Actionscript for NG medals!

[xenonmonkey]

When I was saving pico's school.swf to my computer, I decided " hey, wouldn't it be funny if I made this a .fla file?" so I opened my flash decompiler and took a look at the flash.

When I opened it and I saw the medal icon, and another box that connects to the medal points.

First, i looked at the actionscript for the other box. It read:
setProperty("", _visible, false);
var checkConnection = function (event)
{
if (!event.success)
{
setProperty("", _visible, true);
gotoAndStop(3);
} // end if
};
if (com.Newgrounds.NewgroundsAPI.isNewgroun ds() || _root.API_Settings.debug_mode)
{
com.Newgrounds.NewgroundsAPI.addEventLis tener(com.Newgrounds.NewgroundsAPI.event s.MOVIE_CONNECTED, checkConnection);
if (!com.Newgrounds.NewgroundsAPI.hasUserSe ssion() && !_root.API_Settings.debug_mode)
{
setProperty("", _visible, true);
gotoAndStop(2);
} // end if
} // end if
com.Newgrounds.NewgroundsAPI.setMovieVer sion(_root.API_Settings.movie_version);
com.Newgrounds.NewgroundsAPI.connectMovi e(_root.API_Settings.movie_id, _root.API_Settings.enc_key, _root.API_Settings.debug_mode);
com.Newgrounds.NewgroundsAPI.loadMedals(
);
stop ();

Then i checked the first frame of the actions layer for the medal box:

function unlockMedal(m_name)
{
clearInterval(pop_delay);
var _loc1 = com.Newgrounds.NewgroundsAPI.getMedals()
;
var _loc2 = null;
for (i in _loc1)
{
if (_loc1[i].medal_name == m_name)
{
_loc2 = _loc1[i];
medal_name = _loc2.medal_name;
medal_value = _loc2.medal_value + "pts";
com.Newgrounds.NewgroundsAPI.unlockMedal (medal_name);
pop_delay = setInterval(endDelay, 3000);
setProperty("", _visible, true);
gotoAndPlay(2);
break;
} // end if
} // end of for...in
} // End of the function
function endDelay(params)
{
gotoAndPlay(10);
clearInterval(pop_delay);
} // End of the function
var pop_delay;
var medal_name = "?????";
var medal_value = "???";
setProperty("", _visible, false);

After that came the animation of the medal appearing followed by a last actionscript for the final frame:

var myBitmapData = flash.display.BitmapData.loadBitmap(meda l_name + ".gif");
medal_icon.attachBitmap(myBitmapData, 111);
stop ();

Do you think we can exploit this for the general use of medals?

[Zuggz]

No you can't, you'll need to have the game setup for use of medals on Newground's server side.
However, Tom has made it so normal people can use medals for Pico day movies/games.

Tom's Medal Post

[El-Presidente]

Don't try and do this again. Tom clearly doesn't want everyone to use NG Medals, otherwise he would make them public. It's even just disrespectful that you tried to decompile his .swf to get around it.

[xenonmonkey]

At 4/28/09 09:02 PM, El-Presidente wrote: Don't try and do this again. Tom clearly doesn't want everyone to use NG Medals, otherwise he would make them public. It's even just disrespectful that you tried to decompile his .swf to get around it.

I didn't open the flash to see how to abuse medals, i opened it to see how the game was put together and I just happened to come across that code

[Zuggz]

At 4/28/09 09:06 PM, xenonmonkey wrote: I didn't open the flash to see how to abuse medals, i opened it to see how the game was put together and I just happened to come across that code

You shouldn't do that without permission.
Check out my first reply. It regards public medals.

[xenonmonkey]

At 4/28/09 09:09 PM, Zuggz wrote:

At 4/28/09 09:06 PM, xenonmonkey wrote: I didn't open the flash to see how to abuse medals, i opened it to see how the game was put together and I just happened to come across that code

You shouldn't do that without permission.
Check out my first reply. It regards public medals.

well now i know, but i don't think it's wrong to see how certain flashes are put together by looking at the inside of them, and not doing anything but sharing info and asking if it can possibly be reverse engineered

[Slipstreamer]

So you see the code yet you post it?

lol

[henke37]

If you had the skills needed to qualify for medals, you would realize that this code doesn't actually do the part where it tells the server that the medal has been gained. All that this does is running the display system. Boring stuff that you hopefully don't need help with doing in the first place.

[zuperxtreme]

At 4/28/09 09:02 PM, El-Presidente wrote: Don't try and do this again. Tom clearly doesn't want everyone to use NG Medals, otherwise he would make them public. It's even just disrespectful that you tried to decompile his .swf to get around it.

Bah, it's just harmless reverse engineering. Plus it's not even encrypted.

[Luis]

At 4/29/09 01:39 AM, zuperxtreme wrote:

At 4/28/09 09:02 PM, El-Presidente wrote: Don't try and do this again. Tom clearly doesn't want everyone to use NG Medals, otherwise he would make them public. It's even just disrespectful that you tried to decompile his .swf to get around it.

Bah, it's just harmless reverse engineering. Plus it's not even encrypted.

I agree. And theres nothin wrong with being nosy and hungry for knowledge. Cant install medals without it having a placeholder for it in the backend (insert gay joke) anyway. Still has to go through tom of goldfish in order to get that in there.