debug_dump
Dump module images of a stopped process, using dump offset equal to RVA, for later PE reconstruction and analysis.
Instructions
Dump module images of the stopped process (dump offset == RVA).
Tool call template
Replace each placeholder with a value matching the input schema. Only required parameters are included; add optional parameters as needed.
{
"id": 1,
"jsonrpc": "2.0",
"method": "tools/call",
"params": {
"arguments": {
"session_id": "<session_id>"
},
"name": "debug_dump"
}
}Input Schema
| Name | Required | Description | Default |
|---|---|---|---|
| outdir | No | dumps | |
| session_id | Yes |