diff --git a/USB-config-%26-command-protocol.md b/USB-config-%26-command-protocol.md
index 28399cf..91c5c24 100644
--- a/USB-config-%26-command-protocol.md
+++ b/USB-config-%26-command-protocol.md
@@ -178,6 +178,7 @@ additional peripheral ops
   * JTAG: 0
   * SWD: 1
 
+
 * `0x33`: Get status: no argument bytes, one result byte
   * `0x0x`: scan busy (type: x, eg. 0x00 = JTAG busy, 0x01 = SWD busy)
   * `0x7f`: idle
@@ -187,6 +188,7 @@ additional peripheral ops
     * JTAG: all bytes: pin numbers of TCK, TMS, TDI, TDO, nTRST, IR length, # of pins toggled, "possibly a short-circuit" warning flag
     * SWD: swclk, swdio pin numbers (bytes), manufacturer and part numbers (16 bits each, little-endian)
 * `0x35`: Start scan (only valid if status is not `0x01`): three argument bytes (scan type, start and end pin numbers (inclusive)), no result bytes
+* `0x36`: Get pin range: no argument bytes, two result bytes (min and max pin numbers, like start/end pins as in `0x35`)
 
 ## Mode 4 (SUMP logic analyzer)