[Motorola Atrix HD] tcf38012:
Well,

I have sucessfully unlocked the bootloader...

I'm just so happy right now too.

I'm not giving any hints until I release it.

I'm going to release it within a few days to a few months (depends on how it goes)

Well, get your bounties ready...

Don't donate until I release because something may happen between now and release time!!!!!

Cheers and thank you for all your encouragement ;)

Have a happy Good Friday and Easter...

Update: Found a much easier way...

But first a bell device that is unlocked would need to do: dd if=/dev/block/mmcblk0 of=/sdcard/mbr.bin count=256 and upload the mbr.bin here...

Update:

I still can't find where I was, but here is the code on where I found it:

ROM:88F13734 check_unlock_code ; CODE XREF: sub_88F13E38+8p
ROM:88F13734 ; sub_88F13E48+4p ...
ROM:88F13734 SUBS R3, R1, #1 ; Rd = Op1 - Op2
ROM:88F13736 TST R3, R1 ; Set cond. codes on Op1 & Op2
ROM:88F13738 PUSH {R4-R6,LR} ; Push registers
ROM:88F1373A MOV R4, R1 ; Rd = Op2
ROM:88F1373C BEQ _start_check_code ; Branch
ROM:88F1373E MOVS R4, #0 ; Already unlocked?
ROM:88F13740 B bye_bye ; Branch
ROM:88F13742 _start_check_code ; CODE XREF: check_unlock_code+8j
ROM:88F13742 ADDS R0, #0xC ; Rd = Op1 + Op2
ROM:88F13744 CMP R0, #0xB ; Set cond. codes on Op1 - Op2
ROM:88F13746 IT LS ; If Then
ROM:88F13748 MOVLS R0, #0xC ; Rd = Op2
ROM:88F1374A ADDS R0, #3 ; Rd = Op1 + Op2
ROM:88F1374E LSLS R3, R0, #0x14 ; Logical Shift Left
ROM:88F13750 CBZ R1, idk_88F1375A ; Compare and Branch on Zero
ROM:88F13752 CMP R1, #0xF ; Set cond. codes on Op1 - Op2
ROM:88F13754 IT LS ; If Then
ROM:88F13756 MOVLS R4, #0x10 ; Rd = Op2
ROM:88F13758 ADDS R5, R5, R4 ; Rd = Op1 + Op2
ROM:88F1375A
ROM:88F1375A idk_88F1375A ; CODE XREF: check_unlock_code+1Cj
ROM:88F1375A LDR R2, =prob_fail ; Load from Memory
ROM:88F1375C LDR R3, [R2] ; Load from Memory
ROM:88F1375E ADDS R3, #1 ; Rd = Op1 + Op2
ROM:88F13760 STR R3, [R2] ; Store to Memory
ROM:88F13762 CMP R3, #1 ; Set cond. codes on Op1 - Op2
ROM:88F13764 BNE loc_88F1376A ; Branch
ROM:88F13766 BLX sub_88F08C7C ; Branch with Link and Exchange (immediate address)
ROM:88F1376A
ROM:88F1376A loc_88F1376A ; CODE XREF: check_unlock_code+30j
ROM:88F1376A LDR R2, =0x88F58A44 ; Load from Memory
ROM:88F1376E LSLS R0, R1, #4 ; Logical Shift Left
ROM:88F13770 LDR R3, [R2,#0xC] ; Load from Memory
ROM:88F13772 B loc_88F137EC ; Branch
ROM:88F13774 ; ---------------------------------------------------------------------------
ROM:88F13774
ROM:88F13774 idk_algorithm ; CODE XREF: check_unlock_code+BCj
ROM:88F13774 LDR R2, [R3,#8] ; Load from Memory
ROM:88F13776 CMP R2, R5 ; Set cond. codes on Op1 - Op2
ROM:88F13778 LDR R2, [R3,#4] ; Load from Memory
ROM:88F1377A BCC loc_88F137EA ; Branch
ROM:88F1377C LDR R6, [R3] ; Load from Memory
ROM:88F1377E CMP R2, R0 ; Set cond. codes on Op1 - Op2
ROM:88F13780 ITE NE ; If Then
ROM:88F13782 MOVNE R1, R2 ; Rd = Op2
ROM:88F13784 MOVEQ R1, #0 ; Rd = Op2
ROM:88F13786 STR R6, [R2] ; Store to Memory
ROM:88F13788 LDR R2, [R3] ; Load from Memory
ROM:88F1378A LDR R6, [R3,#4] ; Load from Memory
ROM:88F1378C STR R6, [R2,#4] ; Store to Memory
ROM:88F1378E MOVS R2, #0 ; Rd = Op2
ROM:88F13790 LDR R6, [R3,#8] ; Load from Memory
ROM:88F13792 STR R2, [R3,#4] ; Store to Memory
