frida_dump_module
Dump a live in-memory module to disk for unpacking. Reads full module from process memory, capturing the runtime image that may differ from the on-disk binary.
Instructions
Dump a live in-memory module image to disk.
Reads the full module from process memory and writes raw bytes to
output_path. Critical for unpacking — the dumped image may differ
from the on-disk binary.
target: process name or pid (string).
module_name: exact or partial module name (e.g. 'CoreAudio').
output_path: local path to write the dumped binary.
Input Schema
| Name | Required | Description | Default |
|---|---|---|---|
| target | Yes | ||
| module_name | Yes | ||
| output_path | Yes |