Develop Bugs

[Q] Evo with Wrong ESN/MEID ...need help

I bought an evo from someone from Craigslist and it wouldnt activate. Sprint told me the ESN was not correct.
So i did a ton of research and i know i cant even ask certain things so i am trying my best to word this correctly because i am not 100% sure how i can even ask for help with this.
After doing a lot of reading i figured out by using CDMA WS 2.7 that the ESN and MEID dont match whats on the sticker under the battery...which finally made sense to me why Sprint wouldnt let me activate it.
I dont know where to go from here, i am stuck and ready to just dump it back on Craigslist to sell to someone who could either fix it themselves or is willing to deal w/it for whatever service its setup for.
So before i give up i was hoping to reach out to this community for help. If you cant post it because it would infringe the forum rules then please just PM me. Any idea's would be helpful or just some good advice besides throwing this thing at a brick wall. Thanks folks.

I'm pretty sure you got scammed into buying a borked phone. Would probably sell it back on craigslist, honestly obviously

I've seen Evos with bad ESN's sell for a pretty penny on eBay. They can still be used outside the US and can be flashed over to MetroPCS or Boost Mobile here, so it is still not completely useless.
From what I know, the only way to get it to work on Sprint is to know someone in Sprint who will be kind enough to add the ESN on your phone to their database so it can be activated. A co-worker of mine had a Verizon Blackberry Storm on Sprint by doing this a few years back, but he had a family member that worked for Sprint help him out. For all I know, this can't be done anymore, either.

so you dont think i can repair it back to the stock one thats on the sticker under the battery ?
i have been doing a lot of reading and i figured i would give it a shot since if its bad i have nothing to lose.
So far i have the ESN zero'd out 0000000
Meid i cant get because i only found 9 locations, i am not sure where the 10th one is hidden. I am only guessing from what i read that its in 10 locations and thats why it hasnt worked yet.
Using CDMA 2.7 do you know how i might be able to scan to find the last MEID location ?

First off, did Sprint say the Meid that is labeled under the battery is bad? I can only think of two reasons why someone would change the esn/meid. The phone's meid is bad or the person wanted to run an EVO on the $30/month Sero plan. I'm the latter.
Before you go any farther, go back to the Sprint store and find out if the meid under the battery is usable on Sprint. If so you can change the meid back to stock but it is going to require some reading and some effort on your part. CDMAWS 2.7 will not work on the EVO, 2.7 can not do meid #s. Since the esn is all zero's I'm betting the guy botched the job and tried writing the new meid/esn but did not find all the addresses. When you try to change the meid you have to zero out all the meids and all the esn (don't be confused if you see the term pesn. A meid phone calculates an esn based on the meid # and this called a pesn. Essentially pesn and esn are the same thing), there are approx. 16 memory locations you have zero out. If the phone has froyo on it, there are 1 or 2 address that are really hard to get to show up when you are doing a memory dump. You will have to run several dumps until you are no longer finding new memory locations. Rolling back to 2.1 would make it easier.
Go to mobile-files.us. There is a lengthy thread on changing the meid/esn on the EVO. Hopefully the person didn't wipe out your 4G certificate too, I think I read here on XDA that there is away to restore your certificate but I never had to so I never followed the thread.
You aren't completely screwed, think of it like you bought a fixer upper. Even if your stock meid is bad, you could always barrow one from your previous phone but you will not have 4G.
Good Luck, I hope you don't get discouraged and try to find another sucker. It just plain s*cks getting duped. I've been down that road before and that's what got me interested in this aspect of hacking.

double post

If you see the esn and meid from CDMA write it down and call and activate with those numbers, should work.

