Files
mxaccess/analysis/proxy/mxasbclient-probe-stage13-decode.txt
T
Joseph Doherty fe2a6db786
rust / build / test / clippy / fmt (push) Has been cancelled
Initial project state: .NET reference, design, Rust port (M0+M1), evidence
Layout:
- src/                    .NET 10 x64 reference: MxNativeCodec, MxNativeClient,
                          MxAsbClient, probes, tests, harnesses. Executable spec.
- design/                 Architectural plan for the Rust port (M0–M6), error
                          model, protocol invariants, risks (R1–R16), adversarial
                          review log (review.md).
- rust/                   Rust workspace. M0 skeleton + M1 codec parity.
                          mxaccess-codec: 215 unit tests + 2 cross-implementation
                          parity tests (byte-identical against .NET reference).
                          Other crates are M0 stubs awaiting M2+.
- captures/               Frida + netsh + pcap evidence per CLAUDE.md
                          ("captures are evidence, not throwaway logs").
- analysis/               Decompiled C# (frida/proxy/decompiled-*),
                          Ghidra exports for native DLLs (`exports/` only —
                          working state at `projects/` and AVEVA's input
                          binaries at `input/` are gitignored).
- docs/                   Reverse-engineering reference docs.
- tools/                  Setup-LiveProbeEnv.ps1 (Infisical credential fetcher),
                          Compute-Crc.ps1 (.NET parity helper).
- .github/workflows/      Rust CI: fmt + build + test + clippy on Windows.
- LICENSE                 MIT (Joseph Doherty, 2026).

Verified:
- cargo test --workspace → 217 passed (215 unit + 2 .NET parity), 0 failed
- cargo clippy --workspace -- -D warnings → clean
- cargo fmt --all -- --check → clean
- cargo publish --dry-run -p mxaccess-codec → packages cleanly

Excluded from history (see .gitignore):
- **/bin, **/obj, **/target — build artifacts
- analysis/ghidra/projects/ — Ghidra working state (regenerable)
- analysis/ghidra/input/ — AVEVA proprietary DLLs (vendor IP)

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
2026-05-05 06:21:00 -04:00

229 lines
17 KiB
Plaintext

process=x64:True
endpoint=net.tcp://desktop-6jl3kko/ASBService/Default_ZB_MxDataProvider/IDataV2
tag=TestChildObject.TestInt
asb.stage=read-passphrase
asb.stage=registry-solution
asb.stage=registry-open-solution
asb.stage=registry-unprotect
asb.stage=registry-passphrase-ready
asb.stage=create-authenticator
asb.stage=authenticator-passphrase-bytes
asb.stage=authenticator-create-private
asb.stage=authenticator-private-ready
asb.stage=authenticator-modpow
asb.stage=authenticator-public-ready
asb.stage=authenticator-ready
asb.serializer.behaviors-replaced=4
asb.stage=open-factory
asb.stage=open-channel
asb.stage=connect
asb.stage=authenticate-me
asb.stage=connected
connect=True
asb.serializer.start=MxAsbClient.ItemIdentity[]
asb.serializer.content=MxAsbClient.ItemIdentity[]
