[TOOL][ROOT][GUIDE] HBoot 2.02 S-OFF

(MOD NOTE: PLEASE READ ROBLIN'S RESPONSE BELOW BEFORE PROCEEDING WITH THIS METHOD. REMEMBER, WE ARE NOT RESPONSIBLE IF YOU BRICK YOUR PHONE.)

This guide is for those that have accepted the latest 2.2 OTA. zikronix an XDA senior member has put together the lastest files and how to root your EVO 4G with the hboot 2.02 s-on. I can personally testify after only having my EVO for two weeks, that this take you by the hand guide is awesome and it worked for when all others failed, or said it couldn't be done with 2.2 OTA.

This is the link: http://forum.xda-developers.com/showthread.php?t=829045

I ultimately choose OMJ's EVO 2.2 FroYo v4.0 w/Sense UI: http://tinyurl.com/OMJ-s-Custom-ROM

READ THIS GUIDE CAREFULLY SEE POST TWO FOR FAQ

This works with the new OTA that just came out posted Here


UPDATE: THERE WAS AN ISSUE WITH THE RECOVERIES. WE HAD TO HAVE A BETA MADE AND TEST. USING ANY OTHER METHOD TO TURN S-OFF OR ANY OTHER RECOVERY COULD LEAVE YOU WITHOUT THE ABILITY TO FLASH A ROM

IM GOING TO REPEAT MYSELF FOR THE SLOW PEOPLE....USING ANY OTHER RECOVERY SUCH AS CLOCKWORK OR OTHER VERSIONS OF AMON_RA WILL NOT WORK. USING ANOTHER RECOVERY COULD COST YOU YOUR 4G RSA KEYS AND BREAK 4G PERMANENTLY. THIS IS BECAUSE THEY ARE NOT CODED FOR THE NEW PARTITIONS IF IT DOES ITS PURE LUCK!



Credit goes to:
amoamare, and his thread here
toast (thanks for your recovery and script)
unrevoked (thanks for you app)
amon_ra (thanks for your custom recovery)
TrevE (Testing)
Chubbzlou (Testing)

and who ever else I missed

Help me finance my Vette!
zikronix




Disclaimer:
I tested this on eight phones and it worked fine...but if it breaks your sh*t dont come cry to me about it...you knew the risks! No one here is responsible if you break, brick, set fire, punch, smash, stab, destroy, your self or your phone. The only person responsible is you! Just because it worked for me and others does not mean it will for you. Anytime you flash something its a risk.



Manual hack:
================================================== ====



V7.1
Download Here: http://www.wackynoodle.com/hboot202-s_off-V71.zip
MD5: d93e8666915686bbb30538d82f762d97

RECOVERY FIX FOR THOSE WHO CANT FLASH ROMS (THIS IS INCLUDED IN THE PACKAGE ABOVE AND IS FOR PEOPLE WHO ALREADY HAVE ROOTED)
NEW CUSTOM RECOVERY (AMON_RA): http://www.wackynoodle.com/PC36IMG_Recovery.zip


OPTIONAL:
HBOOT Downgrade: http://tinyurl.com/2f63aoy READ THE RISK BELOW....THIS IS NOT NEEDED



Prerequsites:
Extract to a folder of your choice. I recommend the root of C:\ into a folder of your choice or on the desktop. Make sure you have the drivers installed for your phone (recommend: SDK Drivers, unrevoked hboot drivers) and USB debugging is on. If possible master reset your phone. At the least reboot the damn thing. This was setup for people running windows, if you have access to it do it on a 32bit version. Use the adb.exe included with the package Oh and Read the FAQ and Warnings for f-sakes


1) Make sure usb debugging is on, and plug in your phone, DO NOT MOUNT USB
2) Open a command prompt and change to where ever you extracted the files to.
3) Type the following (this must be excuted from the folder you extracted to)

    adb push root/unrevoked-forever.zip /sdcard/
    adb push root/mtd-eng.img /sdcard/
    adb push pc36img/PC36IMG-ENG.zip /sdcard/PC36IMG.zip
    adb push pc36img/PC36IMG-MR.zip /sdcard/PC36IMG-MR.zip
    adb push root/flash_image /data/local/
    adb push root/rageagainstthecage /data/local/tmp

4) No Errors hopefully. Now lets change some permissions

    adb shell
    chmod 0755 /data/local/tmp/rageagainstthecage
    chmod 0755 /data/local/flash_image
    sync

