[Tutorial] S-Off & Root EVO 3D GSM All-Hboot 1.49.0007-1.49.0009&18 S-On+CWM *Updated

Search This thread
[Tutorial] S-Off & Root EVO 3D GSM All-Hboot 1.49.0007-1.49.0009&18 S-On+CWM *Updated

Tutorial for S-Off & Rooting EVO 3D GSM Hboot 1.49.0007 - 1.49.0009 & 18 + S-On

Checking Hboot version:

Step 1: Unlock phone.
Step 2: On your EVO 3D select settings.
Step 3: Select Power.
Step 4: Uncheck Fast Boot if it isn't already unchecked.
Step 5: Hold the Power Button and select Power Off.
Step 6: Wait for phone to completely Power Down.
Step 7: Hold the volume down button and then press and hold the power button at the same time untill a white recovery screen appears.
Step 8: Note down your Hboot version for future reference.
Step 9: Select Reboot using volume keys and power button.

Note before proceeding: Hboot: 1.49.0009 & 1.49.0018
Please follow the following guide: http://xdaforums.com/showthread.php?t=1316578
Make sure to thank ngod for his work.

(Credit to Navrasis - here)
Downgrading Hboot to 1.49.0007 if needed:


Hi Everybody.
This instruction for all version hboot and all main version. Downgrade to hboot 1.49.0007

1. Download all the files.
PG86IMG.zip Official firmware with European HBOOT 1.49.0007.
xvi32.rar xvi32 hex editor.
adb.rar adb.exe and fastboot.exe.
2. You need unlock and root your phone. htcdev.com for unlock your phone.
3. Plug Evo 3D in charge mode.
4. Extract adb.rar to C:\

Run command line and enter next commands

cd c:\adb
adb shell dd if=/dev/block/mmcblk0p31 of=/mnt/sdcard/mmcblk0p31.img
ec7930b57013c4917fd3cac695ce22d7.png


Dont close command line and plug your sd card.

5. Extract xvi32.rar and open mmcblk0p31.img.
Change version in xvi32 1.22.720.1 to 1.20.720.1 and save file. (You version may be different? you need change it to 1.20....)
a0c2a86fabf917602dbb82a1a6a93d82.png

9189c93246269b689b7f399d094ea3e4.png


6. Plug your phone in charge mode. Go to command line and enter this command

adb shell dd if=/mnt/sdcard/mmcblk0p31.img of=/dev/block/mmcblk0p31
adb reboot-bootloader
6c8c47a5f9c34e3725c081c048dd3271.png


\\Change CId
fastboot oem writecid HTC__001

\\Lock bootloader
fastboot oem lock

7. Power off phone. unplug battery and copy PG86IMG.zip to root SD card.
Then power off phone to bootloader (vol down+ power button).

PG86IMG.zip cheking from phone< then you need press vol up for update, or vol down for not update. Press vol up. Wait.

You have hboot 1.49.0007.) Congratulation.)

8.Unlock bootloader from htcdev.com and s-off from revolutionary.io.

P.S. All manipulations you do at your own risk.


S-Off & Root

Pre Installation: Download & Install http://downloads.unrevoked.com/HTCDriver3.0.0.007.exe

Step 1: Open a web browser window & navigate to: http://revolutionary.io/
Step 2. Scroll down to Downloads and select appropriate operating system and download zip file (this tutorial currently only covers windows OS series)
(minimize browser window after this)
Step 3. Extract to C:\rev\
Step 4. Connect phone in charge only mode.
Step 5. Open settings on the phone and select Applications -> Development -> Check that USB Debugging is checked.
Step 6. Open my computer or explorer to c:\rev\
Step 7. Right click and select run revolutionary.exe as administrator
Step 8. Copy down the device serial number
(minimize command prompt window)
Step 9. Open back up your browser window
Step 10. Enter your serial number and select generate key
Step 11. Copy generated key into the command prompt window.
Step 12. Follow on screen prompts as the phone will S-Off.

