• After 15+ years, we've made a big change: Android Forums is now Early Bird Club. Learn more here.

Root Evo 4G to Boost Mobile Guide/Evo 3D

wow. this is so much fun, but I'm not getting much sleep....so I used the open sesame door method. pulled out the 0 and 1943 files. hex edited them to zeros, deleted the originals, and replaced them with the zeroed ones into the nv/num folder..(typing this from memory, may have the names a little wrong)...anyway, when i did the nvitemread, my meid was all zeroes. then I did the write with the donor meid, and both green and blue (tx,rx) had the new donor meid. did a ##data# on my evo, and the meid was still zero. Rebooted the evo and I got the old, original meid...wtf......??

So I guess it lurks. Why does the old method have us look for 9 and 11 meid and esn locations ? Are they in the nv partition and does the nvitemwrite take care of all of them......still confused but having fun.....btw, thanks for your quick replies and spot on advice !!
quick questions. Did you reboot the phone after overwriting the 0 and 1943 files?
Did you use QPST efs explorer (right click) and send file from PC to Phone and finally did you use QXDM and send password and then the meid rewrite commands as it was listed in the guide?
 
new opt and kolas

did what you said and actually got my evo 4g to work tonight ...amazing...called 611 and got boost mobile....unfortunately, I was also getting a pop up error 67 screen regarding sprint vision. so being the noob that I am, I figured I would restore my cyanogen backup (which I want to go back to anyway ) and that screwed me up...I didn't think it would affect the phone..now if I try to make a call, I get an automated voice error regarding registration and switch number....so i restored sprint rom...re-did the steps to program the phone....meid looked good....but I still get the switch errors on the network........ any insights would be appreciated.....:confused:
 
new opt and kolas

did what you said and actually got my evo 4g to work tonight ...amazing...called 611 and got boost mobile....unfortunately, I was also getting a pop up error 67 screen regarding sprint vision. so being the noob that I am, I figured I would restore my cyanogen backup (which I want to go back to anyway ) and that screwed me up...I didn't think it would affect the phone..now if I try to make a call, I get an automated voice error regarding registration and switch number....so i restored sprint rom...re-did the steps to program the phone....meid looked good....but I still get the switch errors on the network........ any insights would be appreciated.....:confused:
If your getting error 16 when you try to make a call you have a couple of options, first the DIY method. Log on to boost mobile and change your phone esn, a working not in use esn from another phone is required. You can usually find one on line if you look(this is only for a few mins so no actual phone is required) After 5 mins 10 at the outside switch it back to your donor phones esn.
Or call boost tell them to send a refresh signal, or stay on the line with the error message and it will automatically transfer to a representative.
as to the error 67(data error) you can try to update profile, stock rom.
If that does not work then you could try the reset method, I dont recall the dialer code but when you do it will restart the phone and start activation when it does you should be ready to go, once the phone is ready you can restore your nand backup and you should be ready to go. though depending on the rom you may need to do extra steps to get pic messages.
 
newoptimus,

always grateful for your guidance. :) trying to google my issues first so as not to keep pestering you. :o

i used your diy method. i can now make and receive calls on boost :D. but now, i lost data both 3g and 1g, which i had before the diy exercise. my settings are wifi off, mobile data on, evdo preferred mode automatic.:smokingsomb:
 
newoptimus,

always grateful for your guidance. :) trying to google my issues first so as not to keep pestering you. :o

i used your diy method. i can now make and receive calls on boost :D. but now, i lost data both 3g and 1g, which i had before the diy exercise. my settings are wifi off, mobile data on, evdo preferred mode automatic.:smokingsomb:
Yes you need a rom(stock works great) that allows you to access the ## menus.

Your data problem means a ha or aaa key mismatch. Kolosus told me about a way he always does it that gives him an auto activation and rewrites the profile 1 keys everytime. I have tested it as well and it works great.
I am fairly sure its in the thread somewhere but let me look to and find it I will post it
 
##786#
OK that is the dialer code I keep forgetting, lol This will reset your phone to original, other then the meid which you will have already changed over to the donor.
This will also revert the msl back to the original as well, so if you dont remember it use cdma ws to get it.
 
