EDIT: for a quick answer on how to get data working go to post # 222 of this thread!
Hey Guys,
I have been following the thread about the Evo 4G working on boostmobile. I hope someone would be able to help me, I am a bit stuck. First off, I won't bother anyone with any "n00b-ness", as I do know how to use google to find my own information. Here's where I am right now:
I have a "new" EVO 4G that had its MEID marked bad because the previous owner did not pay ETF to sprint. I also had a BlackBerry tour that I managed to connect with BoostMobile using a bit of social engineering (insisting to the relatively naive CSR that it's NOT a blackberry, as its MEID would indicate). I went through all the QXDM and Hexeditor fun to zero out the ESN, and finally the elusive MEID. **I will not mention what I did next, please use your imagination. I do not want to cause any trouble on the forum for talking about (you know what). I then switched the BlackBerry tour into GSM mode, to prevent it from causing a conflict, but at the same time to allow the phone to power up so I could continue to retrieve data or settings off it. Once I changed the programming info (MDN/MSID), I was able to make and receive calls. SMS worked inbound and outbound. Then, I changed the MMS url to mm_myboostmobile_com. Now I was able to send and receive MMS messages. After rooting my Froyo 2.2, I installed the 2.1 EPST app to be able to update PRL via ##775# / ##PRL#. Now, I have been trying various different PRL files from different forums as well as corolada_com. I also copied NV items 465, 466, 1192, and 1194 from my BlackBerry. I still cannot get data working, not EVDO, not even 1x. I would be most grateful to anyone who will contribute to this thread in a positive, constructive way. And if you're a Python, C# .NET, Perl, or Java programmer, or an SQL Server admin, I would gladly share the plethora of information I have in these areas with you. Thank You.
Ok, I have data working now. In the spirit of giving back to the community, here is what I did: I connected to the phone using Qualcomm QPST Service Programming, clicked Read and entered my MSL/SPC code. Then, under the M.IP tab, (you will only have this tab in a more recent build of QPST, I had to upgrade to build 348) I selected "profile 0" and clicked edit. Here, I unchecked the first checkbox which enables the profile. I wrote the changes to the device, and data began working. My rate is very pathetic, 100-200kbps. With previous device (blackberry tour 9630) this was over 5x faster. Maybe I am not getting EVDO? I will try several different PRL files and report results. I also heard that the HA and AAA secrets, stored in NV items 1192 and 1194 must be copied to authenticate for EVDO speeds. I am having trouble reading these from the (previous device) blackberry, particularly 1192. The resulting read in CDMA workshop produces an access denied error in the output file. QPST and QXDM don't even show these items in the nv items list at all, even if you click "File menu> read supported RF NV Items". All other items seem to show, but not these. Of course, you must send the MSL/SPC code before you attempt any nv item reading or writing. Has anyone else managed to transfer their boostmobile-specific HA secret and AAA shared secret from a blackberry onto an android device? What transfer rates are other boostmobile users getting on android devices in large metropolitan areas? (i'm in nyc).. I have heard some far-fetched solutions including "change your SPC to the old phone's SPC", is there any truth to this? Sorry if my thoughts are a bit disorganized. I will try to write a proper tutorial when I have time. Again, thanks to everyone that contributed to make my google searching a success, in this forum as well as others. Please feel free to put in your .02 as maybe I have overlooked something.
The only thing I can offer is on the tour. You don't need GSM mode to have it on. Simply turn off the radio.
I had the same issue or rather kind of similar. I am getting an Error (NV_READONLY_S) in QPST while trying to write to the EVO. Any help on why its doing that? I have surpassed the meid/pesn zero thingy and txt talk just as you have but to get data wkng proves to be difficult. Please advise.
unique, the problem with BB OS 5.0 and higher is that after a dead battery shutdown, it has the mobile network enabled on initial boot. Bosstalk, the NV_READONLY_S error can be ignored, the changes will stick anyway. What phone are you switching from? Did you try disabling the 0 profile under M.IP tab in QPST? Which PRL are you using?
uniquenameevo,
Do u have any assistance you could offer? I have been searching like crazy and its killing me.
gsxrmonkey said:
unique, the problem with BB OS 5.0 and higher is that after a dead battery shutdown, it has the mobile network enabled on initial boot.
Click to expand...
Click to collapse
True, my 9700 does this also. I did not know about the dead battery shutdown on yours
I am switching from an htc tp2 to an evo.
