime)
    elseif readDouble("time") < -0.0001 then
      writeDouble("time", readDouble("time") + 93600.0)
    end

    if addTimeFast then -- rewind fast forward
      writeDouble("time", readDouble("time") + changeTimeFast)
    elseif readDouble("time") > 93600.0001 then
      writeDouble("time", readDouble("time") - 93600.0)
    end

    if subTimeFast then -- rewind fast backward
      writeDouble("time", readDouble("time") - changeTimeFast)
    elseif readDouble("time") < -0.0001 then
      writeDouble("time", readDouble("time") + 93600.0)
    end

  end
end)

{$asm}

[DISABLE]

manual_time:
  db F2 0F 11 43 08
unregistersymbol(time)
unregistersymbol(manual_time)
dealloc(newmem)

cheatTimeOn:
dd 1

{
// ORIGINAL CODE - INJECTION POINT: "Microsoft.SunriseBaseGame_1.332.904.2_x64__8wekyb3d8bbwe.exe"+3B2B32D

"Microsoft.SunriseBaseGame_1.332.904.2_x64__8wekyb3d8bbwe.exe"+3B2B304: 66 0F 2F C8              -  comisd xmm1,xmm0
"Microsoft.SunriseBaseGame_1.332.904.2_x64__8wekyb3d8bbwe.exe"+3B2B308: 72 18                    -  jb Microsoft.SunriseBaseGame_1.332.904.2_x64__8wekyb3d8bbwe.exe+3B2B322
"Microsoft.SunriseBaseGame_1.332.904.2_x64__8wekyb3d8bbwe.exe"+3B2B30A: 48 8B 83 20 01 00 00     -  mov rax,[rbx+00000120]
"Microsoft.SunriseBaseGame_1.332.904.2_x64__8wekyb3d8bbwe.exe"+3B2B311: 8B 48 14                 -  mov ecx,[rax+14]
"Microsoft.SunriseBaseGame_1.332.904.2_x64__8wekyb3d8bbwe.exe"+3B2B314: FF C9                    -  dec ecx
"Microsoft.SunriseBaseGame_1.332.904.2_x64__8wekyb3d8bbwe.exe"+3B2B316: 66 0F 6E C1              -  movd xmm0,ecx
"Microsoft.SunriseBaseGame_1.332.904.2_x64__8wekyb3d8bbwe.exe"+3B2B31A: F3 0F E6 C0              -  cvtdq2pd xmm0,xmm0,xmm0
"Microsoft.SunriseBaseGame_1.332.904.2_x64__8wekyb3d8bbwe.exe"+3B2B31E: F2 0F 5D C1              -  minsd xmm0,xmm1
"Microsoft.SunriseBaseGame_1.332.904.2_x64__8wekyb3d8bbwe.exe"+3B2B322: 0F 28 74 24 30           -  movaps xmm6,[rsp+30]
"Microsoft.SunriseBaseGame_1.332.904.2_x64__8wekyb3d8bbwe.exe"+3B2B327: 44 0F 28 44 24 20        -  movaps xmm8,[rsp+20]
// ---------- INJECTING HERE ----------
"Microsoft.SunriseBaseGame_1.332.904.2_x64__8wekyb3d8bbwe.exe"+3B2B32D: F2 0F 11 43 08           -  movsd [rbx+08],xmm0
// ---------- DONE INJECTING  ----------
"Microsoft.SunriseBaseGame_1.332.904.2_x64__8wekyb3d8bbwe.exe"+3B2B332: 48 83 C4 40              -  add rsp,40
"Microsoft.SunriseBaseGame_1.332.904.2_x64__8wekyb3d8bbwe.exe"+3B2B336: 5B                       -  pop rbx
"Microsoft.SunriseBaseGame_1.332.904.2_x64__8wekyb3d8bbwe.exe"+3B2B337: C3                       -  ret
"Microsoft.SunriseBaseGame_1.332.904.2_x64__8wekyb3d8bbwe.exe"+3B2B338: CC                       -  int 3
"Microsoft.SunriseBaseGame_1.332.904.2_x64__8wekyb3d8bbwe.exe"+3B2B339: EA 48 8B 4B 08 48 85     -  jmp 8548:084B8B48
"Microsoft.SunriseBaseGame_1.332.904.2_x64__8wekyb3d8bbwe.exe"+3B2B340: 40 53                    -  push rbx
"Microsoft.SunriseBaseGame_1.332.904.2_x64__8wekyb3d8bbwe.exe"+3B2B342: 48 81 EC 80 00 00 00     -  sub rsp,00000080
"Microsoft.SunriseBaseGame_1.332.904.2_x64__8wekyb3d8bbwe.exe"+3B2B349: 80 B9 10 01 00 00 00     -  cmp byte ptr [rcx+00000110],00
"Microsoft.SunriseBaseGame_1.332.904.2_x64__8wekyb3d8bbwe.exe"+3B2B350: 48 8B D9                 -  mov rbx,rcx
"Microsoft.SunriseBaseGame_1.332.904.2_x64__8wekyb3d8bbwe.exe"+3B2B353: 0F 29 74 24 60           -  movaps [rsp+60],xmm6
}
And if someone will want to "convert" it to the proper game version and AOB doesn't the same at all:
- Time is Double value, starting from 0.0 to 93600.0 (1am/01:00 - 1560.0; 11pm/23:00 - 92040.0)
- I do not remember if there is a few same values, but if so, freezing value even with 1ms interval doesn't work, so for checking of proper address its required NOP instructions.