When asked to flash clock work recovery select y and then the enter key:

Step 13. To root the rom permanent download http://goo-inside.me/superuser/su-2.3.6.3-efgh-signed.zip
Step 14. Transfer the zip file just downloaded to the SD card and flash via the new recovery (Power On + Volume Down the select recovery.) (If you get a triangled exclamation clockwork didnt install) Go down the bottom of this post for instructions.
Step 15.

Reboot phone and it should all be done!



S-On for warranty purposes:

(WARNING: Some users have reported failures not sure if this is due to device compatibility..) It worked for me on a phone with 1.49.0007 - SFR France)
(WARNING: YOUR ORIGINAL RUU MUST BE FLASHED FIRST!!!)
(WARNING: Check you have reverted back from the revolutionary HBOOT should be the one that came with your phone!!!)
Step 1. Download applicable rom from this thread: http://xdaforums.com/showthread.php?t=1208485
Step 2. Flash rom from attached thread. (PG86IMG.zip method from bootloader)
Step 3. Download and extract android SDK
Step 4. Connect phone in USB debug mode
Step 5. Open an elevated command prompt and cd to the extracted tools folder
Step 6. type "adb reboot bootloader"
Step 7. type "fastboot oem writesecureflag 3"
Step 8. type "fastboot reboot-bootloader"

Thats it! reboot and check S-On via (Power + Vol Dwn)



Flashing CWM after Revolutionary:

Step 1: Download and extract the Android SDK
Step 2: Download http://downloads.unrevoked.com/recoveries/cwm-4.0.1.4-shooteru.img
Step 3: Transfer the above step file into the tools folder of the extracted SDK in step 1
Step 4: Open a windows command prompt right click and run as administrator
Step 5: cd to the extracted tools directory
Step 6: reboot your phone holding the (power + vol down)
Step 7: Plug in the phone and wait for usb fastboot to appear
Step 8: In command prompt type "fasboot flash recovery cwm-4.0.1.4-shooteru.img"
Step 9: Wait for completion after completion you can resume steps 13 - 15 above.

(Make sure fastboot is enabled as it was disabled in previous steps)

Keep in mind everything is provided as is and everything is done at your own risk and acceptance of said risks.


Extras:
Battery Mod Thread - Battery Mods Thread
GSM Evo 3D (Android 2.3.4 Framework)
Tested & Confirmed working.


 
Last edited:

Dasda99

Member
Sep 2, 2011
21
2
THanks for this. Very Helpful. I wish it was there earlier when i s-off3d my phone.

Thanks
 

Chewy11

Senior Member
Sep 30, 2010
260
55
Montreal
This should get pinned or stickied or whatever.
+ my post and couple others should be deleted.
Send masses to Q&A .
Thanks to moderators.
 
Come on guys it clearly states in the title the hboot support.....

The extra versions will be added when I discover the support or method of unlocking...

Until then bootloader can be unlocked via HTCdev.com

(This does not unlock nand) = only good for root after loading clock work not ROM flashing as phone is left S-ON
 

c4Lvin

Senior Member
Apr 18, 2005
613
19
City of Roses
So for all that has an hboot that is not supported can't install any ROM? Is that it? If so that sure saves me
A lot of spare time and headache.

Thanks and see you guys soon.

Sent from my GT-I9100 using XDA Premium App
 
So for all that has an hboot that is not supported can't install any ROM? Is that it? If so that sure saves me
A lot of spare time and headache.

Thanks and see you guys soon.

Sent from my GT-I9100 using XDA Premium App

How Do I Know If My Device Is S-ON Or S-OFF?

That is easy to verify. Simply boot into HBOOT on your device (Volume + Dwn) with fastboot off, and the text on top will show the flag status as either S-OFF or S-ON. A full root generally means S-OFF.


S-OFF – What And Why?

