DllGrabber

[CodeCracker]

DllGrabber:
CreateFile over file name and afterwards will save to the dll, may be used for some visualization,
plus ability allocate memory - usefully when dll will allocated on exactly same memory base address,
allocating space there will make dll to be loaded on different base address.

[CodeCracker]

DllGrabber fixed was attached.
Fixed a silly bug, now everything should work as it should.

Will be great if admin will remove the attachment from first post.

[sh3dow]

Sorry I'm a bit lost here but I don't understand what the use case of this.

[Rasmus]

Originally Posted by sh3dow

Sorry I'm a bit lost here but I don't understand what the use case of this.

Mostly like PETools or LordPE where you can dump any file from a process. This tool also dump the dll of our choice from process.

[bolo2002]

Alocate mem could be allocate mem but who cares,thanks for this tool anyway.

[CodeCracker]

SaveDllX64 and CopyDllX64: grab dll (maybe virtual dll) from 64 bits process;
both make exactly the same thing, SaveDllX64 use CreateFile while CopyDllX64 use CopyFile.
You would need to copy config.txt and SaveDllX64.dll to target program directory;
inside config.txt file the first line should be the name of dll to be saved,
then you inject SaveDllX64.dll in the target process with LoadLibraryInject64
https://forum.tuts4you.com/topic/45799-loadlibraryinject64
https://forum.exetools.com/showthread.php?t=21407
or other x64 process injector, the new file will be saved in target program directory "original_name+_saved" for SaveDllX64; "original_name+__copied" for CopyDllX64.