Oh since you're here, can you suggest a way to stick a hijack_tone_init function in the kernel such that is called after the player starts?

It seems as though the player app checks the eq values when it starts up, and bails if they don't match expectations.