Firstly, When I do the requestnvitemread ds_mip_ss_user_prof in QXDM I get the ha shared hex passwd but all zeros for the AAA shared hex passwd. Isnt it suppose to be a combo of letters and numbers? Please advise.
Talk and Txt EVO but no Data
Can someone please lend a helping hand here. I am up to my wits with this one. Ive got txt and talk working on boost but somehow cannot get data.
(Error code 67)
My donor phone: HTC TP2 with boost
Evo: Rooted(unrevoked 3.2) with 2.2 Froyo update
Installed EPST.apk using Root explorer.
PRL used is 60660
Things Ive done so far:
1.Used QPST to match NV Items 465,466,1192 and 1194 from donor to evo using NV browser.
2. Used Qpst in the Mip tab and matched settings of the donor with the Evo
The only rough end that may be prohibiting my access is the fact that I cannot get an accurate AAA shared reading. I followed the SPC "msl" thingy then did the requestnvitemread ds_mip_ss_user_prof command that gave me good ha shared numbers after the 0x. However the AAA yield 0x00 all the way thru. Im not getting a long string of characters as others have gotten. Please advise!!! I would greatly appreciate it.
I am at the same point.
I think the HA is "secret" in plaintext
the AAA I managed to get was very long and qpst service programming app refused to accept any key in hex over 32 chars. I believe the one I have is 64 chars.
Do I have to send 'mode offline-d' if the radio is disabled anyway?
If anyone knows a way around this please advise.
Donor phone is BlackBerry Tour 9630
Target phone is HTC Evo 4G with 2.2 Froyo rooted
bosstalk said:
Can someone please lend a helping hand here. I am up to my wits with this one. Ive got txt and talk working on boost but somehow cannot get data.
(Error code 67)
My donor phone: HTC TP2 with boost
Evo: Rooted(unrevoked 3.2) with 2.2 Froyo update
Installed EPST.apk using Root explorer.
PRL used is 60660
Things Ive done so far:
1.Used QPST to match NV Items 465,466,1192 and 1194 from donor to evo using NV browser.
2. Used Qpst in the Mip tab and matched settings of the donor with the Evo
The only rough end that may be prohibiting my access is the fact that I cannot get an accurate AAA shared reading. I followed the SPC "msl" thingy then did the requestnvitemread ds_mip_ss_user_prof command that gave me good ha shared numbers after the 0x. However the AAA yield 0x00 all the way thru. Im not getting a long string of characters as others have gotten. Please advise!!! I would greatly appreciate it.
Click to expand...
Click to collapse
i just got my EVO and i was wondering if you could help me in the right direction to make the switch i have 7 BOOST CDMA LINES and plenty of donor's also i have about 9 boost cdma c290 would one of them work or does it need to be a higher end HS thanks to all
sdwyz74 said:
i just got my EVO and i was wondering if you could help me in the right direction to make the switch i have 7 BOOST CDMA LINES and plenty of donor's also i have about 9 boost cdma c290 would one of them work or does it need to be a higher end HS thanks to all
Click to expand...
Click to collapse
I am in the same boat as this guy, but have read and got to the point of making calls, txt, and mms. I just need data!!! I am so close...so close. CDMA WS will not read the c290. I get that it fails to answer. I used BITPIM to get the NVM settings of the c290, but I need to know how to take the key information to place into the EVO. Error 67 is driving me nuts!!!
Please someone help with getting data on my boost evo. I have managed to get talk and text working but cannot get data. Any assistance in this matter would be greatly appreciated.
I have read several forums and none of those methods are working for me.
Thanks in advance.
bosstalk said:
Firstly, When I do the requestnvitemread ds_mip_ss_user_prof in QXDM I get the ha shared hex passwd but all zeros for the AAA shared hex passwd. Isnt it suppose to be a combo of letters and numbers? Please advise.
Click to expand...