In their devices, HTC have installed a sort of security check whose level is determined by S-OFF/S-ON. Essentially, this security level is a flag stored on the device’s radio that checks signature images for any firmware before it is allowed to be written to system memory. This hinders using any custom ROMs, splash images, recovery etc., and also restricts access to the NAND flash memory. However, when security level is set to S-OFF, the signature check is bypassed, allowing a user to upload custom firmware images, unsigned boot, recovery, splash and HBOOT images, as well as official firmware that has been modified, this enabling maximum customization of your HTC Android device.

Furthermore, S-OFF also reduces restrictions on accessing the NAND flash memory on the device, allowing all partitions (including /system) to be mounted in write mode while the operating system is booted.
 

seanybiker

Senior Member
Feb 15, 2011
420
75
40
Waterford
Thanks a million for the guide. Im getting my phone delivered so should have my baby in the morning and then I can get straight to sorting it out thanks to this guide. :)
 

con_cop

Member
Nov 3, 2010
30
3
happyhallsy8 said:
.................................................
.................................................
Step 13. To root the rom permanent download...

Step 14. Transfer the zip file just downloaded to the SD card and flash via the new recovery (Power On + Volume Down the select recovery.)

Reboot phone and it should all be done!
I did all the above but when flashing via recovery to root, my phone is blackout and appears a phone shape with an exclamation mark in triangle on screen. Did i do something wrong ?, can you help, plz !
 
I did all the above but when flashing via recovery to root, my phone is blackout and appears a phone shape with an exclamation mark in triangle on screen. Did i do something wrong ?, can you help, plz !

By the sounds of things your phone hasn't properly flashed clockwork..

Try steps 4 - 14 again and let me know if any error messages pop up...

If you have previously been successful the revolutionary.exe will tell you that your phone is already s-off and ask to flash clock work... select the letter y and enter and then try to flash it again...

If any other messages pop up can you post them back here?

I've just updated the guide for fixing the triangled bootloader in the event that clockwork does not flash....
Please try this and let me know how you go :).

Also what is your hboot version?

Make sure when you have command prompt over it is all set to run as administrator...
Will the phone access (power + vol dwn) from power?
 
Last edited:

seanybiker

Senior Member
Feb 15, 2011
420
75
40
Waterford
Ah crap, well I got my phone delivered this morning, loving it. Sadly my bootloader isnt unlockable yet so ill keep an eye on this thread. Thanks



sorry found other thread. thanks again.
 
Last edited:

louisvdbos

Senior Member
Feb 28, 2009
66
2
Delft
Tutorial for S-Off & Rooting EVO 3D GSM Hboot 1.49.0007 - 1.49.0008 + S-On

Checking Hboot version:

Step 1: Unlock phone.
Step 2: On your EVO 3D select settings.
Step 3: Select Power.
Step 4: Uncheck Fast Boot if it isn't already unchecked.
Step 5: Hold the Power Button and select Power Off.
Step 6: Wait for phone to completely Power Down.
Step 7: Hold the volume down button and then press and hold the power button at the same time untill a white recovery screen appears.
Step 8: Note down your Hboot version for future reference.
Step 9: Select Reboot using volume keys and power button.


S-Off & Root

Pre Installation: Download & Install http://downloads.unrevoked.com/HTCDriver3.0.0.007.exe

Step 1: Open a web browser window & navigate to: http://revolutionary.io/
Step 2. Scroll down to Downloads and select appropriate operating system and download zip file (this tutorial currently only covers windows OS series)
(minimize browser window after this)
Step 3. Extract to C:\rev\
Step 4. Connect phone in charge only mode.
Step 5. Open settings on the phone and select Applications -> Development -> Check that USB Debugging is checked.
Step 6. Open my computer or explorer to c:\rev\
Step 7. Right click and select run revolutionary.exe as administrator
Step 8. Copy down the device serial number
(minimize command prompt window)
Step 9. Open back up your browser window
Step 10. Enter your serial number and select generate key
Step 11. Copy generated key into the command prompt window.
Step 12. Follow on screen prompts as the phone will S-Off.