asb.serializer.bytes=MxAsbClient.ItemIdentity[]:71:AQAAAAAAAQAuAAAAVABlAHMAdABDAGgAaQBsAGQATwBiAGoAZQBjAHQALgBUAGUAcwB0AEkAbgB0AAAAAAAAAAAAAAAAAAA=
asb.register.request=<?xml version="1.0" encoding="utf-16"?>
<s:Envelope xmlns:a="http://www.w3.org/2005/08/addressing" xmlns:s="http://www.w3.org/2003/05/soap-envelope">
<s:Header>
<a:Action s:mustUnderstand="1">http://ASB.IDataV2:registerItemsIn</a:Action>
<h:ConnectionValidator xmlns:i="http://www.w3.org/2001/XMLSchema-instance" xmlns:h="http://asb.contracts.headers/20111111">
<connectionIdField xmlns="http://schemas.datacontract.org/2004/07/ArchestrAServices.ASBContract">e02fd6ca-a051-4f13-b884-aaedfcac671b</connectionIdField>
<messageAuthenticationCodeField xmlns="http://schemas.datacontract.org/2004/07/ArchestrAServices.ASBContract" />
<messageNumberField xmlns="http://schemas.datacontract.org/2004/07/ArchestrAServices.ASBContract">2</messageNumberField>
<signatureInitializationVectorField xmlns="http://schemas.datacontract.org/2004/07/ArchestrAServices.ASBContract" />
</h:ConnectionValidator>
<a:MessageID>urn:uuid:c20e0bf0-d032-4e8b-a764-87e72065fd77</a:MessageID>
<a:ReplyTo>
<a:Address>http://www.w3.org/2005/08/addressing/anonymous</a:Address>
</a:ReplyTo>
</s:Header>
<s:Body>
<RegisterItemsRequest xmlns="urn:msg.data.asb.iom:2">
<ASBIData>AQAAAAAAAQAuAAAAVABlAHMAdABDAGgAaQBsAGQATwBiAGoAZQBjAHQALgBUAGUAcwB0AEkAbgB0AAAAAAAAAAAAAAAAAAA=</ASBIData>
<RequireId>true</RequireId>
<RegisterOnly>true</RegisterOnly>
</RegisterItemsRequest>
</s:Body>
</s:Envelope>
asb.serializer.start=MxAsbClient.ItemIdentity[]
asb.serializer.content=MxAsbClient.ItemIdentity[]
asb.serializer.bytes=MxAsbClient.ItemIdentity[]:71:AQAAAAAAAQAuAAAAVABlAHMAdABDAGgAaQBsAGQATwBiAGoAZQBjAHQALgBUAGUAcwB0AEkAbgB0AAAAAAAAAAAAAAAAAAA=
asb.reply=<?xml version="1.0" encoding="utf-16"?>
<s:Envelope xmlns:s="http://www.w3.org/2003/05/soap-envelope" xmlns:a="http://www.w3.org/2005/08/addressing">
<s:Header>
<h:ConnectionValidator xmlns:h="http://asb.contracts.headers/20111111" xmlns:i="http://www.w3.org/2001/XMLSchema-instance">
<connectionIdField xmlns="http://schemas.datacontract.org/2004/07/ArchestrAServices.ASBContract">00000000-0000-0000-0000-000000000000</connectionIdField>
<messageAuthenticationCodeField i:nil="true" xmlns="http://schemas.datacontract.org/2004/07/ArchestrAServices.ASBContract"></messageAuthenticationCodeField>
<messageNumberField xmlns="http://schemas.datacontract.org/2004/07/ArchestrAServices.ASBContract">0</messageNumberField>
<signatureInitializationVectorField i:nil="true" xmlns="http://schemas.datacontract.org/2004/07/ArchestrAServices.ASBContract"></signatureInitializationVectorField>
</h:ConnectionValidator>
<a:RelatesTo>urn:uuid:c20e0bf0-d032-4e8b-a764-87e72065fd77</a:RelatesTo>
<a:To s:mustUnderstand="1">http://www.w3.org/2005/08/addressing/anonymous</a:To>
</s:Header>
<s:Body>
<RegisterItemsResponse xmlns="urn:msg.data.asb.iom:2">
<Result xmlns="http://asb.contracts.messages/20111111" xmlns:b="http://schemas.datacontract.org/2004/07/ArchestrAServices.ASBContract" xmlns:i="http://www.w3.org/2001/XMLSchema-instance">
