Ok, silly me - I looked all over the card for the image backup, but not on the reader itself.
Mounted the cramfs image in linux, changed the file, now I just need to double check how to replace "sony/ebook/application/resources/scripts/main.xml" on my reader.