GSM-Forum - View Single Post - Unlock all Alcatel BF BG even unsupported versions for free

numediaweb · 01-12-2004, 00:39

This tutorial shows you how to unlock all Alcatel BF or BG or new models for free, without using expensive soft like wray's or magician or.. you'll need only hexworkshop and a free soft to read and write flash of your mobile, like s2gsm patched by the great SPUNLOCK, you can find it at;
The first gift by Spunlock
the second
the third .. you will need also to use your brain :-)
……………………….. .
dedicated to people at gsm4arab.net especially to khalil -the great moderator- and all of you seekers for free unlocking :-)
…………………………. .
THE INDEX;
1 :: Reading the flash from phone
2 :: Finding the appropriate block
3 :: Unlocking the plash – creating own partial
4 :: Writing the flash to mobile
5 :: Extra
…………………………. .
1 :: Reading the flash from phone
let's say you got an new mobile phone with new firmware version for example BG3 525 ver 106 KI127, this version is not yet supported even with new $$$ unlocking soft :-). To read the flash , use henrich 1.82 soft, check first that it recognize flash type –amd or Thomson or..- if not use free soft like s2gsm to read the flash. For cable you can find it from many sites , me I work with self made cable once you read full flash check if it is (correctly read by looking to the size of file ex: 2MB or 4MB) then make 2 copies of that flash (for safety reasons)

…………………………. .
2 :: Finding the appropriate block
Now open your eyes ! !
The block is a set of data (64Kb) inside the flash for example the block
In a 2 MB flash would start from this address 00060000 and ends at 0006FFFF . To find the correct block open the copy of your flash with hexworkshop and search for this hex string 8009022802 if you get only one instance as a result, then you found the block, if more than one, write down the address where you encountered other instances. To verify that the block is correct search for this 2nd Hex string F0B5061C151C0C1C1F1C note down the address where it is found and repeat the same steps for this last hex string B00D1C1E1C .
Now you got a map of the flash, just compare the results you got and surely you will find the correct block( the correct block is the one that contains all the 3 Hex strings, or at least 2 of them)

…………………………. .
3 :: Unlocking the flash – creating own partial
well now you got 2 options either unlock the block and save it separately so that whenever you got the same phone version you write it directly by henrich (warning!!; check always if the soft support reading and writing block correctly) or you unlock the flash then upload it to your phone.
Anyway copy to a new file the full block so as to make your job more easier when trying to edit the locks.
Here's how you unlock; Alcatel made 3 levels/locks in locking their phones, to unlock them you must replace their data with this:
1; 0020F746
2; 0020F746
3; 0120
To disable the 3rd lock level search for 8009022802 and replace 0228 by 0120 (note that 0228 may be different but it's always betwen 8009XXXX02).
Now we will disable the first lock level, search for F0B5061C and replace it with 0020F746,if you find more than 1 instance, look at the one that is same as picture 1 ( you may notice the repetition of 1Cxx 1Cxx 1Cxx )
We still have to desable the 2nd lock level, so search for B00D1C1E1C and replace 0D1C1E1C by 0020F746 (note that 0D1C1E1C may be a little bit different from one phone to another, but it's always after B0xxxxxxxx) .
Check this pictures;

1

2

3

now you successfully unlocked your flash, but always check if it's correct before writ. If you find the solution to one version then save the addresses for future use, so that you will not need to redo the whole work next time, because the addresses vary only from on version to another. To help you more, check the list of the locked blocks for different versions here .
…………………………. .
4 :: Writing the flash to mobile
write the new unlocked flash by the software used before to read it from phone but check always whether it is correctly read , else you get damaged phone for ever ! ! and don't tell me that I didn't warn you.
I used this method to unlock this versions;
And they all work 100% .
…………………………. .
5 :: Extra
if you can't do this, just contact me here and I'll do it at your place for freeeeeeeee .
with my great regards Idrissi Abdessamad… good luck !

