That's interesting, it should work - as I said, I tested it on my n800 before posting to make sure it still works. You could transfer the dump file to your desktop, open it in a hex editor and seek to the offset that the passcode exists in my unit (0x41028) and look around there for something that looks like it. From what I recall, it was quite obvious once I found it. Or send me the dump and I'll take a look for you (add see if I can fix my script to locate it properly).