For those who seek for Canon EOS 30D shutter count.
I've spent SOME time to find a utility or algorithm to get the shutter count for my camera. But all in vain. At last (and having spent much less time than for web searching) I've derived the following method (tested at least for firmware 1.0.4, 1.0.5, 1.0.6).
Canon writes the following info to CR2 file:
offset (hex) - data
0D0 - camera name (EOS 30D)
506 - firmware version (Fimware 1.0.x)
9B0 - shutter count (3 bytes - b0 b1 b2)
shutter count = Cnt1 + Cnt2, where
Cnt1 = 10000 * ((b1 & 0xFC) >>2); //10000-overflows number
Cnt2= ((b1 & 0x03) << 12) + (b0 << 4) + (b2 >> 4); //this shot number
So, 6 bits for overflows number (=0x3F=63) and 14 bits for current shot #
and we get 63 * 10 000 + 9999 = 640 000 -1 maximum value )
eg: shot# 7268 (1C64hex)
b0=C6, b1=39, b2=40
shutter count = 14*10000 + 7268 =147268
It works! At last I know the truth about my 30D body