File writing during bugcheck callback routine

NTDEV
1

Does anyone know if it is possible to write to a file while in a bugcheck
callback routine? In the callback routine, the IRQL is HIGH_LEVEL, and
interrupts are disabled, so standard file writing techniques (such as
ZwWriteFile) will not work. Alternatively, does anyone know of an alternate
approach to saving data (say 1-4 K in size) when a bugcheck occurs, similar
to NT’s memory dumps?

2

> Does anyone know if it is possible to write to a file while

in a bugcheck
callback routine? In the callback routine, the IRQL is
HIGH_LEVEL, and
interrupts are disabled, so standard file writing techniques (such as
ZwWriteFile) will not work. Alternatively, does anyone know
of an alternate
approach to saving data (say 1-4 K in size) when a bugcheck
occurs, similar
to NT’s memory dumps?

System Internals (http://www.sysinternals.com) has a utility that does this
which works well. As far as writing your own, it’s pretty tricky for the
reasons you state.