HShield Simple Bypass

[MrStealth]

This bypass is writted in C++, but you can write it on others language.
First you need to download/copy the, HShield.h/NPGameLib.h (header)
Then you need to have a detours or custom hook functions.

HackShield Bypass (GF & Private Servers)

 Spoiler

Step 1

typedef int(__stdcall* PFN_AhnHS_Callback)(long lCode, long lParamSize, void* pParam);
typedef int(__stdcall* PFN_CallBack)(const char*, PFN_AhnHS_Callback, int, const char*, unsigned int, unsigned int);
PFN_CallBack AhnHS_Initialize_CallBack;

void MyHook()
{
    DWORD dwAddr = FindPattern(0x401000, 0x334000, (PBYTE)"\x55\x8B\xEC\x81\xEC\xB0\x02\x00\x00", "xxxxxxx??");
    AhnHS_Initialize_CallBack = (PFN_CallBack)(DetourFunction((PBYTE)dwAddr, (PBYTE)AhnHS_Initialize));
}

Step 2, Create custom HS_CallbackProc, or you can copy from 4Story Source Files

int __stdcall HS_CallbackProc(long lCode, long lParamSize, void* pParam)
{
    Log("Hack Found >> %d", lCode);
    return 1;
}

Step3, Hook AhnHS_InitializeA, and call back the original function.

int __stdcall AhnHS_Initialize(const char* szFileNameA, PFN_AhnHS_Callback pfn_Callback, int nGameCode, const char* szLicenseKeyA, unsigned int unOption, unsigned int unSHackSensingRatio)
{
    DWORD dwOption = 0;
    //dwOption = AHNHS_CHKOPT_ALL | AHNHS_CHKOPT_STANDALONE | AHNHS_DISPLAY_HACKSHIELD_TRAYICON | AHNHS_CHKOPT_UPDATED_FILE_CHECK | AHNHS_CHKOPT_SELF_DESTRUCTION | AHNHS_CHKOPT_PROTECT_D3DX;

    return AhnHS_Initialize_CallBack(szFileNameA, HS_CallbackProc, nGameCode, szLicenseKeyA, dwOption, unSHackSensingRatio);
}

GameGuard Bypass. (GF & Private Servers)

 Spoiler

Step 1, Create NPGameMonCallback

typedef BOOL(CALLBACK *NPGMCALLBACK)(DWORD dwMsg, DWORD dwArg);
NPGMCALLBACK GameGuard_CallBack;

int CALLBACK NPGameMonCallback(DWORD dwMsg, DWORD dwArg)
{
    Log("GameGuard Found >> %d", dwMsg);
    return 1;
}

Step 2, Hook (Like in HShield)

void MyHook()
{
    DWORD dwAddr = FindPattern(0x401000, 0x334000, (PBYTE)"\x64\xA1\x00\x00\x00\x00\x6A\xFF\x68\xDE\x99\x75\x00", "xx????xxxxxx?");
    GameGuard_CallBack = (NPGMCALLBACK)(DetourFunction((PBYTE)dwAddr, (PBYTE)NPGameMonCallback));
}

You can use this but, please then add credits to me. "Xertok"

[iJirkusCZ]

Awesome work, gj

[MrStealth]

Sorry, forgot to upload.
If you got error: !

[cheaterPT]

Very good job m8, just one question, and how do we deal with file integrity verification? (TCD changes)

[plemiona3449]

How use it ?

[MrStealth]

Originally Posted by plemiona3449

How use it ?

First download 4Shield.zip, then unzip the zipped file.
Second inject the 4Shield.dll into TClient.exe (Warning, inject the dll in 500ms or before)
And then you can use Cheat Engine, unlimited hours without problem

[plemiona3449]

MrStealth i do it and i open cheat engine inject TClient and i have error

Look

[marco1220]

still working?
cant login after inject

[MrStealth]

Originally Posted by marco1220

still working?
cant login after inject

Hey, i'm using this still for me working fine.
But you should check in 4Story Folder for 4SLogs.txt, when you found it then it was injected well, when no then try it with other injector.

[enzo33]

how i can inject a 4shield.dll?????

[MrStealth]

• Bypass
• Bypass (New)

[archangelum]

Please video tutorial how make it?

[kicsibertazsolt]

Gameguard bypass?? wtf??? congratulations GF will be server hack again? may wonder that we can break the gameguardot too?

[o4storyONEo]

please video tutorial step by step plz

[kicsibertazsolt]

It would be good if it were a video would be rude hack again Gameguard next to theoretically strong defense