Related
i have a fix for restoring product code back to original for the captivate. Working with a vibrant owner who has messed up nv_dat.bin and product code and trying to port my fix for him but need some hex code info to make sure i convert the fix properly.
I am asking any willing vibrant owners who have correct product code (SGH-T959ZKATMB)
to download the free market app HEX EDIT and report some info for me.
What i need to know is the Hex code for 4 specific lines of your correct nv_data.bin (if vibrant)
1. Use Hex Editor App from market (free)
2. Open the nv_data file (once in hex editor use capacitive menu button to get to options)
3. Goto the options again and JUMP TO line 0188008 will take you to line 00188008. Will need the data from it and three other lines you will see below it.
There will 8 block of data between the line # and the text at the right that you reposted. Please post the #'s/letters for each corresponding block so i can ensure that i convert properly.
00188008 | | | | | | | | |
00188010 | | | | | | | | |
00188018 | | | | | | | | |
00188020 | | | | | | | | |
what i would need is the two numeral/letter codes for each of the blocks listed next to corresponding line #'s. Each line has 8 blocks. Also the text to the far right of the final block would help as well.
if preferred you can provide this data in a PM
If you don't want to manually transcribe the data over to a message you could snap a screen shot of the hex editor with these lines visible and post.
00188000 - ff ff ff ff 52 45 56 50 - . . . . R E V 0
00188008 - 2e 33 00 00 00 00 ff 54 - . 3 . . . . . T
00188010 - 4d 42 00 00 00 00 53 47 - M B . . . . S G
00188018 - 48 2d 54 39 35 39 5a 4b - H - T 9 5 9 Z K
00188020 - 42 54 4d 42 00 00 00 00 - B T M B . . . .
00188028 - 00 00 01 50 02 4e 03 4e - . . . P . N . N
silow said:
00188000 - ff ff ff ff 52 45 56 50 - . . . . R E V 0
00188008 - 2e 33 00 00 00 00 ff 54 - . 3 . . . . . T
00188010 - 4d 42 00 00 00 00 53 47 - M B . . . . S G
00188018 - 48 2d 54 39 35 39 5a 4b - H - T 9 5 9 Z K
00188020 - 42 54 4d 42 00 00 00 00 - B T M B . . . .
00188028 - 00 00 01 50 02 4e 03 4e - . . . P . N . N
Click to expand...
Click to collapse
thank you much
will let you know if this helps him.
Anyone able to return to s-on once they got s-off?
Sent from my Liberty using XDA App
andrew.cambridge said:
Anyone able to return to s-on once they got s-off?
Sent from my Liberty using XDA App
Click to expand...
Click to collapse
why would you?
brswattt said:
why would you?
Click to expand...
Click to collapse
HERE Usually you put it back on when repairs are needed.
---------- Post added at 03:43 PM ---------- Previous post was at 03:42 PM ----------
brswattt said:
why would you?
Click to expand...
Click to collapse
warranty, and free repairs.
---------- Post added at 03:44 PM ---------- Previous post was at 03:43 PM ----------
andrew.cambridge said:
Anyone able to return to s-on once they got s-off?
Sent from my Liberty using XDA App
Click to expand...
Click to collapse
Find Unroot methods on this Page.
gotcha. ;p
Alpharev site states that loading a stock RUU will revert HBOOT and hence s-on.
I haven't tried it.
For repair work. I can send in for repair, then sell it for a small profit.
artiemon said:
Alpharev site states that loading a stock RUU will revert HBOOT and hence s-on.
I haven't tried it.
Click to expand...
Click to collapse
This doesn't work.
http://forum.xda-developers.com/showthread.php?t=1160251
Start here.you'll have to pull the hboot img from the 2.2.2 ruu.I'd also recommend contacting attn1 on irc chat node.If you brick your phone don't cry to me.
Sent from my HTC Aria using XDA App
andrew.cambridge said:
For repair work. I can send in for repair, then sell it for a small profit.
Click to expand...
Click to collapse
what's wrong with it? How much you are asking for? How much is it right now without repairs? I need a Evo testing phone, is there a XDA community discount? do you have insurance?
Tekn010933 said:
what's wrong with it? How much you are asking for? How much is it right now without repairs? I need a Evo testing phone, is there a XDA community discount? do you have insurance?
Click to expand...
