Sorry for not mentioning it in the original post, but you can definitely embed the XML:

http://www.ghostwire.com/blog/archives/as3-embedding-binary-xml/

I am not sure though, if it is worthwhile converting the XML to binary, ROT128-encrypting it, embedding the encrypted binary data, and using SWF-embed protection. Seems a little overkill, perhaps.

I love your series, I have used every “hack” you have mentioned. I am making a highscore-game in which I tend to protect.

md5, and some other stuff to detect a false highscore-entry. But the flashclient is easily decompiled and explored – but your embed-solution, as well as ROT128 etc is really KING.

Do not own many decompilers, but the one I had did not crack the swf!

Now I have used this binary-xml as well – but went for another solution.
The problem with yours – is that it has to load an external XML-file.

But I want to have the bytearray of the XML to be inside of the swf.
for example:

var bytearray:ByteArray = new ByteArray();
myBinaryXmlString = “rÛH?æô; 1«?U%º.S9hKåRé?¬???G”
myDecodedBinaryXML = bytearray.???..

setQuestionsXML(new XML(myDecodedBinaryXML));

I know – if someone cracks the SWF, then they will see the decoding etc..
But I did not understand how to decode the binary-string – without making a loading of the XML-file as you did, so that it comes in as a ByteArray automatically.

So I used http://wonderfl.net/code/d65bf0f3fecc166ce9404a102a602653bc80457d
instead to make my xml to a binary – and being able to decode it.

Thanks.. YOU are so great!