Click to collapse
For profile 0 aaa password you need to send this:
requestnvitemread hdr_an_auth_passwd_long
Good luck.
i have a tp2 on a cdma account.
what i did is use a cdma info from a NON activated boost phone. (use you imagination) no more detail on that.
once i was done i simple activated the phone and it activated and downloaded the ha and aaa.
let me know if this works as i am trying to get this to work
For ##DATA# is ##3282# and to pull the hex value use QXDM (you can find it on the net) and you will need QPST for the port server. In QXDM on most phones you send the MSL of the phone then request to read the password:
spc (your 6 digit msl)
requestnvitemread hdr_an_auth_passwd_long
On some phones you can get it with:
requestnvitemread ds_mip_ss_user_prof
And to get the dial-up 6-digit AAA password of profile 1 just add a 1 at the end:
requestnvitemread ds_mip_ss_user_prof 1
Ok I finally got my data icon to show up and my 1x data to work and the way I did it is I got my 6 digit AAA password from the donor rant phone straight from the device itself than I entered under profile 0 and profile 1 in my epic in QPST service programming secret as my ha user name and the 6 character password with text string selected. I used the same user name and password for both profiles because its the only way I get any data. But I can only get 1x. I tried changing primary & secondary servers but makes no difference. Any ideas why Im not getting 3g?
edit: n/m i figured it out
savior02 said:
Ok I finally got my data icon to show up and my 1x data to work and the way I did it is I got my 6 digit AAA password from the donor rant phone straight from the device itself than I entered under profile 0 and profile 1 in my epic in QPST service programming secret as my ha user name and the 6 character password with text string selected. I used the same user name and password for both profiles because its the only way I get any data. But I can only get 1x. I tried changing primary & secondary servers but makes no difference. Any ideas why Im not getting 3g?
edit: n/m i figured it out
Click to expand...
Click to collapse
If your donor is 1x that's all you're getting. And you don't use the same password. Provisioning is 16 hexadecimal digits and your account password is 6
Both use HA password "secret" (without quotes, of course)
m4f1050 said:
If your donor is 1x that's all you're getting. And you don't use the same password. Provisioning is 16 hexadecimal digits and your account password is 6
Both use HA password "secret" (without quotes, of course)
Click to expand...
Click to collapse
Ok I finally got it working on 3g the thing is my donor is a rant and is very difficult to extract the 16 hex from it. Everything is working now but my voicemail doesnt notify me of new ones.
Related
I know I'm a noob, but I've been struggleing with this for a while now. I put in probibly 6 hours last night and haven't any clue if I'm even close to being complete.
I bought an HTC Touch MP6900SP (Sprint) and was told it had a clean ESN. Turns out it didn't and I'm up the creek because I paid cash. I bought it to replace my motor razr which has a clean ESN, but is quickly dieing. I'm trying to clone my ESN but can't get mtty to work properly. Once the ESN is swapped, the RAZR will go in my junk drawr.
I've tried to follow the steps here:
http://www.mobile-files.com/forum/showpost.php?p=355768&postcount=1
but when I go to fire up mtty I can only enter the rtask a command then the program or phone won't allow me to do anything else, even type the next command.
In the boot loader I have the following info:
VOGU100 MFG
SPL-2.31.CoKe
CPLD-3
Can someone please walk a noob through this. I'm totally new to this whole unlocking thing and could really use some help. The phone is locked to the account of the previous seller who refuses to release it. I've got the 2.31.coke on there now and when I boot it normally I also have the Alltel rom that fires up. HELP!!! PLEASE!
Edit: In MTTY when I run rtask a this is what I see, but I can't type anything after that.
rtask a
Enter Radio Bootloader
POWER ON PMIC VREG_USB : SUCCESS!
This has been covered...
SEARCH!!! MTTY is actually working, you just can't see the text you are typing... Just be careful typing everything in and you will be good to go...
Alright, I got through MTTY, and am not onto working in CDMA workshop.
I put the phone into DM mode, Active sync disconnects, but CDMA shows it is connected to Com1 port successfully, but fails when I attempt to read the ESN.
I can't seem to find the diagnostic modem drivers that I need and think the lack of the drivers is what is causing me grief now.
Believe me, I'm looking everywhere I can to get information. I've got tons of hours into this now.
Edit: Got the drivers installed and working properly. Still having problems reading from the phone with CDMA.
Edit 2: Had to figure out the proper com port in CDMA, getting warmer.
scanning and finding esn addresses right now! If this thing works I'll be so damn happy!
im still reading up on this, but seeing information that has been corrected over time, then finding some old posts that may be outdated.
using MTTY with all of the steps to superCID... is that actually changing the ESN in one failed, fast swoop? Is it actually doing what CDMA does when scanning/writing?
ESN
cox abele said:
im still reading up on this, but seeing information that has been corrected over time, then finding some old posts that may be outdated.
using MTTY with all of the steps to superCID... is that actually changing the ESN in one failed, fast swoop? Is it actually doing what CDMA does when scanning/writing?
