I think I was able to soft hack for the Safe-Mode toggle, just by changing the following:
Around offset 15aef0, change the value from 02 00 56 E3 to 09 00 56 E3.
However, I'm not sure why it was recommended to change the following value as well (because I didn't, and I still got the toggle):
offset 15aee0, change the value from 01 10 A0 E3 to 00 10 A0 E3.