Hi, On Mon, May 27, 2019 at 09:35:54PM +0200, Carlo Pisani wrote: > isn't possible to burn the flash in the C3600 machine with the > firmware of C3750? > these two look similar. I have a firmware image here that has '9000/785 B,C,J Workstation PDC', built 08/10/1999 in the header. In that firmware, the PDC_MODEL capabilities handler is pretty simple and static: _pdc_model_capabilities fffffff0f002588c 081e0601 add sp, r0, r1 fffffff0f0025890 73c23fe1 std rp, -0x10(sp) fffffff0f0025894 73c300c8 std,ma r3, 0x60(sp) fffffff0f0025898 73c43f51 std r4, -0x58(sp) fffffff0f002589c 0fc112d1 std r1, -0x10(sp) fffffff0f00258a0 b4210020 addi 0x10, r1, r1 fffffff0f00258a4 37430000 copy r26, r3 ; load pointer for capabilites word fffffff0f00258a8 20800000 ldil 0x0, r4 fffffff0f00258ac 20200000 ldil 0x0, r1 fffffff0f00258b0 34840006 ldo 0x3( r4), r4 ; OS32|OS64 fffffff0f00258b4 34210000 copy r1, r1 fffffff0f00258b8 f0810c00 depd r1, 0x1f, 0x20, r4 fffffff0f00258bc 0c6412c0 std r4, 0x0(r3) ; store value fffffff0f00258c0 341c0000 copy r0, r28 fffffff0f00258c4 53c23f21 ldd -0x70(sp), rp fffffff0f00258c8 53c43f51 ldd -0x58(sp), r4 fffffff0f00258cc e840d000 bv ( rp) fffffff0f00258d0 53c33f4d ldd,mb -0x60(sp), r3 So at least this version has no clue about the NP bit (or leaves it intentionally at zero, which would mean it's independent of CPU/Chipset revisions) - it would be interesting how this function looks in newer firmware revisions. Anyone has a Firmware update file for any of the B/C/J Class systems flying around? I'll take it regardless of the version. Sven
