NorthQ9100- Boot Loader

By pressing <any key> I entered the command mode and then I pressed <space> which gave this menu.
================================================================
 LAN Router BRN Loader V1.5-6104S build Mar 11 2003 11:04:49
                 Broad Net Technology Inc.
================================================================
V_Manufacturer_ID=C2H, V_Device_ID=225BH
Mxic MX29LV800B bottom boot 16-bit mode found

Copying boot params.....DONE

Press any key to enter command mode ...

BRN> 

======================
 [U] Upload to Flash  
 [E] Erase Flash      
 [G] Run Runtime Code 
 [A] Set MAC Address 
 [#] Set Serial Number 
 [V] Set Board Version 
 [H] Halt System and Restart 
 [P] Print Boot Params 
======================

BRN>
I was able to upload new firmware with the Upload command and the XModem protocol. For the web image I used PFS.ZIP and for the code image I used SOHO.ZIP.
BRN>u

UPLOAD Flash

--------------------------------------
      Area         Address     Length 
--------------------------------------
[0] Boot          0x00000000     128K
[1] Configuration 0x00020000      64K
[2] Web Image     0x00030000     192K
[3] Code Image    0x00060000     576K
[4] Params Area   0x000F0000      64K
--------------------------------------
Enter area to UPLOAD: 2

Upload area 2.  Are you sure? (Y/n) Yes

Starting XModem download...(press Enter to abort)
CCCC
Starting to write flash...write length 00018700
0123456
Done!


BRN>u

UPLOAD Flash

--------------------------------------
      Area         Address     Length 
--------------------------------------
[0] Boot          0x00000000     128K
[1] Configuration 0x00020000      64K
[2] Web Image     0x00030000     192K
[3] Code Image    0x00060000     576K
[4] Params Area   0x000F0000      64K
--------------------------------------
Enter area to UPLOAD: 3
Upload area 3.  Are you sure? (Y/n) Yes

Starting XModem download...(press Enter to abort)
CCCC
Starting to write flash...write length 0006A500
0123456789abcdefghijklmnopq
Done!
When I looked at other places with a description of this boot loader I found a description of a hidden command !. I put some power on the router and that gave me this.
================================================================
 LAN Router BRN Loader V1.5-6104S build Mar 11 2003 11:04:49
                 Broad Net Technology Inc.
================================================================
V_Manufacturer_ID=C2H, V_Device_ID=225BH
Mxic MX29LV800B bottom boot 16-bit mode found

Copying boot params.....DONE

Press any key to enter command mode ...

BRN>!

Enter Administrator Mode !

======================
 [U] Upload to Flash  
 [E] Erase Flash      
 [M] Upload to Memory 
 [R] Read from Memory 
 [W] Write to Memory  
 [T] Memory Test      
 [Y] Go to Memory     
 [G] Run Runtime Code 
 [A] Set MAC Address 
 [#] Set Serial Number 
 [V] Set Board Version 
 [H] Halt System and Restart 
 [P] Print Boot Params 
======================

$Id: bootloader.html,v 1.2 2004/04/13 13:39:33 runechristensen Exp $