Line 4:
Line 4:
(TO BE CONTINUED)
(TO BE CONTINUED)
−
−
=== Decryption ===
−
Decrypt the partition key at 0xa40 (offset to something that looks like a tmd file) + 0x1bf using the master key and the first 8 bytes at 0xa40 + 0x1dc as IV. You can then start decrypting the user data at offset 0xf40 using this key and an empty IV. It looks like .wad files are not encrypted and hashed in blocks like the discs.
=== Header ===
=== Header ===