Editing Talk:050.003

= Metadata Mapping =

== Lv0 (clean) ==

<pre>
00 00 00 00 00 00 05 30 │ 00 00 00 01 00 00 00 02
00 00 00 08 00 00 00 30 │ 00 00 00 00 00 00 00 00
00 00 00 00 00 01 05 80 │ 00 00 00 00 00 00 03 68
00 00 00 02 00 00 00 00 │ 00 00 00 02 00 00 00 00
00 00 00 03 00 00 00 02 │ 00 00 00 03 00 00 00 01
00 00 00 00 00 02 07 A0 │ 00 00 00 00 00 03 4A F0
00 00 00 02 00 00 00 01 │ 00 00 00 02 00 00 00 04
00 00 00 03 00 00 00 06 │ 00 00 00 07 00 00 00 01
60 16 B2 9B 20 D7 09 84 │ 7B 2A 97 60 5F A3 56 AA
CE 10 25 50 00 00 00 00 │ 00 00 00 00 00 00 00 00
</pre>

= Metadata similarities =

== Between lv1 ==

<pre>
0000000 0000 0000 0000 0000 0000 0000 0000 0000
*
00000f0 6868 6868 6868 6868 6868 6868 6868 6868 <- hash 1
0000100 6868 6868 0000 0000 0000 0000 0000 0000
0000110 0000 0000 0000 0000 0000 0000 0000 0000
*
0000130 6868 6868 6868 6868 6868 6868 6868 6868 <- hash 2
0000140 6868 6868 0000 0000 0000 0000 0000 0000
0000150 0000 0000 0000 0000 0000 0000 0000 0000
*
0000170 6868 6868 6868 6868 6868 6868 6868 6868 <- hash 3
0000180 6868 6868 0000 0000 0000 0000 0000 0000
0000190 0000 0000 0000 0000 0000 0000 0000 0000
*
00001b0 7272 7272 7272 7272 7272 7272 7272 7272
00001c0 7272 7272 7372 7373 7373 7373 7373 7373
00001d0 7373 7373 7373 7373 7373 0000 0000 0000
00001e0 0000 0000 0000 0000 0000 0000 0000 0000
*
0000220

</pre>

== Between lv0/updater ==

<pre>
0000000 XXXX XXXX XXXX XXXX XXXX XXXX XXXX XXXX
*
00000c0 HHHH HHHH HHHH HHHH HHHH HHHH HHHH HHHH <- Hash 1
00000d0 HHHH HHHH XXXX XXXX XXXX XXXX XXXX XXXX
00000e0 XXXX XXXX XXXX XXXX XXXX XXXX XXXX XXXX
*
0000100 HHHH HHHH HHHH HHHH HHHH HHHH HHHH HHHH <- Hash 2
0000110 HHHH HHHH XXXX XXXX XXXX XXXX XXXX XXXX
0000120 XXXX XXXX XXXX XXXX XXXX XXXX XXXX XXXX
*
0000140 RRRR RRRR RRRR RRRR RRRR RRRR RRRR RRRR <- R point
0000150 RRRR RRRR RRSS SSSS SSSS SSSS SSSS SSSS <- S point
0000160 SSSS SSSS SSSS SSSS SSSS XXXX XXXX XXXX
0000170 XXXX XXXX XXXX XXXX XXXX XXXX XXXX XXXX
*
0000190
</pre>

== Between lv2 ==

<pre>
0000000 0000 0000 0000 0000 0000 0000 0000 0000
*
0000090 6868 6868 6868 6868 6868 6868 6868 6868 <- hash 1
00000a0 6868 6868 0000 0000 0000 0000 0000 0000
00000b0 0000 0000 0000 0000 0000 0000 0000 0000
*
00000d0 6868 6868 6868 6868 6868 6868 6868 6868 <- hash 2
00000e0 6868 6868 0000 0000 0000 0000 0000 0000
00000f0 0000 0000 0000 0000 0000 0000 0000 0000
*
0000110 7272 7272 7272 7272 7272 7272 7272 7272 <- r
0000120 7272 7272 7372 7373 7373 7373 7373 7373 <- s
0000130 7373 7373 7373 7373 7373 0000 0000 0000
0000140 0000 0000 0000 0000 0000 0000 0000 0000
*
00001b0
</pre>

