                SoftICE dumper extension
                                deroko of ARTeam
                                
Well this code was laying on my computer for a while, and I've decided
to post full source code.

At this link you may see how to write SoftICE KDExtensions in my way:
http://www.woodmann.com/forum/showthread.php?t=11995

and here is also link for Kayaker's guide on writing KDExtensions:
http://www.woodmann.com/forum/showthread.php?t=7097


How to install:
1. copy sdumper.sys to C:\windows\system32\drivers
2. import sdumper.key which will create proper keys for this driver in
   your registry
3. in SYSTEM\CurrentControlSet\Services\NTIce
   add key KDExtensions if it doesn't exist, and type there sdumper.sys
   or if there is already thakt key with some driver name, simply put ';'
   after driver name and add sdumper.sys
4. net start sdumper


to use it:
!dump <virtualaddress> <size> <file_name>
!dump 401000 1000 c:\region1.dmp
!dump eax ecx c:\region2.dmp

Note that you may receive error when you dump large portion of data, that
exception occured, this happens because at raised IRQL we can't read paged
out memory. To solve this issue you will either have to pagein that part of
memory, or dump smaller chunks...

                                        deroko of ARTeam

