*****Rooting HBoot 2.02 S-OFF (Unrevoked now works for HBOOT 2.02 and it's easier)*****
*** Important Note about HBoot 2.02 S-OFF ***
Before you use this method you need to make sure you know which version you have. This is for phones that are Hardware version 0004 and HBOOT is 2.02.
To check your hardware version, go to Menu>Settings>About Phone>Hardware Info
To check your HBOOT do this;
Power-off your phone by holding the power-button for several seconds. The top choice is "Power Off."
While holding "Volume DOWN", push the "Power" button so the phone turns on.
Near the top it will display your HBOOT Version. If it says "2.02" then you need this section (Section 7) to root your phone.
This is a copy of the instructions by zikronix found here -
[ROOT][GUIDE] HBoot 2.02 S-OFF - Fresh Like Pine Cones Edition - Updated 12/08/10
There is more info in his original thread, including a FAQ and troubleshooting tips. I'm only copying the basic instructions here to keep this thread complete. If you want more step-by-step instructions, try
post #1197 in that thread.
Beyond that, I can't really offer much more support. I've never tried this method since my phone is hardware version 0003 and HBoot is not 2.02, I'll probably never actually try this method.
If you get stuck and have a question, please be sure to reference the step # you're having trouble with. And now, on w/ the post...
*Copied post from zikronix below*
UPDATE: THERE WAS AN ISSUE WITH THE RECOVERIES. WE HAD TO HAVE A BETA MADE AND TEST. USING ANY OTHER METHOD TO TURN S-OFF OR ANY OTHER RECOVERY COULD LEAVE YOU WITHOUT THE ABILITY TO FLASH A ROM
IM GOING TO REPEAT MYSELF FOR THE SLOW PEOPLE....USING ANY OTHER RECOVERY SUCH AS CLOCKWORK OR OTHER VERSIONS OF AMON_RA WILL NOT WORK. USING ANOTHER RECOVERY COULD COST YOU YOUR 4G RSA KEYS AND BREAK 4G PERMANENTLY. THIS IS BECAUSE THEY ARE NOT CODED FOR THE NEW PARTITIONS IF IT DOES ITS PURE LUCK!
Credit goes to:
amoamare (Initial method)
toast (fake recovery and script)
unrevoked (thanks for your app)
amon_ra (fixed custom recovery)
chris1683 (thanks for the rom)
(sprintlovers)
TrevE (Testing)
Chubbzlou (Testing)
and who ever else I missed
Help me finance my Vette!
zikronix
Downloads:
================================================== ====
V8 - Now Inlcudes a rooted rom and updated radios. No other changes were implemented.
Download Here: hboot202-s_off-V8.zip
MD5: 7d494ee7804a4122e5be1e969ec6893d
RECOVERY FIX FOR THOSE WHO CANT FLASH ROMS (THIS IS ALREADY INCLUDED IN THE PACKAGE ABOVE AND IS FOR PEOPLE WHO ALREADY HAVE ROOTED OR HAVE A BROKEN RECOVERY):
Download Amon_RA Custom Recovery Here: PC36IMG_Recovery.zip
Section 7 -
Lets Get Rooted!
================================================== ====
Before you start
Extract to a folder of your choice. I recommend the root of C:\
into a folder of your choice or on the desktop. Make sure you have the drivers installed for your phone (recommended: SDK Drivers, unrevoked hboot drivers) and USB debugging is on. If possible master reset your phone. At the least reboot the damn thing. This was setup for people running windows, if you have access to it do it on a 32bit version.
