The majority of modification of these radios to amateur service is done with modifications to the codeplug. This is the same area the programing data from CPS is written in, but CPS is unable to change it. This is simply a packed (hex) data written into the eeprom chip of the radio containing tuning, feature and programing data. What I've found is the radios features are determined by the 'codeplug' settings. I've not seen any of the European ones, but I've been working with the US versions for FM service in ham radio.
Over time, I've gotten more into these with the CDM1250/1550 and other waris series radios. They modified ok, but the way of doing it as suggested left much to be desired, and the DTMF pad didn't work and the radios were narrow band only. This was originally put together when I got into the HT1250 200 MHz radios. 13.1.3.4 Professional Portable 4 Line Display Firmware.13.1.3.3 Professional Portable Non-4 Line Display Firmware.12.1.1 Well I was fucking in the codeplug and wrote bytes it does not understand.1.3.1 AAHLN9725C - Voice Storage Option board.