Files
isphere-ai-bridge/docs/source-discovery/2026-07-12-broute-bridge-static-map.md
2026-07-12 02:36:59 +08:00

44 KiB

B-Route Bridge/IPC/Plugin Static Map

Date: 2026-07-12

Scope

This report uses offline IL, binary string metadata, reflection metadata for HttpServerLib.dll, and returned live-probe JSON. It does not log in, open sockets, attach hooks, inject into a process, replay traffic, or mutate client binaries.

Machine-readable evidence: runs/offline-broute-reverse/bridge-map.json Reflection metadata: runs/offline-broute-reverse/httpserverlib-reflection.json

Recommendation

Question Answer
Should B-route pursue existing IPC/plugin before an in-process adapter? No
Offline decision in_process_adapter_research
External sidecar boundary external_sidecar_preview_only_until_bridge_exists
Reason Offline static evidence found no existing local IPC/plugin route that exposes send-message or send-file. HttpServerLib and plugin surfaces either require logged-in runtime state or are UI/framework-only; the named-pipe stub is empty.

Sources

Text/IL sources

Source Role Exists Lines Size bytes
runs\offline-evidence-intake\zyl-qqfile-20260709\metadata\c28-il\IMPlatformClient.exe.il main client IL; login, plugin manager, local HTTP starter, chat/runtime yes 1360035 74148460
runs\offline-evidence-intake\zyl-qqfile-20260709\metadata\c28-il\IMPP.Common.dll.il common helpers; WinCommand, ProcessComm, DTOs yes 118343 5703293
runs\offline-evidence-intake\zyl-qqfile-20260709\metadata\c28-il\IMPP.ISphere.exe.il ISphere companion app IL; CEF and command helpers yes 81273 5679074
runs\offline-evidence-intake\zyl-qqfile-20260709\metadata\c28-il\IMPP.UI.dll.il UI/browser support IL yes 242314 13545362
runs\offline-evidence-intake\zyl-qqfile-20260709\metadata\c28-il\IMPP.Service.dll.il file service implementation IL yes 3351 207786
runs\offline-evidence-intake\zyl-qqfile-20260709\metadata\c28-il\smack.dll.il XMPP/socks5/network IL yes 87425 5019807

Binary/string sources

Source Role Exists Strings Size bytes
runs\offline-real-client-window\full\zyl\Impp\HttpServerLib.dll local HTTP server framework binary yes 555 26624
runs\offline-real-client-window\full\zyl\Impp\IMPlatformClient.Web.exe CEF/web helper process binary yes 185 9216
runs\offline-real-client-window\full\zyl\Impp\INetwork.dll native network abstraction yes 563 87552
runs\offline-real-client-window\full\zyl\Impp\IOClientNetwork.dll native network implementation yes 870 145920
runs\offline-real-client-window\full\zyl\Impp\IMPlatformClient.exe main client binary yes 76877 8366592

Candidate classification

Candidate Category Classification Usable for B-route send Recommendation Matches
frmLogin.StartWinServer / HttpServerLib.HttpService localhost_http requires_logged_in_process no do_not_pursue_before_in_process_adapter 31
HttpServerLib route/module framework localhost_http static_only_unknown no no_existing_ipc_first 8
PluginLightAppMulProcessCommunication NamedPipeServerStream named_pipe not_a_bridge no do_not_use 17
IMPP.Common.Helper.ProcessComm WM_COPYDATA helper window_message static_only_unknown no not_a_send_bridge 164
PluginManager / IMPlugin command surface plugin requires_logged_in_process no plugin_extension_not_first 2696
IMPlatformClient.Web / CEF helper child_process requires_logged_in_process no preview_only_not_send 343
INetwork / IOClientNetwork native stack native_network not_a_bridge no do_not_pursue_as_ipc 72
returned live-probe named pipe inventory named_pipe static_only_unknown no do_not_assume_isphere_api 49
local TcpListener candidates tcp_listener not_a_bridge no not_existing_ipc 145

Verified facts

  • frmLogin.StartWinServer constructs HTTPServerLib.HttpService on 0.0.0.0 and starts HttpServer.Start in a thread, but it depends on IMPPManager.UserInfo and ServiceManager.UnifiedAuthentication state.
  • HttpServerLib.dll exposes route/module primitives such as HttpService.RegisterModule, ServiceModule, ServiceRoute, RouteAttribute, OnGet, and OnPost.
  • Main client IL does not show a concrete RegisterModule call or send-message/send-file HTTP route registration.
  • PluginLightAppMulProcessCommunication declares a NamedPipeServerStream field, but StartLightAppMultProssCommunication returns immediately.
  • Returned live probe showed one remote TCP connection to port 10088 and a named pipe \\.\\pipe\\zfpinject-msg-server; neither proves an iSphere send API.
  • PluginManager/IMPlugin evidence is UI/app-store/context-menu oriented; no local assembly-load plugin bridge or send route was confirmed.

Candidate evidence

frmLogin.StartWinServer / HttpServerLib.HttpService

Classification: requires_logged_in_process; usable for B-route send: False; matches: 31.

Reason: Static IL builds a local HTTP service from logged-in user/auth state, but no send route or active live local listener was confirmed.