<b:errorMessagesField i:nil="true" xmlns:c="http://schemas.microsoft.com/2003/10/Serialization/Arrays"></b:errorMessagesField>
<b:extensionsField i:nil="true"></b:extensionsField>
<b:informationMessagesField i:nil="true" xmlns:c="http://schemas.microsoft.com/2003/10/Serialization/Arrays"></b:informationMessagesField>
<b:locationField i:nil="true"></b:locationField>
<b:resultCodeField>1</b:resultCodeField>
<b:specificErrorCodeField>0</b:specificErrorCodeField>
<b:statusCodeField>0</b:statusCodeField>
<b:successField>false</b:successField>
<b:successMessagesField i:nil="true" xmlns:c="http://schemas.microsoft.com/2003/10/Serialization/Arrays"></b:successMessagesField>
</Result>
<ASBIData></ASBIData>
<ItemCapabilities i:nil="true" xmlns:b="http://schemas.datacontract.org/2004/07/ArchestrAServices.ASBIDataV2Contract" xmlns:i="http://www.w3.org/2001/XMLSchema-instance"></ItemCapabilities>
</RegisterItemsResponse>
</s:Body>
</s:Envelope>
asb.serializer.read-bytes=MxAsbClient.ItemStatus[]:0:
register_error=0x00000000 status=0x00000000 specific=0x00000000
asb.serializer.start=MxAsbClient.ItemIdentity[]
asb.serializer.content=MxAsbClient.ItemIdentity[]
asb.serializer.bytes=MxAsbClient.ItemIdentity[]:71:AQAAAAAAAQAuAAAAVABlAHMAdABDAGgAaQBsAGQATwBiAGoAZQBjAHQALgBUAGUAcwB0AEkAbgB0AAAAAAAAAAAAAAAAAAA=
asb.reply=<?xml version="1.0" encoding="utf-16"?>
<s:Envelope xmlns:s="http://www.w3.org/2003/05/soap-envelope" xmlns:a="http://www.w3.org/2005/08/addressing">
<s:Header>
<h:ConnectionValidator xmlns:h="http://asb.contracts.headers/20111111" xmlns:i="http://www.w3.org/2001/XMLSchema-instance">
<connectionIdField xmlns="http://schemas.datacontract.org/2004/07/ArchestrAServices.ASBContract">00000000-0000-0000-0000-000000000000</connectionIdField>
<messageAuthenticationCodeField i:nil="true" xmlns="http://schemas.datacontract.org/2004/07/ArchestrAServices.ASBContract"></messageAuthenticationCodeField>
<messageNumberField xmlns="http://schemas.datacontract.org/2004/07/ArchestrAServices.ASBContract">0</messageNumberField>
<signatureInitializationVectorField i:nil="true" xmlns="http://schemas.datacontract.org/2004/07/ArchestrAServices.ASBContract"></signatureInitializationVectorField>
</h:ConnectionValidator>
<a:RelatesTo>urn:uuid:81b42133-76cc-419b-8b3e-dd270b76762a</a:RelatesTo>
<a:To s:mustUnderstand="1">http://www.w3.org/2005/08/addressing/anonymous</a:To>
</s:Header>
<s:Body>
<ReadResponse xmlns="urn:msg.data.asb.iom:2">
<Result xmlns="http://asb.contracts.messages/20111111" xmlns:b="http://schemas.datacontract.org/2004/07/ArchestrAServices.ASBContract" xmlns:i="http://www.w3.org/2001/XMLSchema-instance">
<b:errorMessagesField i:nil="true" xmlns:c="http://schemas.microsoft.com/2003/10/Serialization/Arrays"></b:errorMessagesField>
<b:extensionsField i:nil="true"></b:extensionsField>
<b:informationMessagesField i:nil="true" xmlns:c="http://schemas.microsoft.com/2003/10/Serialization/Arrays"></b:informationMessagesField>
<b:locationField i:nil="true"></b:locationField>
<b:resultCodeField>0</b:resultCodeField>
<b:specificErrorCodeField>0</b:specificErrorCodeField>
