[Upgrading, Modifying and Unlocking] zxvf:
Hey, thanks, awesome, have u tried the command "d2s" (disk to storage) and "s2d" (storage to disk) ? those commands where not enabled until i typed PASSWORD BOOTLOADER and it gave me a success notice... I'll post the info i have for them.

usage_cmd_d2s

Usage:

d2s [StartAddr [Len [Type [Append[SkipStartAddr SkipLen]]]]]

Backup memory to storage.

StartAddr : Start address for backup(0xA0040000).

Len : Length of memory will be backup. And if not given value, it will be

Total ROM size on board - ((StartAddress & 0x0FFFFFFF) - (ROM base address(0) & 0x0FFFFFFF)).

Type : Which storage(cf/sd) type will be selected(cf).

Append : Backup methods(a/).

SkipStartAddr : Start address of skip area(0x0).

SkipLen : Skip length(0x0).

Skip area must be less than or equal to one block size of flash.

Skip area must not over two blocks, must inside one block.

Nand flash: Skip area size need be page boundary.

Nor flash: Skip area size need be DWORD boundary.

usage_cmd_s2d

Usage:

s2d

Restore memory from storage.

I currently have the 1.02 bootloader so it might be different for u.. also

h = help

and supposively ones u unblocked the bootloader u can do h full which should give u even more options, but that didn't work, which is weird, I think they took the h command out, eventhough they left all the info in the loader, cause u can always do a hexdump on any bootloader and u can figure the commands and their usage..

also here's how to unlock it.. this worked after I typed the password as well.. the only thing that didn't work was l i think (or atleast that i've tried)

usage_cmd_task

Usage:

task [Type [Value [Value1]]]

Type,Value and Value1 are both DWORD(hex).

Value and Value1 are ignore in some case.

Type(hex) 0: Do hardware clear boot.

Type(hex) 7: Do flash ROM lock/unlock and [value]: 1(lock) and 0(unlock).

Oh here's a little howto:

example how to flash the extended rom and radio Simultaneously

first copy the first 3 M of the radio to sd:

d2s 60000000 00300000

SD:Waiting for card insert.........

CMD3 for SD, it's OK, ready to get RCA from response.

SD:Detected one card

SD:ready for transfer OK

Total card size=1D30000ze=0

****************

Store image to SD/MMC card successful.

and now append the extended rom to the sd card:

d2s 70080000 01000000 sd a

SD:Waiting for card insert.........

CMD3 for SD, it's OK, ready to get RCA from response.

SD:Detected one card

SD:ready for transfer OK

Total card size=1D30000ze=0

DOCInfoTableinitHW+

Binary0:dwSize=80000

BINFS0:dwSize=0

FAT0:dwSize=1000000

FAT1:dwSize=EA0000

All:dwSize=1F20000

****************************************************************

Store image to SD/MMC card successful.

then when you insert the sdcard, and then boot into bootloader mode, the following happens: on the display, you see a message 'sections=2', and 'press power to flash'. after pressing the power button, you see the following output on the serial port:

Flash ROM mapping total size = 2000000

Flash ID = 89,8802

Trumbull INTEL StrataFlash 128 Mbit MEMORY (K3/k18) found

dwROMTotalSize = 2000000

wTotalChip = 2

HTC Integrated Re-Flash Utility for bootloader Version:1.29 HIMALAYAS PVT version:1.02

MainBoardID = 4

Built at: Sep 24 2003 18:17:06

Copyright (c) 1998-2002 High Tech Computer Corporation

Turbo Mode Frequency = 398 MHz

Run Mode Frequency = 199 MHz

Memory Frequency = 100 MHz

SDRAM Frequency = 100 MHz

Main=0x90035EE4

LCD Power ON!

ATI Chip Id=0x56441002

DOCInfoTableinitHW+

Binary0:dwSize=80000

BINFS0:dwSize=0

FAT0:dwSize=1000000

FAT1:dwSize=EA0000

All:dwSize=1F20000

SD:Waiting for card insert.........

CMD3 for SD, it's OK, ready to get RCA from response.

SD:Detected one card

SD:ready for transfer OK

Total card size=1D30000ze=0

Radio flash Updating...

************

SD/MMC download to ROM is successful!

DOCInfoTableinitHW+

Binary0:dwSize=80000

BINFS0:dwSize=0

FAT0:dwSize=1000000

FAT1:dwSize=EA0000

All:dwSize=1F20000

DOC flash Updating...

****************************************************************

SD/MMC download to ROM is successful!

now both the radio and extended rom are upgraded!