When asked to flash clock work recovery select y and then the enter key:

Step 13. To root the rom permanent download http://goo-inside.me/superuser/su-2.3.6.3-efgh-signed.zip
Step 14. Transfer the zip file just downloaded to the SD card and flash via the new recovery (Power On + Volume Down the select recovery.) (If you get a triangled exclamation clockwork didnt install) Go down the bottom of this post for instructions.
Step 15.

Reboot phone and it should all be done!



S-On for warranty purposes:

Step 1. Download applicable rom from this thread: http://xdaforums.com/showthread.php?t=1208485
Step 2. Flash rom from attached thread.
Step 3. Download and extract android SDK
Step 4. Connect phone in USB debug mode
Step 5. Open an elevated command prompt and cd to the extracted tools folder
Step 6. type "adb reboot bootloader"
Step 7. type "fastboot oem writesecureflag 3"
Step 8. type "fastboot reboot-bootloader"

Thats it! reboot and check S-On via (Power + Vol Dwn)



Flashing CWM after Revolutionary:

Step 1: Download and extract the Android SDK
Step 2: Download http://downloads.unrevoked.com/recoveries/cwm-4.0.1.4-shooteru.img
Step 3: Transfer the above step file into the tools folder of the extracted SDK in step 1
Step 4: Open a windows command prompt right click and run as administrator
Step 5: cd to the extracted tools directory
Step 6: reboot your phone holding the (power + vol down)
Step 7: Plug in the phone and wait for usb fastboot to appear
Step 8: On the phone type "fasboot flash recovery cwm-4.0.1.4-shooteru.img"
Step 9: Wait for completion after completion you can resume steps 13 - 15 above.


Extras:
Battery Mod Thread - Battery Mods Thread
GSM Evo 3D (Android 2.3.4 Framework)
Tested & Confirmed working.


Hello happyhallsy8
I got some problems trying to unlock en root my evo 3d gsm.
first off all my computer dont let me install HTC driver at all when i try to install it just dissapear after i click install.
The second problem is at step 7 when i start revolutionary.exe as administrator it opens and shut down again.
I download and installed it over and over again but wont work.
Do you know what this could be?

Greetings Louis
 
I don't seem to know whats going on there mate but they drivers should be installed... check your program menu for the HTC folder... if its there its most likely been installed.

In terms of revolutionary.exe it should open and stay open wether the phone is connected or not... try redownloading and give it a shot again?
 
  • Like
Reactions: louisvdbos

gemini002

Senior Member
May 14, 2008
1,233
111
Hello happyhallsy8
I got some problems trying to unlock en root my evo 3d gsm.
first off all my computer dont let me install HTC driver at all when i try to install it just dissapear after i click install.
The second problem is at step 7 when i start revolutionary.exe as administrator it opens and shut down again.
I download and installed it over and over again but wont work.
Do you know what this could be?

Greetings Louis

Make sure HTC sync is not installed or disabled..I had this problem

Sent from my HTC EVO 3D X515m using XDA App
 
  • Like
Reactions: louisvdbos

Top Liked Posts

  • There are no posts matching your filters.
  • 33
    [Tutorial] S-Off & Root EVO 3D GSM All-Hboot 1.49.0007-1.49.0009&18 S-On+CWM *Updated

    Tutorial for S-Off & Rooting EVO 3D GSM Hboot 1.49.0007 - 1.49.0009 & 18 + S-On

    Checking Hboot version:

    Step 1: Unlock phone.
    Step 2: On your EVO 3D select settings.
    Step 3: Select Power.
    Step 4: Uncheck Fast Boot if it isn't already unchecked.
    Step 5: Hold the Power Button and select Power Off.
    Step 6: Wait for phone to completely Power Down.
    Step 7: Hold the volume down button and then press and hold the power button at the same time untill a white recovery screen appears.
    Step 8: Note down your Hboot version for future reference.
    Step 9: Select Reboot using volume keys and power button.

