wrt300n.img =========== - First 56 bytes (0x00 - 0x37) coming from binfile/wrt300n.pid - Next 8 bytes (0x38 - 0x3F) same sequence as for WRT350Nv2 - Rest padded with zero up to 0x1FF (no MD5SUM of file like for WRT350Nv2) - ZIP image of .bin file starting at offset 0x200 - (no 0xFF byte after ZIP image like for WRT350Nv2) wrt300n.bin =========== - binfile/redboot.bin at offset 0x0 coming from (0x80A0 = 0x2A) Size 0x04b184 (found at 0x8780, 0x8794, 0x87d0) - Padded with zero up to 0x05ff9f - 0x05ffa0 - 0x05FFFF filled with some values (sErCoM, etc.) ==> binfile/wrt300n.par 0x05ffb1 - 0x05ffe8 => binfile/wrt300n.pid - zImage Header at offset 0x060000 4 bytes: size of zImage, Rest padded - binfile/zImage at offset 0x060010 Size 0x11da18 - rootdir Header at offset 0x18fff0 4 bytes: size of rootdir, Rest padded - binfile/ap71-rootdir.sqsh at offset 0x190000 Size 0x20f000 - 0x3afff0 - 0x3affff filled with eRcOmM flag, version, etc. ==> binfile/wrt300n.par - Rest padded with zero up to 0x3fffff