No, I dont have any ideas, this could be related to just anything that follows the lcd init and currently we dont have any real debugging capabilities to pin it down. I never compiled the firmware myself but I wrote some tool to make the hidden partition show up. It basically sends a SCSI Read12 command with LBA=0xFFFFFFFE and LUN=0xE0 (bottom of BulkOnly.c). If the USB mass storage is working you could plugin some more cases there basically establishing a communication link. You could even upload code and execute it on the device, fetch messages, etc...
If that works you could define some debug-printf alike function that writes messages to a buffer that you later on fetch via the above method. What do you think? Btw, if youre on linux I can send you my SCSI code as a starting point for the host side app. If youre on Windows I think its possible to emulate these SCSI commands with bulk transfers using libusb. There is some firmware tool for rk26xx players that does just that
SourceForge.net Repository - [s1mp3] Index of /trunk/rockchip/rkfwx (iirc).
Good luck!
knob, you used the c code I pasted? Did you compare it to the disassembly? Also did you keep the ScanDirSet and Standby functions from the original ILI? These may not work with your lcd and may lead to this behaviour. I assume you set LCD_W and all other defined appropriately.