The SWF file contains compiled ActionScript Byte Code (ABC). The player loads this into memory. Unlike Java (which verifies everything upfront), Flash was optimized for streaming. It verified code segments only as they were needed ("lazy verification").
Only run .swf files from trusted archives like BlueMaxima's Flashpoint or the Internet Archive. hflashplayer