Source Kind Snippet Context
runs\offline-evidence-intake\zyl-qqfile-20260709\metadata\c28-il\IMPlatformClient.exe.il:223 reference .assembly extern HttpServerLib ``
runs\offline-evidence-intake\zyl-qqfile-20260709\metadata\c28-il\IMPlatformClient.exe.il:888716 reference RepairDatabase() cil managed L888715: .method private hidebysig instance void
runs\offline-evidence-intake\zyl-qqfile-20260709\metadata\c28-il\IMPlatformClient.exe.il:888818 string_literal IL_00f8: ldstr "{0}/ifim/messageAuth\?version={1}&user={2}&resource" L888715: .method private hidebysig instance void
runs\offline-evidence-intake\zyl-qqfile-20260709\metadata\c28-il\IMPlatformClient.exe.il:888944 string_literal IL_0287: ldstr "RepairDatabase.exe" ``
runs\offline-evidence-intake\zyl-qqfile-20260709\metadata\c28-il\IMPlatformClient.exe.il:889041 method_end } // end of method frmLogin::RepairDatabase ``
runs\offline-evidence-intake\zyl-qqfile-20260709\metadata\c28-il\IMPlatformClient.exe.il:889166 callsite IL_004d: call instance void IMPP.Client.frmLogin::RepairDatabase() L889120: .method private hidebysig instance bool
runs\offline-evidence-intake\zyl-qqfile-20260709\metadata\c28-il\IMPlatformClient.exe.il:889253 signature_continuation StartWinServer() cil managed L889252: .method private hidebysig instance void
runs\offline-evidence-intake\zyl-qqfile-20260709\metadata\c28-il\IMPlatformClient.exe.il:889272 reference class [HttpServerLib]HTTPServerLib.HttpService V_15, L889252: .method private hidebysig instance void
runs\offline-evidence-intake\zyl-qqfile-20260709\metadata\c28-il\IMPlatformClient.exe.il:889518 callsite IL_0276: call instance int32 IMPP.Client.frmLogin::GetFreePort(int32[]) ``
runs\offline-evidence-intake\zyl-qqfile-20260709\metadata\c28-il\IMPlatformClient.exe.il:889551 string_literal IL_02d3: ldstr "0.0.0.0" ``
runs\offline-evidence-intake\zyl-qqfile-20260709\metadata\c28-il\IMPlatformClient.exe.il:889554 constructor_call IL_02dc: newobj instance void [HttpServerLib]HTTPServerLib.HttpService::.ctor(string, ``
runs\offline-evidence-intake\zyl-qqfile-20260709\metadata\c28-il\IMPlatformClient.exe.il:889559 reference IL_02e5: ldftn instance void [HttpServerLib]HTTPServerLib.HttpServer::Start() ``
runs\offline-evidence-intake\zyl-qqfile-20260709\metadata\c28-il\IMPlatformClient.exe.il:889677 method_end } // end of method frmLogin::StartWinServer ``
runs\offline-evidence-intake\zyl-qqfile-20260709\metadata\c28-il\IMPlatformClient.exe.il:889680 signature_continuation GetFreePort(int32[] portArray) cil managed L889679: .method private hidebysig instance int32
runs\offline-evidence-intake\zyl-qqfile-20260709\metadata\c28-il\IMPlatformClient.exe.il:889798 method_end } // end of method frmLogin::GetFreePort L889679: .method private hidebysig instance int32
runs\offline-broute-reverse\httpserverlib-reflection.json reflection_metadata HttpServerLib reflection exposes matching types/methods; see httpserverlib-reflection.json ``
runs\offline-real-client-window\full\zyl\Impp\HttpServerLib.dll#str10 binary_string HttpServerLib.dll ``
runs\offline-real-client-window\full\zyl\Impp\HttpServerLib.dll#str12 binary_string HTTPServerLib ``

HttpServerLib route/module framework

Classification: static_only_unknown; usable for B-route send: False; matches: 8.

Reason: HttpServerLib has ServiceModule/RouteAttribute primitives, but client IL does not show RegisterModule or send-message routes.

Source Kind Snippet Context
runs\offline-broute-reverse\httpserverlib-reflection.json reflection_metadata HttpServerLib reflection exposes matching types/methods; see httpserverlib-reflection.json ``
runs\offline-real-client-window\full\zyl\Impp\HttpServerLib.dll#str21 binary_string RouteAttribute ``
runs\offline-real-client-window\full\zyl\Impp\HttpServerLib.dll#str22 binary_string RouteMethod ``
runs\offline-real-client-window\full\zyl\Impp\HttpServerLib.dll#str23 binary_string ServiceModule ``
runs\offline-real-client-window\full\zyl\Impp\HttpServerLib.dll#str24 binary_string ServiceRoute ``
runs\offline-real-client-window\full\zyl\Impp\HttpServerLib.dll#str292 binary_string RegisterModule ``
runs\offline-real-client-window\full\zyl\Impp\HttpServerLib.dll#str302 binary_string SearchRoute ``
runs\offline-real-client-window\full\zyl\Impp\HttpServerLib.dll#str303 binary_string ExecuteRoute ``

PluginLightAppMulProcessCommunication NamedPipeServerStream

Classification: not_a_bridge; usable for B-route send: False; matches: 17.

Reason: A NamedPipeServerStream field exists, but StartLightAppMultProssCommunication has a one-instruction ret body.

