Forza Horizon 4

Upload your cheat tables here (No requests)
Trash420
What is cheating?
What is cheating?
Posts: 1
Joined: Mon Jun 24, 2019 10:05 pm
Reputation: 0

Re: Forza Horizon 4

Post by Trash420 » Mon Jun 24, 2019 10:07 pm

osaj wrote:
Sat Feb 16, 2019 12:17 pm
In latest Forza Horizon 4 version work without tables, only change value when you earn money through 'wheelspin' for example you earn cr 20,000 change the value for more cr.., and sorry for my bad english :ph34r:
thanks mate worked great now i have 999.999.999 cr

powerzhea
Expert Cheater
Expert Cheater
Posts: 76
Joined: Mon Sep 10, 2018 9:44 pm
Reputation: 4

Re: Forza Horizon 4

Post by powerzhea » Wed Aug 07, 2019 6:27 am

Is there a table that allows to edit the skill spoints for car mastery?

UltraShadow
What is cheating?
What is cheating?
Posts: 1
Joined: Thu Aug 08, 2019 1:06 pm
Reputation: 0

Re: Forza Horizon 4

Post by UltraShadow » Thu Aug 08, 2019 1:14 pm

Hi, can somebody please make a script that can change the in game currency to a 700,000 cr. I want to do this as my friend ruined the whole game for me by giving me unlimited money. I do not know cheat engine code. Thank you.

powerzhea
Expert Cheater
Expert Cheater
Posts: 76
Joined: Mon Sep 10, 2018 9:44 pm
Reputation: 4

Re: Forza Horizon 4

Post by powerzhea » Thu Aug 08, 2019 8:23 pm

After talking to the support, i found out these things will get you banned:

1. Change the money/credits
2. Change any scores
3 Change the number of wheelspins

What does your ban basically mean and how to get unbanned:

Your windows, and HDD will be connected to your ban. Not sure if installing windows on same HDD will get you banned or not.
However using a new HDD and new fresh install of windows and new xbox account obviously should do the trick.
Important to remember though, is not to log into the banned account, because that will just screw you over right there on the spot.

Things that are safe to use:

Speed boost, freeze enemies, spin enemies, and bunny hop. Bunny hop is extremely useful to really get car mastery really fast.

powerzhea
Expert Cheater
Expert Cheater
Posts: 76
Joined: Mon Sep 10, 2018 9:44 pm
Reputation: 4

Re: Forza Horizon 4

Post by powerzhea » Thu Aug 08, 2019 8:30 pm

computeur wrote:
Tue Jun 11, 2019 8:42 pm
Lot of peoples write bullshit on this thread.
Forza 4 (and microsoft) don't use HWID detection
I have 2 Forza Horizon 4 accounts (1 banned 1 oher is safe)
I can switch betwin this both like I want

But I will not use cheat engine in Forza 4 it's too risky
So you switch between windows versions and microsoft accounts and also forza 4 accounts on the same harddrive?

chrisreddot3
Expert Cheater
Expert Cheater
Posts: 104
Joined: Sun Mar 24, 2019 1:38 am
Reputation: 8

Re: Forza Horizon 4

Post by chrisreddot3 » Sun Aug 11, 2019 1:00 pm

The game just got craked,the fun begins now!hahaha
Can't find money in cheat engine,any help?

User avatar
computeur
Novice Cheater
Novice Cheater
Posts: 18
Joined: Tue Dec 05, 2017 10:27 am
Reputation: 0

Re: Forza Horizon 4

Post by computeur » Mon Aug 12, 2019 12:46 am

chrisreddot3 wrote:
Sun Aug 11, 2019 1:00 pm
The game just got craked,the fun begins now!hahaha
Can't find money in cheat engine,any help?
With CE maybe but if you find the good stuff your game's money jump to the ceiling
Image

minomx
Noobzor
Noobzor
Posts: 7
Joined: Mon Aug 12, 2019 9:22 am
Reputation: 0

Re: Forza Horizon 4

Post by minomx » Mon Aug 12, 2019 9:24 am

may i ask how did u find the CR value?