gedster314 said:
First off, did Sprint say the Meid that is labeled under the battery is bad? I can only think of two reasons why someone would change the esn/meid. The phone's meid is bad or the person wanted to run an EVO on the $30/month Sero plan. I'm the latter.
Before you go any farther, go back to the Sprint store and find out if the meid under the battery is usable on Sprint. If so you can change the meid back to stock but it is going to require some reading and some effort on your part. CDMAWS 2.7 will not work on the EVO, 2.7 can not do meid #s. Since the esn is all zero's I'm betting the guy botched the job and tried writing the new meid/esn but did not find all the addresses. When you try to change the meid you have to zero out all the meids and all the esn (don't be confused if you see the term pesn. A meid phone calculates an esn based on the meid # and this called a pesn. Essentially pesn and esn are the same thing), there are approx. 16 memory locations you have zero out. If the phone has froyo on it, there are 1 or 2 address that are really hard to get to show up when you are doing a memory dump. You will have to run several dumps until you are no longer finding new memory locations. Rolling back to 2.1 would make it easier.
Go to mobile-files.us. There is a lengthy thread on changing the meid/esn on the EVO. Hopefully the person didn't wipe out your 4G certificate too, I think I read here on XDA that there is away to restore your certificate but I never had to so I never followed the thread.
You aren't completely screwed, think of it like you bought a fixer upper. Even if your stock meid is bad, you could always barrow one from your previous phone but you will not have 4G.
Good Luck, I hope you don't get discouraged and try to find another sucker. It just plain s*cks getting duped. I've been down that road before and that's what got me interested in this aspect of hacking.
Click to expand...
Click to collapse
Thanks, i think he had it programmed for something else like maybe cricket or something, i see a lot of them listed for that, he told me the ESN was good and i checked on a site that checks them and the one under the battery is good.
SO i would have activated it over the phone already but they wouldnt because they said it wasnt a sprint phone... i didnt want to make it their problem and i didnt know what i was talking about at the time as far as asking them for help to fix it.
I also dont want to just dump it back on someone else. I would like to finish the job and get this phone working correctly. I always feel better when i learn how and why its done.
right now im basically stuck after finding 9 of the MEID locations to zero-out. If i cant use CDMA WS 2.7 do you know what program i could use before spending a bunch of money on software ? If buying a new phone will end up as much as software it wouldnt be worth it for me ya know ?
The Evo has OS Version 2.2 and Radio 1.36. Do i need to change either of those before going any further ?

I used a combination of Motorola QPST/QXDM and CDMAWS 3.5 (I bought this when I was playing with the Pre. Can't be shared with others because it checks their servers to verify if that PC has been registered with that user lic.). I used CDMAWS to search for meids and esns. Used Motorola QXBM to change the scm, zero out meids/esns and then write. I also used QPST to match the programming info with my donor phone. The thread at mobile-files mentions how other people dumped the memory locations without having a paid version of CDMAWS.
Even if you went out and bought CDMAWS, my experience is that CDMAWS can not change the EVO's meid on it's own. Maybe some CDMAWS experts can do it but I could not. So don't spend your money on that thinking it will be your savior. It's a great tool for doing programming and working on older phones but it seems to struggle with the newer stuff.

Future Lesson:
When buying a Sprint phone on CL meet up at a Sprint sure and make sure they can activate it in the store. Once successful you then pay the dude.
Sent from my PC36100 using XDA App

Buying a EPIC Touch 4G setup for BoostMobile

I am buying a boostmobile configured Epic Touch4G, how do I restore it back to Sprint's network other then calling Sprint to configure the ESN to be setup on my line?
Thanks.

They might have stolen it which is why its on boost so if u try the esn will come back as bad...
Sent from my Epic Touch 4G using xda premium

As mentioned don't buy it, I guarantee it has a bad esn.
That said, it is one of the easiest phone do a repair on. Google for epic 4g default 16 digit password. You will need a donor phone that is activated on sprint. If your donor phone is old enough you maybe able to get all your programming info from ##data#. If not, use QPST copy the info. Your HA AAA password maybe a pain to get. Googling will tell you how to get that too.
It is very doable. I have my E4GT on my OG Sero plan.

Before you decide to buy or not, check the ESN.
You can check the ESN online at http://www.checkesnfree.com or call it in to Sprint C.S.
Sent from my Nexus S 4G

The ESN is clean, but how do I restore it exactly to be on Sprint again? Any guides?

