[GUIDE] L2 Walker (IG) On L2J Server

09/05/2007 00:51 wiccaan#1
Working L2Walker On L2J Servers!

I take little to no credit for this. I figured out how to get it working and I am writing this tutorial for it, but I did not make any of the programs that were used. Feel free to copy paste this where ever, I don't really care if you even remove my name. I'm just sharing it with the rest of you since I know a lot of people have asked. (But credit is always nice ^_^)

:: Before We Begin ::
Firstly, if you are making your own L2J server (which will probably be best since I cannot guarantee this will work on others servers) you should try to get the following versions of the files:

L2J Server Version: 1076
L2J Datapack Version: 3274

To find out what version of both you are running, just log into your server. Its the first thing put into your chat log (you might have to be a GM to see it). Along with that, you need to allow the server to accept L2Walker connections. You can find that option inside:
C:\Path_TO_YOUR_GAME_SERVER_FOLDER\config\options. properties
(I'm not sure if this matters or not but yea.. set it anyway.)
AllowL2Walker = True
L2WalkerRevision = 552

I also set the following on my server, cause I really dont care about hacking:
(You might need these as well to be able to bypass gameguard.)
GameGuardEnforce = False
GameGuardProhibitAction = False

Ok now your server should be setup fine, go ahead and start it and leave it alone, no more touchy of that.

:: Downloading L2Walker ::
I'm not sure if the 1.79 (interlude update) client works for this or not, I got 1.78 to work and don't really want to test another so if anyone else wants to, go for it. You can download L2Walker (IG) 1.78 here:

[Only registered and activated users can see links. Click Here To Register...]
Thanks to GoDofAdeN for his upload collection :)

Install L2Walker to anywhere you want, for this tutorial I will have it at: C:\L2Walker

Inside your L2Walker folder, make a copy of the L2Walker.exe (Just right click and copy it then right click in the folder and click paste.)

[Only registered and activated users can see links. Click Here To Register...]

:: Patching The L2Walker Error ::
Like many know, the L2Walker.exe bitches about file size error. Well, we are going to bypasss it and shut it up cause its not an issue :P Firstly you will need to download two tools for this. You can get them here:

Stripper ASProtect Unpacker: [Only registered and activated users can see links. Click Here To Register...]
W32Dasm w/BratPatch: [Only registered and activated users can see links. Click Here To Register...]

Extract both of them to a new folder on your desktop. Open the Stripper folder first. Next open the _stripperX.exe inside that folder. StripperX is an ASProtect unpacker which L2Walker 1.78 is packed with. We need to unpack it to be able to modify its code. So click open in _stripperX and goto C:\L2Walker\Copy of L2Walker.exe and click open.

It should say something like: 18:01:39 - open Copy of L2Walker.exe..

[Only registered and activated users can see links. Click Here To Register...]

Next simply click unpack. After a little bit a box titled [import] will pop up. Just click save and let it continue. You don't need to delete any imports.

[Only registered and activated users can see links. Click Here To Register...]

When its done you should see something like:

Original EntryPoint :000d3000
18:09:15 - saving C:\L2Walker\_Copy of L2Walker.exe..
18:09:15 - saving C:\L2Walker\_Copy of L2Walker.exe.log ..
18:09:15 - done..

[Only registered and activated users can see links. Click Here To Register...]

Go back into your L2Walker folder and rename the _Copy of L2Walker.exe to Unpacked.exe and delete the .log file. Next we need to patch the message box error and bypass it. This is done using W32Dasm so go and open that up. When that opens, goto File -> Open and point it to C:\L2Walker\Unpacked.exe and click open. A progress bar will appear and then disappear when its ready.

[Only registered and activated users can see links. Click Here To Register...]

Ok at the top of W32Dasm theres image buttons, click the one all the way at the end thats next to the printer, it says "Strn Ref" short for String References. A box should pop up. In there scroll down til you find "L2.Exe File Size Error!"

[Only registered and activated users can see links. Click Here To Register...]

Double click it !ONCE! If you followed directions W32Dasm should have highlighted a line that says:

:00402483 6885000000 push 00000085

[Only registered and activated users can see links. Click Here To Register...]

Now, you will need to be careful with this to make sure you edit the correct line. Tap your up direction key 7 times. You should be highlighted on a line that says:

:00402478 3D14800700 cmp eax, 00078014

[Only registered and activated users can see links. Click Here To Register...]

This instruction compares the file size to our given file in the L2Walker, we want to make it work for any. To do that, we are going to compare eax to itself which will always return equal so je will happen. To do that right click on the highlighted line and goto Patch...

You will see 2 rows that say:

3D 14 80 07 00 74 31 6A FF 6A 00 68 85 00 00 00 E8 4C 90 03

[Only registered and activated users can see links. Click Here To Register...]

