• After 15+ years, we've made a big change: Android Forums is now Early Bird Club. Learn more here.

Root Evo 4G to Boost Mobile Guide/Evo 3D

solbadguy89

Newbie
Nov 23, 2011
35
60
Mod Note: By following these instructions, you are confirming that:

1) You legally own the Evo device being flashed and the donor device.
2) Both devices have clean MEIDs (meaning the service provider has not cancelled service to the phone for any other reason than customer request).
3) You will transfer the sticker from one device to the other to ensure that the Evo has the correct MEID. A heat gun or hair dryer will make this easy.
4) You will not sell your donor phone.

Doing anything other than the four criteria above is illegal and any discussion about it will be removed.


............................................................................................................
Okay I am new to the community and You all helped me a lot in the forums time to give back. Ive done this to get my phone working on boost mobile.and every bit of info helps. i got the HTC Evo 4g on chop suey 9.2.7 kernel and mikg rom 2.59 overclocked to 1190 performance.

this is a compilation of everything you need to flash to boost mobile. reason im doing this cause when i started it was hard as hell and i didnt know jack.
plus people are charging you an arm and a leg for them to do it, and there being really stingy with the info. cause the wanna milk you for the money to do it. sharing is caring. this is why were here. to help each other. its your phone you should be able to do what you want or witch ever service you want. not be locked up in a contract. bad enough being married. ENJOY:D

also there were pics but they didnt post up and its best to get all the programs you need

..........................................................................................................
Evo 4G to Boost Mobile Guide

DISCLAIMER
This guide is provided as general information only; I am not responsible for what you do with it. If you end up with a broken phone and /or suspended account that's your problem not mine.
…………………………………………………………………………………………………………………………………………………....
Files Needed
HTC Diagnostic drivers
CDMA Workshop 2.7+
QPST 2.7 Build 355
QXDM 3.9.19
Boost mobile incognito usb drivers
Boost mobile Rant usb drivers
Win Hex
Windows XP OS (Must have for incognito drivers)
EVO ROOT Universal Auto Root w/ rom and 2.15.00.11.19
What’s required
Windows XP (Must have for the Incognito Drivers)
Rooted EVO 4G (Root files in guide)
CDMA Boost Mobile Phone with 3G- Samsung Incognito or Samsung Rant
Downloads
CLICK HERE FOR AUTOROOT W/2.15.00.11.19
Download only if downgrading to 2.15.00.09.01


Round 1: (Incognito & Rant)
Start out by installing all programs and activating you donor phone before you proceed. Now plug you donor phone into your provided usb cable and check the Device Manager for your Phones Com Port Number. Open Cdma Workshop and select the Com port you phone is connected to. Click connect and then Read. You should see your phones information displayed on the left. “If you’re using a rant as a donor phone it will display your SPC so skip round 1 & 2”.Click on the memory tab, under memory/Eeprom put start Address: 0363:0000 leave the size at 65536 bytes, now click read. The Sanyo Incognito sometimes can be very difficult to read the memory, keep trying it will work. You can try to turn off the phone on and off a few times and see if that helps.



Round 2: (Incognito)
Now install and open up Win Hex, open the memory file you just saved, click on specialist- Gather Text; Recognize text by "6" uncheck everything expect for " Numbers" press "OK", save the file anywhere you like. You should end up with a .txt document with 1 or more 6 digit numbers; one of them is the SPC for your phone, write it or them down.

Round 3: (Incognito & Rant)
Go back to CDMA Workshop, "Security" tab, SPC - write the 6 digit code from the .txt file inside the box, click on SPC - send. You should get a message saying that the SPC code is correct and the phone is unlocked.”On the Rant just click Read and it will display your SPC and click send and will say phone is unlocked” If you have multiple codes from your incognito, try all of them. Once the phone is unlocked, click on the memory tab. go to NV Items read and save items: 465,466,1192,1194; they must be saved one at a time so for example the First NV Item: 465/ Last NV Item: 465 click OK and save it as 465 then move on to the next item and do the same. Remember to save it somewhere handy, as we will need the later on.” On the Rant Read all nvitems and save the each file. There will be nothing in 1192 or 1194 that’s ok.”

Round 4: (Incognito & Rant)
Stay in CDMA Workshop, and click the NAM Tab. Click “Read” this will display all your phones information inside of “NAM 1” Save the filename as NAM 1 and do the same for NAM 2.
(Pictured below)






Continued……
Close Cdma Workshop. Open Service Programming and enter your Donor phones SPC. Click Read and navigate to the “MIP” Tab, we need your Donor phones NAI. Click on Profile 1 and copy down your “NAI” and everything circled in the provided pictures.
(Pictured below)



Continued…
Close Service Programming and open up QXDM. In the command input windows type. Password 01f2030f5f678ff9 hit enter. Requestnvitemread ds_mip_ss_user_prof . This will find your Ha Shared and AAA Passwords for profile 0.

*Note Rant users this method will work for retrieving the shared password and AAA password, Open up QXDM and enter “ Password” 01f2030f5f678ff9” then First retrieve Profile 0 password by typing “Requestnvitemread ds_mip_ss_user_prof” retrieve your password by scrolling down to your HA Shared which should be “736563726574” For your AAA Provisioning password open up Nvitem 466 and read your 32 digit password after the “10”, save and return back to Qxdm, Enter “Requestnvitemread ds_mip_ss_user_prof 1” for Profile 1, once again you HA Shared will be “736563726574” scroll down for your AAA Password. This password will be 6 digits long.

