As you can see
here ewavr implemented a switch to set the drivemode, burst mode in this case. this is quiete a breakthrough, as it allows setting it without the use of emulating keypresses. i asked him in pm to elaborate on his finding, this is what i got:
Quote
a way to SET drivemode, how did you find the adress for the parameter?
For some cameras exists ShootCon_ShowState() fuction, which prints shooting state related variables:
S3IS:
FF9CD748 ShootCon_ShowState
.....
ROM:FF9CD948 LDR R3, =0x7AA8
ROM:FF9CD94C LDR R0, =a_shootstate0xX ;" _ShootState :0x%x"
ROM:FF9CD950 LDR R1, [R3]
ROM:FF9CD954 BL printf
ROM:FF9CD958 LDR R3, =0x7AAC
ROM:FF9CD95C LDR R0, =a_shootingmode0 ; "_ShootingMode :0x%x"
ROM:FF9CD960 LDRB R1, [R3]
ROM:FF9CD964 BL printf
.....
So, for S3IS:
DEF(shoot_state, 0x7AA8)
DEF(conti_shooting, 0x7AAC) - Canon's name is "shooting mode" Wink Note that is byte size variable.
A720:
FFD20464 sub_FFD20464
ROM:FFD20464 STMFD SP!, {R4-R6,LR}
ROM:FFD20468 ADR R0, asc_FFD20618 ; "\n"
ROM:FFD2046C BL printf
ROM:FFD20470 ADR R0, aShootstate ; "ShootState\n"
ROM:FFD20474 BL printf
ROM:FFD20478 LDR R5, =0xAB38
......
ROM:FFD205F0 ADR R0, a_shootstate0xX ; "_ShootState :0x%x\n"
....
ROM:FFD209C4 LDR R1, [R5,#0x78] ; Load from Memory
ROM:FFD209C8 BL printf ; Branch with Link
ROM:FFD209CC LDRB R1, [R5,#3] ; Load from Memory
ROM:FFD209D0 ADR R0, a_shootingmode0xX ; "_ShootingMode :0x%x\n"
ROM:FFD209D4 BL printf ; Branch with Link
So, for a720:
DEF(shoot_state, 0xAB38+0x78)
DEF(conti_shooting, 0xAB38+3)
Some cameras like a570 don't have such useful function Sad
However (a570 1.00E):
ROM:FFC1B9D0 sub_FFC1B9D0
ROM:FFC1B9D0 LDR R3, =0x253C
ROM:FFC1B9D4 STMFD SP!, {R4,R5,LR}
ROM:FFC1B9D8 MOV R4, R0
ROM:FFC1B9DC LDR R5, =0x2548
ROM:FFC1B9E0 LDR R1, =aShootstate0xX ; "ShootState:0x%x"
ROM:FFC1B9E4 STR R4, [R3]
.....
So, for a570:
DEF(shoot_state, 0x253C)
DEF(conti_shooting, 0x253C+4) - found in another place. Maybe for all VxWorks cameras address of 'conti_shooting'=address of 'shoot_state' +4.
so, i guess with his explanation more people can find these adresses for their cams. obviously these people must be smarter than me, i just gather the information
