inside cradle 0xZ0@9AF80
outside cradle 0xZ0@9FF80
The red 0 is the USB bit which becomes 8 upon USB plug-in. Z and @ I put for values that fluctuate between two possible ones and seem unrelated. @: C/5 Z: 3/2
Interesting, F->A is two bits changing.
From what I understand, the cradle has power and AV plugs, perhaps one or both of these also affect the bits?
The interesting thing is that yes when the USB cable is off and the according bit is 0 the camera still shuts off when removed from the cradle.
Most cameras shut off if you remove external power, so it might be similar to that.
From earlier
On the things you suggested I'll need step by step instructions.
If you run a script with just
post_levent_to_ui'DetachCradle'
it might make the camera think it's no longer in the cradle.
You could also try
print(call_event_proc'UI_RegistDebugEventProc')
print(call_event_proc'UiEvnt_StartDisguiseCradleStatus')
You should reboot in between these tests, and don't use PTP as that may confuse things more. If the second one prints -1, the event proc isn't registered.