Source Kind Snippet Context
runs\offline-evidence-intake\zyl-qqfile-20260709\metadata\c28-il\IMPlatformClient.exe.il:9039 type_definition .class private auto ansi beforefieldinit IMPP.Client.Core.Plugins.MessageCenter.Classes.PluginLightAppMulProcessCommunication L9012: .method public hidebysig specialname rtspecialname
runs\offline-evidence-intake\zyl-qqfile-20260709\metadata\c28-il\IMPlatformClient.exe.il:9042 reference .field private static class IMPP.Client.Core.Plugins.MessageCenter.Classes.PluginLightAppMulProcessCommunication _instance L9012: .method public hidebysig specialname rtspecialname
runs\offline-evidence-intake\zyl-qqfile-20260709\metadata\c28-il\IMPlatformClient.exe.il:9043 reference .field private class [System.Core]System.IO.Pipes.NamedPipeServerStream _pipeServer L9012: .method public hidebysig specialname rtspecialname
runs\offline-evidence-intake\zyl-qqfile-20260709\metadata\c28-il\IMPlatformClient.exe.il:9052 method_end } // end of method PluginLightAppMulProcessCommunication::.ctor L9044: .method private hidebysig specialname rtspecialname
runs\offline-evidence-intake\zyl-qqfile-20260709\metadata\c28-il\IMPlatformClient.exe.il:9058 constructor_call IL_0000: newobj instance void IMPP.Client.Core.Plugins.MessageCenter.Classes.PluginLightAppMulProcessCommunication::.ctor() L9054: .method public hidebysig static void Init() cil managed
runs\offline-evidence-intake\zyl-qqfile-20260709\metadata\c28-il\IMPlatformClient.exe.il:9059 reference IL_0005: stsfld class IMPP.Client.Core.Plugins.MessageCenter.Classes.PluginLightAppMulProcessCommunication IMPP.Client.Core.Plugins.MessageCenter.Classes.PluginLightAppMulProcessCommunication::_instance L9054: .method public hidebysig static void Init() cil managed
runs\offline-evidence-intake\zyl-qqfile-20260709\metadata\c28-il\IMPlatformClient.exe.il:9060 reference IL_000a: ldsfld class IMPP.Client.Core.Plugins.MessageCenter.Classes.PluginLightAppMulProcessCommunication IMPP.Client.Core.Plugins.MessageCenter.Classes.PluginLightAppMulProcessCommunication::_instance L9054: .method public hidebysig static void Init() cil managed
runs\offline-evidence-intake\zyl-qqfile-20260709\metadata\c28-il\IMPlatformClient.exe.il:9061 callsite IL_000f: callvirt instance void IMPP.Client.Core.Plugins.MessageCenter.Classes.PluginLightAppMulProcessCommunication::StartLightAppMultProssCommunication() L9054: .method public hidebysig static void Init() cil managed
runs\offline-evidence-intake\zyl-qqfile-20260709\metadata\c28-il\IMPlatformClient.exe.il:9063 method_end } // end of method PluginLightAppMulProcessCommunication::Init L9054: .method public hidebysig static void Init() cil managed
runs\offline-evidence-intake\zyl-qqfile-20260709\metadata\c28-il\IMPlatformClient.exe.il:9066 reference StartLightAppMultProssCommunication() cil managed L9065: .method public hidebysig instance void
runs\offline-evidence-intake\zyl-qqfile-20260709\metadata\c28-il\IMPlatformClient.exe.il:9071 method_end } // end of method PluginLightAppMulProcessCommunication::StartLightAppMultProssCommunication L9065: .method public hidebysig instance void
runs\offline-evidence-intake\zyl-qqfile-20260709\metadata\c28-il\IMPlatformClient.exe.il:9079 method_end } // end of method PluginLightAppMulProcessCommunication::.cctor L9073: .method private hidebysig specialname rtspecialname static
runs\offline-evidence-intake\zyl-qqfile-20260709\metadata\c28-il\IMPlatformClient.exe.il:9081 reference } // end of class IMPP.Client.Core.Plugins.MessageCenter.Classes.PluginLightAppMulProcessCommunication L9073: .method private hidebysig specialname rtspecialname static
runs\offline-evidence-intake\zyl-qqfile-20260709\metadata\c28-il\IMPlatformClient.exe.il:217833 callsite IL_0071: call void IMPP.Client.Core.Plugins.MessageCenter.Classes.PluginLightAppMulProcessCommunication::Init() L217793: .method private hidebysig specialname rtspecialname
runs\offline-real-client-window\full\zyl\Impp\IMPlatformClient.exe#str2852 binary_string NamedPipeServerStream ``
runs\offline-real-client-window\full\zyl\Impp\IMPlatformClient.exe#str6922 binary_string PluginLightAppMulProcessCommunication ``
runs\offline-real-client-window\full\zyl\Impp\IMPlatformClient.exe#str8523 binary_string StartLightAppMultProssCommunication ``

IMPP.Common.Helper.ProcessComm WM_COPYDATA helper

Classification: static_only_unknown; usable for B-route send: False; matches: 164.

Reason: ProcessComm can send WM_COPYDATA to a foreground or titled window, but no receive handler or send-command contract is confirmed.

Source Kind Snippet Context
runs\offline-evidence-intake\zyl-qqfile-20260709\metadata\c28-il\IMPlatformClient.exe.il:271124 reference native int GetForegroundWindow() cil managed preservesig L271123: .method public hidebysig static pinvokeimpl("user32.dll" winapi)
runs\offline-evidence-intake\zyl-qqfile-20260709\metadata\c28-il\IMPlatformClient.exe.il:278221 type_definition .class sequential ansi sealed nested private beforefieldinit COPYDATASTRUCT L278204: .method private hidebysig static object
runs\offline-evidence-intake\zyl-qqfile-20260709\metadata\c28-il\IMPlatformClient.exe.il:278227 reference } // end of class COPYDATASTRUCT L278204: .method private hidebysig static object
runs\offline-evidence-intake\zyl-qqfile-20260709\metadata\c28-il\IMPlatformClient.exe.il:279144 reference .field private static literal int32 WM_COPYDATA = int32(0x0000004A) L279026: .method public hidebysig instance void
runs\offline-evidence-intake\zyl-qqfile-20260709\metadata\c28-il\IMPlatformClient.exe.il:282985 reference int32 FindWindow(string lpClassName, L282984: .method private hidebysig static pinvokeimpl("user32.dll" winapi)
runs\offline-evidence-intake\zyl-qqfile-20260709\metadata\c28-il\IMPlatformClient.exe.il:317869 callsite IL_3827: call native int IMPP.Client.utils.Utils::GetForegroundWindow() ``
runs\offline-evidence-intake\zyl-qqfile-20260709\metadata\c28-il\IMPlatformClient.exe.il:412102 callsite IL_3613: call native int IMPP.Client.utils.Utils::GetForegroundWindow() ``
runs\offline-evidence-intake\zyl-qqfile-20260709\metadata\c28-il\IMPlatformClient.exe.il:543733 reference .field public static literal int32 WM_COPYDATA = int32(0x0000004A) ``
runs\offline-evidence-intake\zyl-qqfile-20260709\metadata\c28-il\IMPlatformClient.exe.il:660716 reference .locals init (valuetype IMPP.Client.Business.Logon.Native/COPYDATASTRUCT V_0, L660712: .method public hidebysig static bool DefWndProc(valuetype [System.Windows.Forms]System.Windows.Forms.Message& m) cil managed
runs\offline-evidence-intake\zyl-qqfile-20260709\metadata\c28-il\IMPlatformClient.exe.il:660731 reference valuetype IMPP.Client.Business.Logon.Native/COPYDATASTRUCT V_15, L660712: .method public hidebysig static bool DefWndProc(valuetype [System.Windows.Forms]System.Windows.Forms.Message& m) cil managed
runs\offline-evidence-intake\zyl-qqfile-20260709\metadata\c28-il\IMPlatformClient.exe.il:660735 reference valuetype IMPP.Client.Business.Logon.Native/COPYDATASTRUCT V_19, L660712: .method public hidebysig static bool DefWndProc(valuetype [System.Windows.Forms]System.Windows.Forms.Message& m) cil managed
runs\offline-evidence-intake\zyl-qqfile-20260709\metadata\c28-il\IMPlatformClient.exe.il:660746 reference valuetype IMPP.Client.Business.Logon.Native/COPYDATASTRUCT V_30, L660712: .method public hidebysig static bool DefWndProc(valuetype [System.Windows.Forms]System.Windows.Forms.Message& m) cil managed
runs\offline-evidence-intake\zyl-qqfile-20260709\metadata\c28-il\IMPlatformClient.exe.il:661348 reference IL_06b6: initobj IMPP.Client.Business.Logon.Native/COPYDATASTRUCT ``
runs\offline-evidence-intake\zyl-qqfile-20260709\metadata\c28-il\IMPlatformClient.exe.il:661350 reference IL_06bd: ldtoken IMPP.Client.Business.Logon.Native/COPYDATASTRUCT ``
runs\offline-evidence-intake\zyl-qqfile-20260709\metadata\c28-il\IMPlatformClient.exe.il:661353 reference IL_06cc: unbox.any IMPP.Client.Business.Logon.Native/COPYDATASTRUCT ``
runs\offline-evidence-intake\zyl-qqfile-20260709\metadata\c28-il\IMPlatformClient.exe.il:661356 reference IL_06d5: ldfld int32 IMPP.Client.Business.Logon.Native/COPYDATASTRUCT::cbData ``
runs\offline-evidence-intake\zyl-qqfile-20260709\metadata\c28-il\IMPlatformClient.exe.il:661360 reference IL_06e3: ldfld native int IMPP.Client.Business.Logon.Native/COPYDATASTRUCT::lpData ``
runs\offline-evidence-intake\zyl-qqfile-20260709\metadata\c28-il\IMPlatformClient.exe.il:661446 reference IL_07e8: stfld native int IMPP.Client.Business.Logon.Native/COPYDATASTRUCT::dwData ``