Click to collapse
PM me
Sent from my MB860 using XDA App
Getting back to hboot that came on phone
I have read through the post http://forum.xda-developers.com/showthread.php?t=1160251 and it make sense if you have a wildfire phone.
The instructions show how to update the memory location to fool the flash into thinking it is getting an upgrade rather than a downgrade(which it will refuse).
For the wildfire, this is done with the command "fastboot oem mb 9C068490 1 30".
Does anyone know how to figure out what memory location needs to get updated with what value for the Aria? The exact fastboot command would be great.
Here is a dump from my Aria using the command "fastboot oem mb ?"
C:\fastboot>fastboot oem mb ?
... INFOmemory dump
INFO00000000: 2E 31 30 30 32 00 00 00 | 1002...
INFO00000010: 37 32 32 37 20 53 50 4C | 7227 SPL
INFO00000018: 00 00 00 00 00 00 A0 E1 | ........
INFO00000020: 53 48 49 50 00 00 00 00 | SHIP....
INFO00000028: 00 00 A0 E1 00 00 A0 E1 | ........
INFO00000030: 48 42 4F 4F 54 2D 37 32 | HBOOT-72
INFO00000038: 32 37 00 00 00 00 A0 E1 | 27......
INFO00000040: 64 69 72 74 79 2D 34 35 | dirty-45
INFO00000048: 62 66 39 38 37 31 00 00 | bf9871..
INFO00000050: 00 00 0F E1 80 10 80 E3 | ........
INFO00000058: 01 F0 29 E1 30 0F 11 EE | ..).0...
INFO00000060: 02 01 80 E3 30 0F 01 EE | ....0...
INFO00000068: 00 00 A0 E3 9A 0F 07 EE | ........
INFO00000070: 10 0F 11 EE 02 06 80 E3 | ........
INFO00000078: 10 0F 01 EE 00 00 A0 E3 | ........
INFO00000080: 9A 0F 07 EE 02 01 A0 E3 | ........
INFO00000088: 16 00 80 E3 92 0F 0F EE | ........
INFO00000090: 00 00 8F E2 DD 00 00 EB | ........
INFO00000098: 00 00 00 40 00 00 C0 12 | [email protected]
INFO000000A0: D4 00 00 00 00 00 40 4D | [email protected]
INFO000000A0: D4 00 00 00 00 00 40 4D | [email protected]
INFO |
OKAY
I would prefer to flash the hboot from original AT&T RUU which I have extracted. It is named "hboot_liberty_7227_0.57.0000_100507_.nb0".
Any help would be appreciated.
Hi,
Im new to this forum and I find it quite usefull, I have been able to unlock 2 samsung gio following the various tutorials, in fact I've tried this method: http://forum.xda-developers.com/showthread.php?t=1335548
It worked flawlessly with bell prepaid gios, however, Ive been trying to repeat the process with this Samsung GT-I5500M (bell, android 2.1 update 1) and the result is not as good as the previous attempts.
First of, the rooting was extremely hard to do. I have tried every possibility out there for rooting, It was a pain.
Ill share my findings for helping the community, z4root 1.3.0 will crash at mid stage, z4root 1.1 will freeze, superoneclick 2.3.3 will get stuck step at 5, Universal Android 1.6.2 beta 5 will show the mysterious error No fu gooo.
The only rooting method that worked with this bell prepaid android 2.1 was a previous version of superoneclick 2.1.1 !
Now that the rooting has been a sucess, ive tried going further and look for the bml5.img in search of an unlock code.
Again, some problems appeared, I wasnt able to find any occurences of the hex string provided in the tutorial, which is FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF 30 30 30 30 30 30 30 30.
I went to this thread http://forum.xda-developers.com/showthread.php?t=828534&page=49 and they suggested looking for 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 05 FF FF FF FF FF FF FF FF FF FF FF FF FF FF, only numbers that seemed to be valid were 01234567. Ive tried unlocking the phone with these numbers but no sucess at all.
I even tried to look for MCN and MNN of my service provider in the file but again the search query returned nothing. Bell is 302610.
Im asking for the help of the community
Ill provide my bml5.img in attachment.
http://www.megaupload.com/?d=Y6ZQ33B3
have you tried to deactivate and activate USB debugging when Superoneclick stops at step 5?
it worked for me.
Yup thats no more the problem, ive been able to root it with an earlier version of superoneclick 2.1.1.
