capture tag scenario method_result com_hook com_args_summary putrequest_size putrequest_value_offset putrequest_time_offset transferdata_size transferdata_value_offset transferdata_time_offset callback_size callback_value_offset callback_time_offset notes 036-frida-write-secured-test-int TestChildObject.TestInt write-secured 0x80004021 unsupported CLMXProxyServer.WriteSecured.variantA session=1 item=1 currentUser=1 verifier=0 vt=0x3 value=112 none none none none none none none none none Operate tag rejects WriteSecured before value-bearing PutRequest. 037-frida-write-secured2-test-int TestChildObject.TestInt write-secured2 E_INVALIDARG CLMXProxyServer.WriteSecured.variantB session=1 item=1 currentUser=1 verifier=0 vt=0x3 value=113 vt_date timestamp none none none none none none none none none Operate tag rejects WriteSecured2 before value-bearing PutRequest. 038-frida-write-secured-protectedvalue TestMachine_001.ProtectedValue write-secured 0x80004021 unsupported CLMXProxyServer.WriteSecured.variantA session=1 item=1 currentUser=1 verifier=0 vt=0xb value=true none none none none none none none none none SecuredWrite tag still rejects public WriteSecured before value-bearing PutRequest. 039-frida-write-secured-verified-protectedvalue1 TestMachine_001.ProtectedValue1 write-secured 0x80004021 unsupported CLMXProxyServer.WriteSecured.variantA session=1 item=1 currentUser=1 verifier=1 vt=0xb value=true none none none none none none none none none VerifiedWrite tag still rejects public WriteSecured before value-bearing PutRequest. 040-frida-write-normal-secured-protectedvalue TestMachine_001.ProtectedValue write success CLMXProxyServer.Write.variantA session=1 item=1 vt=0xb value=true user/security=2 37 18 none 83 64 none 85 84 75 Supported public route for SecuredWrite is normal Write with fourth argument 2. 041-frida-write-normal-verified-protectedvalue1 TestMachine_001.ProtectedValue1 write success CLMXProxyServer.Write.variantA session=1 item=1 vt=0xb value=true user/security=3 37 18 none 83 64 none 85 84 75 Supported public route for VerifiedWrite is normal Write with fourth argument 3. 042-frida-write2-test-int-timestamp TestChildObject.TestInt write2 success CLMXProxyServer.Write.variantB session=1 item=1 vt=0x3 value=114 vt_date timestamp user/security=1 40 18 24 86 64 70 88 84 75 Write2 embeds FILETIME at PutRequest offset 24 and callback offset 75.