Save all information in a notepad and label each Profile and save the passwords for both..

Round 5: (EVO 4G)

Now if you made it this far then keep going your almost there. Now start out by downloading the AUTOROOT W/2.15.00.11.19 file. It’s almost 400 mb in size and will take some time to download depending on your internet connection. Once the download is complete extract it to a folder on your desktop and open the Auto Root Folder. Navigate to menu/settings/applications/development and turn on usb debugging, make sure you have a SD card in your Evo and double click AutoRoot.bat. This will guide you through the root process (don’t disconnect your phone let it root your phone and install the correct rom your Evo needs to complete the meid/esn write. Once this is complete you should be on the correct radio you can check this by going to menu/settings/about phone and software information tab. It should read 2.15.00.11.19 under baseband ver.
Now heres your 2 options that you have in order to find your Hidden Meid and Esn locations.

Downgrade your Rom to the 2.15.00.09.01 radio available for download here when the download is complete. Extract the File and Run the .exe file and follow the on screen instructions, make sure you have your Evo in usb debugging mode by going to menu/settings/development. Once this application is done you will be on the 2.15.00.09.01 baseband and will have different meid & esn locations. Follow the instructions for this baseband below and you should find most of your locations.


Follow this guide down below and use the memory locations for 2.15.00.11.19. This method can be a little harder and you might have to scan for your meid & esn locations but there hidden and can be found.
CHOOSE ONLY 1 OPTION BEFORE YOU PROCEED!!!!!!!!!!



Round 6: You need to dial ##3424# (DIAG Mode) you should now have a COM port listed under you device manager settings. Next we need to find your SPC code for the Evo 4G, but this is alot easier! Open CDMA Workshop, I suppose you already opened the "Device Manager" and know the COM port for your Evo, select the COM port -connect- read and your should see your phone information on the left. Now go to the “security" tab, Password (16 digits) delete all the FFFFFFFF's and type 01F2030F5F678FF9 then send. You should now see your SPC code magically appearing inside the SPC box, write it down. Next go to the "Memory" tab, NV Items and write the 4 NV Items we saved from your donor phone earlier.465, 466, 1192, and 1194. Do the same with the files for the Samsung Rant.
Navigate to the “NAM” TAB and Write the Nam 1 and Nam 2 Files we saved earlier. If done correctly it should display your donor’s phone number and other information.
(Pictured below)


Round 7: (EVO 4G)
OPTION 1 - MEID & ESN Locations (2.15.00.09.01)
*Note if you chose option 1 then goto the txt file I have included in this guide and start typing in these commands for your 2.15.00.09.01 baseband

OPTION 2- MEID & ESN Locations (2.15.00.11.19)
*Note if you chose option 2 then use the txt file I have included in this guide and start typing in these commands for your 2.15.00.11.19 baseband
*NOTE EITHER OPTION WILL WORK IF YOU DOWNGRADE IT WILL BE EASIER!!!!!!!



*Note I have also included a txt file for option 1 & option 2 with these locations for copy & paste
If you only have 10 or less you will have to scan your memory in cdma workshop to find the remaining locations. (Use example pics for help)

*Note if you can’t find all locations use the information below to find your missing meid or esn. They hide it can be tricky finding it but it’s not bad.


Scanning for you “ESN” is simple. Open up cdma Workshop, connect and send spc. Under the ESN tab click read and click the drop down bar and select “Universal Ram Method” then click Write and Scan for addresses. Input “00FA-00FF on the 1st scan on the second scan search 0108-01D7. Examples can be found below.
(Pictured below)









Round 9 (EVO 4G)
****Note**** If you can't find all the Meids use this method otherwise skip ahead to step 9
Open Cdma Workshop, Memory tab, Memory/Eeprom, start address put 00FA:0000
size 99999999, leave work with eeprom unchecked then click on the read button below it. (This will read all memory between 00fa and 00ff.It will stop when it hits the unreadable area but that's ok. Save the file like scan1.bin.
Then open up Win Hex to find all your Meid and ESN locations (in reverse of course)
in your hex editor each address will have a offset where it found it
you need to use a hex calculator and add your starting address to that number to get location of you Meid or ESN
example"""
say you found an Meid at offset 2B710 in your hex editor on your 1st scan which started at 00FA
you add 00FA0000 + 2B710 which gives you FCB710 which is actually 00FC:B710 you just add the 00's in front. (You can load up windows calculator and add the offset and location together to give you the area to search for in Memory in Qxdm.
do that for all ESN and MEID locations you find in each bin file


Round 10 (EVO 4G)



Knockout Round: (EVO 4G)
Now open QPST Service Programming, select your Evo and press OK. Once connected, Read from Phone and enter you Evo SPC code we got earlier. Navigate to the M.IP tab.


Continued...

