Range Rovers Forum banner
1 - 1 of 1 Posts

2002-2005 Range Rover MkIII / L322
12 Posts
Discussion Starter · #1 ·

As others have previously discussed in other threads, I'm interested in understanding the Denso GPS unit firmware with the ultimate goal of enabling on-the-move destination entry. There is a lot of information out there that I'm going to attempt to chronicle here.

I have two navigation discs, the 2004 one and 2006 one. The 2004 came with my MY05 Range Rover HSE. The 2006 one was given to me by the dealer, and in retrospect I somewhat regret letting it update my firmware thus disabling the 1791 on-the-move enabler.

Part numbers:
2004: LR: YIW500023, Denso: 464210-5271
2006: LR: YIW500210, Denso: 464210-5760

A great introductory post on the file formats Denso uses in there system can be found on Bert's blog: Bert: http://biot.com/blog/navigation-dvd-hacking

Bert explains the KWI file format and provides a Python script (which I've attached because I had to fix a tiny bug) called "kiwi" that you can use to inspect the modules contained in your LOADING.KWI file.

$ kiwi -v -d 464210-5760/
number of systems found: 1
System 1
Manufacturer ID: DENSO
Number of modules in this system: 1
Module 1:
Name: LR16
Version: 1040
Category: Program
Address: 0x800
Size: 16.4 MB

On my 2006 disc I extracted a file called LR16 with the following checksum:

$ md5sum LR16
991083ea595c39923a5900b2f201623b LR16

I'm speculating, but I assume that updating firmware would be as easy as creating a new disc with a firmware version number that is greater than 1040.

My next step, which I may never get to because I have more revenue generating projects to work on that time in the day, would be to figure how what CPU the Denso uses (I believe it's a Hitachi SH-2) and a debugger that can actually load this firmware--but without source code I'm not sure how far I'll get.


  • Like
Reactions: Cookierx1
1 - 1 of 1 Posts