Click to expand...
Click to collapse
Hey did you get this to work? I changed my esn last night and the phone works. Can make and receive calls. Only prob is that I can't connect to the internet. I think it is a problem with the user name/password but not sure. I keep getting the 67 error when trying to connect. I only changed the esn and nothing else.
Did you have any luck? If so what about the internet thing? Any help would be much appreciated. Been reading and trying to figure this out for a while now.
Thanks,
-T
Hey man, welcome to XDA
What Airline do you fly for? It's good too see another fellow Pilot on here.
As you can see from my sigpic, I'm with Air Canada Jazz.
b727pilot said:
Hey did you get this to work? I changed my esn last night and the phone works. Can make and receive calls. Only prob is that I can't connect to the internet. I think it is a problem with the user name/password but not sure. I keep getting the 67 error when trying to connect. I only changed the esn and nothing else.
Did you have any luck? If so what about the internet thing? Any help would be much appreciated. Been reading and trying to figure this out for a while now.
Thanks,
-T
Click to expand...
Click to collapse
Have you tried installing the DCD carrier cab. I think this is the link. Just double check.
http://dcd1182.n715dp.com/index.php?dir=carriers/
Help with ESN Change. Phone works just not internet
Csquared said:
Have you tried installing the DCD carrier cab. I think this is the link. Just double check.
http://dcd1182.n715dp.com/index.php?dir=carriers/
Click to expand...
Click to collapse
Thanks for the reply. No I had not tried the DCD carrier cab. First of all let me get this out of the way. NOOB here.
I tried researching the DCD cab because someone else suggested it and then tried it and it didn't work. I think it might be something with the user name and password for vision service. This is what I did:
Flashed the Touch (it is a sprint touch) to the 6.1 wm latest rom (sprint). Then did the esn swap from my razr (also sprint). After the esn swap I flashed again using the 6.1 sprint rom (just wanted to make sure nothing changed after I did a rom flash). Phone works fine on sprint and I even called them on it and they think it is a razr. I can make and receive calls, voicemail etc. Just can't get the internet working. Just get the 67 error. Any ideas?
-T
jmitr said:
Hey man, welcome to XDA
What Airline do you fly for? It's good too see another fellow Pilot on here.
As you can see from my sigpic, I'm with Air Canada Jazz.
Click to expand...
Click to collapse
SWA! Ever in MDW?
-T
b727pilot said:
Thanks for the reply. No I had not tried the DCD carrier cab. First of all let me get this out of the way. NOOB here.
I tried researching the DCD cab because someone else suggested it and then tried it and it didn't work. I think it might be something with the user name and password for vision service. This is what I did:
Flashed the Touch (it is a sprint touch) to the 6.1 wm latest rom (sprint). Then did the esn swap from my razr (also sprint). After the esn swap I flashed again using the 6.1 sprint rom (just wanted to make sure nothing changed after I did a rom flash). Phone works fine on sprint and I even called them on it and they think it is a razr. I can make and receive calls, voicemail etc. Just can't get the internet working. Just get the 67 error. Any ideas?
-T
Click to expand...
Click to collapse
Do you have a data plan setup with Sprint on your Razr?
Csquared said:
Do you have a data plan setup with Sprint on your Razr?
Click to expand...
Click to collapse
Yea I have the old sero plan. It includes unlimited data. I think that is what you mean. I can run opera on it so it is working.
-T
This might be trivial but lets check.
Goto:
Settings/Connections/Connections/Advanced/Select Networks
It should show Sprint in top and Work network in bottom.
Click edit under Sprint and make sure its set to #777
Then try this:
Settings/Personal/Phone/Services/Internet/Get settings
Then have IOTA done by pressing start.
No Internet Still......
Csquared said:
Then try this:
Settings/Personal/Phone/Services/Internet/Get settings
Then have IOTA done by pressing start.
Click to expand...
Click to collapse
Thanks Csquared. I tried this and this is what I got. I also have posted this at http://forum.xda-developers.com/showthread.php?p=3413006#post3413006 . Not trying to double post but was getting some help over there also.
Phone is working great using the donor ESN but no internet. Here is what I've got:
- Sprint Razr (donor ESN phone) and Sprint Touch (Had bad ESN now has Razr ESN).
- Have Data plan on my Account.
- Did the changes from the original post and phone works fine (can make and receive calls)
- When I try and connect to the internet it gives me error 67, can not connect #777 and 1012 error.
