[RadBob1]

Here's how I found the Ha and AAA info for my Sprint Touch Pro 2.

Profile 0 and 1 have the same HA. In string it's "secret". This is what showed up in ##DATA#. When converted to hex, it's 73 65 63 72 65 74. I think this HA is the same for all Sprint and Boost phones.

Profile 0 AAA
got this in QXDM by using
spc (msl)
then
requestnvitemread hdr_an_auth_passwd_long
Looks like it was also in nv item 1192
It's also 6 sets of 2 characters each, for a total of 12 characters.

Profile 1 AAA
I couldn't get this from QXDM, but I found it's string value in ##DATA#. You have to go into the edit menu to see it. I converted this value to hex with a website converter to get my AAA. 16 sets of 2 characters each, for a total of 32 characters.

Hopefully this will be helpful to folks trying to unbreak their data.
Cheers