With only one parameter :

#include <stdint.h>
#include <stdio.h>
#include <stdlib.h>

#include <string.h>
#include <stddef.h>

#include <string.h>
#include <stdlib.h>
#include <stddef.h>

#if (__STDC_VERSION__ >= 199901L)
#include <stdint.h>
#endif

char *repl_str(const char *str, const char *from, const char *to) {

/* Adjust each of the below values to suit your needs. */

/* Increment positions cache size initially by this number. */
size_t cache_sz_inc = 16;
/* Thereafter, each time capacity needs to be increased,
* multiply the increment by this factor. */
const size_t cache_sz_inc_factor = 3;
/* But never increment capacity by more than this number. */
const size_t cache_sz_inc_max = 1048576;

char *pret, *ret = NULL;
const char *pstr2, *pstr = str;
size_t i, count = 0;
#if (__STDC_VERSION__ >= 199901L)
uintptr_t *pos_cache_tmp, *pos_cache = NULL;
#else
ptrdiff_t *pos_cache_tmp, *pos_cache = NULL;
#endif
size_t cache_sz = 0;
size_t cpylen, orglen, retlen, tolen, fromlen = strlen(from);

/* Find all matches and cache their positions. */
while ((pstr2 = strstr(pstr, from)) != NULL) {
count++;

/* Increase the cache size when necessary. */
if (cache_sz < count) {
cache_sz += cache_sz_inc;
pos_cache_tmp = realloc(pos_cache, sizeof(*pos_cache) * cache_sz);
if (pos_cache_tmp == NULL) {
goto end_repl_str;
} else pos_cache = pos_cache_tmp;
cache_sz_inc *= cache_sz_inc_factor;
if (cache_sz_inc > cache_sz_inc_max) {
cache_sz_inc = cache_sz_inc_max;
}
}

pos_cache[count-1] = pstr2 - str;
pstr = pstr2 + fromlen;
}

orglen = pstr - str + strlen(pstr);

/* Allocate memory for the post-replacement string. */
if (count > 0) {
tolen = strlen(to);
retlen = orglen + (tolen - fromlen) * count;
} else retlen = orglen;
ret = malloc(retlen + 1);
if (ret == NULL) {
goto end_repl_str;
}

if (count == 0) {
/* If no matches, then just duplicate the string. */
strcpy(ret, str);
} else {
/* Otherwise, duplicate the string whilst performing
* the replacements using the position cache. */
pret = ret;
memcpy(pret, str, pos_cache[0]);
pret += pos_cache[0];
for (i = 0; i < count; i++) {
memcpy(pret, to, tolen);
pret += tolen;
pstr = str + pos_cache[i] + fromlen;
cpylen = (i == count-1 ? orglen : pos_cache[i+1]) - pos_cache[i] - fromlen;
memcpy(pret, pstr, cpylen);
pret += cpylen;
}
ret[retlen] = '';
}

end_repl_str:
/* Free the cache and return the post-replacement string,
* which will be NULL in the event of an error. */
free(pos_cache);
return ret;
}


int main(int argc, char *argv[]) {
int szFile;
char dataEnd[8];
uint32_t lpNumberOfBytesRW;
void *hfInput,
*hfOutput,
*hMemHeap,
*hfOutputNameSwf;

if (argc != 2) {
printf("Usage: dump_projector infile outfilern
Example: `dump_projector application.exe`rn");
return 1;
}

hfInput = fopen(argv[1], "rb");
if (hfInput == NULL) {
printf("Cannot open input file for reading!rn");
} else {
fseek(hfInput, -8L, SEEK_END);
szFile = ftell(hfInput);
fread(dataEnd, 8, 1, hfInput);
if (*(uint32_t*)&dataEnd == 0xFA123456) { // Check the signature
hMemHeap = calloc(1, *(uint32_t*)&dataEnd[4]);
if (hMemHeap != NULL) {
fseek(hfInput, szFile-*(uint32_t*)&dataEnd[4], SEEK_SET);
lpNumberOfBytesRW = fread(hMemHeap, 1, *(uint32_t*)&dataEnd[4], hfInput);
hfOutputNameSwf = repl_str(argv[1], ".exe", ".swf");
// hfOutput = fopen(argv[2], "wb");
hfOutput = fopen(hfOutputNameSwf, "wb");
if (hfOutput == NULL) {
printf("Cannot create output file for writing!rn");
} else {
fwrite(hMemHeap, 1, *(uint32_t*)&dataEnd[4], hfOutput);
fclose(hfOutput);
printf("Done! -> %srn", hfOutputNameSwf);
}
free(hMemHeap);
} else {
printf("Can't fetch the process heap!rn");
}
} else {
printf("This doesn't seems to be a projector bundle.rn");
}
fclose(hfInput);
}
return 0;
}

Where do I paste this code exactly, tho?

hi all

Please upload the compiled .exe file!

I have no problems with that.
I'm glad you found it useful, and thanks for linking my site. :)

Thanks a lot for the analysis! I have created a POSIX compatible version of the source (i.e. for Linux / Unix) on http://digitalimagecorp.de/software/dump_projector/ for those that need it.
(You didn't specify a license, so please contact me if I should remove the port.)

Thanks man!