ROM:88F13794 STR R2, [R3] ; Store to Memory
ROM:88F13798 LSLS R4, R1, #8 ; Logical Shift Left
ROM:88F1379A CMP R6, R2 ; Set cond. codes on Op1 - Op2
ROM:88F1379C BLS loc_88F137C4 ; Branch
ROM:88F1379E ADDS R2, R3, R5 ; Rd = Op1 + Op2
ROM:88F137A0 SUBS R6, R6, R5 ; Rd = Op1 - Op2
ROM:88F137A2 STR R6, [R2,#8] ; Store to Memory
ROM:88F137A4 STR R5, [R3,#8] ; Store to Memory
ROM:88F137A6 CBZ R1, loc_88F137B6 ; Compare and Branch on Zero
ROM:88F137A8 LDR R0, [R1] ; Load from Memory
ROM:88F137AA STR R0, [R3,R5] ; Store to Memory
ROM:88F137AC STR R1, [R2,#4] ; Store to Memory
ROM:88F137AE LDR R0, [R1] ; Load from Memory
ROM:88F137B0 STR R2, [R0,#4] ; Store to Memory
ROM:88F137B2 STR R2, [R1] ; Store to Memory
ROM:88F137B4 B loc_88F137C4 ; Branch
ROM:88F137B6 ; ---------------------------------------------------------------------------
ROM:88F137B6
ROM:88F137B6 loc_88F137B6 ; CODE XREF: check_unlock_code+72j
ROM:88F137B6 LDR R1, =0x88F58A44 ; Load from Memory
ROM:88F137B8 LDR R6, [R1,#8] ; Load from Memory
ROM:88F137BA STR R6, [R3,R5] ; Store to Memory
ROM:88F137BC STR R0, [R2,#4] ; Store to Memory
ROM:88F137BE LDR R0, [R1,#8] ; Load from Memory
ROM:88F137C0 STR R2, [R0,#4] ; Store to Memory
ROM:88F137C2 STR R2, [R1,#8] ; Store to Memory
ROM:88F137C4
ROM:88F137C4 loc_88F137C4 ; CODE XREF: check_unlock_code+68j
ROM:88F137C4 ; check_unlock_code+80j
ROM:88F137C4 LDR R1, [R3,#8] ; Load from Memory
ROM:88F137C8 LSLS R4, R1, #8 ; Logical Shift Left
ROM:88F137CA CBNZ R4, _wrong ; Compare and Branch on Non-Zero
ROM:88F137CC MOV R4, R2 ; Rd = Op2
ROM:88F137CE B loc_88F137DA ; Branch
ROM:88F137D0 ; ---------------------------------------------------------------------------
ROM:88F137D0
ROM:88F137D0 _wrong ; CODE XREF: check_unlock_code+96j
ROM:88F137D0 SUBS R0, R4, #1 ; Rd = Op1 - Op2
ROM:88F137D2 NEGS R4, R4 ; Negate
ROM:88F137D4 ADDS R2, R0, R2 ; Rd = Op1 + Op2
ROM:88F137DA
ROM:88F137DA loc_88F137DA ; CODE XREF: check_unlock_code+9Aj
ROM:88F137DA LDR R2, =0x48454150 ; Load from Memory
ROM:88F137DE SUBS R4, #8 ; Rd = Op1 - Op2
ROM:88F137E2 MOVS R4, R0 ; Rd = Op2
ROM:88F137E6 CMP R4, #0xC ; Set cond. codes on Op1 - Op2
ROM:88F137E8 B _im_leaving ; Branch
ROM:88F137EA loc_88F137EA ; CODE XREF: check_unlock_code+46j
ROM:88F137EA MOV R3, R2 ; Rd = Op2
ROM:88F137EC
ROM:88F137EC loc_88F137EC ; CODE XREF: check_unlock_code+3Ej
ROM:88F137EC CMP R3, R1 ; Set cond. codes on Op1 - Op2
ROM:88F137EE LDR R0, =0x88F58A4C ; Load from Memory
ROM:88F137F0 BNE idk_algorithm ; Branch
ROM:88F137F2 MOVS R4, #0 ; Rd = Op2
ROM:88F137F4
ROM:88F137F4 _im_leaving ; CODE XREF: check_unlock_code+B4j
ROM:88F137F4 LDR R2, =prob_fail ; Load from Memory
ROM:88F137F6 LDR R3, [R2] ; Load from Memory
ROM:88F137F8 SUBS R3, #1 ; R3 = R3 - 1
ROM:88F137FA STR R3, [R2] ; Store to Memory
ROM:88F137FC CBNZ R3, bye_bye ; No zero, then bye bye if thats the case!
ROM:88F137FE BIC R0, R0, #0x80 ; Right?
ROM:88F13802
ROM:88F13802 bye_bye ; This is it
ROM:88F13802 MOV R0, R4 ; Returning the value of R4?
ROM:88F13804 POP {R4-R6,PC} ; Gone...
ROM:88F13806 NOP ; Silence
ROM:88F13806 ; End of function check_unlock_code
ROM:88F13806
ROM:88F13806 ; ---------------------------------------------------------------------------
ROM:88F13808 prob_fail DCD "Something failed?"