What I have tried:
- Start/settings/services/internet/get settings/ and start IOTA.
- Tried making a new connection under start/settings/connections/connections and setup a new #777 connection.
- Changed Active Profile from 0 to 1 in ##3282#
None of this worked. Under ##3282# my settings are:
User Name:
Active Profile - 1
MIP_MODE - Mobile IP Only
User Name - (My Username)@sprintpcs.com
SPI MN-HA - 4D2
SPI MN-AAA - 4D2
ReverseTunnel Pref - Enable
Home Agent IP Address - 0.0.0.0 (for some reason it will not let me edit this setting)
Primary Home Agent - 0.0.0.0
Second Home Agent - 0.0.0.0
HA Shared Secret (HEX) – Blank
AAA Shared Secret (HEX) – Bunch of characters
Advanced:
ESN - Donor ESN (From Razr)
MSID - My Phone number
Not sure if any of this makes sense. I am just trying to get the internet working. Please let me know if anyone has any ideas. It does say "Preparing vision services" when I try to connect to the internet but always fails with error 67 Username and/or Password incorrect. Also get Cannot Connect Dialed #777. Also get error code 1012 could not prepare Vision services please try again later.
Thanks very much in advance for the help!
-Tony
Well I know this is prolly not the right thread to put this under however I am not sure which is and the person who started this thread is doing what I wanted to know was possible to do. And second I was wondering how to do it. I am completely noob on this. I did as he did and bought a new phone which ended up having a bad ESN.
I have a Nokia with Verizon and it broke. They wont replace it for me so I went and bought an LGVX9100M. I have been researching for around 4 hours now and cant find a thing if I can take the ESN from my Nokia which is clean and working and put it to the LG to make it work. I am not familiar with any thing that has to do with programming cell phones or using the programs. I am however a pretty quick learner.
Is there a way to do this? Is there a program I need or a way to just do it in the phone? IF I can do this with a program how do I do it and what stuff do I have to replace the numbers with?
Bad ESN's= Unrecovered lost or stolen property, or property with a bill due over its usage.
Helping with Bad ESN's, is like helping repaint a stolen car.
WR
well hear it is i have everthing working on my evo 4g thats on boost mobile.
Now the problem is that i get the 3g @ the top but when i checked the
speed it is so slow my donor phone is the tp2 it gets good speed when
i check it. I have read through the fourms and tried everthing but still
can get 3g to work right.now i can get everything off the touch tp2 but
the aaa password for profile 0 i thank it the 12 digit number when i try to
recive it it all zeros. now the next thing is that ppp the um is reded out
so i leave it the an is where i put my information but not sure what i need
to put hear i have the 6 digit password not sure where that goes. i know people
will say read but i have and i am just not getting it. so i turned to the fourms
for some with the tp2 that have done this to help. If u can not put the info hear
then can u email it to me if my email is need it then leave me a comment and i will send it to u but if so u can put it in the post. i do not want to get banned from this site. not sue if this is alloud hear so please can someone help me
i been @ this for a long long while now and want to enjoy my evo with the rest of the people hear.
I'm not too sure if it works on boost mobile but you could always try Techknowfile's PRL hack, which allows you to use Verizon's 3g when it is stronger than Sprint's 3g. I.E. Sprint has terrible signal at my house but Verizon is wonderful so now I can actually use my phone in my house! His hack can be found in HTC EVO's Android development.
Sent from my PC36100 using XDA App
Did you read the ha and aaa with qxdm? And did you read both profile 0 and profile 1
HTC EVO 4g on Boost mobile
Android version 2.3.5
bandbase 2.15.00.0808
Also did you copy the nv files from the donor?
HTC EVO 4g on Boost mobile
Android version 2.3.5
bandbase 2.15.00.0808
i did read bot profile 0 and 1 but i cant get the password in the right order
and i can't get the shared aaa password off the donor phone to put in
profile 1 i thank that the one for the 3g.
Open qxdm
Command
Enter "password 01f2030f5f678ff9"
Enter " requestnvitemread DS_mip_ss_user_Prof"
This will be profile 0 the sprint keys
Starting from where it says mm_ha_SHARED_secret[0] write down the number in order after the 0x. Do this for every one till you hit 0x00. Do the same for the AAA shared secret. After coping profile 0 enter
Requestnvitemread DS_mip_ss_user_prof1
Do the same here.