You aren't cloning so it should be easy. I would think that the settings are pretty close already. Activate from the website and follow the programming direction. That should get you going.
If not then if you have another sprint phone. Dial ##data# on both phones and just start copying the info from the donor to e4gt. You will need the msl/Spc code to enter the data on the e4gt. If you have the msl for the donor phone enter it too, it will show more info.
Forgot, makes sure the Meid in settings/ about phone are the same as under the battery. If not, its very easily fixed.

There's a little more to it then that. If you can't get your original AAA password (nv item 1192) then you will need a donor phone. Try a ##786# reset or flashing a new radio to hopefully reset your nv items. Without the AAA password, you will not be able to authenticate your 3g and will be stuck in 1x
Sent from my SPH-D710 using xda premium

How do set an Epic 4g Touch up for boost or any other pre pay?

Deleted by me

Heavy Metal said:
How do set an Epic 4g Touch up for boost or any other pre pay?
Click to expand...
Click to collapse
I thought that was the purpose of this thread but no one has said anything.
Sent from the future.

Your not allowed to talk about flashing over to boost on here.
Sent from another Galaxy

Was curious why one would have had one on a boost account

SocialReject said:
I thought that was the purpose of this thread but no one has said anything.
Sent from the future.
Click to expand...
Click to collapse
Funny, I read the first post as saying he wants to put a previously boost converted E4GT back on Sprint. If you want to go the other way, google is your friend. You will have to piece the process together by reading threads for different phones. Horwardsforums and mobile-files.us may prove helpful. Keep in mind many forums are purging info regarding esn repairs for fear of legal action, so that aspect maybe a little tougher to find but it is out there.

gedster314 said:
Funny, I read the first post as saying he wants to put a previously boost converted E4GT back on Sprint. If you want to go the other way, google is your friend. You will have to piece the process together by reading threads for different phones. Horwardsforums and mobile-files.us may prove helpful. Keep in mind many forums are purging info regarding esn repairs for fear of legal action, so that aspect maybe a little tougher to find but it is out there.
Click to expand...
Click to collapse
Understood. I wasn't aware that it was illegal. I was under the impression that it was like flashing to MetroPCS. Thanks for clearing things up

How do I return a flashed phone to stock?

I have a S3 Verizon.
It was flashed remotely by another forum member.
It hasn't worked right since.
It was flashed to PagePlus
Data runs about 200-600kbps
mms messaging doesn't work.
half my calls get dropped.
I just want to cut my losses and set the phone to stock and sell it.
And yes, the problem is in the flash, not the phone.
It was half-flashed for 2 weeks and calls/sms worked fine.
So how do I return it to stock?

Look in the Verizon section for a stock ODIN tar (or stock ROM), and ODIN.
Now i'm not familiar with how your person got the phone on pageplus. Did he add the default MEID to pageplus' ESN database or did he "repair" with another donor MEID? If he modified the MEID/ESN then you'll have to get that back to the original MEID/ESN (can't be discussed here on xda..) and you're set.

Thanks for your reply.
I dine know how he did it but my meid shows wrong on the phone. Its completely different than what my meid actually is.
Sent from my SCH-I535 using xda app-developers app

So the MEID that is showing on the phone (Settings>About Phone) is different from what is printed on the back of the phone when you remove the battery?
If that is the case, he modified your MEID using a donor. I assume you're not familiar with the "tools" used to do these. You'd need to write the original MEID back to the phone (and do a ##786 reset just in case afterwards) and that's it.
Can't you get in touch with the individual?
You can definitely sell it the way it is if you explain what has been done to it, but of course you'd lose on the value..(folks who know how, know how to remedy it easy regardless).