minomx
Noobzor
Noobzor
Posts: 7
Joined: Mon Aug 12, 2019 9:22 am
Reputation: 0

Re: Forza Horizon 4

Post by minomx » Mon Aug 12, 2019 9:25 am

computeur wrote:
Mon Aug 12, 2019 12:46 am
chrisreddot3 wrote:
Sun Aug 11, 2019 1:00 pm
The game just got craked,the fun begins now!hahaha
Can't find money in cheat engine,any help?
With CE maybe but if you find the good stuff your game's money jump to the ceiling
Image
may i ask how did u find the CR value?

pigeon
Expert Cheater
Expert Cheater
Posts: 114
Joined: Sat Mar 04, 2017 11:37 am
Reputation: 58

Re: Forza Horizon 4

Post by pigeon » Mon Aug 12, 2019 11:44 am

Time of day script:

Code: Select all

globalalloc(cheatTimeOn,4) // global variable for createThread on/off
cheatTimeOn:
dd 0

[ENABLE]

aobscanmodule(manual_time,Microsoft.SunriseBaseGame_1.332.904.2_x64__8wekyb3d8bbwe.exe,F2 0F 11 43 08 48 83) // should be unique
alloc(newmem,$1000,manual_time)

label(code)
label(return)

label(time)
registersymbol(time)
label(taketime)
registersymbol(taketime)

newmem:
  cmp [taketime],0
  jne short @f
  movsd [time],xmm0 // grab current in-game time once at script start
  mov [taketime],1
    @@:
    movsd xmm0,[time]
    movsd [rbx+08],xmm0
    jmp return

code:
  movsd [rbx+08],xmm0
  jmp return

taketime:
dd 0
time:
dq (double)0.0

manual_time:
  jmp newmem
return:
registersymbol(manual_time)

{$lua}

local changeTime = 10.0
local changeTimeFast = 100.0

createThread(function(timer2)
  sleep(500) -- delay for giving script time to write for "cheatTimeOn" proper value
  while readFloat("cheatTimeOn") == 0 do -- while "cheatTimeOn" value equal "0" this cheat work
    sleep(10) -- like timer interval

-- Hotkeys for time rewind
    local addTime = isKeyPressed(VK_CONTROL) and isKeyPressed(VK_NUMPAD8)
    local subTime = isKeyPressed(VK_CONTROL) and isKeyPressed(VK_NUMPAD5)
    local addTimeFast = isKeyPressed(VK_CONTROL) and isKeyPressed(VK_MENU) and isKeyPressed(VK_NUMPAD8)
    local subTimeFast = isKeyPressed(VK_CONTROL) and isKeyPressed(VK_MENU) and isKeyPressed(VK_NUMPAD5)

-- Time rewind
    if addTime then -- rewind forward
      writeDouble("time", readDouble("time") + changeTime)
    elseif readDouble("time") > 93600.0001 then
      writeDouble("time", readDouble("time") - 93600.0)
    end

    if subTime then -- rewind backward
      writeDouble("time", readDouble("time") - changeTime)
    elseif readDouble("time") < -0.0001 then
      writeDouble("time", readDouble("time") + 93600.0)
    end

    if addTimeFast then -- rewind fast forward
      writeDouble("time", readDouble("time") + changeTimeFast)
    elseif readDouble("time") > 93600.0001 then
      writeDouble("time", readDouble("time") - 93600.0)
    end

    if subTimeFast then -- rewind fast backward
      writeDouble("time", readDouble("time") - changeTimeFast)
    elseif readDouble("time") < -0.0001 then
      writeDouble("time", readDouble("time") + 93600.0)
    end

  end
end)

