Icon extractor from RAM
 

This is the source code (and compiled executable) for a small console utility written in plain-C for MS-Windows that extracts every icon from the resources of a running process (in RAM) and from every module that this process has already loaded, and additionally raw-dumps any PNG / JPEG / BMP / SVG resources found in the other resource types.

The utility is unique in that everything is read ONLY from the target process's memory (RAM); The on-disk module files are never opened, which is useful when they are encrypted on disk and decrypted on-the-fly by a custom loader.

P.S.
If you are unable to download the attached file, let me know where you would like to have it uploaded.