Click profile 0 and click edit. Check and make sure your “NAI” is the correct one for boost mobile. Enter your HA Shared password first, then enter your AAA Password into the text box, next Enter all information that you saved earlier and put them in the required box’s

NAI: YOURMEID@hcm.sprintpcs.com
Home address: 0.0.0.0
Primary HA address: 68.28.15.12
Secondary HA address: 68.28.31.12
SPI: 4D2
SPI: 4D2
Rev Tunnel Preferred: Checked now with both passwords hit ok.
Now Profile 1 information below………
Enter your HA Shared password first, then enter your AAA Password into the text box, next Enter all information that you saved earlier and put them in the required box’s
NAI: YourName@myboostmobile.sprintpcs.com
Home address: 0.0.0.0
Primary HA address: 255.255.255.255
Secondary HA address: 68.28.89.76
SPI: 4D2
SPI: 4D2
Rev Tunnel Preferred: Checked now with both passwords hit ok


Make the active user “0” and Write to phone the Evo will now reboot. When it comes back enjoy 3g. Now for mms dial ##3282#, and enter the SPC code. Tap on advanced and scroll down to you see the URL mms.sprintpcs.com. Change the URL to http://mm.myboostmobile.com.
Congrats you have now converted your Evo 4g to boost mobile. I want to thank everyone for the information I received and the various guides. Without you none of this wouldn’t have been possible.

also this is the same concept for flashing evo 3d

here is other tutorial on how to do the flash
part 1
Samsung Epic 4G to Boost Unlimited [Step by Step Guide] Part 1 of 2 - YouTube
part 2
Samsung Epic 4G to Boost Unlimited [Step by Step Guide] Part 2 of 2 - YouTube

additional info see if on track
Flash HTC Evo 3D to Boost

Flash HTC Evo 3D to Boost - YouTube

Also Don't be stingy if you have more stuff to add then mail me with the info and ill keep adding. member this is the same concept with any CDMA phone. so dont get jerked around
UPDATED new found guide for download

how do you scan meid locations with cdma workshop 2.7 thats all i want to know ?
[Q] how do you scan meid locations with cdma workshop 2.7 thats all i want to know ? - xda-developers
Flash HTC Evo 3d to Boost Mobile

[Q] Flash HTC Evo 3d to Boost Mobile? - xda-developers [DEAD LINK]

Evo 3D Download mode, Radio Serial Shells, Eng Hboot and more! *GETTING CLOSE TO DONE*

[WIP] Download mode, Radio Serial Shells, Eng Hboot and more! *GETTING CLOSE TO DONE* - xda-developers

Htc flash to boost mobile guide [noob]

Htc flash to boost mobile guide [noob] - xda-developers

BOOM, HERE IT IS PEOPLE. EVO 3D FLASH TO BOOST MOBILE GUIDE FOR HBOOT 1.5
========================================================================
ENJOY AND GOLDEN RULE HELP EACH OTHER OUT WERE IN THIS TOGETHER

ThreadEvo 3D to Boost Mobile Guide
DISCLAIMER
This guide is provided as general information only; I am not responsible for what you do with it. If you end up with a broken phone and /or suspended account IS YOUR RESPONSIBILITY.
…………………………………………………………………………………………………………………………………………………....
Files Needed
HTC Diagnostic drivers
CDMA Workshop 2.7+
QPST 2.7 Build 355
QXDM 3.9.19
Boost mobile incognito usb drivers
Boost mobile Rant usb drivers
Win Hex
Windows XP OS (Must have for incognito drivers)
HxD
What’s Required
Windows XP (Must have for the Incognito Drivers)
Rooted EVO 3D (Root files in guide) THIS IS OPTIONAL YOU CAN ROOT THE PHONE BEFORE OR AFTER THE PROCEDURE IT DOESN’T MATTER!
CDMA Boost Mobile Phone with 3G- Samsung Incognito or Samsung Rant

Downloads
FILES NEEDED
4shared.com - free file sharing and storage
ROOTING FILES (You will need them in step 5A)
Download HTCEvo3D/rooting/rootevo3d.zip at DownloadAndroidROM.com
ROOTING FILES (You will need them in step 5B)
The Internet vs. Hollywood


Round 1: (Incognito & Rant)
Start out by installing all programs and activating you donor phone before you proceed. Now plug you donor phone into your provided usb cable and check the Device Manager for your Phones Com Port Number. Open Cdma Workshop and select the Com port you phone is connected to. Click connect and then Read. You should see your phones information displayed on the left. “If you’re using a rant as a donor phone it will display your SPC so skip round 1 & 2”.Click on the memory tab, under memory/Eeprom put start Address: 0363:0000 leave the size at 65536 bytes, now click read. The Sanyo Incognito sometimes can be very difficult to read the memory, keep trying it will work. You can try to turn off the phone on and off a few times and see if that helps.

Round 2: (Incognito)
Now install and open up Win Hex, open the memory file you just saved, click on specialist- Gather Text; Recognize text by "6" uncheck everything expect for " Numbers" press "OK", save the file anywhere you like. You should end up with a .txt document with 1 or more 6 digit numbers; one of them is the SPC for your phone, write it or them down.