{$asm}

[DISABLE]

manual_time:
  db F2 0F 11 43 08
unregistersymbol(time)
unregistersymbol(manual_time)
dealloc(newmem)

cheatTimeOn:
dd 1

{
// ORIGINAL CODE - INJECTION POINT: "Microsoft.SunriseBaseGame_1.332.904.2_x64__8wekyb3d8bbwe.exe"+3B2B32D

"Microsoft.SunriseBaseGame_1.332.904.2_x64__8wekyb3d8bbwe.exe"+3B2B304: 66 0F 2F C8              -  comisd xmm1,xmm0
"Microsoft.SunriseBaseGame_1.332.904.2_x64__8wekyb3d8bbwe.exe"+3B2B308: 72 18                    -  jb Microsoft.SunriseBaseGame_1.332.904.2_x64__8wekyb3d8bbwe.exe+3B2B322
"Microsoft.SunriseBaseGame_1.332.904.2_x64__8wekyb3d8bbwe.exe"+3B2B30A: 48 8B 83 20 01 00 00     -  mov rax,[rbx+00000120]
"Microsoft.SunriseBaseGame_1.332.904.2_x64__8wekyb3d8bbwe.exe"+3B2B311: 8B 48 14                 -  mov ecx,[rax+14]
"Microsoft.SunriseBaseGame_1.332.904.2_x64__8wekyb3d8bbwe.exe"+3B2B314: FF C9                    -  dec ecx
"Microsoft.SunriseBaseGame_1.332.904.2_x64__8wekyb3d8bbwe.exe"+3B2B316: 66 0F 6E C1              -  movd xmm0,ecx
"Microsoft.SunriseBaseGame_1.332.904.2_x64__8wekyb3d8bbwe.exe"+3B2B31A: F3 0F E6 C0              -  cvtdq2pd xmm0,xmm0,xmm0
"Microsoft.SunriseBaseGame_1.332.904.2_x64__8wekyb3d8bbwe.exe"+3B2B31E: F2 0F 5D C1              -  minsd xmm0,xmm1
"Microsoft.SunriseBaseGame_1.332.904.2_x64__8wekyb3d8bbwe.exe"+3B2B322: 0F 28 74 24 30           -  movaps xmm6,[rsp+30]
"Microsoft.SunriseBaseGame_1.332.904.2_x64__8wekyb3d8bbwe.exe"+3B2B327: 44 0F 28 44 24 20        -  movaps xmm8,[rsp+20]
// ---------- INJECTING HERE ----------
"Microsoft.SunriseBaseGame_1.332.904.2_x64__8wekyb3d8bbwe.exe"+3B2B32D: F2 0F 11 43 08           -  movsd [rbx+08],xmm0
// ---------- DONE INJECTING  ----------
"Microsoft.SunriseBaseGame_1.332.904.2_x64__8wekyb3d8bbwe.exe"+3B2B332: 48 83 C4 40              -  add rsp,40
"Microsoft.SunriseBaseGame_1.332.904.2_x64__8wekyb3d8bbwe.exe"+3B2B336: 5B                       -  pop rbx
"Microsoft.SunriseBaseGame_1.332.904.2_x64__8wekyb3d8bbwe.exe"+3B2B337: C3                       -  ret
"Microsoft.SunriseBaseGame_1.332.904.2_x64__8wekyb3d8bbwe.exe"+3B2B338: CC                       -  int 3
"Microsoft.SunriseBaseGame_1.332.904.2_x64__8wekyb3d8bbwe.exe"+3B2B339: EA 48 8B 4B 08 48 85     -  jmp 8548:084B8B48
"Microsoft.SunriseBaseGame_1.332.904.2_x64__8wekyb3d8bbwe.exe"+3B2B340: 40 53                    -  push rbx
"Microsoft.SunriseBaseGame_1.332.904.2_x64__8wekyb3d8bbwe.exe"+3B2B342: 48 81 EC 80 00 00 00     -  sub rsp,00000080
"Microsoft.SunriseBaseGame_1.332.904.2_x64__8wekyb3d8bbwe.exe"+3B2B349: 80 B9 10 01 00 00 00     -  cmp byte ptr [rcx+00000110],00
"Microsoft.SunriseBaseGame_1.332.904.2_x64__8wekyb3d8bbwe.exe"+3B2B350: 48 8B D9                 -  mov rbx,rcx
"Microsoft.SunriseBaseGame_1.332.904.2_x64__8wekyb3d8bbwe.exe"+3B2B353: 0F 29 74 24 60           -  movaps [rsp+60],xmm6
}
And if someone will want to "convert" it to the proper game version and AOB doesn't the same at all:
- Time is Double value, starting from 0.0 to 93600.0 (1am/01:00 - 1560.0; 11pm/23:00 - 92040.0)
- I do not remember if there is a few same values, but if so, freezing value even with 1ms interval doesn't work, so for checking of proper address its required NOP instructions.