== Between sys_init selfs ==

<pre>
0000000 0000 0000 0000 0000 0000 0000 0000 0000
*
00000c0 6868 6868 6868 6868 6868 6868 6868 6868 <- hash 1
00000d0 6868 6868 0000 0000 0000 0000 0000 0000
00000e0 0000 0000 0000 0000 0000 0000 0000 0000
*
0000100 6868 6868 6868 6868 6868 6868 6868 6868 <- hash 2
0000110 6868 6868 0000 0000 0000 0000 0000 0000
0000120 0000 0000 0000 0000 0000 0000 0000 0000
*
0000140 6868 6868 6868 6868 6868 6868 6868 6868 <- hash 3
0000150 6868 6868 0000 0000 0000 0000 0000 0000
0000160 0000 0000 0000 0000 0000 0000 0000 0000
*
0000180 7272 7272 7272 7272 7272 7272 7272 7272 <- r
0000190 7272 7272 7372 7373 7373 7373 7373 7373 <- s
00001a0 7373 7373 7373 7373 7373 0000 0000 0000
00001b0 0000 0000 0000 0000 0000 0000 0000 0000
*
0000200
</pre>

== Between lv0/updater and lv1==

<pre>
0000000 XXXX XXXX XXXX XXXX XXXX XXXX XXXX XXXX
*
00000c0 HHHH HHHH HHHH HHHH HHHH HHHH HHHH HHHH <- Hash 1
00000d0 HHHH HHHH XXXX XXXX XXXX XXXX XXXX XXXX
00000e0 7d80 fcde a1ed 8b27 b420 d3f0 5d3d d200
00000f0 22HH 22HH 22HH 22HH 22HH 22HH 22HH 22HH <- Hash2
0000100 22HH 22HH HHHH HHHH HHHH HHHH HHHH HHHH <- Hash3 overlapped with Hash2
0000110 HHHH HHHH 0b7e 27a8 76d3 93dc 420f 5c9a <- Possible Key? (XX XX XX XX 7e 0b a8 [27]  d3 76 dc [93] 0f 42 9a [5c])
0000120 dfb1 ef36 0898 284a 9244 9c01 21d2 6cce
0000130 HHHH HHHH HHHH HHHH HHHH HHHH HHHH HHHH <- Hash 4
0000140 HHHH HHHH 994d 1e47 88b9 674d 07ea 6045
0000150 0f95 cf31 0b7e HHHH HHHH HHHH HHHH HHHH <- Hash 5
0000160 HHHH HHHH HHHH HHHH HHHH 44f1 7cef bfce
0000170 39da eea3 6b5e 0d4b 5522 efbf 6095 9018
0000180 d8af 0907 XXXX XXXX XXXX XXXX XXXX XXXX
0000190

</pre>

= Structure (from first hash until signature) =

{| class="wikitable FCK__ShowTableBorders"
|-
! Size !! Description
|-
| 0x14 || Hash of Section
|-
| 0x0C || Padding?
|-
| 0x10 || Key?
|-
| 0x10 || Iv?
|-
|}

This repeats until signature which has the following structure...

= Structure (signature) =

{| class="wikitable FCK__ShowTableBorders"
|-
! Size !! Description
|-
| 0x15 || R(Starts with 00, when xored in same position returns 00 due to crypto fail)
|-
| 0x15 || S(Starts with 00)
|-
| Remaining || Padding?
|-
|}

* Note: If the hashes of a section match (which usually happens with the data section between small revision changes) you'll see 00 in the xor

