cherry-checker seems to use /var/lib/cherry/state* (and other files in same directory) to store its status. Anyway, I also agree that rather that trying to patch undocumented system functions, it's safer to reflash the current f/w and start the device from a known state.