*Script working only in free roam

minomx
Noobzor
Noobzor
Posts: 7
Joined: Mon Aug 12, 2019 9:22 am
Reputation: 0

Re: Forza Horizon 4

Post by minomx » Mon Aug 12, 2019 12:13 pm

pigeon wrote:
Mon Aug 12, 2019 11:44 am
Time of day script:

Code: Select all

globalalloc(cheatTimeOn,4) // global variable for createThread on/off
cheatTimeOn:
dd 0

[ENABLE]

aobscanmodule(manual_time,Microsoft.SunriseBaseGame_1.332.904.2_x64__8wekyb3d8bbwe.exe,F2 0F 11 43 08 48 83) // should be unique
alloc(newmem,$1000,manual_time)

label(code)
label(return)

label(time)
registersymbol(time)
label(taketime)
registersymbol(taketime)

newmem:
  cmp [taketime],0
  jne short @f
  movsd [time],xmm0 // grab current in-game time once at script start
  mov [taketime],1
    @@:
    movsd xmm0,[time]
    movsd [rbx+08],xmm0
    jmp return

code:
  movsd [rbx+08],xmm0
  jmp return

taketime:
dd 0
time:
dq (double)0.0

manual_time:
  jmp newmem
return:
registersymbol(manual_time)

{$lua}

local changeTime = 10.0
local changeTimeFast = 100.0

createThread(function(timer2)
  sleep(500) -- delay for giving script time to write for "cheatTimeOn" proper value
  while readFloat("cheatTimeOn") == 0 do -- while "cheatTimeOn" value equal "0" this cheat work
    sleep(10) -- like timer interval

-- Hotkeys for time rewind
    local addTime = isKeyPressed(VK_CONTROL) and isKeyPressed(VK_NUMPAD8)
    local subTime = isKeyPressed(VK_CONTROL) and isKeyPressed(VK_NUMPAD5)
    local addTimeFast = isKeyPressed(VK_CONTROL) and isKeyPressed(VK_MENU) and isKeyPressed(VK_NUMPAD8)
    local subTimeFast = isKeyPressed(VK_CONTROL) and isKeyPressed(VK_MENU) and isKeyPressed(VK_NUMPAD5)

-- Time rewind
    if addTime then -- rewind forward
      writeDouble("time", readDouble("time") + changeTime)
    elseif readDouble("time") > 93600.0001 then
      writeDouble("time", readDouble("time") - 93600.0)
    end

    if subTime then -- rewind backward
      writeDouble("time", readDouble("time") - changeTime)
    elseif readDouble("time") < -0.0001 then
      writeDouble("time", readDouble("time") + 93600.0)
    end

    if addTimeFast then -- rewind fast forward
      writeDouble("time", readDouble("time") + changeTimeFast)
    elseif readDouble("time") > 93600.0001 then
      writeDouble("time", readDouble("time") - 93600.0)
    end

    if subTimeFast then -- rewind fast backward
      writeDouble("time", readDouble("time") - changeTimeFast)
    elseif readDouble("time") < -0.0001 then
      writeDouble("time", readDouble("time") + 93600.0)
    end

  end
end)