I cant find the unlock code in the bml5.img file, thats the problem now.
collmomo said:
Hi,
Im new to this forum and I find it quite usefull, I have been able to unlock 2 samsung gio following the various tutorials, in fact I've tried this method: http://forum.xda-developers.com/showthread.php?t=1335548
It worked flawlessly with bell prepaid gios, however, Ive been trying to repeat the process with this Samsung GT-I5500M (bell, android 2.1 update 1) and the result is not as good as the previous attempts.
First of, the rooting was extremely hard to do. I have tried every possibility out there for rooting, It was a pain.
Ill share my findings for helping the community, z4root 1.3.0 will crash at mid stage, z4root 1.1 will freeze, superoneclick 2.3.3 will get stuck step at 5, Universal Android 1.6.2 beta 5 will show the mysterious error No fu gooo.
The only rooting method that worked with this bell prepaid android 2.1 was a previous version of superoneclick 2.1.1 !
Now that the rooting has been a sucess, ive tried going further and look for the bml5.img in search of an unlock code.
Again, some problems appeared, I wasnt able to find any occurences of the hex string provided in the tutorial, which is FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF 30 30 30 30 30 30 30 30.
I went to this thread http://forum.xda-developers.com/showthread.php?t=828534&page=49 and they suggested looking for 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 05 FF FF FF FF FF FF FF FF FF FF FF FF FF FF, only numbers that seemed to be valid were 01234567. Ive tried unlocking the phone with these numbers but no sucess at all.
I even tried to look for MCN and MNN of my service provider in the file but again the search query returned nothing. Bell is 302610.
Im asking for the help of the community
Ill provide my bml5.img in attachment.
http://www.megaupload.com/?d=Y6ZQ33B3
Click to expand...
Click to collapse
I get the exact same code 01234567
Sent from my TripNiCE Pyramid using Tapatalk
yep, tried both the tutorials posted here and I end up with a 01234567 (which I foolishly tried).
Would love to hear an answer from a veteran cell unlocker.
Same problem with i5500m Virgin Mobile
I have same problem with Virgin Mobile Samsung GT-i5500M.
Able to root with SuperOneClick2.1.1, but only found 01234567 in the bml5 file.
Anymore suggestions?
(DONE) Unlock
hi all, ive done that thing to unlock my Gt-i5500m but its no luck,
what i try to do is UPGRADE and ROOT it to CyanogenMod 7.2.0 then
after that my phone is unlock now, im on CyanogenMod 10.1 and it
still unlock,this is the best ROM i install in my Galaxy 5
hello all, is there a cyanogenmod rom for Acer Liquid Z3 (Z130)
Thanks
bryan-k said:
hello all, is there a cyanogenmod rom for Acer Liquid Z3 (Z130)
Thanks
Click to expand...
Click to collapse
here stock rom for z130 bro : http://www.acer.com.sg/ac/en/SG/content/drivers/4889;-;Z130
:victory:
is there any custom rom that would work on the z3 ?
((
micdarau85 said:
is there any custom rom that would work on the z3 ?
((
Click to expand...
Click to collapse
Mhh, just found this post, was never a ROM for this phone developed?
I just would like to skin down the stock rom and make it lighter...
g
Rom developing
It is possible to root the acer liquid Z3 (Z130) as well as installing TWRP. I'm about to develop Cyanogenmod for it. I hope that admins will give me a thread to start posting instructions:
Howto root it: root it using the app framaroot: http://forum.xda-developers.com/apps/framaroot/root-framaroot-one-click-apk-to-root-t2130276
Howto flash it with TWRP: Install and execute rashr and flash recovery with TWRP:
https://docs.google.com/file/d/0B0XQigIT17uEcDQtaDJ3U0UtOWc/edit?pli=1
The kernel source is availible at http://us.acer.com/ac/en/US/content/drivers
The supposed procedure in getting the z130 specific image is (excerpt of kernel source readme):
Build steps:
1. Download Android 4.2.2 source code from google
2. Modify buildGPL.sh, replace the Your_Toolchain_PATH with your tool path in android code.
for example: android/prebuilts/gcc/linux-x86/arm/arm-linux-androidYour_Toolchain_PATHeabi-4.6/bin
3. Run the script under your shell
./buildGPL.sh
Thanks!
Click to expand...
