I am dumping the data a bit before the call to write_dng() inside raw_savefile() (core/raw.c) so it is not destroyed. The image is there on all modes except auto.
I have used several methods, from a single 256MB file and some overengineeered and cumbersome naive statistical analysis of differences (full white frame overexposed dump vs black underexposed dump) to smaller chunks for visual inspection.
Automating it didn't work, so I finally settled on taking a regular scene pic and doing the following:
Dump the memory into regular 19167840 byte files (sensor widthxheight x 12 / 8 ) with the CRW extension as if it were any other sx260 raw. If you use a size that does not match framebuffer you will get even more distortion instead of a mere horizontal & vertical shift.
The output is a series of files like these:
-rw-r--r-- 1 yuyu users 19167840 May 26 20:40 addr_40000000.CRW
-rw-r--r-- 1 yuyu users 19167840 May 26 20:40 addr_41247A60.CRW
-rw-r--r-- 1 yuyu users 19167840 May 26 20:41 addr_4248F4C0.CRW
-rw-r--r-- 1 yuyu users 19167840 May 26 20:41 addr_436D6F20.CRW
-rw-r--r-- 1 yuyu users 19167840 May 26 20:41 addr_4491E980.CRW
-rw-r--r-- 1 yuyu users 19167840 May 26 20:41 addr_45B663E0.CRW
-rw-r--r-- 1 yuyu users 19167840 May 26 20:41 addr_46DADE40.CRW
-rw-r--r-- 1 yuyu users 19167840 May 26 20:41 addr_47FF58A0.CRW
-rw-r--r-- 1 yuyu users 19167840 May 26 20:41 addr_4923D300.CRW
-rw-r--r-- 1 yuyu users 19167840 May 26 20:41 addr_4A484D60.CRW
-rw-r--r-- 1 yuyu users 19167840 May 26 20:41 addr_4B6CC7C0.CRW
-rw-r--r-- 1 yuyu users 19167840 May 26 20:41 addr_4C914220.CRW
-rw-r--r-- 1 yuyu users 19167840 May 26 20:41 addr_4DB5BC80.CRW
-rw-r--r-- 1 yuyu users 19167840 May 26 20:41 addr_4EDA36E0.CRW
Then I created a DNG4PS-2 profile for the sx260 and batch converted them all to DNGs for inspection. Not perfect, but you can sense the image if its there. In fake colours, displaced and sometimes distorted, but easily noticeable.
PS: If you are not careful on what memory ranges and sizes you use you will get a camera crash after last file since you will be accesing non-existant memory addresses.