{$asm}

[DISABLE]

manual_time:
  db F2 0F 11 43 08
unregistersymbol(time)
unregistersymbol(manual_time)
dealloc(newmem)

cheatTimeOn:
dd 1

{
// ORIGINAL CODE - INJECTION POINT: "Microsoft.SunriseBaseGame_1.332.904.2_x64__8wekyb3d8bbwe.exe"+3B2B32D

"Microsoft.SunriseBaseGame_1.332.904.2_x64__8wekyb3d8bbwe.exe"+3B2B304: 66 0F 2F C8              -  comisd xmm1,xmm0
"Microsoft.SunriseBaseGame_1.332.904.2_x64__8wekyb3d8bbwe.exe"+3B2B308: 72 18                    -  jb Microsoft.SunriseBaseGame_1.332.904.2_x64__8wekyb3d8bbwe.exe+3B2B322
"Microsoft.SunriseBaseGame_1.332.904.2_x64__8wekyb3d8bbwe.exe"+3B2B30A: 48 8B 83 20 01 00 00     -  mov rax,[rbx+00000120]
"Microsoft.SunriseBaseGame_1.332.904.2_x64__8wekyb3d8bbwe.exe"+3B2B311: 8B 48 14                 -  mov ecx,[rax+14]
"Microsoft.SunriseBaseGame_1.332.904.2_x64__8wekyb3d8bbwe.exe"+3B2B314: FF C9                    -  dec ecx
"Microsoft.SunriseBaseGame_1.332.904.2_x64__8wekyb3d8bbwe.exe"+3B2B316: 66 0F 6E C1              -  movd xmm0,ecx
"Microsoft.SunriseBaseGame_1.332.904.2_x64__8wekyb3d8bbwe.exe"+3B2B31A: F3 0F E6 C0              -  cvtdq2pd xmm0,xmm0,xmm0
"Microsoft.SunriseBaseGame_1.332.904.2_x64__8wekyb3d8bbwe.exe"+3B2B31E: F2 0F 5D C1              -  minsd xmm0,xmm1
"Microsoft.SunriseBaseGame_1.332.904.2_x64__8wekyb3d8bbwe.exe"+3B2B322: 0F 28 74 24 30           -  movaps xmm6,[rsp+30]
"Microsoft.SunriseBaseGame_1.332.904.2_x64__8wekyb3d8bbwe.exe"+3B2B327: 44 0F 28 44 24 20        -  movaps xmm8,[rsp+20]
// ---------- INJECTING HERE ----------
"Microsoft.SunriseBaseGame_1.332.904.2_x64__8wekyb3d8bbwe.exe"+3B2B32D: F2 0F 11 43 08           -  movsd [rbx+08],xmm0
// ---------- DONE INJECTING  ----------
"Microsoft.SunriseBaseGame_1.332.904.2_x64__8wekyb3d8bbwe.exe"+3B2B332: 48 83 C4 40              -  add rsp,40
"Microsoft.SunriseBaseGame_1.332.904.2_x64__8wekyb3d8bbwe.exe"+3B2B336: 5B                       -  pop rbx
"Microsoft.SunriseBaseGame_1.332.904.2_x64__8wekyb3d8bbwe.exe"+3B2B337: C3                       -  ret
"Microsoft.SunriseBaseGame_1.332.904.2_x64__8wekyb3d8bbwe.exe"+3B2B338: CC                       -  int 3
"Microsoft.SunriseBaseGame_1.332.904.2_x64__8wekyb3d8bbwe.exe"+3B2B339: EA 48 8B 4B 08 48 85     -  jmp 8548:084B8B48
"Microsoft.SunriseBaseGame_1.332.904.2_x64__8wekyb3d8bbwe.exe"+3B2B340: 40 53                    -  push rbx
"Microsoft.SunriseBaseGame_1.332.904.2_x64__8wekyb3d8bbwe.exe"+3B2B342: 48 81 EC 80 00 00 00     -  sub rsp,00000080
"Microsoft.SunriseBaseGame_1.332.904.2_x64__8wekyb3d8bbwe.exe"+3B2B349: 80 B9 10 01 00 00 00     -  cmp byte ptr [rcx+00000110],00
"Microsoft.SunriseBaseGame_1.332.904.2_x64__8wekyb3d8bbwe.exe"+3B2B350: 48 8B D9                 -  mov rbx,rcx
"Microsoft.SunriseBaseGame_1.332.904.2_x64__8wekyb3d8bbwe.exe"+3B2B353: 0F 29 74 24 60           -  movaps [rsp+60],xmm6
}
And if someone will want to "convert" it to the proper game version and AOB doesn't the same at all:
- Time is Double value, starting from 0.0 to 93600.0 (1am/01:00 - 1560.0; 11pm/23:00 - 92040.0)
- I do not remember if there is a few same values, but if so, freezing value even with 1ms interval doesn't work, so for checking of proper address its required NOP instructions.

