Some interesting path file info:
Search for 19000000 in the first path, you will find:
19000000730664058B067C050200C5040000000002000000
With a length of 1C, this is one of the UBX bombs. Right after this we have another UBX bomb:
19000000A5066405BD067C050200C504000000000200000000003000
.. And what after this? A mud!
310000008C066405A50678050000000000004D0100000000000001000000000000000100010000000000000000001C00
.. And now?
3C00000000067D05C406910547000000
3C is load_lcd_font..
The length of the type is before the Id, looks like a really good finding on Path format here
Edit: Yay, I'm 99% certain that this is it! How the hell did I never notice this before now? Its:
16bit, magic (04=end of screen)
16bit, length of object
32bit, object id
XXXX object data