I'm able to test on an ixus850_sd800 but it's the camera of a friend...
int MfOn(void){ x=1; SetProperyCase(12,&x,sizeof(x)); ...
Simply press "C" (code) key.ROM:FF996198 LDR R3, =0xB7CA0ROM:FF99619C MOV R12, #1ROM:FF9961A0 STR LR, [SP,#-4]!ROM:FF9961A4 MOV R0, #0xCROM:FF9961A8 ADD R1, R3, #0x68ROM:FF9961AC MOV R2, #2ROM:FF9961B0 STRH R12, [R3,#0x68]ROM:FF9961B4 BL SetPropertyCaseROM:FF9961B8 BL sub_FF998D00ROM:FF9961BC MOV R0, #0ROM:FF9961C0 LDR PC, [SP],#4short x; // located at 0xB7CA0+0x68int MfOn(void){ x=1; SetProperyCase(12,&x,sizeof(x)); sub_FF998D00(); return 0;}
Is it possible for CHDK on SD700 to have a corrected copy of the function that crashes the camera?If it works 90% of the time and crashes on a single input instance, it might not be so hard to complete it... (same for other IXUSes)
btw have you read about the propcase for the ixus850_sd800 they are digicII based?
My goals is now to pimp IXUS cameras being always-with-you super macro tools.