Grand Theft Auto IV

[ShadowDuke]

Title: Grand Theft Auto IV
Version: v1.0
Publisher: Rockstar
Developer: Rockstar
Language: multi6 (ENG/FRA/GER/ITA/ESP/RUS)
MediaType: 2x DVD9

Scanning -> C:\Spiele\Rockstar Games\Grand Theft Auto IV\GTAIV.exe
File Type : Exe, Size : 13411688 (0CCA568h) Byte(s)
-> File Appears to be Digitally Signed @ Offset 0CC9028h, size : 01540h / 05440 byte(s)
-> File has 40 (028h) bytes of appended data starting at offset 0CCA540h
[!] Possible CD/DVD-Key or Serial Check -> cdkey
[!] File appears to have no protection or is using an unknown protection
- Scan Took : 2.141 Seconds

Scanning -> C:\Spiele\Rockstar Games\Grand Theft Auto IV\LaunchGTAIV.exe
File Type : Exe, Size : 5123216 (04E2C90h) Byte(s)
-> File Appears to be Digitally Signed @ Offset 04E2000h, size : 0C90h / 03216 byte(s)
-> Suspicious MZ Header..
[!] SecuROM Detected - Version 07.38.0014
[!] Possible CD/DVD-Key or Serial Check -> Invalid serial
- Scan Took : 0.469 Seconds

Scanning -> C:\Spiele\Rockstar Games\Grand Theft Auto IV\Paul.dll
File Type : Dll, Size : 316736 (04D540h) Byte(s)
-> File Appears to be Digitally Signed @ Offset 04C000h, size : 01540h / 05440 byte(s)
[!] SecuROM PA Detected - Version 1.0.1.14 (PA API v0.94)
[!] Possible CD/DVD-Key or Serial Check -> serial.dat
- Scan Took : 0.921 Seconds

Scanning -> C:\Spiele\Rockstar Games\Grand Theft Auto IV\OfflineActivation\OfflineActivation.exe
File Type : Exe, Size : 5072192 (04D6540h) Byte(s)
-> File Appears to be Digitally Signed @ Offset 04D5000h, size : 01540h / 05440 byte(s)
-> Suspicious MZ Header..
[!] SecuROM Detected - Version 07.37.0014
[!] Possible CD/DVD-Key or Serial Check -> Invalid serial
- Scan Took : 0.438 Seconds

Scanning -> C:\Spiele\Rockstar Games\Grand Theft Auto IV\OfflineActivation\paul.dll
File Type : Dll, Size : 312640 (04C540h) Byte(s)
-> File Appears to be Digitally Signed @ Offset 04B000h, size : 01540h / 05440 byte(s)
[!] SecuROM PA Detected - Version 1.0.1.12
[!] Possible CD/DVD-Key or Serial Check -> serial.dat
- Scan Took : 0.922 Seconds

===================================
Maybe some interesting

Scanning -> C:\Spiele\Rockstar Games\Rockstar Games Social Club\RGSCLauncher.exe
File Type : Exe, Size : 306088 (04ABA8h) Byte(s)
-> File Appears to be Digitally Signed @ Offset 049600h, size : 015A8h / 05544 byte(s)
[!] dotFuscator detected !
- Scan Took : 0.922 Seconds

Scanning -> C:\Spiele\Rockstar Games\Rockstar Games Social Club\1_1_1_0\RGSC.exe
File Type : Exe, Size : 1457576 (0163DA8h) Byte(s)
-> File Appears to be Digitally Signed @ Offset 0162800h, size : 015A8h / 05544 byte(s)
[!] dotFuscator detected !
- Scan Took : 0.797 Seconds

[DABhand]

Its only a launcher, so the main executable will use paul.dll to authenticate the disc.

[TippeX]

actually i think its launcher->launcher (which has paul) -> game.exe (which has g4wl)
paul.dll doesnt authenticate the disk, its the product activation module, if paul is removed then i think a disk check happens, at least it did in my tests on other programs.

[DABhand]

So it only authenticates the disc if you dont go online to register your serial then?

Seems to be the norm for games.

[ShadowDuke]

If you stay connected at the internet at install you have to activate online. Are you offline at install you have to activate manual with OfflineActivation.exe.

Here's a link how it works with online/offline activation.
https://support.securom.com/rockstarunlock/?c=GTA4

[letsrock]

i downloaded a .exe in that page that may be crackeable..
but still dont know what to do with paul.dll

[EMPiRE]

GTA 4 requires the DVD to be present after activation:

641

(The picture was send-in by a user)

[letsrock]

so there'll be a need for a mini-image or smoething like that..

[Muji-FightR]

It sucks you still have to insert the disc :/
For me thats the online advantage of the online game activation stuff.
Maybe it reads files off the DVD, but I doubt this is still being done in any recent game :?

[EMPiRE]

A Mini-Image is available [here (http://m0001.gamecopyworld.com/games/pc_grand_theft_auto_4.shtml)] to bypass the DVD-Check

It Obviously does not remove the SecuROM PA (Authentication)!

[ShadowDuke]

v. 1.1

No new files with copyprotection updated - some new files and new GTAIV.exe which is not protected. So RZR/FeD0R should still work.

Scanning -> C:\Spiele\Rockstar Games\Grand Theft Auto IV\GTAIV.exe
File Type : Exe, Size : 13665640 (0D08568h) Byte(s)
-> File Appears to be Digitally Signed @ Offset 0D07028h, size : 01540h / 05440 byte(s)
-> File has 40 (028h) bytes of appended data starting at offset 0D07000h
[Heuristics] -> Flag : 00000000000000000000000000000100
[!] Possible CD/DVD-Key or Serial Check -> cdkey
[!] File appears to have no protection or is using an unknown protection
- Scan Took : 0.391 Second(s)

[TippeX]

you scanned the wrong file shadowduke, the launchgtaiv.exe is the protected one, gtaiv.exe is just protected with games for windows live... the game is still securom protected -> 7.38.0014

[ShadowDuke]

..as i said.. ;)

The Launcher.exe is not updated (with the patch), but gtaiv.exe is new one.

[ShadowDuke]

v. 1.2

same as 1.1 - only new gtaiv.exe - launcher.exe still the same as v. 1.0 ;)

Scanning -> C:\Spiele\Rockstar Games\Grand Theft Auto IV\GTAIV.exe
File Type : Exe, Size : 13637000 (0D01588h) Byte(s)
-> File Appears to be Digitally Signed @ Offset 0D00048h, size : 01540h / 05440 byte(s)
-> File has 72 (048h) bytes of appended data starting at offset 0D00000h
[Heuristics] -> Flag : 00000000000000000000000000000100
[!] Games For Windows Live detected !
[!] Possible CD/DVD-Key or Serial Check -> cdkey
- Scan Took : 1.797 Second(s)

Scanning -> C:\Spiele\Rockstar Games\Grand Theft Auto IV\LaunchGTAIV.exe
File Type : Exe, Size : 5123216 (04E2C90h) Byte(s)
-> File Appears to be Digitally Signed @ Offset 04E2000h, size : 0C90h / 03216 byte(s)
[Heuristics] -> Flag : 00000000000000000000010000000101
[!] SecuROM Detected - Version 07.38.0014
[!] Possible CD/DVD-Key or Serial Check -> Invalid serial
- Scan Took : 0.469 Second(s)