PluginManager / IMPlugin command surface

Classification: requires_logged_in_process; usable for B-route send: False; matches: 2696.

Reason: Plugin evidence is UI/app-store/context-menu oriented and depends on logged-in PluginManager state; no Assembly.Load/LoadFrom or send API bridge was confirmed.

Source Kind Snippet Context
runs\offline-evidence-intake\zyl-qqfile-20260709\metadata\c28-il\IMPlatformClient.exe.il:1048 reference .mresource public IMPP.Client.Core.Plugins.Manager.FrmAppStore.resources ``
runs\offline-evidence-intake\zyl-qqfile-20260709\metadata\c28-il\IMPlatformClient.exe.il:1051 reference // 警告: 创建了托管资源文件 IMPP.Client.Core.Plugins.Manager.FrmAppStore.resources ``
runs\offline-evidence-intake\zyl-qqfile-20260709\metadata\c28-il\IMPlatformClient.exe.il:1063 reference .mresource public IMPP.Client.Core.Plugins.Manager.WindowForm.FrmCefHomePage.resources ``
runs\offline-evidence-intake\zyl-qqfile-20260709\metadata\c28-il\IMPlatformClient.exe.il:1066 reference // 警告: 创建了托管资源文件 IMPP.Client.Core.Plugins.Manager.WindowForm.FrmCefHomePage.resources ``
runs\offline-evidence-intake\zyl-qqfile-20260709\metadata\c28-il\IMPlatformClient.exe.il:82622 callsite IL_0156: call class IMPP.Client.Core.Plugins.Manager.PluginManager IMPP.Client.Core.Plugins.Manager.PluginManager::GetInstance() ``
runs\offline-evidence-intake\zyl-qqfile-20260709\metadata\c28-il\IMPlatformClient.exe.il:82623 callsite IL_015b: callvirt instance class [mscorlib]System.Collections.Generic.List1 IMPP.Client.Core.Plugins.Manager.PluginManager::GetPluginList()` ``
runs\offline-evidence-intake\zyl-qqfile-20260709\metadata\c28-il\IMPlatformClient.exe.il:85884 callsite IL_0157: call class IMPP.Client.Core.Plugins.Manager.PluginManager IMPP.Client.Core.Plugins.Manager.PluginManager::GetInstance() L85783: .method public hidebysig specialname rtspecialname
runs\offline-evidence-intake\zyl-qqfile-20260709\metadata\c28-il\IMPlatformClient.exe.il:85890 callsite IL_0168: callvirt instance void IMPP.Client.Core.Plugins.Manager.PluginManager::add_PluginMessageNotify(class [IMPP.Interface]IMPP.Interface.PluginMessageEventHandler) L85783: .method public hidebysig specialname rtspecialname
runs\offline-evidence-intake\zyl-qqfile-20260709\metadata\c28-il\IMPlatformClient.exe.il:88002 callsite IL_045d: call class IMPP.Client.Core.Plugins.Manager.PluginManager IMPP.Client.Core.Plugins.Manager.PluginManager::GetInstance() ``
runs\offline-evidence-intake\zyl-qqfile-20260709\metadata\c28-il\IMPlatformClient.exe.il:88007 callsite IL_0470: callvirt instance void IMPP.Client.Core.Plugins.Manager.PluginManager::DoNotifyAction(string, ``
runs\offline-evidence-intake\zyl-qqfile-20260709\metadata\c28-il\IMPlatformClient.exe.il:90512 callsite IL_0111: call void IMPP.Client.Core.Plugins.Manager.PluginUtils::LoadPluginContextMenu(class [System.Windows.Forms]System.Windows.Forms.ContextMenuStrip, ``
runs\offline-evidence-intake\zyl-qqfile-20260709\metadata\c28-il\IMPlatformClient.exe.il:90677 callsite IL_016d: call void IMPP.Client.Core.Plugins.Manager.PluginUtils::LoadPluginContextMenu(class [System.Windows.Forms]System.Windows.Forms.ContextMenuStrip, ``
runs\offline-evidence-intake\zyl-qqfile-20260709\metadata\c28-il\IMPlatformClient.exe.il:91111 callsite IL_00f8: call void IMPP.Client.Core.Plugins.Manager.PluginUtils::LoadPluginContextMenu(class [System.Windows.Forms]System.Windows.Forms.ContextMenuStrip, L91000: .method public hidebysig instance void
runs\offline-evidence-intake\zyl-qqfile-20260709\metadata\c28-il\IMPlatformClient.exe.il:91274 callsite IL_00cb: call void IMPP.Client.Core.Plugins.Manager.PluginUtils::LoadPluginContextMenu(class [System.Windows.Forms]System.Windows.Forms.ContextMenuStrip, L91188: .method public hidebysig instance void
runs\offline-evidence-intake\zyl-qqfile-20260709\metadata\c28-il\IMPlatformClient.exe.il:105364 callsite IL_03c1: callvirt instance string IMPP.Client.Core.Plugins.Manager.IMPlugin::get_Command() ``
runs\offline-evidence-intake\zyl-qqfile-20260709\metadata\c28-il\IMPlatformClient.exe.il:105401 callsite IL_042d: call class IMPP.Client.Core.Plugins.Manager.PluginManager IMPP.Client.Core.Plugins.Manager.PluginManager::GetInstance() ``
runs\offline-evidence-intake\zyl-qqfile-20260709\metadata\c28-il\IMPlatformClient.exe.il:105402 callsite IL_0432: callvirt instance class [mscorlib]System.Collections.Generic.List1 IMPP.Client.Core.Plugins.Manager.PluginManager::GetPluginList()` ``
runs\offline-evidence-intake\zyl-qqfile-20260709\metadata\c28-il\IMPlatformClient.exe.il:217227 reference class IMPP.Client.Core.Plugins.Manager.PluginManager V_3, L217219: .method public hidebysig newslot virtual final

