Changing lora transmit interval using downlink payload

I want to change the hex downlink payload to include a command to set the APP_TX_DUTYCYCLE to 5 minutes within a downlink data packet. Given the packet structure “0158232352455345542323BAE6FF” (X##RESET##ºæÿ),
how should I modify this packet to include the new command right before the CRC-16 value?

Downlink Structure
[Packet Num]: Arbitrary number, let’s use 01.
[88]: Calling soft reset function mode.
[##RESET##]: 232352455345542323.
[CRC-16]: BAE6.
[0xFF]: Indicates the end of the transmitted packet.

Adjusted Structure
Packet Num: 01.
Reset Function Mode: 88.
Matching String: ##RESET## as 232352455345542323.
CRC-16: BAE6.
End of Packet: FF.
Complete Packet
fport is 99

Additional information that might be helpful:

ComputedCRC = BAE6

[01] [58] [23] [23] [52] [45] [53] [45] [54] [23] [23] [BA] [E6]

Performed remote soft reset <<<

Debug: USART2

FW_VERSION: V1.1.2 R2

APP_VERSION: V1.1.0 MW_LORAWAN_VERSION: V2.3.0 MW_RADIO_VERSION: V1.1.0

OTAA Settings

DevEui: 383735326F306913 JoinEui: 0105010808010208 AppKey: 367E99AA28A2D2A6CCF7158899CF4F3C

*** Loading System settings from EEPROM *** APP_TX_START_DUTYCYCLE = 10 sec APP_TX_DUTYCYCLE = 15 min RTC_WDG_TIMEOUT = 20 min CURRENT STORED FLASH LOCATION : 0x8018000 LAST STORED FLASH LOCATION : 0x8018000 VL53L1X PEOPLE HEIGHT THRESHOLD DETECTION LEVEL = 80 cm VL53L1X DOOR HEIGHT THRESHOLD DETECTION LEVEL = 200 cm
TIMING BUDGET = 20 ms

*** Start of RTC RX8900CE initialization ***

RTC RX8900CE initialisation → Done <<< *** Start of VL53L1X initialisation *** → Chip booted! → Set registers to default → Identification Check - OK, ID : 0xEACC → Sample Count: [20/20], Floor height = 1.92 m <<< → Initialization completed!

*** Initiate LoRAWAN Connectivity Join ***

JOINED → OTAA <<<

APP_TX_DUTYCYCLE = 15 min
how do i change APP_TX_DUTYCYCLE = 5 min

Extra info: This is kind of like the reply after i send the downlink payload
example: 260801
[26] - Indicate reply acknowledgement
[08] - The return packet number that used earlier
[01] - Received data, CRC-ok, [0] - CRC-error

mostly when i try to change the downlink payload it replies with 26 01 00 and 26 05 00 as i keep failing the crc.

What is your end device?
Does your end device support this kind of downlink commands?