PS; if you get problems to view pictures or whatever just download the full tutorial heeeere

01-12-2004, 00:39	#1 (permalink)
numediaweb Freak Poster Join Date: Oct 2003 Location: kelaa m'gouna -ouarzazate-Moro Age: 42 Posts: 144 Member: 41449 Status: Offline Thanks Meter: 4	Unlock all Alcatel BF BG even unsupported versions for free This tutorial shows you how to unlock all Alcatel BF or BG or new models for free, without using expensive soft like wray's or magician or.. you'll need only hexworkshop and a free soft to read and write flash of your mobile, like s2gsm patched by the great SPUNLOCK, you can find it at; The first gift by Spunlock the second the third .. you will need also to use your brain :-) ……………………….. . dedicated to people at gsm4arab.net especially to khalil -the great moderator- and all of you seekers for free unlocking :-) …………………………. . THE INDEX; 1 :: Reading the flash from phone 2 :: Finding the appropriate block 3 :: Unlocking the plash – creating own partial 4 :: Writing the flash to mobile 5 :: Extra …………………………. . 1 :: Reading the flash from phone let's say you got an new mobile phone with new firmware version for example BG3 525 ver 106 KI127, this version is not yet supported even with new $$$ unlocking soft :-). To read the flash , use henrich 1.82 soft, check first that it recognize flash type –amd or Thomson or..- if not use free soft like s2gsm to read the flash. For cable you can find it from many sites , me I work with self made cable once you read full flash check if it is (correctly read by looking to the size of file ex: 2MB or 4MB) then make 2 copies of that flash (for safety reasons) …………………………. . 2 :: Finding the appropriate block Now open your eyes ! ! The block is a set of data (64Kb) inside the flash for example the block In a 2 MB flash would start from this address 00060000 and ends at 0006FFFF . To find the correct block open the copy of your flash with hexworkshop and search for this hex string 8009022802 if you get only one instance as a result, then you found the block, if more than one, write down the address where you encountered other instances. To verify that the block is correct search for this 2nd Hex string F0B5061C151C0C1C1F1C note down the address where it is found and repeat the same steps for this last hex string B00D1C1E1C . Now you got a map of the flash, just compare the results you got and surely you will find the correct block( the correct block is the one that contains all the 3 Hex strings, or at least 2 of them) …………………………. . 3 :: Unlocking the flash – creating own partial well now you got 2 options either unlock the block and save it separately so that whenever you got the same phone version you write it directly by henrich (warning!!; check always if the soft support reading and writing block correctly) or you unlock the flash then upload it to your phone. Anyway copy to a new file the full block so as to make your job more easier when trying to edit the locks. Here's how you unlock; Alcatel made 3 levels/locks in locking their phones, to unlock them you must replace their data with this: 1; 0020F746 2; 0020F746 3; 0120 To disable the 3rd lock level search for 8009022802 and replace 0228 by 0120 (note that 0228 may be different but it's always betwen 8009XXXX02). Now we will disable the first lock level, search for F0B5061C and replace it with 0020F746,if you find more than 1 instance, look at the one that is same as picture 1 ( you may notice the repetition of 1Cxx 1Cxx 1Cxx ) We still have to desable the 2nd lock level, so search for B00D1C1E1C and replace 0D1C1E1C by 0020F746 (note that 0D1C1E1C may be a little bit different from one phone to another, but it's always after B0xxxxxxxx) . Check this pictures; 1 2 3 now you successfully unlocked your flash, but always check if it's correct before writ. If you find the solution to one version then save the addresses for future use, so that you will not need to redo the whole work next time, because the addresses vary only from on version to another. To help you more, check the list of the locked blocks for different versions here . …………………………. . 4 :: Writing the flash to mobile write the new unlocked flash by the software used before to read it from phone but check always whether it is correctly read , else you get damaged phone for ever ! ! and don't tell me that I didn't warn you. I used this method to unlock this versions; And they all work 100% . …………………………. . 5 :: Extra if you can't do this, just contact me here and I'll do it at your place for freeeeeeeee . with my great regards Idrissi Abdessamad… good luck ! PS; if you get problems to view pictures or whatever just download the full tutorial heeeere Last edited by numediaweb; 02-21-2004 at 14:12.