IMPlatformClient.Web / CEF helper

Classification: requires_logged_in_process; usable for B-route send: False; matches: 343.

Reason: The web helper/CEF surface exists, but static evidence points to UI/plugin browser support, not an external send/file API.

Source Kind Snippet Context
runs\offline-evidence-intake\zyl-qqfile-20260709\metadata\c28-il\IMPlatformClient.exe.il:278553 reference .field public static class [System.Core]System.Runtime.CompilerServices.CallSite1<class [mscorlib]System.Action3<class [System.Core]System.Runtime.CompilerServices.CallSite,class [IMPP.Cef4CSharp]IMPP.Cef4CSharp.Win.Wi... L278527: .method public hidebysig instance void
runs\offline-evidence-intake\zyl-qqfile-20260709\metadata\c28-il\IMPlatformClient.exe.il:300455 reference IL_0428: ldsfld class [System.Core]System.Runtime.CompilerServices.CallSite1<class [mscorlib]System.Action3<class [System.Core]System.Runtime.CompilerServices.CallSite,class [IMPP.Cef4CSharp]IMPP.Cef4CSharp.Win.Wi... ``
runs\offline-evidence-intake\zyl-qqfile-20260709\metadata\c28-il\IMPlatformClient.exe.il:300465 string_literal IL_0442: ldstr "NavigateTo" ``
runs\offline-evidence-intake\zyl-qqfile-20260709\metadata\c28-il\IMPlatformClient.exe.il:300492 callsite IL_0477: call class [System.Core]System.Runtime.CompilerServices.CallSite1<!0> class [System.Core]System.Runtime.CompilerServices.CallSite1<class [mscorlib]System.Action3<class [System.Core]System.Runtime.Compi...` ``
runs\offline-evidence-intake\zyl-qqfile-20260709\metadata\c28-il\IMPlatformClient.exe.il:300493 reference IL_047c: stsfld class [System.Core]System.Runtime.CompilerServices.CallSite1<class [mscorlib]System.Action3<class [System.Core]System.Runtime.CompilerServices.CallSite,class [IMPP.Cef4CSharp]IMPP.Cef4CSharp.Win.Wi... ``
runs\offline-evidence-intake\zyl-qqfile-20260709\metadata\c28-il\IMPlatformClient.exe.il:300500 reference IL_048f: ldsfld class [System.Core]System.Runtime.CompilerServices.CallSite1<class [mscorlib]System.Action3<class [System.Core]System.Runtime.CompilerServices.CallSite,class [IMPP.Cef4CSharp]IMPP.Cef4CSharp.Win.Wi... ``
runs\offline-evidence-intake\zyl-qqfile-20260709\metadata\c28-il\IMPlatformClient.exe.il:300501 reference IL_0494: ldfld !0 class [System.Core]System.Runtime.CompilerServices.CallSite1<class [mscorlib]System.Action3<class [System.Core]System.Runtime.CompilerServices.CallSite,class [IMPP.Cef4CSharp]IMPP.Cef4CSharp.Win... ``
runs\offline-evidence-intake\zyl-qqfile-20260709\metadata\c28-il\IMPlatformClient.exe.il:300502 reference IL_0499: ldsfld class [System.Core]System.Runtime.CompilerServices.CallSite1<class [mscorlib]System.Action3<class [System.Core]System.Runtime.CompilerServices.CallSite,class [IMPP.Cef4CSharp]IMPP.Cef4CSharp.Win.Wi... ``
runs\offline-evidence-intake\zyl-qqfile-20260709\metadata\c28-il\IMPlatformClient.exe.il:300504 callsite IL_04a0: callvirt instance class [IMPP.Cef4CSharp]IMPP.Cef4CSharp.Win.WinCefBrowser IMPP.Client.Core.Plugins.Manager.WindowForm.frmPluginTabCtrl::get_CefBrowser() ``
runs\offline-evidence-intake\zyl-qqfile-20260709\metadata\c28-il\IMPlatformClient.exe.il:300506 callsite IL_04a6: callvirt instance void class [mscorlib]System.Action3<class [System.Core]System.Runtime.CompilerServices.CallSite,class [IMPP.Cef4CSharp]IMPP.Cef4CSharp.Win.WinCefBrowser,object>::Invoke(!0,` ``
runs\offline-evidence-intake\zyl-qqfile-20260709\metadata\c28-il\IMPlatformClient.exe.il:388726 reference .field public static class [System.Core]System.Runtime.CompilerServices.CallSite1<class [mscorlib]System.Action3<class [System.Core]System.Runtime.CompilerServices.CallSite,class [IMPP.Cef4CSharp]IMPP.Cef4CSharp.Win.Wi... L388681: .method public hidebysig instance void
runs\offline-evidence-intake\zyl-qqfile-20260709\metadata\c28-il\IMPlatformClient.exe.il:413211 callsite IL_0266: callvirt instance class [IMPP.Cef4CSharp]IMPP.Cef4CSharp.Win.WinCefBrowser IMPP.Client.Business.ISphereAssistant.frmExtendTabCtrl::get_CefBrowser() ``
runs\offline-evidence-intake\zyl-qqfile-20260709\metadata\c28-il\IMPlatformClient.exe.il:413215 callsite IL_0277: callvirt instance void [IMPP.Cef4CSharp]IMPP.Cef4CSharp.Win.WinCefBrowser::NavigateTo(string) ``
runs\offline-evidence-intake\zyl-qqfile-20260709\metadata\c28-il\IMPlatformClient.exe.il:414754 reference IL_0b96: ldsfld class [System.Core]System.Runtime.CompilerServices.CallSite1<class [mscorlib]System.Action3<class [System.Core]System.Runtime.CompilerServices.CallSite,class [IMPP.Cef4CSharp]IMPP.Cef4CSharp.Win.Wi... ``
runs\offline-evidence-intake\zyl-qqfile-20260709\metadata\c28-il\IMPlatformClient.exe.il:414764 string_literal IL_0bb0: ldstr "NavigateTo" ``
runs\offline-evidence-intake\zyl-qqfile-20260709\metadata\c28-il\IMPlatformClient.exe.il:414791 callsite IL_0be5: call class [System.Core]System.Runtime.CompilerServices.CallSite1<!0> class [System.Core]System.Runtime.CompilerServices.CallSite1<class [mscorlib]System.Action3<class [System.Core]System.Runtime.Compi...` ``
runs\offline-evidence-intake\zyl-qqfile-20260709\metadata\c28-il\IMPlatformClient.exe.il:414792 reference IL_0bea: stsfld class [System.Core]System.Runtime.CompilerServices.CallSite1<class [mscorlib]System.Action3<class [System.Core]System.Runtime.CompilerServices.CallSite,class [IMPP.Cef4CSharp]IMPP.Cef4CSharp.Win.Wi... ``
runs\offline-evidence-intake\zyl-qqfile-20260709\metadata\c28-il\IMPlatformClient.exe.il:414799 reference IL_0bfd: ldsfld class [System.Core]System.Runtime.CompilerServices.CallSite1<class [mscorlib]System.Action3<class [System.Core]System.Runtime.CompilerServices.CallSite,class [IMPP.Cef4CSharp]IMPP.Cef4CSharp.Win.Wi... ``