Use the adb.exe included with the package
7.1) Make sure usb debugging is on, and plug in your phone, DO NOT MOUNT USB
7.2) Open a command prompt and change to wherever you extracted the files
7.3)Type the following (this must be excuted from the folder you extracted to)
Code:
adb push root/unrevoked-forever.zip /sdcard/
adb push root/mtd-eng.img /sdcard/
adb push pc36img/PC36IMG-ENG.zip /sdcard/PC36IMG.zip
adb push pc36img/PC36IMG-MR.zip /sdcard/PC36IMG-MR.zip
adb push root/flash_image /data/local/
adb push root/rageagainstthecage /data/local/tmp
7.4) No Errors hopefully. Now lets change some permissions
Code:
adb shell
chmod 0755 /data/local/tmp/rageagainstthecage
chmod 0755 /data/local/flash_image
7.5) You shouldnt see any confirmations or any messages. You should still be in the shell. Now its times for the magic....lets root that shell
Code:
./data/local/tmp/rageagainstthecage
7.6) It should kick you out and display some messages on the screen...just not errors. Lets double check that root! Type the following:
You Should see a "#". This means you have root if you see a "$" or some other error message. Reboot your phone, check your drivers, usb debugging and cable and start over. If you got a "#" You can Proceed. You should still be in the shell at a "#" sign
7.7) Once you're at the "#" sign, type:
Code:
./data/local/flash_image misc /sdcard/mtd-eng.img
sync
7.8) Now we are going to reboot your phone into the boot loader to flash the first PC36IMG.zip. You should still be in the shell so type:
7.9) Once your phone is in the bootloader highlight bootloader, and press the power button. It will load the PC36IMG File. When it ask you to flash press VOL-UP. You will notice that it says bootloader bypassed and maybe some other errors. Dont worry this is normal. Once the flash of the file is done it will ask to reboot, Select NO by Pressing VOL-DOWN. Now some people have gotten some errors here and there during the flashing just continue as normal.
7.10) You should still be in the bootloader at this point. Scroll down to recovery and press the power button. When you see the red triangle. Type the following:
Code:
adb push recovery /
adb shell busybox --install /sbin
adb shell nohup /sbin/recovery &
With any luck you should be at a recovery (green screen with text)
7.11) Select enable USB-MS. This will mount your sdcard. Look in the root of your sdcard and you should have two files. One named PC36IMG.zip and one named PC36IMG-MR.zip. Rename the file named PC36IMG.zip to PC36IMG-ENG.zip and then rename PC36IMG-MR.zip to PC36IMG.zip when your done follow the instructions on your phone to disable usb (press power) then proceed to step 12
7.12) Now Select flash zip from the menu and choose unrevoked-forever.zip. Wait for it to complete. Select Reboot from the menu.
Now pay attention. It might kick you back into:
BOOLOADER: See
7.12A
ROM: See
7.12B
WHITE HTC SCREEN: See
7.12C
7.12A) Ok so you got kicked to the boot loader. It should scan your card and find the PC36IMG.zip chose yes to flash this file and when it ask you to reboot....reboot by pressing vol-up....Proceed to step 7.13
7.12B) Ok so the phone booted into a rom. Power the phone off. Then repower the phone on pressing power and vol-down at the same time. It should take you into the bootloader and scan your card and find the PC36IMG.zip chose yes to flash this file and when it ask you to reboot....reboot by pressing vol-up....Proceed to step 7.13
7.12C) Ok so the phone is stuck at a white htc screen. Power the phone off by pulling the battery. Then repower the phone on pressing power and vol-down at the same time. It should take you into the bootloader and scan your card and find the PC36IMG.zip chose yes to flash this file and when it ask you to reboot....reboot by pressing vol-up....Proceed to step 7.13
7.13) Ok your phone is rooted now, and you should be inside the rom. The rom you just flashed is
Sprint Lovers 12/05/10 build rom with the modified recovery. Download a rom of your choice copy it to the root of your sd card and flash it. But type the following first
Code:
adb push recovery /
adb shell busybox --install /sbin
adb shell nohup /sbin/recovery &
7.14) You Should be in the recovery menu now (green text screen). Do a backup by navigating the menu. Once thats done, follow the on screen instructions and reboot or flash a rom of your choice. Reboot. If you flashed a different custom rom than the one thats included in the package cool. If not no big deal eitherway. Do a PRL/Profile update while in the rom after the phone is done rebooting. Your Done.
7.15) Read the FAQ for questions