@Semwize,
Good discovery! It works well when once I stopped being an idiot.
I'll have a think about how to change posts #1, #2 and the summary in #63 to reflect the new info.
Did you ever try this on earlier firmwares and, if so, what happened? I remember reading long ago that it didn't work, the encryption/obfuscation was mentioned. I just took this at face value and never actually tested it for myself.