Our editing will happen to the bottom row. So next we want to make it read the following:

39 C0 90 90 90 74 31 6A FF 6A 00 68 85 00 00 00 E8 4C 90 03

[Only registered and activated users can see links. Click Here To Register...]

The new code will be: (Incase you wanted to know.)

cmp eax, eax
nop
nop
nop

We need the 3 nops (90's) to clean up the extra bytes incase you don't understand ASM.

Then click apply and it will say "backupfile patched!". Click ok on that message, then click close on the patch window. Then close W32Dasm.

Now inside your L2Walker folder, find the exe named Unpacked_BAK.exe and rename it to "Bypassed L2Walker.exe". For all the ancy people, go ahead and try it. Tell it to launch the l2.exe inside your Lineage 2\system folder. You should not get any error message now :) BUT we are not done yet!

:: Setting Up Your Hosts File ::
Next you need to edit your hosts file to bypass the verifier for L2Walker. THIS MUST BE DONE or L2Walker will not function. You can locate your hosts file at:

C:\WINDOWS\system32\drivers\etc

Double click hosts, and select Notepad from the process list to open the file with. If there is anything in here already from any other hacks for L2Walker, you can delete them if you want, leave everything else that you are unsure about cause this file does get edited by various types of programs such as virus scanners.

[Only registered and activated users can see links. Click Here To Register...]

At the end of the file you need to add the following:

127.0.0.1 vip.tt2xz.com
127.0.0.1 vip1.tt2xz.com
127.0.0.1 vip2.tt2xz.com
127.0.0.1 vip3.tt2xz.com
127.0.0.1 vip4.tt2xz.com
127.0.0.1 vip5.tt2xz.com
127.0.0.1 vip6.tt2xz.com
127.0.0.1 vip7.tt2xz.com
127.0.0.1 vip.towalker.com
127.0.0.1 vip1.towalker.com
127.0.0.1 vip2.towalker.com
127.0.0.1 vip3.towalker.com
127.0.0.1 vip4.towalker.com
127.0.0.1 vip5.towalker.com
127.0.0.1 vip6.towalker.com
127.0.0.1 vip7.towalker.com

[Only registered and activated users can see links. Click Here To Register...]

I know most of these do not work anymore, BUT its always good to keep them all in there just incase. To save the file goto File -> Save, or hit CTRL+S.

:: Setting Up The Verify Server ::
Next we need a verify server for the L2walker to connect to and be faked out by. I suggest using the following cause so far, its the only one thats worked for me:

[Only registered and activated users can see links. Click Here To Register...]
Thanks to GoDofAdeN for his upload collection :)

Download and extract that to anywhere you want, you need to run this anytime you want to play with L2Walker so put it in an easy to remember place. I suggest just making a new folder inside your L2Walker folder and name it BypassVerify or something like that. Which is what I will use for this tutorial.

[Only registered and activated users can see links. Click Here To Register...]

So inside C:\L2Walker\BypassVerify\ you should find a file "WP504F.exe" open that. (Yes I know its not in English but its easy to use still.) Simply click on the tab to the right that says Verify Server. You should see:

Init 5001 ok.
Init 5002 ok.
Init 5003 ok.
Init 5004 ok.

If you see that, then its running and it should catch the verify packets. Thats all you have to do with this prog. You DO NOT need to alter anything else.

[Only registered and activated users can see links. Click Here To Register...]

:: Lets Play! ::
Ok so your hosts file should be edited already for your L2 Server if you followed the L2J server install directions correctly. If so you should be able to play already on your server. If so, good. You should be able to get on and ready fast.

Just follow these directions to play:

1. Open C:\L2Walker\BypassVerify\WP504F.exe (if its not still open already.)
2. Open C:\L2Walker\Bypassed L2Walker.exe
3. Point L2Walker to your L2.exe file which is located in the system folder of your L2 folder.
4. Click run and watch it launch!

Now to see if it worked...

If L2 isn't already running in a window, press ALT+ENTER to get it into a window. (If that doesnt work, try: CTRL+ALT+SHIFT+ENTER)

Now at the login screen, press the "Home" key on your keyboard, it should open the L2Walker window. If you can see the L2Walker window good, press "Home" again or click the X at the top to close the L2Walker window now. Then login to the game normally.

[Only registered and activated users can see links. Click Here To Register...]

Once you are logged into the game its time to check if we have verified. To check that, open the WP504F window and click on the Verify Server tab, you should see something like this if it worked:

*
127.0.0.1: 5001 at 'vip.tt2xz.com'
155 > 'YOUR_ACCOUNT_NAME' > YOUR_SERVERS_IP . 4

[Only registered and activated users can see links. Click Here To Register...]

