apmx_get_call_details
Extract detailed API call records from an APMX capture, including parameter values, return values, and timestamps. Filter by API name or specific call indices to isolate relevant forensic data.
Instructions
Extract detailed API call records with parameter values, return values, and timestamps from an APMX capture. Shows pre-call and post-call parameter values, identifies return values by comparing pre/post state, and extracts embedded strings. Use call_indices for specific records or api_filter to search.
Input Schema
| Name | Required | Description | Default |
|---|---|---|---|
| limit | No | Maximum number of detailed records to return | |
| offset | No | Skip first N matching records (for pagination) | |
| file_path | Yes | Path to .apmx64 or .apmx86 capture file | |
| api_filter | No | Filter by API name substring (case-insensitive) | |
| call_indices | No | Specific record indices to retrieve (overrides filter/pagination) | |
| process_index | No | Which process to read (0 = first/only process) |