    Note before proceeding: Hboot: 1.49.0009 & 1.49.0018
    Please follow the following guide: http://xdaforums.com/showthread.php?t=1316578
    Make sure to thank ngod for his work.

    (Credit to Navrasis - here)
    Downgrading Hboot to 1.49.0007 if needed:


    Hi Everybody.
    This instruction for all version hboot and all main version. Downgrade to hboot 1.49.0007

    1. Download all the files.
    PG86IMG.zip Official firmware with European HBOOT 1.49.0007.
    xvi32.rar xvi32 hex editor.
    adb.rar adb.exe and fastboot.exe.
    2. You need unlock and root your phone. htcdev.com for unlock your phone.
    3. Plug Evo 3D in charge mode.
    4. Extract adb.rar to C:\

    Run command line and enter next commands

    cd c:\adb
    adb shell dd if=/dev/block/mmcblk0p31 of=/mnt/sdcard/mmcblk0p31.img
    ec7930b57013c4917fd3cac695ce22d7.png


    Dont close command line and plug your sd card.

    5. Extract xvi32.rar and open mmcblk0p31.img.
    Change version in xvi32 1.22.720.1 to 1.20.720.1 and save file. (You version may be different? you need change it to 1.20....)
    a0c2a86fabf917602dbb82a1a6a93d82.png

    9189c93246269b689b7f399d094ea3e4.png


    6. Plug your phone in charge mode. Go to command line and enter this command

    adb shell dd if=/mnt/sdcard/mmcblk0p31.img of=/dev/block/mmcblk0p31
    adb reboot-bootloader
    6c8c47a5f9c34e3725c081c048dd3271.png


    \\Change CId
    fastboot oem writecid HTC__001

    \\Lock bootloader
    fastboot oem lock

    7. Power off phone. unplug battery and copy PG86IMG.zip to root SD card.
    Then power off phone to bootloader (vol down+ power button).

    PG86IMG.zip cheking from phone< then you need press vol up for update, or vol down for not update. Press vol up. Wait.

    You have hboot 1.49.0007.) Congratulation.)

    8.Unlock bootloader from htcdev.com and s-off from revolutionary.io.

    P.S. All manipulations you do at your own risk.


    S-Off & Root

    Pre Installation: Download & Install http://downloads.unrevoked.com/HTCDriver3.0.0.007.exe

    Step 1: Open a web browser window & navigate to: http://revolutionary.io/
    Step 2. Scroll down to Downloads and select appropriate operating system and download zip file (this tutorial currently only covers windows OS series)
    (minimize browser window after this)
    Step 3. Extract to C:\rev\
    Step 4. Connect phone in charge only mode.
    Step 5. Open settings on the phone and select Applications -> Development -> Check that USB Debugging is checked.
    Step 6. Open my computer or explorer to c:\rev\
    Step 7. Right click and select run revolutionary.exe as administrator
    Step 8. Copy down the device serial number
    (minimize command prompt window)
    Step 9. Open back up your browser window
    Step 10. Enter your serial number and select generate key
    Step 11. Copy generated key into the command prompt window.
    Step 12. Follow on screen prompts as the phone will S-Off.

    When asked to flash clock work recovery select y and then the enter key:

    Step 13. To root the rom permanent download http://goo-inside.me/superuser/su-2.3.6.3-efgh-signed.zip
    Step 14. Transfer the zip file just downloaded to the SD card and flash via the new recovery (Power On + Volume Down the select recovery.) (If you get a triangled exclamation clockwork didnt install) Go down the bottom of this post for instructions.
    Step 15.

    Reboot phone and it should all be done!