= Possible Keys and IVs (Meta) =

== Lv1 ==
<pre>
key:  F4 41 B3 8B 7E 0B A8 27 D3 76 DC 93 0F 42 9A 5C
                           
iv:   31 A2 E8 10 75 A9 6D A9 64 26 F1 44 EF 7C CE BF
                                            
</pre>

== Lv0/Updater ==
<pre>
key:  80 7D DE FF ED A1 27 81 20 B4 F0 D8 3D 5D 00 D3 
                           
iv:   B5 EA 43 1C 82 85 54 C4 E5 1D 4E 93 AF 98 EB 67
                           
</pre>

Notes:

* xoring lv0 key with lv1 key will return delta of
74 3C 6D 74 93 AA 8F A6 F3 C2 2C 4B 32 1F 9A 8F
* xoring lv0 iv with lv1 iv will return delta of
84 48 AB 0C F7 2C 39 6D 81 3B BF D7 40 E4 25 D8
* xoring lv0 key with lv1 iv will return delta of
B1 DF 36 EF 98 08 4A 28 44 92 01 9C D2 21 CE 6C
* xoring 00 00 00 00 00 00 00 00 00 00 00 00 with lv1 key returns
7E 0B A8 27 D3 76 DC 93 0F 42 9A 5C
* xoring lv0 partial hash 2 with lv1 key returns delta of
13 4B 2E 18
* Signatures always start with 00
* Sizes of sections can be found at the self header. in the case of two section selfs, offsets 0xEC and 0x11C will tell you the sizes.
* You can double check the first section hash of lv0! just go to the plaintext after the first encrypted section, select the decrypted one with size X bytes (0xEC) and calculate sha1sum

== Lv2 ==
<pre>
key: BE 56 02 4D 8C 05 1D 07 54 FC BF 10 11 EA 7F 9C

iv:  46 0A AA 74 9A E2 C5 20 D0 C0 86 2A 28 D3 B5 3C
</pre>

== Sys init selfs ==

Same as for LV2.

= Possible Hashes (Meta) =

== lv0 (clean) ==

* hash 1

<pre>6016b29b20da2e777b2a97605faa1e6bce102550</pre>

* hash 2

<pre>d43303bc90861ca3704ab17a54f592b5671346e9</pre>

== lv1 (clean) ==

* hash 2

<pre>
XX XX XX XX XX XX XX XX XX XX XX XX XX XX XX XX
3F XX XX XX
</pre>

* hash 3

<pre>
XX XX XX XX XX XX XX XX XX XX BF EF 95 60 18 90 
AF D8 07 09
</pre>

= Possible Signatures (Meta) =

== sys_init_app.self (clean) ==
<pre>
R: 00 2F 84 BC 4B AF D9 D7 27 3A FC 7B B2 9A 61 F2 BB A5 B3 30 B9

S: 00 6C FB 58 A7 61 89 2A 67 BB 51 D5 55 84 DB B3 41 75 6D 89 47
</pre>

== sys_init_ios.self (clean) ==
<pre>
R: 00 2F 84 BC 4B AF D9 D7 27 3A FC 7B B2 9A 61 F2 BB A5 B3 30 B9

S: 00 52 A7 31 DD 2E EF 04 25 51 97 08 0B 36 DB 4A 56 B3 17 5D D9
</pre>

== lv2_kernel.self  ==
<pre>
R: 00 2F 84 BC 4B AF D9 D7 27 3A FC 7B B2 9A 61 F2 BB A5 B3 30 B9

S: 00 13 A2 F5 3C 28 29 03 F4 EC 46 XX XX XX XX XX XX XX XX XX XX
</pre>

== lv1.self ==
<pre>
R: 00 6C 57 C0 A7 5A A4 A7 EE 33 77 54 09 72 10 F2 29 C4 BB DA C9
S1: 00 7A AD 2A E3 7E BC BC 55 52 E7 0E 60 0C 15 13 B8 69 29 C9 D0
S2: 00 81 C8 DD 03 19 A2 8B 8E 30 F9 F0 64 AB 98 50 8E D3 63 FE 42
</pre>

== lv0 ==

same R as lv1

= Meta List =

Note: Some Metas are corrupt. Most lv1 and lv0 metas are perfect however. Contains extra metas

https://dl.dropboxusercontent.com/u/35197530/coolstuff/meta.zip