First: the book has been successfully uploaded under "E.Book.Inside.Win.2000.3rd.Edition-dyn!o" directory. Look out, because it's 19MB.
Second: Volodya: I was thinking few times about low-level dumper for PeTools but... I haven't enough time for it... (I'm assuming whole 5-7 days ) Hope I could help in the future somehow...
Third: Good idea with device-dumper . I can't see myself any other method to dump XProtected executable...
Fourth: VirtualAlloc is so often used API that I can't remember at the moment if it was used in any antidump code . From now I'll be hunting for this one .

Regards.