I'd suggest that you used QPST to zero out your phone number. Then write in the details of profile 0 only and write to phone. It'll reboot and then try OTA. Should be successful. That'll reprogram your phone for voice and data.

As for error 16 my primary method (and for the last 6 months the only method I needed) is to have someone call me. I'm usually at work and I just use the work phone to place the call or have my wife call me. That usually takes care of it and I just make sure to answer the call and stay on the phone (or not hang up from either phone) for a full minute at the least.

If OTA doesn't work then we might have to do a ##786# reset and reprogram profile 0 and and let it OTA that way. I know I've written this out a few times I'm just too lazy to try and locate it. :D
 
new optimus and kolosus are awesome. kolosus, i found your post #327 on this thread. did the trick.. now have 3g and voice.. i would have never known to wait for an ota authorization after reboot, except for reading that. i will do a nandroid backup of what i now have on the phone and then try and restore back to my cyanogen again... if i get jammed up, i think i can get myself back from what i learned here.

from this noob to other noobs, i was anxious because i was impatient. the concepts take awhile, but with the help on this site, you can do it. i strongly suggest you take the time to read through all the posts on this thread.. sooner better than later..

THANKS GUYS !!!
 
just wanted to say thank you for this thread !!! i used a samsung seek to flash an evo for someone ..i told them if i can use the seek it would be a slower data connection...but IT WORKED!! samsung seek is a 1x phone.:smokingsomb:

if i can help anyone let me know

i know it only my second post but i am a long time lurker.. im on xda mostly but have started to venture!
 
just wanted to say thank you for this thread !!! i used a samsung seek to flash an evo for someone ..i told them if i can use the seek it would be a slower data connection...but IT WORKED!! samsung seek is a 1x phone.:smokingsomb:

if i can help anyone let me know

i know it only my second post but i am a long time lurker.. im on xda mostly but have started to venture!
Welcome, its not the quantity of posts but the quality that really matters.:smokingsomb:
 
Is there a to get the AAA password from the 465,466,1192,1194 file that I got off the donor phone ...the donor phone stop working after I got the file off it .
 
Is there a to get the AAA password from the 465,466,1192,1194 file that I got off the donor phone ...the donor phone stop working after I got the file off it .
which donor phone?

466 has the aaa key for the incognito. profile 0 which is all you need it will reprogram the profile1 when you activate it.

the ha is always the same for all sprint/boost phones.
 
im using the samsung prevail i have the 32 bit aaa password but how do i get the 6 bit password or do i not need it ?
Ok the 465-1194 you got, was it the txt files using cdma workshop?
if so look at them close as with the prevail they will open an say access denied instead of lots of numbers and letters.

If you got the bin files that you have to open with hex editor then you may have missed some, namely 465_1 and 466_1.

But as long as you have the 32digit profile 0 key your phone can be updated to automatically write profile 1.
 
From the guide

Round 10 (EVO 4G)



Knockout Round: (EVO 4G)
Now open QPST Service Programming, select your Evo and press OK. Once connected, Read from Phone and enter you Evo SPC code we got earlier. Navigate to the M.IP tab.


Continued...

Click profile 0 and click edit. Check and make sure your “NAI” is the correct one for boost mobile. Enter your HA Shared password first, then enter your AAA Password into the text box, next Enter all information that you saved earlier and put them in the required box’s

NAI: YOURMEID@hcm.sprintpcs.com
Home address: 0.0.0.0
Primary HA address: 68.28.15.12
Secondary HA address: 68.28.31.12
SPI: 4D2
SPI: 4D2
Rev Tunnel Preferred: Checked now with both passwords hit ok.
 
ok so i have been trying to downgrade my baseband and no luck i have 2.15.0012.19 anyone make in work with this baseband
If you want to downgrade to change the meid there is no need to do so.

The method to change the meid on the evo 3d is very easy and works on the 4g.

Look in the guide after the 4g method is the evo 3d look specifically to item 6.
 
Back
Top Bottom