Cheat Engine

[HarryPitfall]

Ok, let's start... I made a small application, that host the shockwave flash object.
I can load from a local file, load directly from a URL, and get/set variables by name... and is cheat engine friendly...
But now, i want more on this application, I want to scan it's own memory (and his host activex) for variables...
a good example, in my last game, I use _root._game.bank to change the money, works as expected... but I found it only by decompiling de swf file...

So, my question is... since ActionScript is a ecma script version, his objects MUST be JScript/COM friendly, how I can get _root object from a TShockwareFlash control? I mean, the object itself, so I can put into a java-script and use "for(prop in _root)" to enum it's members?

There is also a "TFlashObjectInterface" that is a perfect implementation of IDispatchEx (this make me believe that all actionscript objects can be manipulated into a foreigh script engine... JScript.dll for example).

Yes, I'm trying to achieve a advanced method, that if it's works, any flash game is just a matter of 'click for find all variables', and make anything you want with then...

The main question is... how I can get a pointer for _root object from a TShockwaveFlash control?