*Script working only in free roam

minomx
Noobzor
Noobzor
Posts: 7
Joined: Mon Aug 12, 2019 9:22 am
Reputation: 0

Re: Forza Horizon 4

Post by minomx » Mon Aug 12, 2019 12:13 pm

pigeon wrote:
Mon Aug 12, 2019 11:44 am
Time of day script:

Code: Select all

globalalloc(cheatTimeOn,4) // global variable for createThread on/off
cheatTimeOn:
dd 0

[ENABLE]

aobscanmodule(manual_time,Microsoft.SunriseBaseGame_1.332.904.2_x64__8wekyb3d8bbwe.exe,F2 0F 11 43 08 48 83) // should be unique
alloc(newmem,$1000,manual_time)

label(code)
label(return)

label(time)
registersymbol(time)
label(taketime)
registersymbol(taketime)

newmem:
  cmp [taketime],0
  jne short @f
  movsd [time],xmm0 // grab current in-game time once at script start
  mov [taketime],1
    @@:
    movsd xmm0,[time]
    movsd [rbx+08],xmm0
    jmp return

code:
  movsd [rbx+08],xmm0
  jmp return

taketime:
dd 0
time:
dq (double)0.0

manual_time:
  jmp newmem
return:
registersymbol(manual_time)

{$lua}

local changeTime = 10.0
local changeTimeFast = 100.0

createThread(function(timer2)
  sleep(500) -- delay for giving script time to write for "cheatTimeOn" proper value
  while readFloat("cheatTimeOn") == 0 do -- while "cheatTimeOn" value equal "0" this cheat work
    sleep(10) -- like timer interval

-- Hotkeys for time rewind
    local addTime = isKeyPressed(VK_CONTROL) and isKeyPressed(VK_NUMPAD8)
    local subTime = isKeyPressed(VK_CONTROL) and isKeyPressed(VK_NUMPAD5)
    local addTimeFast = isKeyPressed(VK_CONTROL) and isKeyPressed(VK_MENU) and isKeyPressed(VK_NUMPAD8)
    local subTimeFast = isKeyPressed(VK_CONTROL) and isKeyPressed(VK_MENU) and isKeyPressed(VK_NUMPAD5)

