399
edits
Changes
Sorry for the repost, just figured some stuff up...
Line 29:
Line 29:
| 0x0C
| 0x0C
| 0x04
| 0x04
−| unknown (Ticket size?)
+| Ticket size
|-
|-
| 0x10
| 0x10
Line 41:
Line 41:
| 0x18
| 0x18
| 0x04
| 0x04
−| 0 (reserved, flag?)
+| Content Size
|-
|-
| 0x1C
| 0x1C
Line 47:
Line 47:
| APP file size
| APP file size
|}
|}
+
The order of the sections in the header also is the order of them in the CIA file:
The order of the sections in the header also is the order of them in the CIA file:
* certificate chain
* certificate chain
Line 53:
Line 54:
* APP file data
* APP file data
The data of the files is decrypted.
The data of the files is decrypted.
+
+If you sum up all the fields in the header you get 60 bytes less then the actual file size. (you need to add the 32 bytes of the header).
+
+Question: Where are those 60 bytes at?