ARCTIC COMBAT REVIVAL -- SETTING IT UP BY HAND
==============================================

Use this when SETUP.cmd will not run, or when you would rather do it yourself
and see every change. It is the same two steps the script performs, in the same
order. Ten minutes, once per machine.

Nothing here touches a game file, and nothing installs a program.


-------------------------------------------------------------------------------
STEP 1 OF 2 -- THE HOSTS FILE
-------------------------------------------------------------------------------

The 21 addresses the game looks for stopped existing in 2013. This points those
names at the server instead.

  1. Press the Start button, type   notepad
  2. RIGHT-CLICK Notepad in the results, choose "Run as administrator".
     (Without this, step 5 fails with "Access denied" and Notepad offers to
     save the file to your Documents folder instead. Do not accept that -- it
     creates a copy Windows never reads.)
  3. In Notepad: File > Open
  4. Paste this into the file name box and press Enter:

        %SystemRoot%\System32\drivers\etc\hosts

     If the box shows nothing, change the file type dropdown from
     "Text Documents (*.txt)" to "All Files (*.*)".

  5. First, DELETE any existing line that mentions "webzen" or "ahn-sec02".
     A leftover line from an earlier attempt wins over the new ones, and the
     symptom is a machine that looks configured and connects to nothing.

  6. Go to the end of the file and paste this block exactly as it is:

# >>> Arctic Combat Revival >>>
2.28.52.248	channel.webzen.com
2.28.52.248	gp-alpha-channel.webzen.com
2.28.52.248	api.webzen.com
2.28.52.248	alpha-api.webzen.com
2.28.52.248	image.webzen.co.kr
2.28.52.248	alpha-image.webzen.co.kr
2.28.52.248	btr.webzen.co.kr
2.28.52.248	file.webzen.com
2.28.52.248	real-btrshop.tencent.com
2.28.52.248	image.webzen.net
2.28.52.248	platform.webzen.com
2.28.52.248	login.webzen.com
2.28.52.248	member.webzen.com
2.28.52.248	ac.webzen.com
2.28.52.248	patch-gwgp.ac.webzen.com
2.28.52.248	cs.webzen.com
2.28.52.248	npro-gwgp.ac.webzen.com
2.28.52.248	ahn-sec02.cloudapp.net
2.28.52.248	acsalogin01.webzen.com
2.28.52.248	acuslogin01.webzen.com
2.28.52.248	aceulogin01.webzen.com
# <<< Arctic Combat Revival <<<

  7. File > Save.

If saving fails even as Administrator, an ANTIVIRUS is guarding this file. It
is right to: pointing hostnames somewhere else is what banking malware does; it
simply does not know about us. Pause its protection, save, then turn it back on.

CHECK IT WORKED. Open Start, type  cmd , press Enter, and run:

    ping ac.webzen.com

The reply does not matter. What matters is the address in brackets on the first
line -- it must read [2.28.52.248]. If it shows anything else, an old line
survived in the hosts file; go back to step 5.


-------------------------------------------------------------------------------
STEP 2 OF 2 -- THE CERTIFICATE
-------------------------------------------------------------------------------

  1. Double-click  ca-webzen.cer  (it came in this kit).
  2. Click "Install Certificate...".
  3. Choose "Local Machine" and click Next. Accept the Windows prompt.
  4. Choose "Place all certificates in the following store" and click Browse.
  5. Pick "Trusted Root Certification Authorities". OK, Next, Finish.
  6. Windows shows a security warning. Read the next section before accepting.

There is a one-line version, if you prefer. Open cmd AS ADMINISTRATOR, go to
this folder, and run:

    certutil -addstore -f Root ca-webzen.cer


-------------------------------------------------------------------------------
WHY A CERTIFICATE, AND WHY THIS ONE IS SAFE TO ACCEPT
-------------------------------------------------------------------------------

Installing a root certificate authority is normally a request you should
REFUSE, and Windows is right to warn you. A root CA can sign a certificate for
any website, including your bank's, and your browser would believe it.

This one cannot. It carries Name Constraints (RFC 5280) that permit only

    webzen.com, webzen.net, webzen.co.kr

and exclude every IP address. Windows itself refuses any certificate this CA
issues outside those names -- the limit is enforced by Windows, not promised by
us. The server's own test suite proves it: it issues a certificate for
www.google.com with this CA and checks that Windows rejects it.

It is needed because the game's original launcher talks HTTPS to
login.webzen.com and validates it with Windows' normal rules. There is no
setting to relax that, so without this certificate the launcher never gets past
the login screen.


-------------------------------------------------------------------------------
PUTTING EVERYTHING BACK
-------------------------------------------------------------------------------

  1. Open the hosts file again as in step 1 and delete the block between the
     two "Arctic Combat Revival" marker lines, including the markers.

  2. Open Start, type  certlm.msc , press Enter. Go to
     Trusted Root Certification Authorities > Certificates, find the entry
     starting with "Arctic Combat", right-click, Delete.

  Or, in cmd as Administrator:  certutil -delstore Root "Arctic Combat"

That is everything. Nothing else was ever changed.


-------------------------------------------------------------------------------
WHEN IT STILL DOES NOT WORK
-------------------------------------------------------------------------------

The game opens and closes after a few seconds
    The anti-cheat cannot reach its update server. Either the hosts step did
    not take (check with ping, above) or the game needs Administrator: right-
    click the game's shortcut > Properties > Compatibility > Run as
    administrator.

"Disconnected from the login server"
    The hosts step did not take. The acsalogin01/acuslogin01/aceulogin01 lines
    are the ones that matter here -- check they are present and spelled right.

The launcher will not accept my login
    The certificate is missing, or an older copy of it is still installed.
    Remove it as described above and install it again.

The site http://ac.webzen.com does not open
    Same cause: the hosts step. Check with ping first.

Is the server even up? Open this in a browser:
    http://2.28.52.248:15005/api/status

I cannot get into the same match as my friend
    This may be your internet provider. Many Brazilian ISPs use CGNAT, which
    stops two homes from connecting directly -- and matches in this game run
    directly between players, not through the server. There is nothing to fix
    on your end.