Round 3: (Incognito & Rant)
Go back to CDMA Workshop, "Security" tab, SPC - write the 6 digit code from the .txt file inside the box, click on SPC - send. You should get a message saying that the SPC code is correct and the phone is unlocked.”On the Rant just click Read and it will display your SPC and click send and will say phone is unlocked” If you have multiple codes from your incognito, try all of them. Once the phone is unlocked, click on the memory tab. go to NV Items read and save items: 465,466,1192,1194; they must be saved one at a time so for example the First NV Item: 465/ Last NV Item: 465 click OK and save it as 465 then move on to the next item and do the same. Remember to save it somewhere handy, as we will need the later on.” On the Rant Read all nvitems and save the each file. There will be nothing in 1192 or 1194 that’s ok.”

Round 4: (Incognito & Rant)
Stay in CDMA Workshop, and click the NAM Tab. Click “Read” this will display all your phones information inside of “NAM 1” Save the filename as NAM 1 and do the same for NAM 2.
(Pictured below)






Continued……
Close Cdma Workshop. Open Service Programming and enter your Donor phones SPC. Click Read and navigate to the “MIP” Tab, we need your Donor phones NAI. Click on Profile 1 and copy down your “NAI” and everything circled in the provided pictures.
(Pictured below)



Continued…
Close Service Programming and open up QXDM. In the command input windows type. Password 01f2030f5f678ff9 hit enter. Requestnvitemread ds_mip_ss_user_prof . This will find your Ha Shared and AAA Passwords for profile 0.
*Note Rant users this method will work for retrieving the shared password and AAA password, Open up QXDM and enter “ Password” 01f2030f5f678ff9” then First retrieve Profile 0 password by typing “Requestnvitemread ds_mip_ss_user_prof” retrieve your password by scrolling down to your HA Shared which should be “736563726574” For your AAA Provisioning password open up Nvitem 466 and read your 32 digit password after the “10”, save and return back to Qxdm, Enter “Requestnvitemread ds_mip_ss_user_prof 1” for Profile 1, once again you HA Shared will be “736563726574” scroll down for your AAA Password. This password will be 6 digits long. Follow the pictures below.

Save all information in a notepad and label each Profile and save the passwords for both.
This is for Profile 1


You are now done with your donor phone. Turn off or put it on airplane mode, whatever you do don't ever have the phone on at the same time.
Round 5A: (EVO 3D)
Rooting the phone: all the information and steps are on this YouTube video (How to Root HTC Evo 3D! - YouTube) or you can keep following the guide with instructions and pictures, your choice.

This guide is for Windows-based computers only.
Before we begin, check the software number on your phone by going to Settings->About Phone->Software Information.
If your software number is 2.08.651.2 or LATER go to round 5B to begin the rooting process if not stay in round 5A.

First, connect your Evo 3D to your computer via a micro USB cable and put your phone into USB Debugging mode under Settings->Applications->Development.

Next, download the rootevo3d.zip file (which contains everything you need) and unzip it to the root directory of your hard disk such as c:\rootevo3d.

Download rooting files here
Download HTCEvo3D/rooting/rootevo3d.zip at DownloadAndroidROM.com

Install the Evo 3D drivers in this folder by running “HTCDriver3.0.0.007.exe”. Please install these drivers even if you have installed drivers before otherwise the rooting method will not work!


When the drivers are installed, you can verify under Device Manager that there’s My HTC under Android USB Devices.

Next open up a command prompt by typing “cmd” under Start->Search, then browse to your rootevo3d folder by typing:
cd \rootevo 3d
Then type:
adb devices
to find the serial number of your Evo 3D.

If you get something like HT168HX09557, that’s your serial number, write it down on a notepad as we will need it later.
If you don’t get this, that means you haven’t installed the drivers correctly or your phone is not in USB Debugging mode. (Also turn off Disk Drive Mode, set it to Just Charge.)
Next, we are going to find the HBOOT version number of your Evo 3D. Take the batteries out then reboot your phone into bootloader mode by holding down both Volume Down and the Power Button.

Mine says “1.40.0000″, make a note of this as we will need it later and reboot your Evo 3D.
Next, goto this site Revolutionary and get your beta code by putting in the serial number and choosing the HBOOT.

Save this beta key/code as we will need to enter it later.

Next, go back to the command prompt and type:
revolutionary.exe

Enter your beta key you got earlier here when it asks you and your Evo 3D will start rooting!

It should reboot your Evo 3D a couple times and you will see “S-OFF”!

When it’s done rooting, it will ask you to download recovery and install it, just hit Y.

If that all went successfully, congrats, your phone’s bootloader is unlocked now and you have ClockworkMod Recovery installed. The only thing left to do is install SuperUser app.

Choose “Bootloader” and hit the Power Button.

Choose “Recovery” and hit the Power Button, this will get you into ClockworkMod Recovery.

Once in ClockworkMod Recovery, choose “mounts and storage” and hit the Power button.

Choose “mount USB storage” and hit the Power button. This will put your Evo 3D into disk drive mode without having you to reboot your phone.

Go to your computer and copy over the su-2.3.6.3-efgh-signed.zip file to the SD card of your Evo 3D.

Unmount your Evo 3D in ClockworkMod Recovery then choose “install zip from sdcard” from main menu.

Choose “choose zip from sdcard” and hit the Power button.

Choose “su-2.3.6.3-efgh-signed.zip” and hit the Power button.

