unforum

[Slowzone]

Last effort to try and solve the S&S Conclusion Puzzle..

[Bidvision]

I did that a couple of weeks ago. I emailed Marlowe and said "please tell me about your grand designs". I've heard nothing from them yet though.

[flo]

i emailed the man in black himself, acqSPLATsableshuck.com

returned mail the address does not exist anymore!

[flutesalad]

What a surprise.....perhaps Jon succeeded in a way, by putting them out of business

[pablo]

I forgot how many combinations there were but do u think it would be possible to gather most of the ppl that frequent this forum and get each of them to do a certain section of the possible combinations?

Together we are legion lol

[xar]

hate to say it

[xar]

Bah

[trevdak]

It isn't the flash file oyu have to crack, it is the php file that the flash file connects to to find out if you were right

[xar]

aye

[Meak]

i can have a go at cracking it.
i've got a flash decompiler... just need to find the location of the php file which must be buried in the flash


i didn't want to do it at first, but now, i might as well try

[Wishi-san]

No Meak that's not it. The Flash file sends your answers to a PHP file - the code of which we don't have access to - and this then gives the Flash file an answer as to whether it was Correct or, most likely, Incorrect. If it was correct the PHP file would send the phone number to the Flash.

So unless we hack their server, which is wrong no matter how annoyed people may be with the game, there's no way to cheat it in this way.

[Meak]

I had an idea

1) Grab the .swf file (http://sableshuck.com/acquisition/0205/conclusion/dd5c3cea2ed02366b.swf )
2) Upload it onto your own server
3) Write your own PHP file entitled 'finFinalCheck.PHP' that receives the POSTvars from the swf and returns status=ok whatever the 'id', 'pos' and 'value' attributes are.
4) the swf file thinks everything is ok.... and hey presto... we've cracked it.

We just need someone good at PHP to write the code.

The only problem I can see with this is if the phone number is actually in the original PHP file. If this is the case, then we're screwed.

[Wishi-san]

[Meak]

hmph. you're probably right wishi.

well, i did find some interesting things in the swf file.

1) the grid IS made using the fibonacci sequence:

FinalToolClass.prototype.BuildGrid = function ()
{
var _l1 = this;
var xpos = 160;
var ypos = 0;
var _l3 = _l1.maxheight;
var newmc = _l1.pInstance.attachMovie("GridSquare", "Grid_0", 10, {_x: xpos, _y: ypos, myid: 0});
newmc.ApplyParams({_width: _l3, _height: _l3});
var _l2 = 0;
while (_l2 < _l1.maxitems)
{
if (_l2 < _l1.fibseq.length)
{
_l1.activefib = _l2;


2) the boxes in which to enter the values are labelled 'zero' to 'five':

FinalToolClass.prototype.SubmitDeduction = function ()
{
var _l2 = this;
var _l3 = ["Zero", "One", "Two", "Three", "Four", "Five"];
_l2.lvar = new LoadVars();

3) the PHP file responds with an inserted object (inobj) which tells the flash what to do if the answers are correct. i.e, the flash file tells us nothing about the correct sequence or what happens once the sequence is correctly submitted.

4) the flash file records the exact time and date of things to the millisecond. which seems odd...

Date.prototype.dateAdd = function (datepart, v_number)
{
var _l1 = this;
var _l2 = v_number;
switch (datepart)
{
case "y":
{
_l1.setFullYear(_l1.getFullYear() + _l2);
break;
}
case "m":
{
_l1.setMonth(_l1.getMonth() + _l2);
break;
}
case "d":
{
_l1.setDate(_l1.getDate() + _l2);
break;
}
case "h":
{
_l1.setHours(_l1.getHours() + _l2);
break;
}
case "n":
{
_l1.setMinutes(_l1.getMinutes() + _l2);
break;
}
case "s":
{
_l1.setSeconds(_l1.getSeconds() + _l2);
break;
}
default:
{
_l1.setMilliseconds(_l1.getMilliseconds() + _l2);
break;

[Bidvision]

The fact that the flash times things so precisely suggests that they want to know who is first among a group of people all doing the same thing within a short space of time.

So maybe there's a final clue coming soon that will send us all rushing to the S&S site to finish the puzzle.

Does anyone know the URL of the php application that checks the results? I do some php for work and might be able to help with that if we know where the app is.