<b:statusCodeField>0</b:statusCodeField>
<b:successField>true</b:successField>
<b:successMessagesField i:nil="true" xmlns:c="http://schemas.microsoft.com/2003/10/Serialization/Arrays"></b:successMessagesField>
</Result>
<ASBIData>AQAAAAAAAAAuAAAAVABlAHMAdABDAGgAaQBsAGQATwBiAGoAZQBjAHQALgBUAGUAcwB0AEkAbgB0AAAAAAABAAAAAAD//wEAAAAAAAAAAQ==</ASBIData>
<ASBIData>AQAAACBHQhVSo96IAQQABAAAAAQAAACRAQAACQkAAACCgwXvAoYHwAA=</ASBIData>
</ReadResponse>
</s:Body>
</s:Envelope>
asb.serializer.read-bytes=MxAsbClient.ItemStatus[]:79:AQAAAAAAAAAuAAAAVABlAHMAdABDAGgAaQBsAGQATwBiAGoAZQBjAHQALgBUAGUAcwB0AEkAbgB0AAAAAAABAAAAAAD//wEAAAAAAAAAAQ==
asb.serializer.read-bytes=MxAsbClient.RuntimeValue[]:41:AQAAACBHQhVSo96IAQQABAAAAAQAAACRAQAACQkAAACCgwXvAoYHwAA=
read_error=0x00000000 status=0x00000000 specific=0x00000000
read_status[0]=item:TestChildObject.TestInt id:18446462598732840961 id_specified:True error:0x00000000 error_specified:True status_count:0 status_payload_len:0
read_value[0]=type:4 length:4 payload_len:4 preview:401
read_value[0].timestamp=2026-04-26T01:10:07.2500000-04:00 timestamp_specified=True
read_value[0].status_count=9 status_payload_len=9
asb.serializer.start=MxAsbClient.ItemIdentity[]
asb.serializer.content=MxAsbClient.ItemIdentity[]
asb.serializer.bytes=MxAsbClient.ItemIdentity[]:71:AQAAAAAAAQAuAAAAVABlAHMAdABDAGgAaQBsAGQATwBiAGoAZQBjAHQALgBUAGUAcwB0AEkAbgB0AAAAAAAAAAAAAAAAAAA=
asb.reply=<?xml version="1.0" encoding="utf-16"?>
<s:Envelope xmlns:s="http://www.w3.org/2003/05/soap-envelope" xmlns:a="http://www.w3.org/2005/08/addressing">
<s:Header>
<h:ConnectionValidator xmlns:h="http://asb.contracts.headers/20111111" xmlns:i="http://www.w3.org/2001/XMLSchema-instance">
<connectionIdField xmlns="http://schemas.datacontract.org/2004/07/ArchestrAServices.ASBContract">00000000-0000-0000-0000-000000000000</connectionIdField>
<messageAuthenticationCodeField i:nil="true" xmlns="http://schemas.datacontract.org/2004/07/ArchestrAServices.ASBContract"></messageAuthenticationCodeField>
<messageNumberField xmlns="http://schemas.datacontract.org/2004/07/ArchestrAServices.ASBContract">0</messageNumberField>
<signatureInitializationVectorField i:nil="true" xmlns="http://schemas.datacontract.org/2004/07/ArchestrAServices.ASBContract"></signatureInitializationVectorField>
</h:ConnectionValidator>
<a:RelatesTo>urn:uuid:bf932c02-f9f9-40cb-93be-6bf1e0bcc2ab</a:RelatesTo>
<a:To s:mustUnderstand="1">http://www.w3.org/2005/08/addressing/anonymous</a:To>
</s:Header>
<s:Body>
<WriteBasicResponse xmlns="urn:msg.data.asb.iom:2">
<Result xmlns="http://asb.contracts.messages/20111111" xmlns:b="http://schemas.datacontract.org/2004/07/ArchestrAServices.ASBContract" xmlns:i="http://www.w3.org/2001/XMLSchema-instance">
<b:errorMessagesField i:nil="true" xmlns:c="http://schemas.microsoft.com/2003/10/Serialization/Arrays"></b:errorMessagesField>
<b:extensionsField i:nil="true"></b:extensionsField>
<b:informationMessagesField i:nil="true" xmlns:c="http://schemas.microsoft.com/2003/10/Serialization/Arrays"></b:informationMessagesField>
<b:locationField i:nil="true"></b:locationField>
