I challenged to modify the firmware too.
From some of the mod firmware, I have determined that the language setting is done with address (301AE).
I confirmed Italian (0A) and Thai (0C).
From the order of the languages (in firmware file), it was predicted that the value of Japanese is 0B.
After...