Wut, why not just use PE Tools? Attach the process through PE Tools and dump whatever you're looking for within the process.
Use loadlib posted here before, it will virutalize the module so you can attach PE Tools to the loadlib process and select it then hit dump full.
Originally Posted by Acea Use loadlib posted here before, it will virutalize the module so you can attach PE Tools to the loadlib process and select it then hit dump full. thanks that helped me too
Originally Posted by eazygamez Does anybody know what dumpers I can use for a 64 BIT machine? Yes make your own. Using a C++: LoadLibrary function is enough