memul: Add chargeled service
Specify write-offset for bootloader msg in /misc

HTC stores more than just a bootloader message in /misc. The bootloader
message is offset to byte 0x800 (2048), verified by choosing "factory
reset" from hboot, finding where "recovery --wipe_data" was written to
/misc and then backing up 64bytes, in accordance with struct
bootloader_message.