The only safe way to do this is to call up the bluescreen screen and make Windows itself get dumped. The bluescreen call is made using the kernel function KeBugCheckEx, and you will need a built-in device driver to program it. Or you can use the CrashOnCtrlScrollregistry trick and run it yourself.
Or you can connect a kernel debugger to the system using two computers and call a memory dump using the .crashdebugger command .
, LiveKD SysInternals, , "", . , .
# .