Phone Lock Picking Continued

I have spent some more time on retrieving the phone lock code from Nokia e-series models. It appears that on e-series phones the security code is not stored in the permanent memory. However, I did manage to find a flag value in the permanent memory which is used to enable or disable the phone lock. On the e65, this is the value in field 308, sector 8. Setting this value to 0x00 disables the phone lock. On the e70, this value is stored in field 95 sector 0. Unfortunately the e71 appears not to store this flag value nor the phone lock code in the PM.

In short, it is difficult to predict where a certain model of the e-series will store its security code data. The best way to find this (at least, that is how I did it) is comparing memory dumps of a test model before and after changing security codes and enabling/disabling the code. I used the tool vbindiff to compare the dumps and find differences. The differences may indicate where security code data is stored.