|pid||The pid to dump.||uint64 (required)|
|base_offset||The offset in the file for the base address.||int64 (required)|
|in_memory||By default we store to a tempfile and return the path. If this option is larger than 0, we prepare the file in a memory buffer at the specified limit, to avoid AV alerts on disk access.||uint64|
Required Permissions: MACHINE_STATE
Dump a PE file from process memory.