With a hex-editor, I found that in the iHAS624 B GL27 unlocked exe, the offset for the firmware is 0x0FAC47. Assuming that the firmware was uncompressed inside the file, I went to 0x2FAC47, but there was no sea of 0s as with the 324 B backup.
A few questions arise:
1) Is the firmware stored "raw" inside the exe?
2) Does the GL27 use random padding or is all 2 MB filled with FW?
The reason I'm asking is because my JM20337-based SATA-USB bridge bricked my drive due to fail 5% in during write so I need the raw fw file so that I can use MTKFlash to install 624B on my 224B. Also, must it strictly be MTKFlash or is the MTKFlash engine in DosFlash good enough?