*Script working only in free roam
can you please make a script for the cracked version (the same one in the one) for unlimited CR (money) :wub: :wub:

pigeon
Expert Cheater
Expert Cheater
Posts: 114
Joined: Sat Mar 04, 2017 11:37 am
Reputation: 58

Re: Forza Horizon 4

Post by pigeon » Mon Aug 12, 2019 1:26 pm

For CR there is enough just to change AOB in STN script from the first page from
48 8D 4C 24 50 38 07 75 31 48 8D 57 16 E8 6A to
48 8D 4C 24 50 38 07 75 31 48 8D 57 16 E8 E9

If script doesn't activating, than the whole string should be:
aobscanmodule(monies,Microsoft.SunriseBaseGame_1.332.904.2_x64__8wekyb3d8bbwe.exe,48 8D 4C 24 50 38 07 75 31 48 8D 57 16 E8 E9)

minomx
Noobzor
Noobzor
Posts: 7
Joined: Mon Aug 12, 2019 9:22 am
Reputation: 0

Re: Forza Horizon 4

Post by minomx » Mon Aug 12, 2019 2:01 pm

pigeon wrote:
Mon Aug 12, 2019 1:26 pm
For CR there is enough just to change AOB in STN script from the first page from
48 8D 4C 24 50 38 07 75 31 48 8D 57 16 E8 6A to
48 8D 4C 24 50 38 07 75 31 48 8D 57 16 E8 E9

If script doesn't activating, than the whole string should be:
aobscanmodule(monies,Microsoft.SunriseBaseGame_1.332.904.2_x64__8wekyb3d8bbwe.exe,48 8D 4C 24 50 38 07 75 31 48 8D 57 16 E8 E9)
thank you very much, it worked but i get just 9.059.564 CR
how can i fix it?
Image

pigeon
Expert Cheater
Expert Cheater
Posts: 114
Joined: Sat Mar 04, 2017 11:37 am
Reputation: 58

Re: Forza Horizon 4

Post by pigeon » Tue Aug 13, 2019 12:04 am

This is because of encrypted value, so you can experiment with values to find something big enough. As someone already posted here in the beginning, try to change value in STN's script from:
(float)5.570718539E-11 to:
#9876543210

zJIoDeI
Cheater
Cheater
Posts: 49
Joined: Thu Nov 01, 2018 5:10 pm
Reputation: 71

Re: Forza Horizon 4

Post by zJIoDeI » Tue Aug 13, 2019 8:31 am

I have a money script that only changes money without affecting other parameters. This is a CINEAGLE script, I'll ask him if it can be laid out. The only thing there is without decrypting the values, so it will need to be selected.

Post Reply

Who is online

Users browsing this forum: Google [Bot], Google Adsense [Bot], GR0s, killerwood, Lunaraia, Macaddress, magemam, MasterPanda, r1ndr4