[Q] Flashed back to Sprint, 2 different HEX/DEC values...help

A shot in the dark here but I need some assistance regarding the reversal of flashing the Epic 4G to Virgin Mobile, and then back to Sprint. I have done pretty much everything I researched, from resetting settings via ##72786# and ##786#, even Odin'd the stock FC09 and selecting Phone EFS Clear, and everything seems to have reset. But the values of the DEC/HEX number are different on both the battery sticker, and under About Phone.
Is this normal? I've attempted this because I was hoping to sell my Epic 4G and the guy who purchased it said it wasn't activating for him. When I got it back I noticed that the values from the Virgin Mobile flash were still programmed under About Phone. So after resetting everything, the values seem to be back to the normal and doesn't display the Virgin Mobile values, but the DEC/HEX numbers differ from each other on the sticker and under About Phone.
Was just curious if the DEC/HEX number that are being displayed under About Phone are the correct, or incorrect. I checked with Sprint via chat support and asked them to check for me if the ESN is clean, and apparently the DEC/ESN number that is listed under About Phone is clear and ready to activate, but the DEC/ESN number located on the battery sticker is not clear. If I were to sell the phone, would the buyer be able to activate it on Sprint if they gave Sprint the DEC/ESN number listed under About Phone? Would they have any problems?
Hope somebody can help me, as I'm really confused by this. Thanks.

brian117 said:
I checked with Sprint via chat support and asked them to check for me if the ESN is clean, and apparently the DEC/ESN number that is listed under About Phone is clear and ready to activate, but the DEC/ESN number located on the battery sticker is not clear. If I were to sell the phone, would the buyer be able to activate it on Sprint if they gave Sprint the DEC/ESN number listed under About Phone? Would they have any problems?
Hope somebody can help me, as I'm really confused by this. Thanks.
Click to expand...
Click to collapse
The ESN on the sticker needs to match the ESN showing on About Phone. If the ESN on the sticker is bad, it's not going to activate on Sprint.

[Q] HELP! Recovery of Sprint GS3 original IMEI after stupidly changing it with DFS

I flashed my GS3 to boost mobile. Long story short, I used a boost evodesign4g as a donor, I changed the correct values to get it activated, but I also changed the IMEI with DFS to match the evo design4g (never thinking to back up my original gs3 imei let alone write it down:crying:). I figured out at a much later date that I never needed to change my IMEI to match the evo design. Now I am switching over to voyager mobile as they allow byod sprint devices, so I can have lte. BUT ONE HUGE PROBLEM, Currently my GS3 has the wrong IMEI.... I need to recover my original sprint GS3 IMEI as it is linked in the sprint database to my meid and ICCID for LTE activation. Yes I have checked the obvious, I searched the forums found nothing for my situation, it’s not on the white sticker on the back I don't have the original box anymore because if I did I would not need to ask for help...I figure it might be similar to recovering a Verizon GS3 IMEI, Maybe the original is hidden in one of the NV items?. So does anyone know how to recover the original factory set IMEI for a SPRINT GS3??? Is there a way to calculate it from the ICCID number?
Thank you to all who reply! I’m really in a bind here and need some help or guidance.

whitmerray said:
I flashed my GS3 to boost mobile. Long story short, I used a boost evodesign4g as a donor, I changed the correct values to get it activated, but I also changed the IMEI with DFS to match the evo design4g (never thinking to back up my original gs3 imei let alone write it down:crying:). I figured out at a much later date that I never needed to change my IMEI to match the evo design. Now I am switching over to voyager mobile as they allow byod sprint devices, so I can have lte. BUT ONE HUGE PROBLEM, Currently my GS3 has the wrong IMEI.... I need to recover my original sprint GS3 IMEI as it is linked in the sprint database to my meid and ICCID for LTE activation. Yes I have checked the obvious, I searched the forums found nothing for my situation, it’s not on the white sticker on the back I don't have the original box anymore because if I did I would not need to ask for help...I figure it might be similar to recovering a Verizon GS3 IMEI, Maybe the original is hidden in one of the NV items?. So does anyone know how to recover the original factory set IMEI for a SPRINT GS3??? Is there a way to calculate it from the ICCID number?
Thank you to all who reply! I’m really in a bind here and need some help or guidance.
Click to expand...
Click to collapse
This has been solved thanks to autoprime, view the post at http://forum.xda-developers.com/showthread.php?t=2003948&page=5