any SFrame higher than epic 4 (i belive) uses gamegaurd.
gamegaurd does not have an build-in-libary check like hackshield does have.
other words :
to remove it, your current looking way-way-way off from where you should be looking, it has nothing to do with sframe.exe at all sframe.exe is just an accesspoint.
to get you an way of how it works you need to find the source :
lets go thru this.
1. start launcher -> press launch
2. splashloading comes up (splashloading.exe)
3. GameGaurd update(s) / check(s)
4. GameOpen (sframe.exe booted.)
so you need to check : number 2.
than delete the calling function wich is probaly : 0000EA8C (0252)
goodluck ^^
heres a small gift :
( gameguard uses
KERNEL32.DLL
ADVAPI32.dll
COMCTL32.dll
GDI32.dll
OLEAUT32.dll
USER32.dll
VERSION.dll
WININET.dll