Click to collapse
I'm happy if I get a companion while developing. If you're new to cyanogenmod you can start with:
http://wiki.cyanogenmod.org/w/Build_for_a700#Build_CyanogenMod_and_ClockworkMod_Recovery
Give me a thread and device section !
Greets,
wendenerp
going on
My main motivation in getting cyanogenmod running is to get a german android system language. Since I bought the Z130 in the Phlippines
it only came with English and a couple of Asian languages. None of the language programs (morelocale2, locale, Sprache) could change the system language to german even while rooted. Today I tried to flash a system partition of the Acer homepages' Update images, namely the OS_Acer_AV052.Z130.1.007.00.LA.GEN1s_A42J_A
TWRP worked fine, but it didn't boot. I could rescue to the old system.ext4.win after the Acers' image failed.
I already contacted Acer. Maybe they will at least tell me which image has the german system language and works with the dual sim kernel... I'm still considering cyanogenmod's images though.
I added some detailed german instructions on rooting the liquid z3 and installing TWRP: http://www.wendenerp.de/Sonstiges.html
So far,
wendenerp said:
My main motivation in getting cyanogenmod running is to get a german android system language. Since I bought the Z130 in the Phlippines
it only came with English and a couple of Asian languages.
Click to expand...
Click to collapse
i have the single sim version with european languages. i wish i could get some asian languages on this phone X)
I started a cyanogenmod project on github for the Acer liquid Z3: https://github.com/wendenerp/android_device_acer_zx. I had some trouble with the local manifest file, but I think this should be alright:
<?xml version="1.0" encoding="UTF-8"?>
<manifest>
<project name="wendenerp/android_device_acer_zx" path="device/acer/zx" remote="github" revision="cm-11.0" />
</manifest>
Click to expand...
Click to collapse
Next thing is to get the vendor specific programs and drivers out of the original firmware...
I'm having some problems with getting the ramdisk image out of boot.img.
The boot.img is 6 mb in size. I tried unpackbootimg, unmkbootimg and split_bootimg. All of these tools split the same way:
The kernel gets 4mb and the ramdisk 600k, which adds up to 4.6mb. Additionally the ramdisk is of file type data:
Code:
file boot_img.lzma
boot_img.lzma: data
so neither gunzip nor lzma -dc works to extract the initramfs. I assume there is a bug in all of these split tools or acer made up some strange boot.img format...
boot.img split error
Unfortunately the split utilities don't split the boot image correctly.
The image should contain the size and location of the kernel and ramdisk inn the first bytes of the boot.img, but this is how it looks like:
Code:
[email protected]:~/Android-Hacking/z130_full_backup$ hd boot.emmc.win |grep 'ANDROID' -n4
1:00000000 41 4e 44 52 4f 49 44 21 58 36 3d 00 00 80 00 10 |ANDROID!X6=.....|
2-00000010 34 bc 09 00 00 00 00 11 00 00 00 00 00 00 f0 10 |4...............|
3-00000020 00 01 00 10 00 08 00 00 00 00 00 00 00 00 00 00 |................|
4-00000030 31 33 37 37 37 30 33 33 30 39 00 00 00 00 00 00 |1377703309......|
5-00000040 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 |................|
The split_bootimg.scrip takes the values out of the first too rows in little endian to determine the sizes and locations:
Code:
[email protected]:~/Android-Hacking/z130_full_backup$ ./split_bootimg.pl boot.emmc.win
Page size: 2048 (0x00000800)
Kernel size: 4011608 (0x003d3658)
Kernel location: 268468224 (0x10008000)
Ramdisk size: 638004 (0x0009bc34)
Ramdisk location: 285212672 (0x11000000)
Second size: 0 (0x00000000)
Board name: 1377703309
Command line:
Writing boot.emmc.win-kernel ... complete.
Writing boot.emmc.win-ramdisk.gz ... complete.
Unfortenutely the location exceeds the size of the boot.img:
Code:
[email protected]:~/Android-Hacking/z130_full_backup$ hd boot.emmc.win
...
