You Will Need a Few Different Tools In Order To Do This
For This Guide We Will be Doing an HTC Evo ... Just Replace Diag Drivers for Whatever Model You Need From Our Download Page
You Will Also Need Either A "Samsung Rant" or "Incognito" already active on your boost mobile account with the phone number that you want on your smartphone device. This will be referred to as a "donor phone"
Downloads Below
WinHex 17.4
QPST 2.7 Build 374
QXDM - Qualcomm eXtensible Diagnostic Monitor
CDMA Workshop 2.7 (Higher Versions Preferred)
Round 1: (Incognito & Rant) Start out by installing all programs and activating you donor phone before you proceed. Now plug you donor phone into your provided usb cable and check the Device Manager for your Phones Com Port Number. Open Cdma Workshop and select the Com port you phone is connected to. Click connect and then Read. You should see your phones information displayed on the left. “If you’re using a rant as a donor phone it will display your SPC so skip round 1 & 2”.Click on the memory tab, under memory/Eeprom put start Address: 0363:0000 leave the size at 65536 bytes, now click read. The Sanyo Incognito sometimes can be very difficult to read the memory, keep trying it will work. You can try to turn off the phone on and off a few times and see if that helps.
Step2: (Incognito)
Now install and open up Win Hex, open the memory file you just saved, click on specialist- Gather Text; Recognize text by "6" uncheck everything expect for " Numbers" press "OK", save the file anywhere you like. You should end up with a .txt document with 1 or more 6 digit numbers; one of them is the SPC for your phone, write it or them down.
Step 3: (Incognito & Rant)
Go back to CDMA Workshop, "Security" tab, SPC - write the 6 digit code from the .txt file inside the box, click on SPC - send. You should get a message saying that the SPC code is correct and the phone is unlocked.”On the Rant just click Read and it will display your SPC and click send and will say phone is unlocked” If you have multiple codes from your incognito, try all of them. Once the phone is unlocked, click on the memory tab. go to NV Items read and save items: 465,466,1192,1194; they must be saved one at a time so for example the First NV Item: 465/ Last NV Item: 465 click OK and save it as 465 then move on to the next item and do the same. Remember to save it somewhere handy, as we will need the later on.” On the Rant Read all nvitems and save the each file. There will be nothing in 1192 or 1194 that’s ok.”
Step 4: (Incognito & Rant)
Stay in CDMA Workshop, and click the NAM Tab. Click “Read” this will display all your phones information inside of “NAM 1” Save the filename as NAM 1 and do the same for NAM 2. (Pictured below)
Nam2 Save Pictured Below
Close Cdma Workshop. Open QPST - Service Programming and enter your Donor phones SPC. Click Read and navigate to the “MIP” Tab, we need your Donor phones NAI. Click on Profile 1 and copy down your “NAI” and everything circled in the provided pictures. (Pictured below)
Close Service Programming and open up QXDM. In the command input windows type. Password 01f2030f5f678ff9 hit enter. Requestnvitemread ds_mip_ss_user_prof . This will find your Ha Shared and AAA Passwords for profile 0. *Note Rant users this method will work for retrieving the shared password and AAA password, Open up QXDM and enter “ Password” 01f2030f5f678ff9” then First retrieve Profile 0 password by typing “Requestnvitemread ds_mip_ss_user_prof” retrieve your password by scrolling down to your HA Shared which should be “736563726574” For your AAA Provisioning password open up Nvitem 466 and read your 32 digit password after the “10”, save and return back to Qxdm, Enter “Requestnvitemread ds_mip_ss_user_prof 1” for Profile 1, once again you HA Shared will be “736563726574” scroll down for your AAA Password. This password will be 6 digits long. Follow the pictures below
Next Example Below
Save all information in a notepad and label each Profile and save the passwords for both..
Pictures Below are for Profile 1
You are now done with your donor phone. Turn it off or put it on airplane mode, whatever you do don't ever have the phone on at the same time.
Step 5
You need to dial ##3424# (DIAG Mode) you should now have a COM port listed under you device manager settings. Next we need to find your SPC code for the Evo 4G, but this is alot easier! Open CDMA Workshop, I suppose you already opened the "Device Manager" and know the COM port for your Evo, select the COM port -connect- read and your should see your phone information on the left. Now go to the “security" tab, Password (16 digits) delete all the FFFFFFFF's and type 01F2030F5F678FF9 then send. You should now see your SPC code magically appearing inside the SPC box, write it down. Next go to the "Memory" tab, NV Items and write the 4 NV Items we saved from your donor phone earlier.465, 466, 1192, and 1194. Do the same with the files for the Samsung Rant. Navigate to the “NAM” TAB and Write the Nam 1 and Nam 2 Files we saved earlier. If done correctly it should display your donor’s phone number and other information.
Picture Below
Most Tutorials Try to get you to zero out the ESN / MEID locations ... this IS NOT NECESSARY ..... in order for this to be a LEGAL flash of your cellphone / device the only stipulation is that YOU PERSONALLY MUST OWN YOUR DEVICE and CANNOT use both devices at the same time... Period ... Point Blank.....
Now Take CDMA Workshop Using the 16 Digit Code Above ... OR using just the SPC Code on a NEWER Version of CDMA Workshop and Change Your HTC Evo or OTHER DEVICE's MEID to the MEID that is on your Rant or Incognito....
Step 6
Now open QPST Service Programming, select your Evo or Other Device and press OK. Once connected, Read from Phone and enter your SPC code we got earlier.
Navigate to the MIP tab