Well, your unit kinda thinks it is in AM-Tuner mode.

That's what the lower 3 bits of byte 0x0e is for, which on your player has the value '4':

   0 == uninitialized

   1 == FM-Tuner

   2 == Player (mp3)

   3 == Aux

   4 == AM-Tuner

That's why the timecodes are bananas, and that's why restore-visuals ain't working.. parts of the Rio software think the Tuner is active, and Hijack thinks there's no work required.

How about popping up the "show flash savearea" display, scrolling for the 08: line (which contains byte 0x0e, one in from the right), and hitting the RioRemote "Source/Power" button a few times.. byte 0x0e should get highlighted, and it should change values..

What values do you see there.. ?

-ml