0046fc30 00 81 11 00 00 00 00 00 00 00 00 00 00 00 00 00 |................|
0046fc40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 |................|
*
00600000
So it looks like the scipt only pulls some random data from the memory for the kernel and for the ramdisk
In fact the ramdisk starts at a different location:
Code:
[email protected]:~/Android-Hacking/z130_full_backup$ hd boot.emmc.win |grep '1f 8b 08'
00005220 6e 20 65 72 72 6f 72 00 1f 8b 08 00 00 00 00 00 |n error.........|
003d4200 1f 8b 08 00 00 00 00 00 00 03 ec 7d 0b 7c 54 c5 |...........}.|T.|
All 3 split utilities do the same:
unpackbootimg, unmkbootimg, split_bootimg
---------- Post added at 12:41 PM ---------- Previous post was at 11:42 AM ----------
since the bootloader is u-boot I think the image has a different format:
HTML:
http://www.compulab.co.il/workspace/mediawiki/index.php5/U-Boot:_Images#Image_format
progress
I also was able to extract the ramdisk out of the boot.img and added it together with the mkvendor.sh output at github.
I was also able to compile the kernel from sources provided at acer.com. I requested the sources of the u-boot image too.
You are doing great job dude keep going )))
U-Boot Source Code request
This is my request to Acer for the U-Boot source:
Dear Sir/Madam,
thank you for your reply. Software licensed under the GPL2 can be reused and modified and sold with the restriction of handing out the source and build instructions for the sold product.
In case of the Acer Liquid Z130, Acer has aquired and modified the following Software:
Linux Kernel, the Android OS, the U-boot bootloader, of which the linux kernel and U-boot is licensed under the GPL2, meaning that acer is obliged to hand out the source code of its modified U-boot and the modified kernel plus the build instructions. Since Acer only handed out the instructions and source of the modified linux kernel on its webpage, it hasn't yet met its obligations.
Since Android uses a different licence, you can refuse to hand out part of its code but you can gain popularity in the opensource community by doing so.
Yours sincerely
Denis Wentland
The request dates from 3th of July. How much time to give them and how to proceed in case they don't follow?
U-boot
While investigating usb-traffic, I encountered some CDC-ACM messages on the powered off, battery removed, usb-connected device . For 1 second the device opens its USB serial port and spams some READYREADYREADY messages . Then it closes it for some 8 seconds again.
On factory mode it asks for the input password on the /dev/ttyACM0 port.
I hope I can find out the password and enter U-Boot command prompt.
Since U-boot is under GPL Acer should hand out the source for me to find out the pasword.
hexdumping the boot loader firmware it has some uboot-messages:
000277f0 2d 20 0a 00 5b 25 73 5d 20 55 6e 70 6c 75 67 67 |- ..[%s] Unplugg|
00027800 65 64 20 43 68 61 72 67 65 72 2f 55 73 62 20 62 |ed Charger/Usb b|
00027810 65 74 77 65 65 6e 20 50 72 65 2d 6c 6f 61 64 65 |etween Pre-loade|
00027820 72 20 61 6e 64 20 55 62 6f 6f 74 20 69 6e 20 4b |r and Uboot in K|
00027830 65 72 6e 65 6c 20 43 68 61 72 67 69 6e 67 20 4d |ernel Charging M|
00027840 6f 64 65 2c 20 50 6f 77 65 72 20 4f 66 66 20 0a |ode, Power Off .|
but unfortunetaly not the Serial output messages
I have a french Acer Z3 Single SIM and as many on XDA i am a kind of flasholic.
I found a file .ZIP opened it and found boot.zip, system.img, recovery.zip that I I flashed from ADB\Fastbboot.
Was able to boot the phone but it’s from dual SIM update Thaï operator.
This one : Update_Acer_AV052_Z130_1.005.00_AAP_AISH https://www.dropbox.com/s/5s07i8g1hq3ekga/Z130SingleSIM_Tha%C3%AFSTOCK_ROM.zip
I don’t get any network signal from it. If it can help…maybe?
WARNING: if some of you decide to dowload this, please do not install it on your phone, because you will not be able to install another System.zip. Or unless you want an asian DUO SIM THAÏ Operator ok! :good:
wendenerp said:
While investigating usb-traffic, I encountered some CDC-ACM messages on the powered off, battery removed, usb-connected device . For 1 second the device opens its USB serial port and spams some READYREADYREADY messages . Then it closes it for some 8 seconds again.
On factory mode it asks for the input password on the /dev/ttyACM0 port.
I hope I can find out the password and enter U-Boot command prompt.