It should install the Superuser app. For those of you who’ve temp-rooted or perma-temp rooted, you might get installation abort error like me but just ignore it as that’s because you already have Superuser app installed.

Reboot your Evo 3D and it should activate your phone (again).

When everything comes back up, you should see that Superuser app is installed and you can run rooted apps!

If you rooted your Evo 3D, don’t forget to thank the guys over at Revolutionary.io who made it all happen!

FAQ
Installing Recovery failed, what do I do?
See how to install ClockworkMod Recovery manually. How to Install ClockworkMod Recovery Manually on HTC Evo 3D! | HTC Evo 4G Hacks!

Does rooting erase my apps and contacts?
No, this rooting method doesn’t erase any of your apps and contacts, just don’t do factory wipe like some “others” are saying, follow our guide.

My camera is not working after rooting!
Try rebooting your phone a couple times, sometimes right after rooting, some apps might be a bit buggy but couple reboots will fix it all.
What does rooting Evo 3D give me?
You can get cool stuff like free wifi tethering, USB tethering, ability to backup/restore ROMs, and also install new ROMs. Most ROMs also give you easily double-battery life over stock with minimal bloatware so there’s nothing to lose but everything to gain.
Can I brick my Evo 3D while rooting?
That’s hard to do if you follow all of our directions carefully. And there’s always a way to unbrick Evo 3D so no, there’s not really a way to brick your phone.
Does this method work on Evo 4G or other phones?
No, this rooting method is ONLY for Evo 3D, please DO NOT TRY on other phones and that could brick your phone.

Round 5B: (EVO 3D)
Rooting the phone: all the information and steps are on this YouTube video (How to Root Evo 3D! [2.08.651.2 and Later] [HTC Unlock Method] | HTC Evo 4G Hacks!) or you can keep following the guide with instructions and pictures, your choice.

This guide is for Windows-based computers only.
*Note – This method of rooting currently doesn’t allow you to flash new kernels (so no overclocking) but you can flash new ROMs. If you haven’t done OTA update to HBOOT 1.50, please follow the method outlined here instead.
This new rooting method from HTC works on software version 2.08.651.2 and later using HTC’s unlock method. You can also do it on all platforms including Windows, Linux, and Mac.
Before we begin, check the software number on your phone by going to Settings->About Phone->Software Information.
Your software number should be 2.08.651.2 or LATER. If not, go do the software update under Settings->System Updates->HTC software update and start over.
For Mac users, please replace “fastboot” with “./fastboot-mac” in the instructions below.
For Linux users, please replace “fastboot” with “./fastboot-linux” in the instructions below.
Step 1. Download rootevo3dnew.zip file and unzip to root folder of your hard disk or desktop.

Download rootevo3dnew.zip

Mirrors
Step 2. Put your Evo 3D in fastboot mode by first going to Settings->Power and make sure “Fast boot” is checked off.
Step 3. Turn off your phone then power up by holding down Power Button and Volume Down button.
Step 4. Hit Power again to enter Fastboot.
Step 5. Connect your Evo 3D to your computer, your phone should say “Fastboot USB”.
Step 6. For Windows, install the HTC drivers HTCDriver3.0.0.007.exe in the zip file. For Linux and Mac you don’t need to install drivers.
Step 7. Open up a command prompt in Windows by typing “cmd” under Start->Search and for Linux and Mac, open up a terminal.
Step 8. Go browse into the directory where you unzipped rootevo3dnew.zip, for Windows:
cd \rootevo3dnew
or
cd Desktop\rootevo3dnew
if you unzipped to your desktop.
For Mac and Linux, likewise:
cd /rootevo3dnew
or where you unzipped the files to.
Step 9. Next type:
fastboot oem get_identifier_token
You should get a bunch of code. If you don’t, you have an older OTA, go do the software update under Settings->System Updates->HTC software update and start over.
Step 10. Now, copy everything starting with <<<< Identifier Token Start >>>> and ending with <<<<< Identifier Token End >>>>> .
*Note – In Windows, when you copy, sometimes it adds a white space to the beginning, if you get errors, try copying the token to Notepad then getting rid of spaces before pasting it to HTC&#8217;s site.
Step 11. Go to HTCDev.com and sign up as a user. Then goto Unlock Bootloader->Get Started->Begin Unlock Bootloader. Agree to the legal terms, proceed all the way to Step 10 and paste the token you just copied.
Step 12. If you get errors, try the Notepad tip above, otherwise you should be getting a file called Unlock_code.bin as an attachment in your e-mail.
Download this file off your e-mail then copy the file over to the rootevo3dnew directory.
Step 13. Next go back to your command prompt/terminal and type:
fastboot flash unlocktoken Unlock_code.bin
Step 14. Go to your phone and hit the Volume Up button and then Power button to unlock bootloader.
Step 15. If you got this far, congratulations, your Evo 3D&#8217;s bootloader has been unlocked!!!
Step 16. Your phone will reboot.
Step 17. Put your Evo 3D in fastboot mode by first going to Settings->Power and make sure &#8220;Fast boot&#8221; is checked off. (Again, yes).
Turn off your phone then power up by holding down Power Button and Volume Down button.
Hit Power again to enter Fastboot.
Step 18. Type the following to install ClockworkMod Recovery:
fastboot flash recovery cwm-4.0.1.4-shooter.img
Step 19. Go back to your phone and choose Bootloader then hit the Power Button.
Then choose Recovery then hit the Power Button.
Step 20. When you get Revolutionary CWM blue menus, go to &#8220;mounts and storage&#8221; using your Volume buttons and hit the Power button.
Then choose &#8220;mount USB storage&#8221; and hit the Power button.
Step 21. Go to your computer and copy over su-2.3.6.3-efgh-signed.zip to your Evo 3D.
Step 22. Go back to your phone and hit Power button to get out of USB mode. Then choose &#8220;+++++Go Back+++++&#8221; and hit the Power button.
Then choose &#8220;install zip from sdcard&#8221; and hit the Power button.
Then choose &#8220;choose zip from sdcard&#8221; and hit the Power button.
Then choose su-2.3.6.3-efgh-signed.zip and hit the Power button.
Choose &#8220;Yes&#8221; and hit the Power button.
Step 23. Reboot and enjoy root!
FAQ
After rooting my Evo 3D using HTC Unlock method, I still get S-ON?
It doesn&#8217;t matter, the HTC Unlock method gives you a fully unlocked bootloader, the S-ON is meaningless once you unlock as you can install recovery and ROMs.
Can you still flash custom kernels?
Yes, you can still flash custom kernels but you need to launch ClockworkMod Recovery from Fastboot. I recommend you use this method for flashing any kind of ROMs too.
Need accessories? Get 10% OFF on HTC Evo 3D Accessories or HTC Evo 4G Accessories at WirelessEmporium with coupon code CJ10EK at checkout.





