Sorry to bump an old thread, but I couldn’t find anyone giving these patches any love of late! 😅
After some investigation, I’ve discovered the updated offsets for the “show second page” patch is 7c46b0 as of v4.5.9587. So here’s an updated patch:
Code:
<Patch>
patch_name = `Show second page of Beta Features for Glo Hd`
patch_enable = `yes`
#
replace_bytes = 7c46b0, 00, 01
</Patch>
For future reference, this offset can be found by reversing libnickel.so and finding the offset of a “cmp r0, #0” instruction immediately following a “blx” call to a function with a label containing “isAlyssum”
EDIT: Reversing involved using objdump like this:
Code:
gobjdump --target=elf32-littlearm -f -S -d libnickel.so.1.0.0
The Kobo firmware includes a surprising amount of debug information, which is useful!

You can then search through the output to find “isAlyssum” and find the “cmp” line.
Hope that helps someone out!