Since U-boot is under GPL Acer should hand out the source for me to find out the pasword.
hexdumping the boot loader firmware it has some uboot-messages:
000277f0 2d 20 0a 00 5b 25 73 5d 20 55 6e 70 6c 75 67 67 |- ..[%s] Unplugg|
00027800 65 64 20 43 68 61 72 67 65 72 2f 55 73 62 20 62 |ed Charger/Usb b|
00027810 65 74 77 65 65 6e 20 50 72 65 2d 6c 6f 61 64 65 |etween Pre-loade|
00027820 72 20 61 6e 64 20 55 62 6f 6f 74 20 69 6e 20 4b |r and Uboot in K|
00027830 65 72 6e 65 6c 20 43 68 61 72 67 69 6e 67 20 4d |ernel Charging M|
00027840 6f 64 65 2c 20 50 6f 77 65 72 20 4f 66 66 20 0a |ode, Power Off .|
but unfortunetaly not the Serial output messages
Click to expand...
Click to collapse
sory idk what it means. but does that mean we cant get it on our z3?
---------- Post added at 06:32 AM ---------- Previous post was at 06:30 AM ----------
hello guys. may i know what bloatware that can safely be remove from this phone? its full with useless app. wish i could uninstall all of it to make it more like stock android
Salut,
as-tu trouver une roms stock pour le z3 ?
Merci
Hi,
Anybody have an original stock ROM for z130 EMEA ?
Please help me. I have lost mine...
Thx...
Sent from my Nexus 5 using XDA Free mobile app
hi guys..
is there Polish language for this device..?
http://www.acer.com.sg/ac/en/SG/content/drivers/4889;-;Z130
i have got G3 (LS-990) Sprint but the software is D855V
the previous owner changed the model from LS-990 to D855V
i have a little knowledge about how to change the model by flashing TOT with LGUP.DLL file
but i cant reverse it to the original Model
i want to change it from D855V to LS-990
how?
Any idea how the previous owner changed the model? Doo you still have contact with him/her
ethanchow said:
Any idea how the previous owner changed the model? Doo you still have contact with him/her
Click to expand...
Click to collapse
i dont have contact with him
but i did it before with G4 D858HK ... i did convert the model from D858 CHINA to D858 HONGKONG by flashing HK TOT file with LGUP.DLL
justrelax said:
i dont have contact with him
but i did it before with G4 D858HK ... i did convert the model from D858 CHINA to D858 HONGKONG by flashing HK TOT file with LGUP.DLL
Click to expand...
Click to collapse
Are you absolutely that it is an ls990 and not just the wrong stickers and labels? Open it up and look at the chips inside. If you are sure it is the USA sprint ls990 then try and flash the right firmware with the tot file for ls990. I don't remember all the instructions off the top of my head RN but you can find guides on XDA.
helping
justrelax said:
i have got G3 (LS-990) Sprint but the software is D855V
the previous owner changed the model from LS-990 to D855V
i have a little knowledge about how to change the model by flashing TOT with LGUP.DLL file
but i cant reverse it to the original Model
i want to change it from D855V to LS-990
how?
Click to expand...
Click to collapse
Hi
I had that problem
and I solve it
all you need
LS990ZV4_04.51101.tot Ls990 Stock rom
LGUP_8974.dll mod Dll for Ls990
LGLS990_20140704_LGFLASHv160.dll Original Ls990 Dll
HEx editor
Lg flash Tool (I use v1.8.6.x )
Lg drivers
Steps
1. install Drivers, Lg flash tool, hex editor
2. open LS990ZV4_04.51101.tot on Hex editor
3. search ls990, looks like this
[34 12 78 56 4C 47 4C 53 39 39 30 00 00 00 00 00] 4xVLGLS990
[00 00 00 00 4C 53 39 39 30 5A 56 34 00 00 00 00] LS990ZV4
4. change that 2 lines with this 2 lines (only the part inside "[ ]")
[34 12 78 56 4C 47 2D 44 38 35 35 00 00 00 00 00] 4xVLG-D855
[00 00 00 00 44 38 35 35 31 30 65 00 00 00 00 00] D85510e
5. save it
6. open Lg flash tool, click on manual mode, Use Mod dll and the rom hex mod
7. click on Board DL
8. Use 2.0 USB port and flash it (will be know ls990, but with error)
9. Flash again but using original Dll and original room
It works for me on win7 32 bit
(sorry for sharing hex code like this but xda dont allow me to put links or image )