Round 6:
Follow these steps in exact order.
1. Download and install the QPST Build 366 of version 2.7 and the HxD, and the latest Android SDK from the following link: Android SDK | Android Developers
2. Put the phone in USB debugging mode by going to settings/ applications/ development and check in where it says USB debugging, also it is helpful to check stay awake so you can see the phone processes while working.
3. Go to phone and dial ##3424# to access Diagnostics mode the computer will need the appropriate drivers to continue, once installed move on to the next step.
5. Open your device manager from the control panel, and locate your com ports, expand the com port section and you will see the port for HTC DIAGNOSTICS.
6. Open QPST Configuration and add the new port for the HTC, then close configuration.
7. Open EFS Explorer from the start menu under QPST and make sure the phone is showing up then, Enter the SPC code and press OK.
8. Once the phone reads completely make a new directory named (open sesame door) without the parentheses and all lower case
9. After making the new folder locate abd.exe from the android sdk install folder and press: start, run and type cmd then press enter you will get a command prompt window that opens up navigate to the android sdk directory and type; adb reboot, the phone should then reboot if you&#8217;ve done as you were supposed to.
10. After the phone reboots read it again with QPST EFS Explorer which still should be opened, you will notice that the red no access circle has been removed from the nvm directory so expand it and go to the num directory, locate file 0 and drag it from EFS to your desktop and file 1943 the same way.
11. Open HxD and then open up the 0 file on the desktop it should be your ESN. Zero it all out and then save it, do the same for the MEID in 1943.
12. Back to EFS and right click in the area and click Copy Item File from PC&#8230;, then select the new saved files one at time, it will write the and confirm it.

13. Go back to the adb command prompt and type adb reboot again, after reboot read the phone once again then with EFS and delete the (open sesame door) folder.
14. Reboot the phone one last time with adb reboot in the command prompt, when the phone reboots it&#8217;s done, dial ##786# to make sure there all zeros.

Round 9 (EVO 3D)
After zeroing all MEID and ESN locations, Reboot your Evo and Dial ##786 to make sure the MEID and ESN is all zeros. *Note if you reboot and your Meid and or ESN is still not zeros then you missed a file somewhere in memory and have to go back to step 6 and rewrite every file again.. This can be a frustrating step and not an easy one by any means but if you keep looking you will find it.
Round 10 (EVO 3D)

Now you can write your MEID/ESN of you Incognito to your Evo 3D, In QXDM type the following commands. (Replace the X&#8217;S with your meid




Password 01F2030F5F678FF9
RequestNVItemRead Meid (this will display the current Meid)
RequestNVItemWrite Meid 0x00A0000000000 <-Meid/HEX ID from your donor Incognito/rant
RequestNVItemRead Meid (This should now display your new Meid)
RequestNVItemRead ESN (This should now display your correct Esn)
You are now done close QXDM.

Knockout Round: (EVO 3D)
Now open QPST Service Programming, select your Evo and press OK. Once connected, Read from Phone and enter you Evo SPC code we got earlier. Navigate to the M.IP tab.


Continued...