After you have both sets of ha and AAA keys disconnected from donor phone and connect to evolution. Goto. Qpst service programming and the m.IP tab. Open profile 0. In the ha shared secret box click enter hex value and enter the ha shared secret from Prof. 0 and do the same for the AAA shared secret. Then click ok. Now open profile 1 and copy your donor profile 1 ha and AAA keys the same and click ok. Once finished click write to phone.
Make sure you are following instructions.... you just copy them in the order they are in.
Sent from my PC36100 using XDA App
The NV files are for 3g aswell. Did you copy those?
Sent from my PC36100 using XDA App
tho34,
You stated tp2, is that HTC TouchPro2 WM6. 5 phone? I might be able to help. This particular phone had Profile 1 not in a common place.
edit:
Sprint has HA set to the word "secret" or in hex 736563726574 for both profiles. So look for that first in data you extracted from #####, the Profile 0 AAA will be 16 bytes long or 32 digits. The Profile 1 AAA will be 6 bytes long and looking at these bytes in hex editor it will be 6 ascii characters like "xs9f5w". So check this first. If you have Zeros for AAA then you first have to extract correct data. This is the same for Boost CDMA.
Flagmax thanks for your help i will try that but what about the ppp config
do i need to put that information in as well and if u could email not sure
if putting my email hear is aloud yes it is a touch pro 2 the donor
You will need to match up everything on both phones using QPST.
You have not answered my question in previous post, clarify tp2.
We can keep talking in here for now. It might help others.
oh yeah i want to thank everyone for the responce
i still may need help.
oh sorry it is a touch pro 2
Flagmax what about the ppp tab is their information i need to
put their to
tho34 said:
Flagmax what about the ppp tab is their information i need to
put their to
Click to expand...
Click to collapse
Yes there few places you need to correct the MEID. But as I said before, open up both phones in qpst and match it up. You press CTRL-D on red boxes.
Sent from my HERO200 using Tapatalk
Flagmax thanks man i will try it when i get home
from work. Flagmax if i need your help agin on this matter
can i just post it hear.
well have not been able to get the 3g speed yet
will gonig back to stock help me out.
I have been in the process of attempting to flash my Epic 4g to boost for about a week now (with very limited time each day). Thanks to the help of some awesome people here on the forum I have made quite a bit of progress. I have however, hit a wall. I am currently attempting to use a Samsung Replenish which I purchased with GB 2.3.6 pre-installed. I have gotten to the point where I need to extract the HA/AAA keys from the donor and it is locked down tighter than (insert random virgin joke here...). I have tried two methods, method 1- reading NV Items 465,466,1192, and 1194, this method gives me four text files, each of which say access denied toward the top and give me nothing but goose eggs. method 2- using QXDM typing password (spc) which works fine, I have the right SPC and it accepts it, but then when I type the requestnvitemread ds_mip_ss_user_prof command (and I have tried prof 1 and prof 0) it says "error recieved from target". I am not familiar with anything more technical than what I explained, I know my way around these phones a bit and am technically savvy, but I do not know any code or anything like that.
I stated in my first post that I dont mind having to spend money to get my epic to boost but I would like to avoid it. With that being said, I would like to know if there is anything that I can try before pulling the trigger on a Sanyo Incognito (which to my understanding is one of the easier phones to use for this process). I have read that flashing back to froyo might help, but I cant find anything on flashing the Replenish back to Froyo as no one seems to want to do it. If anyone has any advice on flashing back to Froyo or anything else that I can try to get those keys I would be eternally grateful (well maybe for a day or two, after that I'd probably forget...anyways...)
thanks in advance for any help!!
Even though you're trying to flash an Epic 4G, this question is more applicable to a Replenish forum (if there is one), where people have experience reading these NV items on that particular model.
Some things to try:
Try first sending "password 01F2030F5F678FF9" in QXDM. (I wouldn't be surprised if this password did not work for the Replenish. Some Samsung devices have unique passwords.)
Try DFS CDMA Tool.
Try reading /nvm/num/ in QPST EFS Explorer.
etirkca said:
Even though you're trying to flash an Epic 4G, this question is more applicable to a Replenish forum (if there is one), where people have experience reading these NV items on that particular model.
Some things to try:
Try first sending "password 01F2030F5F678FF9" in QXDM. (I wouldn't be surprised if this password did not work for the Replenish. Some Samsung devices have unique passwords.)
Try DFS CDMA Tool.
