BUGT You could do a special build with preset 0x0001a278 in mb ?
When you load this version in your camera, you'll see something like this.
MEM: 0x1e3c1e3c
PS1: 0xffdf9
PS2: 0
PS3: 44003f4
This will display the 3 words of physw_status[].
Do not press any key.
Write down everything you see in the display. and send me those values.
Then press the ZOOM buttons one by on and note which of the 3 words show a change (each button will affect one bit). Write down the values you see when some of the buttons are pressed, send to me and this value and make a note for which button applies.
ZOOM probably has two speeds on that camera.
For example:
"When I press a ZOOM_IN low speed, PS3: 0x44003f4 was changed to PS3: 0x44001f4."
The values you will see will surely be different.