INetwork / IOClientNetwork native stack

Classification: not_a_bridge; usable for B-route send: False; matches: 72.

Reason: Native NETIO send/recv symbols are low-level transport, not a local command bridge into logged-in chat objects.

Source Kind Snippet Context
runs\offline-real-client-window\full\zyl\Impp\INetwork.dll#str249 binary_string D:\work\me\sourcecode\app_project\Network_node\bin\release\INetwork.pdb ``
runs\offline-real-client-window\full\zyl\Impp\INetwork.dll#str314 binary_string INetwork.dll ``
runs\offline-real-client-window\full\zyl\Impp\INetwork.dll#str317 binary_string ??0StreamClientBase@@QAE@ABV0@@Z ``
runs\offline-real-client-window\full\zyl\Impp\INetwork.dll#str318 binary_string ??0StreamClientBase@@QAE@XZ ``
runs\offline-real-client-window\full\zyl\Impp\INetwork.dll#str319 binary_string ??0StreamClientChannel@@QAE@ABV0@@Z ``
runs\offline-real-client-window\full\zyl\Impp\INetwork.dll#str320 binary_string ??0StreamClientChannel@@QAE@XZ ``
runs\offline-real-client-window\full\zyl\Impp\INetwork.dll#str321 binary_string ??0StreamClientFrameSink@@QAE@ABV0@@Z ``
runs\offline-real-client-window\full\zyl\Impp\INetwork.dll#str322 binary_string ??0StreamClientFrameSink@@QAE@XZ ``
runs\offline-real-client-window\full\zyl\Impp\INetwork.dll#str323 binary_string ??0StreamClientMsg@@QAE@ABV0@@Z ``
runs\offline-real-client-window\full\zyl\Impp\INetwork.dll#str324 binary_string ??0StreamClientMsg@@QAE@XZ ``
runs\offline-real-client-window\full\zyl\Impp\INetwork.dll#str325 binary_string ??0StreamClientMsgSink@@QAE@ABV0@@Z ``
runs\offline-real-client-window\full\zyl\Impp\INetwork.dll#str326 binary_string ??0StreamClientMsgSink@@QAE@XZ ``
runs\offline-real-client-window\full\zyl\Impp\INetwork.dll#str327 binary_string ??0StreamClientNetEventSink@@QAE@ABV0@@Z ``
runs\offline-real-client-window\full\zyl\Impp\INetwork.dll#str328 binary_string ??0StreamClientNetEventSink@@QAE@XZ ``
runs\offline-real-client-window\full\zyl\Impp\INetwork.dll#str329 binary_string ??0StreamClientRecverEventSink@@QAE@ABV0@@Z ``
runs\offline-real-client-window\full\zyl\Impp\INetwork.dll#str330 binary_string ??0StreamClientRecverEventSink@@QAE@XZ ``
runs\offline-real-client-window\full\zyl\Impp\INetwork.dll#str331 binary_string ??0StreamClientSenderEventSink@@QAE@ABV0@@Z ``
runs\offline-real-client-window\full\zyl\Impp\INetwork.dll#str332 binary_string ??0StreamClientSenderEventSink@@QAE@XZ ``

returned live-probe named pipe inventory

Classification: static_only_unknown; usable for B-route send: False; matches: 49.