-- Time rewind
    if addTime then -- rewind forward
      writeDouble("time", readDouble("time") + changeTime)
    elseif readDouble("time") > 93600.0001 then
      writeDouble("time", readDouble("time") - 93600.0)
    end

    if subTime then -- rewind backward
      writeDouble("time", readDouble("time") - changeTime)
    elseif readDouble("time") < -0.0001 then
      writeDouble("time", readDouble("time") + 93600.0)
    end

    if addTimeFast then -- rewind fast forward
      writeDouble("time", readDouble("time") + changeTimeFast)
    elseif readDouble("time") > 93600.0001 then
      writeDouble("time", readDouble("time") - 93600.0)
    end

    if subTimeFast then -- rewind fast backward
      writeDouble("time", readDouble("time") - changeTimeFast)
    elseif readDouble("time") < -0.0001 then
      writeDouble("time", readDouble("time") + 93600.0)
    end

  end
end)

{$asm}

[DISABLE]

manual_time:
  db F2 0F 11 43 08
unregistersymbol(time)
unregistersymbol(manual_time)
dealloc(newmem)

cheatTimeOn:
dd 1

{
// ORIGINAL CODE - INJECTION POINT: "Microsoft.SunriseBaseGame_1.332.904.2_x64__8wekyb3d8bbwe.exe"+3B2B32D

"Microsoft.SunriseBaseGame_1.332.904.2_x64__8wekyb3d8bbwe.exe"+3B2B304: 66 0F 2F C8              -  comisd xmm1,xmm0
"Microsoft.SunriseBaseGame_1.332.904.2_x64__8wekyb3d8bbwe.exe"+3B2B308: 72 18                    -  jb Microsoft.SunriseBaseGame_1.332.904.2_x64__8wekyb3d8bbwe.exe+3B2B322
"Microsoft.SunriseBaseGame_1.332.904.2_x64__8wekyb3d8bbwe.exe"+3B2B30A: 48 8B 83 20 01 00 00     -  mov rax,[rbx+00000120]
"Microsoft.SunriseBaseGame_1.332.904.2_x64__8wekyb3d8bbwe.exe"+3B2B311: 8B 48 14                 -  mov ecx,[rax+14]
"Microsoft.SunriseBaseGame_1.332.904.2_x64__8wekyb3d8bbwe.exe"+3B2B314: FF C9                    -  dec ecx
"Microsoft.SunriseBaseGame_1.332.904.2_x64__8wekyb3d8bbwe.exe"+3B2B316: 66 0F 6E C1              -  movd xmm0,ecx
"Microsoft.SunriseBaseGame_1.332.904.2_x64__8wekyb3d8bbwe.exe"+3B2B31A: F3 0F E6 C0              -  cvtdq2pd xmm0,xmm0,xmm0
"Microsoft.SunriseBaseGame_1.332.904.2_x64__8wekyb3d8bbwe.exe"+3B2B31E: F2 0F 5D C1              -  minsd xmm0,xmm1
"Microsoft.SunriseBaseGame_1.332.904.2_x64__8wekyb3d8bbwe.exe"+3B2B322: 0F 28 74 24 30           -  movaps xmm6,[rsp+30]
"Microsoft.SunriseBaseGame_1.332.904.2_x64__8wekyb3d8bbwe.exe"+3B2B327: 44 0F 28 44 24 20        -  movaps xmm8,[rsp+20]
// ---------- INJECTING HERE ----------
"Microsoft.SunriseBaseGame_1.332.904.2_x64__8wekyb3d8bbwe.exe"+3B2B32D: F2 0F 11 43 08           -  movsd [rbx+08],xmm0
// ---------- DONE INJECTING  ----------
"Microsoft.SunriseBaseGame_1.332.904.2_x64__8wekyb3d8bbwe.exe"+3B2B332: 48 83 C4 40              -  add rsp,40
"Microsoft.SunriseBaseGame_1.332.904.2_x64__8wekyb3d8bbwe.exe"+3B2B336: 5B                       -  pop rbx
"Microsoft.SunriseBaseGame_1.332.904.2_x64__8wekyb3d8bbwe.exe"+3B2B337: C3                       -  ret
"Microsoft.SunriseBaseGame_1.332.904.2_x64__8wekyb3d8bbwe.exe"+3B2B338: CC                       -  int 3
"Microsoft.SunriseBaseGame_1.332.904.2_x64__8wekyb3d8bbwe.exe"+3B2B339: EA 48 8B 4B 08 48 85     -  jmp 8548:084B8B48
"Microsoft.SunriseBaseGame_1.332.904.2_x64__8wekyb3d8bbwe.exe"+3B2B340: 40 53                    -  push rbx
"Microsoft.SunriseBaseGame_1.332.904.2_x64__8wekyb3d8bbwe.exe"+3B2B342: 48 81 EC 80 00 00 00     -  sub rsp,00000080
"Microsoft.SunriseBaseGame_1.332.904.2_x64__8wekyb3d8bbwe.exe"+3B2B349: 80 B9 10 01 00 00 00     -  cmp byte ptr [rcx+00000110],00
"Microsoft.SunriseBaseGame_1.332.904.2_x64__8wekyb3d8bbwe.exe"+3B2B350: 48 8B D9                 -  mov rbx,rcx
"Microsoft.SunriseBaseGame_1.332.904.2_x64__8wekyb3d8bbwe.exe"+3B2B353: 0F 29 74 24 60           -  movaps [rsp+60],xmm6
}
And if someone will want to "convert" it to the proper game version and AOB doesn't the same at all:
- Time is Double value, starting from 0.0 to 93600.0 (1am/01:00 - 1560.0; 11pm/23:00 - 92040.0)
- I do not remember if there is a few same values, but if so, freezing value even with 1ms interval doesn't work, so for checking of proper address its required NOP instructions.

