Hi,

I've got some vague documentation of the header that the firmware expects.
According to that:

>     bl      start_
>     nop
>     nop
>     .long   0x33
	This should be a decimal 49, i.e. 0x31.

>     .string "XncdPPC"
>     .long   0xxxxx0000  <-- upper 16 bits = CRC
	Should work with a 0 in place of this.

>     .long   0xyyyyyyyy  <-- file size
	This should be the size of text + data + bss, i.e. something like
	_C_LABEL(end)-_C_LABEL(kernel_text)

>     .long   0x00092214
>     .long   0x00000000
>     .long   0x39771c2a
	These 3 words should all be 0.

>     .long   0x00000010
	This indicates the type of machine.
	It should be 0x10 for the 1000, 3 for the 300.

Hope it helps.

Ciao,
Wolfgang
-- 
ws@TooLs.DE     Wolfgang Solfrank, TooLs GmbH 	+49-228-985800