Oh, there was a tiny typo in the first list, 100c was listed twice for ixus70. Apparently you guessed or checked that the latter was supposed to be 102a since your patch seems to be good. But 101b was not in the patch if I'm not mistaken. Just to be sure, here's all of ixus70 again, along with s2is:
ixus70_sd1000 100c ffafaa6c ffafaaf0
ixus70_sd1000 101b/101a ffafaae0 ffafab64
ixus70_sd1000 102a ffafab60 ffafabe4
s2is 100e ff968150 ff9681a4
s2is 100f ff968128 ff96817c
s2is 100g/100i ff967eb4 ff967f08
edit: krhm, fixed 101b/101a ExitFrom* address...now it's actually different from EnterTo*
