Grand Theft Auto IV
 

Title: Grand Theft Auto IV
Version: v1.0
Publisher: Rockstar
Developer: Rockstar
Language: multi6 (ENG/FRA/GER/ITA/ESP/RUS)
MediaType: 2x DVD9

Scanning -> C:\Spiele\Rockstar Games\Grand Theft Auto IV\GTAIV.exe
File Type : Exe, Size : 13411688 (0CCA568h) Byte(s)
-> File Appears to be Digitally Signed @ Offset 0CC9028h, size : 01540h / 05440 byte(s)
-> File has 40 (028h) bytes of appended data starting at offset 0CCA540h
[!] Possible CD/DVD-Key or Serial Check -> cdkey
[!] File appears to have no protection or is using an unknown protection
- Scan Took : 2.141 Seconds

Scanning -> C:\Spiele\Rockstar Games\Grand Theft Auto IV\LaunchGTAIV.exe
File Type : Exe, Size : 5123216 (04E2C90h) Byte(s)
-> File Appears to be Digitally Signed @ Offset 04E2000h, size : 0C90h / 03216 byte(s)
-> Suspicious MZ Header..
[!] SecuROM Detected - Version 07.38.0014
[!] Possible CD/DVD-Key or Serial Check -> Invalid serial
- Scan Took : 0.469 Seconds

Scanning -> C:\Spiele\Rockstar Games\Grand Theft Auto IV\Paul.dll
File Type : Dll, Size : 316736 (04D540h) Byte(s)
-> File Appears to be Digitally Signed @ Offset 04C000h, size : 01540h / 05440 byte(s)
[!] SecuROM PA Detected - Version 1.0.1.14 (PA API v0.94)
[!] Possible CD/DVD-Key or Serial Check -> serial.dat
- Scan Took : 0.921 Seconds

Scanning -> C:\Spiele\Rockstar Games\Grand Theft Auto IV\OfflineActivation\OfflineActivation.exe
File Type : Exe, Size : 5072192 (04D6540h) Byte(s)
-> File Appears to be Digitally Signed @ Offset 04D5000h, size : 01540h / 05440 byte(s)
-> Suspicious MZ Header..
[!] SecuROM Detected - Version 07.37.0014
[!] Possible CD/DVD-Key or Serial Check -> Invalid serial
- Scan Took : 0.438 Seconds

Scanning -> C:\Spiele\Rockstar Games\Grand Theft Auto IV\OfflineActivation\paul.dll
File Type : Dll, Size : 312640 (04C540h) Byte(s)
-> File Appears to be Digitally Signed @ Offset 04B000h, size : 01540h / 05440 byte(s)
[!] SecuROM PA Detected - Version 1.0.1.12
[!] Possible CD/DVD-Key or Serial Check -> serial.dat
- Scan Took : 0.922 Seconds

===================================
Maybe some interesting

Scanning -> C:\Spiele\Rockstar Games\Rockstar Games Social Club\RGSCLauncher.exe
File Type : Exe, Size : 306088 (04ABA8h) Byte(s)
-> File Appears to be Digitally Signed @ Offset 049600h, size : 015A8h / 05544 byte(s)
[!] dotFuscator detected !
- Scan Took : 0.922 Seconds

Scanning -> C:\Spiele\Rockstar Games\Rockstar Games Social Club\1_1_1_0\RGSC.exe
File Type : Exe, Size : 1457576 (0163DA8h) Byte(s)
-> File Appears to be Digitally Signed @ Offset 0162800h, size : 015A8h / 05544 byte(s)
[!] dotFuscator detected !
- Scan Took : 0.797 Seconds

Its only a launcher, so the main executable will use paul.dll to authenticate the disc.

actually i think its launcher->launcher (which has paul) -> game.exe (which has g4wl)
paul.dll doesnt authenticate the disk, its the product activation module, if paul is removed then i think a disk check happens, at least it did in my tests on other programs.

So it only authenticates the disc if you dont go online to register your serial then?

Seems to be the norm for games.

If you stay connected at the internet at install you have to activate online. Are you offline at install you have to activate manual with OfflineActivation.exe.

Here's a link how it works with online/offline activation.
https://support.securom.com/rockstarunlock/?c=GTA4

i downloaded a .exe in that page that may be crackeable..
but still dont know what to do with paul.dll

GTA 4 requires the DVD to be present after activation:

Attachment 641

(The picture was send-in by a user)

so there'll be a need for a mini-image or smoething like that..

It sucks you still have to insert the disc :/
For me thats the online advantage of the online game activation stuff.
Maybe it reads files off the DVD, but I doubt this is still being done in any recent game :?

A Mini-Image is available [here] to bypass the DVD-Check

It Obviously does not remove the SecuROM PA (Authentication)!

v. 1.1

No new files with copyprotection updated - some new files and new GTAIV.exe which is not protected. So RZR/FeD0R should still work.

Scanning -> C:\Spiele\Rockstar Games\Grand Theft Auto IV\GTAIV.exe
File Type : Exe, Size : 13665640 (0D08568h) Byte(s)
-> File Appears to be Digitally Signed @ Offset 0D07028h, size : 01540h / 05440 byte(s)
-> File has 40 (028h) bytes of appended data starting at offset 0D07000h
[Heuristics] -> Flag : 00000000000000000000000000000100
[!] Possible CD/DVD-Key or Serial Check -> cdkey
[!] File appears to have no protection or is using an unknown protection
- Scan Took : 0.391 Second(s)

you scanned the wrong file shadowduke, the launchgtaiv.exe is the protected one, gtaiv.exe is just protected with games for windows live... the game is still securom protected -> 7.38.0014

..as i said.. ;)

The Launcher.exe is not updated (with the patch), but gtaiv.exe is new one.

v. 1.2

same as 1.1 - only new gtaiv.exe - launcher.exe still the same as v. 1.0 ;)

Scanning -> C:\Spiele\Rockstar Games\Grand Theft Auto IV\GTAIV.exe
File Type : Exe, Size : 13637000 (0D01588h) Byte(s)
-> File Appears to be Digitally Signed @ Offset 0D00048h, size : 01540h / 05440 byte(s)
-> File has 72 (048h) bytes of appended data starting at offset 0D00000h
[Heuristics] -> Flag : 00000000000000000000000000000100
[!] Games For Windows Live detected !
[!] Possible CD/DVD-Key or Serial Check -> cdkey
- Scan Took : 1.797 Second(s)

Scanning -> C:\Spiele\Rockstar Games\Grand Theft Auto IV\LaunchGTAIV.exe
File Type : Exe, Size : 5123216 (04E2C90h) Byte(s)
-> File Appears to be Digitally Signed @ Offset 04E2000h, size : 0C90h / 03216 byte(s)
[Heuristics] -> Flag : 00000000000000000000010000000101
[!] SecuROM Detected - Version 07.38.0014
[!] Possible CD/DVD-Key or Serial Check -> Invalid serial
- Scan Took : 0.469 Second(s)