Reason: Live probe saw \.\pipe\zfpinject-msg-server, but no matching iSphere static string or send contract was found in the configured samples.

Source Kind Snippet Context
runs\offline-evidence-intake\zyl-qqfile-20260709\metadata\c28-il\IMPlatformClient.exe.il:905746 reference frmMain_OnReConnectionSucceed(object sender, L905745: .method private hidebysig instance void
runs\offline-evidence-intake\zyl-qqfile-20260709\metadata\c28-il\IMPlatformClient.exe.il:905814 reference IL_0081: ldftn void IMPP.Client.frmMain::'<frmMain_OnReConnectionSucceed>b__4'() L905745: .method private hidebysig instance void
runs\offline-evidence-intake\zyl-qqfile-20260709\metadata\c28-il\IMPlatformClient.exe.il:905828 method_end } // end of method frmMain::frmMain_OnReConnectionSucceed L905745: .method private hidebysig instance void
runs\offline-evidence-intake\zyl-qqfile-20260709\metadata\c28-il\IMPlatformClient.exe.il:919019 reference IL_006e: ldftn instance void IMPP.Client.frmMain::frmMain_OnReConnectionSucceed(object, L918967: .method private hidebysig instance void
runs\offline-evidence-intake\zyl-qqfile-20260709\metadata\c28-il\IMPlatformClient.exe.il:919023 callsite IL_0079: callvirt instance void [smack]com.vision.smack.XMPPConnection::add_OnReConnectionSucceed(class [mscorlib]System.EventHandler) L918967: .method private hidebysig instance void
runs\offline-evidence-intake\zyl-qqfile-20260709\metadata\c28-il\IMPlatformClient.exe.il:928079 method_header .method private hidebysig static void '<frmMain_OnReConnectionSucceed>b__4'() cil managed L928079: .method private hidebysig static void '<frmMain_OnReConnectionSucceed>b__4'() cil managed
runs\offline-evidence-intake\zyl-qqfile-20260709\metadata\c28-il\IMPlatformClient.exe.il:928087 method_end } // end of method frmMain::'<frmMain_OnReConnectionSucceed>b__4' L928079: .method private hidebysig static void '<frmMain_OnReConnectionSucceed>b__4'() cil managed
runs\offline-evidence-intake\zyl-qqfile-20260709\metadata\c28-il\IMPlatformClient.exe.il:1126866 reference IL_00e2: ldftn instance void IMPP.Client.Business.ReConnection.WindowForm.FrmReConnection::OnReConnectionSucceed(object, L1126773: .method private hidebysig specialname rtspecialname
runs\offline-evidence-intake\zyl-qqfile-20260709\metadata\c28-il\IMPlatformClient.exe.il:1126870 callsite IL_00ed: callvirt instance void [smack]com.vision.smack.XMPPConnection::add_OnReConnectionSucceed(class [mscorlib]System.EventHandler) L1126773: .method private hidebysig specialname rtspecialname
runs\offline-evidence-intake\zyl-qqfile-20260709\metadata\c28-il\IMPlatformClient.exe.il:1127782 reference OnReConnectionSucceed(object sender, L1127781: .method private hidebysig instance void
runs\offline-evidence-intake\zyl-qqfile-20260709\metadata\c28-il\IMPlatformClient.exe.il:1127841 reference IL_0069: ldftn instance void IMPP.Client.Business.ReConnection.WindowForm.FrmReConnection::'<OnReConnectionSucceed>b__0'() L1127781: .method private hidebysig instance void
runs\offline-evidence-intake\zyl-qqfile-20260709\metadata\c28-il\IMPlatformClient.exe.il:1127855 method_end } // end of method FrmReConnection::OnReConnectionSucceed L1127781: .method private hidebysig instance void
runs\offline-evidence-intake\zyl-qqfile-20260709\metadata\c28-il\IMPlatformClient.exe.il:1127979 reference '<OnReConnectionSucceed>b__0'() cil managed L1127978: .method private hidebysig instance void
runs\offline-evidence-intake\zyl-qqfile-20260709\metadata\c28-il\IMPlatformClient.exe.il:1127987 method_end } // end of method FrmReConnection::'<OnReConnectionSucceed>b__0' L1127978: .method private hidebysig instance void
runs\offline-evidence-intake\zyl-qqfile-20260709\metadata\c28-il\IMPP.ISphere.exe.il:33510 reference IL_00e2: ldftn instance void IMPP.ISphere.IMPPManage.FrmReConnection::OnReConnectionSucceed(object, L33417: .method private hidebysig specialname rtspecialname
runs\offline-evidence-intake\zyl-qqfile-20260709\metadata\c28-il\IMPP.ISphere.exe.il:33514 callsite IL_00ed: callvirt instance void [smack]com.vision.smack.XMPPConnection::add_OnReConnectionSucceed(class [mscorlib]System.EventHandler) L33417: .method private hidebysig specialname rtspecialname
runs\offline-evidence-intake\zyl-qqfile-20260709\metadata\c28-il\IMPP.ISphere.exe.il:34155 reference OnReConnectionSucceed(object sender, L34154: .method private hidebysig instance void
runs\offline-evidence-intake\zyl-qqfile-20260709\metadata\c28-il\IMPP.ISphere.exe.il:34182 reference IL_0031: ldftn instance void IMPP.ISphere.IMPPManage.FrmReConnection::'<OnReConnectionSucceed>b__0'() L34154: .method private hidebysig instance void

local TcpListener candidates

Classification: not_a_bridge; usable for B-route send: False; matches: 145.

Reason: TcpListener evidence is tied to TCP file manage or smack socks5, not a command API for text/file send. Returned live probe had only one remote XMPP connection.