    S-On for warranty purposes:

    (WARNING: Some users have reported failures not sure if this is due to device compatibility..) It worked for me on a phone with 1.49.0007 - SFR France)
    (WARNING: YOUR ORIGINAL RUU MUST BE FLASHED FIRST!!!)
    (WARNING: Check you have reverted back from the revolutionary HBOOT should be the one that came with your phone!!!)
    Step 1. Download applicable rom from this thread: http://xdaforums.com/showthread.php?t=1208485
    Step 2. Flash rom from attached thread. (PG86IMG.zip method from bootloader)
    Step 3. Download and extract android SDK
    Step 4. Connect phone in USB debug mode
    Step 5. Open an elevated command prompt and cd to the extracted tools folder
    Step 6. type "adb reboot bootloader"
    Step 7. type "fastboot oem writesecureflag 3"
    Step 8. type "fastboot reboot-bootloader"

    Thats it! reboot and check S-On via (Power + Vol Dwn)



    Flashing CWM after Revolutionary:

    Step 1: Download and extract the Android SDK
    Step 2: Download http://downloads.unrevoked.com/recoveries/cwm-4.0.1.4-shooteru.img
    Step 3: Transfer the above step file into the tools folder of the extracted SDK in step 1
    Step 4: Open a windows command prompt right click and run as administrator
    Step 5: cd to the extracted tools directory
    Step 6: reboot your phone holding the (power + vol down)
    Step 7: Plug in the phone and wait for usb fastboot to appear
    Step 8: In command prompt type "fasboot flash recovery cwm-4.0.1.4-shooteru.img"
    Step 9: Wait for completion after completion you can resume steps 13 - 15 above.

    (Make sure fastboot is enabled as it was disabled in previous steps)

    Keep in mind everything is provided as is and everything is done at your own risk and acceptance of said risks.


    Extras:
    Battery Mod Thread - Battery Mods Thread
    GSM Evo 3D (Android 2.3.4 Framework)
    Tested & Confirmed working.


    2
    So for all that has an hboot that is not supported can't install any ROM? Is that it? If so that sure saves me
    A lot of spare time and headache.

    Thanks and see you guys soon.

    Sent from my GT-I9100 using XDA Premium App

    How Do I Know If My Device Is S-ON Or S-OFF?

    That is easy to verify. Simply boot into HBOOT on your device (Volume + Dwn) with fastboot off, and the text on top will show the flag status as either S-OFF or S-ON. A full root generally means S-OFF.


    S-OFF – What And Why?

    In their devices, HTC have installed a sort of security check whose level is determined by S-OFF/S-ON. Essentially, this security level is a flag stored on the device’s radio that checks signature images for any firmware before it is allowed to be written to system memory. This hinders using any custom ROMs, splash images, recovery etc., and also restricts access to the NAND flash memory. However, when security level is set to S-OFF, the signature check is bypassed, allowing a user to upload custom firmware images, unsigned boot, recovery, splash and HBOOT images, as well as official firmware that has been modified, this enabling maximum customization of your HTC Android device.

    Furthermore, S-OFF also reduces restrictions on accessing the NAND flash memory on the device, allowing all partitions (including /system) to be mounted in write mode while the operating system is booted.
    2
    now bootloader is starting the proper way but still get the invalid beta-key error.
    tryed it several times today, redownloading everything still the same.

    btw is it normal that when i do the revolutionary.exe it detecting my phone and gives me the serial of the phone??

    Yeah mate it's designed to detect the bootloader and return the serial for the phone..

    If you take your phone apart and look under the battery you can also find the serial there... try that one and give it a go.

    if you have an invalid beta key, look to see if your serial has this "l" as a letter in it... Its actually a capital "I" and not a lowercase "L" .
    1
    I don't seem to know whats going on there mate but they drivers should be installed... check your program menu for the HTC folder... if its there its most likely been installed.

    In terms of revolutionary.exe it should open and stay open wether the phone is connected or not... try redownloading and give it a shot again?
    1
    I explained a thousand times already. If there is NO RUU with MATCHING Hboot Version for YOUR branding there IS NO way to downgrade.

    the only bull**** is you in here. spamming every single thread ...
    First off, my phone is debranded, so the problem according to you is the CID...why cant this be changed