5) You shouldnt see any confirmations or any messages. Now its times for the magic....lets root that shell

    adb shell
    ./data/local/tmp/rageagainstthecage

6) It should kick you out and display some messages on the screen...just not errors. Lets double check that root! Type the following:

    adb shell

7)You Should see a "#". This means you have root if you see a "$" or some other error message. Reboot your phone, check your drivers, usb debugging and cable and start over. If you got a "#" You can Proceed. You should still be in the shell at a "#" If not start over...Otherwise

    ./data/local/flash_image misc /sdcard/mtd-eng.img

Now we are going to reboot your phone into the boot loader to flash the first PC36IMG.zip. You should still be in the shell So Type:

    reboot bootloader

9) Once your phone is in the boot loader highlight bootloader, and press the power button. It will load the PC36IMG File...When it ask you to flash press VOL-UP. You will notice that it says bootloader bypassed and maybe some other errors. Dont worry this is normal. Once the flash of the file is done it will ask to reboot, Select NO by Pressing VOL-DOWN. Now some people have gotten some errors here and there during the flashing just continue as normal.

10) You should still be in the boot loader at this point. Scroll down to recovery and press the power button. When you see the red triangle. Type the following:

    adb shell mv /sdcard/PC36IMG.zip /sdcard/PC36IMG-ENG.zip
    adb shell mv /sdcard/PC36IMG-MR.zip /sdcard/PC36IMG.zip

11) Ok so that should have renamed the file for the next step. You should still be at the red triangle. Type the following:

    adb push recovery /
    adb shell busybox --install /sbin
    adb shell nohup /sbin/recovery &

12) With any luck you should be at a recovery. Now Select flash zip and choose unrevoked-forever.zip. Wait for it to complete. Select Reboot from the menu

Now pay attention. It might kick you back into the boot loader. If It does see 12A if not Go to step 12B

12A) Ok so you got kicked to the boot loader. It should scan your card and find the pc36img.zip chose yes to flash this file and when it ask you to reboot....reboot by pressing vol-up....Proceed to step 13

12B) Ok so the phone booted into a rom. Power the phone off. Then repower the phone on pressing power and vol-down at the same time. It should take you into the bootloader and scan your card and find the pc36img.zip chose yes to flash this file and when it ask you to reboot....reboot by pressing vol-up....Proceed to step 13


13) Ok your phone is rooted now, and you should be inside the rom. The rom you just flashed is the stock unrooted rom with the modified recovery. Download a rom of your choice copy it to the root of your sd card and flash it. But type the following first

    adb shell mv /sdcard/PC36IMG.zip /sdcard/PC36IMG-MR.zip
    adb reboot recovery


14) You Should be in the recovery menu now (green text screen). Do a backup by navigating the menu. Once thats done, follow the on screen instructions and reboot or flash a rom of your choice. Reboot. If you flashed a custom rom cool. If not no big deal eitherway. Do a PRL/Profile update while in the rom after the phone is done rebooting. Your Done.


15) Read the FAQ for questions

Nothing could be further from the truth, I use CW recovery, how can I have the CW recovery if your statement is true, I'm also using Rom Manager, this method is better and safer then unrevoked. This method pushs evo-recovery to your phone, ahem another custom recovery. Too many horror stories with unrevoked. Besides the idea is to root and not have to wait for those that have the OTA, I've done this method 4 times already and it has been reliable glitch free and with proven work arounds if there are any glitches.

Besides like all other methods of rooting there is and will always be a risk. This method is no greater risk then using unrevoked, if anything it's less risky. Up to a month ago I didn't know squat about rooting my OTA 2.2 evo, every site said it couldn't be done, that we had to wait, well guess what you don't have to wait anymore.

Again going around and yelling the sky is falling doesn't help matters, rooting will always be "AT YOUR OWN RISK". Now are you talking about after having been rooted that the custom recoveries don't work, I use CW, the custom recovery that is in question is the AMON RA not the CW, do your research. I've flashed the following roms OMJ's, and VAELPAK's, I'm currently running VAELPAK, having flashed via Rom Managers CW. Having said that I just finished rooting yet another EVO 4G today using this method w/3g, wifi, gps, and 4g intact. Stop scaring folks around here, you can always push evo-recovery mount MS-USB and transfer a cleaner PC36IMG.zip OR simply rename the PC36IMG-MR.zip to PC36IMG.zip and reload. As long as you're able to boot the 'RED TRIANGLE" you can recover. I'm no guru, and have run into hiccups, nothing that your talking about, just having to rerun the flash, etc., but at the end of the day I've been very successful.

Again "ROOT AT YOUR OWN RISK" goes with the territory!