*Script working only in free roam
can you please make a script for the cracked version (the same one in the one) for unlimited CR (money) :wub: :wub:

pigeon
Expert Cheater
Expert Cheater
Posts: 80
Joined: Sat Mar 04, 2017 11:37 am
Reputation: 35

Re: Forza Horizon 4

Post by pigeon » Mon Aug 12, 2019 1:26 pm

For CR there is enough just to change AOB in STN script from the first page from
48 8D 4C 24 50 38 07 75 31 48 8D 57 16 E8 6A to
48 8D 4C 24 50 38 07 75 31 48 8D 57 16 E8 E9

If script doesn't activating, than the whole string should be:
aobscanmodule(monies,Microsoft.SunriseBaseGame_1.332.904.2_x64__8wekyb3d8bbwe.exe,48 8D 4C 24 50 38 07 75 31 48 8D 57 16 E8 E9)

minomx
Noobzor
Noobzor
Posts: 7
Joined: Mon Aug 12, 2019 9:22 am
Reputation: 0

Re: Forza Horizon 4

Post by minomx » Mon Aug 12, 2019 2:01 pm

pigeon wrote:
Mon Aug 12, 2019 1:26 pm
For CR there is enough just to change AOB in STN script from the first page from
48 8D 4C 24 50 38 07 75 31 48 8D 57 16 E8 6A to
48 8D 4C 24 50 38 07 75 31 48 8D 57 16 E8 E9

If script doesn't activating, than the whole string should be:
aobscanmodule(monies,Microsoft.SunriseBaseGame_1.332.904.2_x64__8wekyb3d8bbwe.exe,48 8D 4C 24 50 38 07 75 31 48 8D 57 16 E8 E9)
thank you very much, it worked but i get just 9.059.564 CR
how can i fix it?
Image

Post Reply

Who is online

Users browsing this forum: BUB73, DEUS, EyeOfTheMind86, Google Adsense [Bot], NumberXer0, shawnpenn