That was fast and impressive work!
Somebody from iRex should give you money for this...:-)
But this also brings me back to something else...I asked a while ago. but didn't really get a useful answer...
Can a variant of this procedure be used to switch off the WLAN completely? I don't mean permanently, only for the time between the activation of the hack and the rebooting of the device...