Source Kind Snippet Context
runs\offline-evidence-intake\zyl-qqfile-20260709\metadata\c28-il\IMPlatformClient.exe.il:889833 callsite IL_003c: callvirt instance class [System]System.Net.IPEndPoint[] [System]System.Net.NetworkInformation.IPGlobalProperties::GetActiveTcpListeners() L889800: .method private hidebysig instance bool
runs\offline-evidence-intake\zyl-qqfile-20260709\metadata\c28-il\IMPlatformClient.exe.il:1117108 reference .field private static class [System]System.Net.Sockets.TcpListener _listener L1117034: .method public hidebysig instance bool
runs\offline-evidence-intake\zyl-qqfile-20260709\metadata\c28-il\IMPlatformClient.exe.il:1118022 reference IL_0058: ldsfld class [System]System.Net.Sockets.TcpListener IMPP.Client.Business.TCPFileManage.TCPFileManager::_listener L1117985: .method public hidebysig static class [System]System.Net.IPEndPoint
runs\offline-evidence-intake\zyl-qqfile-20260709\metadata\c28-il\IMPlatformClient.exe.il:1118096 reference IL_011e: ldsfld class [System]System.Net.Sockets.TcpListener IMPP.Client.Business.TCPFileManage.TCPFileManager::_listener L1117985: .method public hidebysig static class [System]System.Net.IPEndPoint
runs\offline-evidence-intake\zyl-qqfile-20260709\metadata\c28-il\IMPlatformClient.exe.il:1118097 callsite IL_0123: callvirt instance class [System]System.Net.EndPoint [System]System.Net.Sockets.TcpListener::get_LocalEndpoint() L1117985: .method public hidebysig static class [System]System.Net.IPEndPoint
runs\offline-evidence-intake\zyl-qqfile-20260709\metadata\c28-il\IMPlatformClient.exe.il:1118817 callsite IL_0091: callvirt instance class [System]System.Net.IPEndPoint[] [System]System.Net.NetworkInformation.IPGlobalProperties::GetActiveTcpListeners() L1118746: .method public hidebysig static int32 FindFreeTCPPort([opt] int32 startPort) cil managed
runs\offline-evidence-intake\zyl-qqfile-20260709\metadata\c28-il\IMPlatformClient.exe.il:1119636 reference IL_0009: stsfld class [System]System.Net.Sockets.TcpListener IMPP.Client.Business.TCPFileManage.TCPFileManager::_listener L1119622: .method private hidebysig specialname rtspecialname static
runs\offline-evidence-intake\zyl-qqfile-20260709\metadata\c28-il\smack.dll.il:64917 reference .field private class com.vision.smack.socks5.TCPSocks5Server '<Server>k__BackingField' L64879: .method public hidebysig specialname rtspecialname
runs\offline-evidence-intake\zyl-qqfile-20260709\metadata\c28-il\smack.dll.il:64926 signature_continuation instance void .ctor(class com.vision.smack.socks5.TCPSocks5Server server, L64925: .method public hidebysig specialname rtspecialname
runs\offline-evidence-intake\zyl-qqfile-20260709\metadata\c28-il\smack.dll.il:64935 callsite IL_0008: call instance void com.vision.smack.socks5.TCPSocks5Connection::set_Server(class com.vision.smack.socks5.TCPSocks5Server) L64925: .method public hidebysig specialname rtspecialname
runs\offline-evidence-intake\zyl-qqfile-20260709\metadata\c28-il\smack.dll.il:64942 method_header .method private hidebysig specialname instance class com.vision.smack.socks5.TCPSocks5Server L64942: .method private hidebysig specialname instance class com.vision.smack.socks5.TCPSocks5Server
runs\offline-evidence-intake\zyl-qqfile-20260709\metadata\c28-il\smack.dll.il:64949 reference IL_0001: ldfld class com.vision.smack.socks5.TCPSocks5Server com.vision.smack.socks5.TCPSocks5Connection::'<Server>k__BackingField' L64942: .method private hidebysig specialname instance class com.vision.smack.socks5.TCPSocks5Server
runs\offline-evidence-intake\zyl-qqfile-20260709\metadata\c28-il\smack.dll.il:64954 reference set_Server(class com.vision.smack.socks5.TCPSocks5Server 'value') cil managed L64953: .method private hidebysig specialname instance void
runs\offline-evidence-intake\zyl-qqfile-20260709\metadata\c28-il\smack.dll.il:64961 reference IL_0002: stfld class com.vision.smack.socks5.TCPSocks5Server com.vision.smack.socks5.TCPSocks5Connection::'<Server>k__BackingField' L64953: .method private hidebysig specialname instance void
runs\offline-evidence-intake\zyl-qqfile-20260709\metadata\c28-il\smack.dll.il:65018 callsite IL_0001: call instance class com.vision.smack.socks5.TCPSocks5Server com.vision.smack.socks5.TCPSocks5Connection::get_Server() L65012: .method private hidebysig instance void
runs\offline-evidence-intake\zyl-qqfile-20260709\metadata\c28-il\smack.dll.il:65019 callsite IL_0006: callvirt instance bool com.vision.smack.socks5.TCPSocks5Server::get_IsStarting() L65012: .method private hidebysig instance void
runs\offline-evidence-intake\zyl-qqfile-20260709\metadata\c28-il\smack.dll.il:65027 callsite IL_0016: call instance class com.vision.smack.socks5.TCPSocks5Server com.vision.smack.socks5.TCPSocks5Connection::get_Server() L65012: .method private hidebysig instance void
runs\offline-evidence-intake\zyl-qqfile-20260709\metadata\c28-il\smack.dll.il:65028 callsite IL_001b: callvirt instance bool com.vision.smack.socks5.TCPSocks5Server::get_RequireValidate() L65012: .method private hidebysig instance void

Decision

No existing IPC/plugin/local HTTP bridge is confirmed usable for B-route text send or file send. The next B-route branch should be in_process_adapter_research. Until that exists, an external sidecar can only do preview/probe work, while A-route/RPA remains backup-only.

Next work

  1. Update the B-route next plan and capability source matrix with in_process_adapter_research as the offline decision.
  2. Create a separate plan before implementing any in-process adapter work.
  3. Do not promote RPA beyond backup in this branch.