Since the scope does the checksum calculation and the location of the configuration data in the flash is now know it is also possible to follow a route where one modifies the configuration there and let the scope do the setup of the touch panel.
The configuration data is coming from the packets 716 to 734. In the cpu memory it is set at address 0x8019CF82. The byte there is send to the touch panel config register 0x8047. The bytes are send consecutive. The data in the code below is the patched version. It is possible to extend the packed data, but make sure to remove the same amount of bytes just after the initial data section. There is a range of zero's there that can be removed. (beyond flash address 0x001BA8D8 or so)
flash: 0x001BA610 | packet 716: 0x12, 0xFF 0x8019CF82: 0xFF, 0x00,
flash: 0x001BA612 | packet 717: 0x16, 0x04, 0x58, 0x02, 0x0A, 0xFD 0x8019CF84: 0x04, 0x58, 0x02, 0x0A, 0xFD, 0x00,
flash: 0x001BA618 | packet 718: 0x70, 0x09, 0x01, 0x08, 0x28, 0x08, 0x5A, 0x3C, 0x03, 0x05 0x8019CF8A: 0x01, 0x08, 0x28, 0x08, 0x5A, 0x3C, 0x03, 0x05, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
flash: 0x001BA622 | packet 719: 0x30, 0x0C, 0x18, 0x1A, 0x1E, 0x14, 0x87, 0x29, 0x0A, 0x75, 0x77, 0xB2, 0x04 0x8019CF99: 0x18, 0x1A, 0x1E, 0x14, 0x87, 0x29, 0x0A, 0x75, 0x77, 0xB2, 0x04, 0x00, 0x00, 0x00,
flash: 0x001BA62F | packet 720: 0x14, 0x9A, 0x01, 0x11 0x8019CFA7: 0x9A, 0x01, 0x11, 0x00,
flash: 0x001BA633 | packet 721: 0x92, 0x01 0x8019CFAB: 0x01, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
flash: 0x001BA635 | packet 722: 0x27, 0x50, 0xA0, 0x94, 0xD5, 0x02, 0x08 0x8019CFB5: 0x50, 0xA0, 0x94, 0xD5, 0x02, 0x08, 0x00, 0x00,
flash: 0x001BA63C | packet 723: 0x14, 0x04, 0xA1, 0x55 0x8019CFBD: 0x04, 0xA1, 0x55, 0x00,
flash: 0x001BA640 | packet 724: 0x13, 0x8F, 0x62 0x8019CFC1: 0x8F, 0x62, 0x00,
flash: 0x001BA643 | packet 725: 0x13, 0x7F, 0x71 0x8019CFC4: 0x7F, 0x71, 0x00,
flash: 0x001BA646 | packet 726: 0x13, 0x73, 0x82 0x8019CFC7: 0x73, 0x82, 0x00,
flash: 0x001BA649 | packet 727: 0x13, 0x69, 0x95 0x8019CFCA: 0x69, 0x95, 0x00,
flash: 0x001BA64C | packet 728: 0x02, 0x24, 0x69 0x8019CFCD: 0x69, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
flash: 0x001BA64F | packet 729: 0x18, 0x0C, 0x02, 0x04, 0x06, 0x08, 0x0A, 0x0C, 0x0E, 0x10, 0x12, 0x14, 0xFF, 0x01 0x8019CFF2: 0x02, 0x04, 0x06, 0x08, 0x0A, 0x0C, 0x0E, 0x10, 0x12, 0x14, 0xFF, 0xFF, 0xFF, 0xFF,
flash: 0x001BA65D | packet 730: 0x01, 0x11 0x8019D000: 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
flash: 0x001BA65F | packet 731: 0x28, 0x10, 0x02, 0x04, 0x06, 0x08, 0x0A, 0x0C, 0x1D, 0x1E, 0x1F, 0x20, 0x21, 0x22, 0x24, 0x26, 0x28, 0x24 0x8019D011: 0x02, 0x04, 0x06, 0x08, 0x0A, 0x0C, 0x1D, 0x1E, 0x1F, 0x20, 0x21, 0x22, 0x24, 0x26, 0x28, 0xFF, 0xFF, 0xFF, 0xFF,
flash: 0x001BA671 | packet 732: 0x49, 0x01 0x8019D024: 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF,
flash: 0x001BA673 | packet 733: 0x01, 0x11 0x8019D02A: 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
flash: 0x001BA675 | packet 734: 0x89, 0x90 0x8019D03B: 0x01, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,