Try reading /nvm/num/ in QPST EFS Explorer.
Click to expand...
Click to collapse
Yeah, unfortunately for me, this phone isn't very popular...especially in the hacking/flashing community so my resources are limited, I did not see a thread dedicated to this phone on here. I tried using the password that you gave me and it did accept it but did not change my result. I also tried using efs explorer and each file that I save/view says secret and nothing else....
Usually reading EFS is blocked until you send the 16 digit password, but it sounds like you did that already. Sorry, I've never used a Replenish, so I'm not sure what else to do.
etirkca said:
Usually reading EFS is blocked until you send the 16 digit password, but it sounds like you did that already. Sorry, I've never used a Replenish, so I'm not sure what else to do.
Click to expand...
Click to collapse
NP thanks anyway, I went ahead and bought an Incognito. I got a deal on ebay, for a nonfunctional unit with guaranteed ESN as well as USB capabilities for $35, the dealer sells them specifically for the purpose of donor/flashing. Guess I'll have to wait a few more days for an almost fully functional Epic...At least now I get to play around with some roms and fine tune that sucker to my exact liking
One more quick question though, When I get the phone, should I transfer my boost account to it BEFORE I flash the epic? or can I just flash it, call from the epic and transfer it all that way?
You need to have the incognito on boost first. When you transfer the account to incognito they will program the phone for you. I would suggest you to talk to a live person at boost when you activate the incognito. Write down the spc code and mdn number. This will save you some time. After that everything else should be easy. Program the epic with the information from incognito.
bugzy3188 said:
One more quick question though, When I get the phone, should I transfer my boost account to it BEFORE I flash the epic? or can I just flash it, call from the epic and transfer it all that way?
Click to expand...
Click to collapse
Sent from my PC36100 using XDA Premium App
if someone could message me with help it'd be appreciated, at cdma workshop when i try to write the nv 466-1194 the text files say access denied, i have no clue what to do , someone please message me with advice.
use cdmatool.com/demo for this or if ur just using cdma 3.9 paid just read and write the evdo settings
i got it
a little late but thanks for the info. What i had to do was use the open sesame door trick and manually add the items by right clicking in the QPST editor and adding the nv items from pc 1 at a time, not sure if i even had to do that, but then i already had the password so in qpst service programmer i just used the passwords i found when i wrot emy profile to the phone.
bakenast said:
use cdmatool.com/demo for this or if ur just using cdma 3.9 paid just read and write the evdo settings
Click to expand...
Click to collapse
RomBus7er said:
a little late but thanks for the info. What i had to do was use the open sesame door trick and manually add the items by right clicking in the QPST editor and adding the nv items from pc 1 at a time, not sure if i even had to do that, but then i already had the password so in qpst service programmer i just used the passwords i found when i wrot emy profile to the phone.
Click to expand...
Click to collapse
good job. I also used open sesame door on my evo 4g.
I used an Incognito back when I Boosted my EVO. Took me a little bit but I got it to work in the end. Glad you figured it out.
I know that there are numerous threads on this site about using a Galaxy Prevail as a donor but everyone seems to figure it out and never end up posting how. Once their problem was solved they just mark the thread as solved or fixed and that's the end of that thread.
I've been using this thread http://forum.xda-developers.com/showthread.php?t=1419488 as a guide but that is for an Ingocnito which is so much easier. I've flashed a EVO 4G using Incognitos but right now all I have is a Prevail and am feeling like it is possible but I'm missing something here.
I know you're supposed to write the backed up NV Items from the donor to the new phone but you can't do that if you only have raw NV Items from using this method to get the NV Items and HA/AAA keys
Code:
command:
su
# dd if=/dev/stl5 of=/sdcard/cdma.rfs
I used this guide (http://forum.xda-developers.com/showthread.php?t=1987463) to get the HA and AAA keys but I just want some clarification since the AAA key should be 12 characters (6 from the two grouped characters) but those screenshots show 14 characters. Am I wrong or something?
Finally, when using QPST Service Programming and inputting the keys are both HA and AAA entered as hex values or just as text strings?
Has anyone successfully done the Prevail as a donor? Help would be greatly appreciated.
(I'm guessing I'm going to have to just write profile 0's information and use the Update Profile on the phone to do the rest but I keep getting errors. Sometimes it shows that the username and passwords are incorrect or client authentication errors. So I'm thinking that the HA and AAA are wrong. (HA is universally 736563726574 so I think that is at least right.)