Click profile 0 and click edit. Check and make sure your &#8220;NAI&#8221; is the correct one for boost mobile. Enter your HA Shared password first, then enter your AAA Password into the text box, next Enter all information that you saved earlier and put them in the required box&#8217;s

NAI: YOURMEID@hcm.sprintpcs.com
Home address: 0.0.0.0
Primary HA address: 68.28.15.12
Secondary HA address: 68.28.31.12
SPI: 4D2
SPI: 4D2
Rev Tunnel Preferred: Checked now with both passwords hit ok.
Now Profile 1 information below&#8230;&#8230;&#8230;
Enter your HA Shared password first, then enter your AAA Password into the text box, next Enter all information that you saved earlier and put them in the required box&#8217;s
NAI: YourName@myboostmobile.sprintpcs.com
Home address: 0.0.0.0
Primary HA address: 255.255.255.255
Secondary HA address: 68.28.89.76
SPI: 4D2
SPI: 4D2
Rev Tunnel Preferred: Checked now with both passwords hit ok


Make the active user &#8220;0&#8221; and Write to phone the Evo will now reboot. When it comes back enjoy 3g. Now for mms dial ##3282#, and enter the SPC code. Tap on advanced and scroll down to you see the URL mms.sprintpcs.com. Change the URL to http://mm.myboostmobile.com.
Congrats you have now converted your Evo 3D to boost mobile.


Mod Note: By following these instructions, you are confirming that:

1) You legally own the Evo device being flashed and the donor device.
2) Both devices have clean MEIDs (meaning the service provider has not cancelled service to the phone for any other reason than customer request).
3) You will transfer the sticker from one device to the other to ensure that the Evo has the correct MEID. A heat gun or hair dryer will make this easy.
4) You will not sell your donor phone.

Doing anything other than the four criteria above is illegal and any discussion about it will be removed.
 

Attachments

  • 2.15.00.09.01meid method-Option 1.txt
    1.3 KB · Views: 1,966
  • 2.15.00.11.19meidmethod-Option 2.txt
    1.4 KB · Views: 1,660
  • HTCDiagDrivers(1).zip
    118.1 KB · Views: 2,164
  • Incognito_Drivers_new(1).zip
    369 KB · Views: 1,818
  • WinHex SnD-ZWT.zip
    1.2 MB · Views: 2,034
  • How To Flash Sprint HTC Evo 4G To Boost Mobile ABSOLUTELY FREE!.pdf
    1.9 MB · Views: 2,820
  • 2.15.00.05.02 MEID_ESN Locations.txt
    1.2 KB · Views: 1,523
  • 2.15.00.08.08 MEID_ESN Locations.txt
    1.1 KB · Views: 1,441
  • CDMA Workshop 2.7.zip
    5.3 MB · Views: 2,887
  • Rant Drivers.zip
    369 KB · Views: 1,464
Holy Crap man! Good job, I've never seen all of the boost mobile info in one place.
@ Ocn, is there somewhere you can sticky a link to this for future folks to have easy access?

This is what I love to see, folks giving back to the community, paying it forward, outstanding!

Once again good job! :D

Ask and you shall receive. I added this guide to the Root Info sticky.
 
Upvote 0
Can you please show me how to use a donor phone that read I have a Samsung galaxy prevail on boost and want to flash my EVO 3d

i cant show you a complete step by step video cause of the numbers to my phone.

just have windows xp on a seperate partition its Mandatory for windows xp cause any other operating system wont recongnized the drivers. to find the donor phones spc.

follow the instructions step by step

it works i got my evo 4g on boost. i wont lie first time will be a pain in the butt but once you do it. then later on you learn a new skill.
if you want to help out make a video showing people how to do it
 
  • Like
Reactions: ocnbrze
Upvote 0
Can you please show me how to use a donor phone that read I have a Samsung galaxy prevail on boost and want to flash my EVO 3d

Hi, is there a work around for getting the NAM 1 and NAM 2 information, as well as the profile information, for a phone that will not be read by CDMA Workshop? I have s Samsung Galaxy Prevail that I am attempting to use as a donor phone for an HTC Evo 4G. The Galaxy Prevail will open in CDMA Workshop after enabling USB Mode in ##8778# and DM Mode in ##7678#. After entering the SPC Code (MSL), it tells me "SPC Code correct. Phone unlocked," and allows it to read the NV Memory. However, when I looked into the NV Items files, they list 0x then some letters and say access denied. I found a workaround for this by using Terminal Emulator on the phone to extraxt the NV Items to a cdma.rfs file on the root of the SC Card. I then copied that file off the phone and opened it with MagicISO and got my 4 NV Item files. However, I cannot get CDMA Worskshop to read the NAM 1 and NAM 2 entries and I cannot get Service Programming in QPST to load the files for the profiles, etc. Is this phone locked down too tight to use as donor phone, or is there a workaround for all this? Please, if anyone knows anyway to make this work, please let me know. I really want to get my Evo 4G activated on Boost Mobile. I want it so badly I can taste it, lol.
 
Upvote 0
Its not the method is a failure. your on the right track as i see it. but Htc has source programing for rooting thanks to the devs of Revolutionary. Samsung is a different brand. and there Rooting method. is different. you have to manual root your phone first. and don't relie on cdma workshop to unlock your phone. cause it is glitchy but it does the job. cant go wrong with free>?

once your phone is unlocked you can get better results. also make shure your on the correct comport

also the donor phone has to be from boost mobile.so it can click up with sprints network. best to stick with rant or incognito as donor phones
 
  • Like
Reactions: ocnbrze
Upvote 0
Its not the method is a failure. your on the right track as i see it. but Htc has source programing for rooting thanks to the devs of Revolutionary. Samsung is a different brand. and there Rooting method. is different. you have to manual root your phone first. and don't relie on cdma workshop to unlock your phone. cause it is glitchy but it does the job. cant go wrong with free>?

once your phone is unlocked you can get better results. also make shure your on the correct comport

also the donor phone has to be from boost mobile.so it can click up with sprints network. best to stick with rant or incognito as donor phones

First, thank you for your quick reply. I understand that using a Rant or Incognito would be best, but I already have the Prevail and the Evo 4G both for free from a friend, and I don't want to have to go out and buy another phone to use as a donor phone, if I can find a way around it.

