399
edits
Changes
Sorry for the repost, just figured some stuff up...
| 0x0C
| 0x0C
| 0x04
| 0x04
| unknown (Ticket size?)
| Ticket size
|-
|-
| 0x10
| 0x10
| 0x18
| 0x18
| 0x04
| 0x04
| 0 (reserved, flag?)
| Content Size
|-
|-
| 0x1C
| 0x1C
| APP file size
| APP file size
|}
|}
The order of the sections in the header also is the order of them in the CIA file:
The order of the sections in the header also is the order of them in the CIA file:
* certificate chain
* certificate chain
* APP file data
* APP file data
The data of the files is decrypted.
The data of the files is decrypted.
If you sum up all the fields in the header you get 60 bytes less then the actual file size. (you need to add the 32 bytes of the header).
Question: Where are those 60 bytes at?