Good, we have logged into the fake verify server. Lets make sure L2Walker accepted the verify packets. To do that go back into L2 and hit Home again. On the menu of the L2Walker window, scroll to the top. Under "BASIC" click "Other Ctrl" and look near the bottom. You should see a box that says Verify Info. Inside the box you should see:

WP v5.04F (c) Sauron

[Only registered and activated users can see links. Click Here To Register...]

If you see that, L2Walker verified and is ready for use. To see if its fully working (or at least working at all) goto the "INFORMATIONS" menu and click Information. The first "tab" should have all your character info. If its there and some what correct then it should be working fine and you should be able to use L2Walker on your L2J Server.

[Only registered and activated users can see links. Click Here To Register...]

Enjoy!

~ Wiccaan

=================================

- Added pictures

=================================

Things to note:

- I am not responsible for your actions. You are using this and all the linked programs at your own risk.
- This might not work on other L2J servers that restrict L2J Walker (I haven't tested.)
- Any questions, just ask :)
09/05/2007 02:11 Kachio#2
:) Great Post! Thanks Wiccaan! :)
09/05/2007 02:38 wiccaan#3
I usually use a GameGuard emulator to bypass GameGuard on my server for testing reasons so I had forgotten to take that off to test this. Just wanted to make a quick post to give some info on that..

On my L2 server I have gameguard turned off for server <> client synch / checks cause.. frankly again I dont care if people hack on my server. That being said, I turned off the client emulator and let GameGuard update again and back to rev. 1057 and this is NOT detected :)

So.. enjoy ^_^
09/05/2007 21:13 pragma#4
any ideea how to unpack older walkers ? like 1.52 ?
yoda's cryptor 1.2 / hying's pe-armor v0.74
09/06/2007 00:02 wiccaan#5
Quote:
Originally Posted by pragma View Post
any ideea how to unpack older walkers ? like 1.52 ?
yoda's cryptor 1.2 / hying's pe-armor v0.74
I haven't seen any actual yoda unpackers myself but they probably exist. From what I thought Yoda packer is open source (sourceforge project) so you could attempt to write something yourself to reverse it.

I also found this OllyDbg script to unpack it. I didn't test it so I dunno if it works or not. I'm not really interested in older versions of L2Walker so I have no reason to try >.>

[Only registered and activated users can see links. Click Here To Register...]

Hope that helps.
09/06/2007 19:09 greenlikeweed#6
i do all this thing and no error mesage just do nathing :(
so simple i push run lineage2 from walker but just... nothing
i will never play with walker in [Only registered and activated users can see links. Click Here To Register...] :(
09/06/2007 22:27 singu#7
well that happened to me when i used the L2.exe which i needed to be able run the walker during c4, if u didn't make a backup of ur l2.exe try reinstalling c5
btw thx alot for this guide i got it to work :)
09/13/2007 02:13 wiccaan#8
Quote:
Originally Posted by singu View Post
well that happened to me when i used the L2.exe which i needed to be able run the walker during c4, if u didn't make a backup of ur l2.exe try reinstalling c5
btw thx alot for this guide i got it to work :)
No problem, glad to hear its working for people ;) Enjoy.
09/18/2007 14:24 Michael Kell#9
wp504f does not verify L2Walker 1.78. Max 1.62 !!!!!
09/29/2007 13:22 h4rl3#10
nice
11/07/2007 06:27 primeiro#11
Congratulations !!!!
11/15/2007 07:37 primeiro#12
hello buddy,

(i have bad english)

I follow all steps your tutorial..

Im using WP504F and L2walker 1.78 an private server, was working fine but last day the bot stop atk the mobs, he select the target but dont atk.
All functions l2walker 1.78 is working but he select target and dont atk anymore.

How to fix it?

Tyyy

Good Lucky
12/08/2007 13:27 iLLeLogical#13
Walker settings?
12/09/2007 08:43 MyaZara#14
hi
i play in l2Caliburn server which is c6 L2off server mean its not l2j..so does it work if it not a l2j server?
12/10/2007 17:23 Vyperin#15
Hi,
I am trying to acheive different things by unpacking/dissasembling/debugging/editing LineageII.dll.
So far the tools you have presented here are functional to a certain degree, but due to my very limited experience in the domain i am not succesfull in debugging the library while walker & lineage are active.
So is there a method to instruct the debugger not to break on system library calls ? (API break setting is unticked - so it should not pause ...)
This behaviour does terminate the program when trying to create a new thread, just before entering lineage - so it's not very usefull !
Any suggestions/findings ?

To others trying what i am - to succesfully load/debug l2walker.exe + lineageii.dll both must be stripped with stripperx first and stripped .dll renamed to original.

Btw: the version i am mangling with is 1.79a (new series) ++