<b:resultCodeField>12</b:resultCodeField>
<b:specificErrorCodeField>2147483648</b:specificErrorCodeField>
<b:statusCodeField>32</b:statusCodeField>
<b:successField>false</b:successField>
<b:successMessagesField i:nil="true" xmlns:c="http://schemas.microsoft.com/2003/10/Serialization/Arrays"></b:successMessagesField>
</Result>
<ASBIData></ASBIData>
</WriteBasicResponse>
</s:Body>
</s:Envelope>
asb.serializer.read-bytes=MxAsbClient.ItemStatus[]:0:
write_error=0x00000000 status=0x00000000 specific=0x00000000 handle=0xA5B21001
asb.serializer.start=MxAsbClient.ItemIdentity[]
asb.serializer.content=MxAsbClient.ItemIdentity[]
asb.serializer.bytes=MxAsbClient.ItemIdentity[]:71:AQAAAAAAAQAuAAAAVABlAHMAdABDAGgAaQBsAGQATwBiAGoAZQBjAHQALgBUAGUAcwB0AEkAbgB0AAAAAAAAAAAAAAAAAAA=
asb.reply=<?xml version="1.0" encoding="utf-16"?>
<s:Envelope xmlns:s="http://www.w3.org/2003/05/soap-envelope" xmlns:a="http://www.w3.org/2005/08/addressing">
<s:Header>
<h:ConnectionValidator xmlns:h="http://asb.contracts.headers/20111111" xmlns:i="http://www.w3.org/2001/XMLSchema-instance">
<connectionIdField xmlns="http://schemas.datacontract.org/2004/07/ArchestrAServices.ASBContract">00000000-0000-0000-0000-000000000000</connectionIdField>
<messageAuthenticationCodeField i:nil="true" xmlns="http://schemas.datacontract.org/2004/07/ArchestrAServices.ASBContract"></messageAuthenticationCodeField>
<messageNumberField xmlns="http://schemas.datacontract.org/2004/07/ArchestrAServices.ASBContract">0</messageNumberField>
<signatureInitializationVectorField i:nil="true" xmlns="http://schemas.datacontract.org/2004/07/ArchestrAServices.ASBContract"></signatureInitializationVectorField>
</h:ConnectionValidator>
<a:RelatesTo>urn:uuid:0e6d26c2-351e-43e2-902c-b8ac8757bffd</a:RelatesTo>
<a:To s:mustUnderstand="1">http://www.w3.org/2005/08/addressing/anonymous</a:To>
</s:Header>
<s:Body>
<ReadResponse xmlns="urn:msg.data.asb.iom:2">
<Result xmlns="http://asb.contracts.messages/20111111" xmlns:b="http://schemas.datacontract.org/2004/07/ArchestrAServices.ASBContract" xmlns:i="http://www.w3.org/2001/XMLSchema-instance">
<b:errorMessagesField i:nil="true" xmlns:c="http://schemas.microsoft.com/2003/10/Serialization/Arrays"></b:errorMessagesField>
<b:extensionsField i:nil="true"></b:extensionsField>
<b:informationMessagesField i:nil="true" xmlns:c="http://schemas.microsoft.com/2003/10/Serialization/Arrays"></b:informationMessagesField>
<b:locationField i:nil="true"></b:locationField>
<b:resultCodeField>0</b:resultCodeField>
<b:specificErrorCodeField>0</b:specificErrorCodeField>
<b:statusCodeField>0</b:statusCodeField>
<b:successField>true</b:successField>
<b:successMessagesField i:nil="true" xmlns:c="http://schemas.microsoft.com/2003/10/Serialization/Arrays"></b:successMessagesField>
</Result>
<ASBIData>AQAAAAAAAAAuAAAAVABlAHMAdABDAGgAaQBsAGQATwBiAGoAZQBjAHQALgBUAGUAcwB0AEkAbgB0AAAAAAACAAAAAAD//wEAAAAAAAAAAQ==</ASBIData>
<ASBIData>AQAAACBHQhVSo96IAQQABAAAAAQAAACRAQAACQkAAACCgwXvAoYHwAA=</ASBIData>
</ReadResponse>
</s:Body>
</s:Envelope>
