apmx_get_call_details
Extract detailed API call records with parameter values, return values, and timestamps from an APMX capture file for forensic analysis.
Instructions
Extract detailed API call records with parameter values, return values, and timestamps from an APMX capture. Shows pre-call and post-call parameter values, identifies return values by comparing pre/post state, and extracts embedded strings. Use call_indices for specific records or api_filter to search.
Input Schema
| Name | Required | Description | Default |
|---|---|---|---|
| file_path | Yes | Path to .apmx64 or .apmx86 capture file | |
| process_index | No | Which process to read (0 = first/only process) | |
| call_indices | No | Specific record indices to retrieve (overrides filter/pagination) | |
| api_filter | No | Filter by API name substring (case-insensitive) | |
| limit | No | Maximum number of detailed records to return | |
| offset | No | Skip first N matching records (for pagination) |