I would like to introduce new method with respect for his great work...
Now you DON'T need ROM cooking!
Step 1. Unzip the attached file, and run either ConnSBM.CAB or ConnSBM_noproxy.CAB for your purpose.
- ConnSBM.CAB: make a connection, overwrite WirelessMgr_Service.dll and enable hidden proxy (webopen.softbank.ne.jp:8080), it is fully compatible as X01HT's standard connection.
- ConnSBM_noproxy.CAB: just make a connection (no WirelessMgr_Service.dll and hidden proxy installation).
- The connection will be created, however password entry is still empty at this moment.
Step 3. Copy Out.xml and WIFIwake.exe into \Windows folder.
Step 4. Just RUN WIFIwake.exe from \Windows.
- The password will be created into the connection made by ConnSBM.CAB.
- To confirm whether success or not, check the connection "Internet > SoftBank", and click "Edit -> Next -> Next". If "****************" is shown at the Password field, the password has been successfully created.
EDIT: Updated WIFIwake.exe as self-signed version. I've prepared Hermes and Universal version separately (the difference is internal string for each model name). For Universal, at least I could have successfully made the connection on the DarkForce WM6 for Universal.
Download ConnSBM_ORE2h.zip (for Hermes X01HT) or ConnSBM_ORE2u.zip (for Universal JASJAR) and try it again if the password is still blank.
IMPORTANT INFORMATION: It seems to depend on CID...
To make this operation correct on non-SuperCID device, it requires to edit internal device name and CID. The attached file for Hermes seems workable for X01HT(Model: HERM200/CID: VODAK801) or SuperCIDed HERM200 device only, and for Universal, also only for JASJAR (PU10/CDL__001) or SuperCIDed device.
If you cannot create PW, you need to edit CID (01C798h-01C7A7h) using Unicode or UTF-16 mode of binary editor (for non-HERM200 or PU10 device, Model [01C760h-01C76Fh] also), and sign yourself... However, if you burn them into your cooked ROM, it may works correctly without edit binary (I've successed on my JASJAR, using original WIFIwake.exe from X01HT).
You can determine your CID using info 2 command of mtty.exe.