asb.serializer.read-bytes=MxAsbClient.ItemStatus[]:79:AQAAAAAAAAAuAAAAVABlAHMAdABDAGgAaQBsAGQATwBiAGoAZQBjAHQALgBUAGUAcwB0AEkAbgB0AAAAAAACAAAAAAD//wEAAAAAAAAAAQ==
asb.serializer.read-bytes=MxAsbClient.RuntimeValue[]:41:AQAAACBHQhVSo96IAQQABAAAAAQAAACRAQAACQkAAACCgwXvAoYHwAA=
read_after_write_error=0x00000000 status=0x00000000 specific=0x00000000
read_after_write_status[0]=item:TestChildObject.TestInt id:18446462598732840962 id_specified:True error:0x00000000 error_specified:True status_count:0 status_payload_len:0
read_after_write_value[0]=type:4 length:4 payload_len:4 preview:401
read_after_write_value[0].timestamp=2026-04-26T01:10:07.2500000-04:00 timestamp_specified=True
read_after_write_value[0].status_count=9 status_payload_len=9
asb.reply=<?xml version="1.0" encoding="utf-16"?>
<s:Envelope xmlns:s="http://www.w3.org/2003/05/soap-envelope" xmlns:a="http://www.w3.org/2005/08/addressing">
<s:Header>
<h:ConnectionValidator xmlns:h="http://asb.contracts.headers/20111111" xmlns:i="http://www.w3.org/2001/XMLSchema-instance">
<connectionIdField xmlns="http://schemas.datacontract.org/2004/07/ArchestrAServices.ASBContract">00000000-0000-0000-0000-000000000000</connectionIdField>
<messageAuthenticationCodeField i:nil="true" xmlns="http://schemas.datacontract.org/2004/07/ArchestrAServices.ASBContract"></messageAuthenticationCodeField>
<messageNumberField xmlns="http://schemas.datacontract.org/2004/07/ArchestrAServices.ASBContract">0</messageNumberField>
<signatureInitializationVectorField i:nil="true" xmlns="http://schemas.datacontract.org/2004/07/ArchestrAServices.ASBContract"></signatureInitializationVectorField>
</h:ConnectionValidator>
<a:RelatesTo>urn:uuid:ef9067bb-4cee-4e8b-a72b-a90f5a42b8b0</a:RelatesTo>
<a:To s:mustUnderstand="1">http://www.w3.org/2005/08/addressing/anonymous</a:To>
</s:Header>
<s:Body>
<PublishWriteCompleteResponse xmlns="urn:msg.data.asb.iom:2">
<Result xmlns="http://asb.contracts.messages/20111111" xmlns:b="http://schemas.datacontract.org/2004/07/ArchestrAServices.ASBContract" xmlns:i="http://www.w3.org/2001/XMLSchema-instance">
<b:errorMessagesField i:nil="true" xmlns:c="http://schemas.microsoft.com/2003/10/Serialization/Arrays"></b:errorMessagesField>
<b:extensionsField i:nil="true"></b:extensionsField>
<b:informationMessagesField i:nil="true" xmlns:c="http://schemas.microsoft.com/2003/10/Serialization/Arrays"></b:informationMessagesField>
<b:locationField i:nil="true"></b:locationField>
<b:resultCodeField>0</b:resultCodeField>
<b:specificErrorCodeField>0</b:specificErrorCodeField>
<b:statusCodeField>0</b:statusCodeField>
<b:successField>true</b:successField>
<b:successMessagesField i:nil="true" xmlns:c="http://schemas.microsoft.com/2003/10/Serialization/Arrays"></b:successMessagesField>
</Result>
<CompleteWrites i:nil="true" xmlns:b="http://schemas.datacontract.org/2004/07/ArchestrAServices.ASBIDataV2Contract" xmlns:i="http://www.w3.org/2001/XMLSchema-instance"></CompleteWrites>
</PublishWriteCompleteResponse>
</s:Body>
</s:Envelope>
publish_write_complete_error=0x00000000 status=0x00000000 specific=0x00000000
publish_write_complete_count=0