My Prevail is rooted, did you mean that you think it needs to be carrier unlocked for CDMA Workshop to read it as well? I just dont get why CDMA Workshop will validate that I inputted the correct SPC/MSL and Password, but that it still wont let me read the NAM 1 and NAM 2 entries. Any thoughts?
 
Upvote 0
okay the whole point is your cloning your phone. is the prevail a boost phone. if not wont work on that network. if not then is the prevail on a boost network. and yes its best to root your phone before using cdma workshop

Yes, of course. The Samsung Galaxy Prevail is an Android 3G phone by Boost Mobile. And mine is already rooted and I know the SPC and the password, etc.. The only problem I am having (and other reports online say the same thing) is that CDMA Workshop does not want to read the NAM 1 and NAM 2 entries of the phone, even after the phone has been unlocked by the SPC. I'm just wondering if there is any other way to go about getting the information off the phone....
 
Upvote 0
also just cause the phone is rooted. you should go to boot loader screen and see if S is ON or OFF. to do this make sure you have fast boot off in settings. you need it off. then turn off phone. then hold the volume down button first. then press and hold the power power button. see if its on or off that my be a problem im trying to see what it may be.

also cdma workshop is stubborn as hell you may have to plug in and unplug a couple times



buy a used incognito on craigslist...there is no bad esn for boost phones, so don't worry about that...also the incognito is actually cdma Rev A...as well as the easiest for grabbing nv items...but be prepared you WILL REQUIRE winxp (can be virtual pc) to get the incognito drivers to work.They won't work on vista/win7....just pay the $10 it's worth it
This is post is inaccurate.
Of course if someone uses an incognito and then turns right around and sells it, then the buyer attempts to use it on a newly activated account, they will not be able too. Anytime a device is attached to an active account, or temp disabled account, the device will not be able to be used for a new account.

And yes a prevail can be used.
So yes, it does matter.
Just dropping my two cents in for correction.
 
  • Like
Reactions: ocnbrze
Upvote 0
I need Help in the worst way..... I am using a samsung Galaxy prevail as a donor phone. I am have an issue with the round one step of getting the *.bin file. I have done over and over again what has been suggested of powering off and on my phone. I been doing for almost two hours and I must be doing something wrong. Please let me know if this is doable or am I just wasting my time. thanks I want my Boost HTC.
 
Upvote 0
One question, I already have my phone rooted but I want to update my phone. Its currently running: Android version: 2.2 | Baseband version: 2.15.00.09.01 and Kernel version 2.6.32.17

I got the phone rooted to boost mobile and i'm scared if I root it again it will lose all the information and connection to boost mobile.. losing media messagign and etc.. so if you can help me :)
 
Upvote 0
I need Help in the worst way..... I am using a samsung Galaxy prevail as a donor phone. I am have an issue with the round one step of getting the *.bin file. I have done over and over again what has been suggested of powering off and on my phone. I been doing for almost two hours and I must be doing something wrong. Please let me know if this is doable or am I just wasting my time. thanks I want my Boost HTC.

pay close attention when the dude does the in the youtube video to keep your self on track. cause he may be doing a different phone but the exact same steps to flash his phone
 
Upvote 0
One question, I already have my phone rooted but I want to update my phone. Its currently running: Android version: 2.2 | Baseband version: 2.15.00.09.01 and Kernel version 2.6.32.17

I got the phone rooted to boost mobile and i'm scared if I root it again it will lose all the information and connection to boost mobile.. losing media messagign and etc.. so if you can help me :)

as for updates ive updated phones prl and radio. took the chance. runs fine.just never update firmware.also never factory reset cause you will lose your boost flash.

as to save apps you want i suggest titanium backup
 
Upvote 0
Can you please show me how to use a donor phone that read I have a Samsung galaxy prevail on boost and want to flash my EVO 3d

Yes, of course. The Samsung Galaxy Prevail is an Android 3G phone by Boost Mobile. And mine is already rooted and I know the SPC and the password, etc.. The only problem I am having (and other reports online say the same thing) is that CDMA Workshop does not want to read the NAM 1 and NAM 2 entries of the phone, even after the phone has been unlocked by the SPC. I'm just wondering if there is any other way to go about getting the information off the phone....
First let me thank you for the information having this available is a god send.

Second to address the prevail specifically, Samsung has the nv locked down at this time there is no known way to get all the information you will need. As mentioned even after unlocking spc with cdma it still gives access denied and QPST service programing will close with "unknown" error it wont even open.
I suggest getting a $40 incognito.
 
Upvote 0

BEST TECH IN 2023

We've been tracking upcoming products and ranking the best tech since 2007. Thanks for trusting our opinion: we get rewarded through affiliate links that earn us a commission and we invite you to learn more about us.

Smartphones