Ravpower RP-wd02 impossible to flash back oem firmware

For Developers
1

I have the ravpower filehub RP-WD02 in openwrt 19.07.4 and i would like to flash back the original firmware.

I understand that i need 2 files rootfs and kernel to reflash to stock.

I have searched all over the openwrt forum but i only could find the files for the rp-wd03, nothing for the wd02

Thanks in advance if someone could give me a hand

2

To roll back to stock from wingspinner's OpenWrt you need the orignals of the overwritten partitions.

# cat /proc/mtd
dev:    size   erasesize  name
mtd0: 00800000 00010000 "ALL"
mtd1: 00030000 00010000 "Bootloader"
mtd2: 00010000 00010000 "Config"
mtd3: 00010000 00010000 "Factory"
mtd4: 00180000 00010000 "Kernel_RootFS"
mtd5: 00010000 00010000 "params"
mtd6: 00010000 00010000 "user_backup"
mtd7: 00010000 00010000 "user"
mtd8: 00600000 00010000 "Rootfs"



# cat /proc/partitions
major minor  #blocks  name

  31     0       8192 mtdblock0
  31     1        192 mtdblock1
  31     2         64 mtdblock2
  31     3         64 mtdblock3
  31     4       1536 mtdblock4
  31     5         64 mtdblock5
  31     6         64 mtdblock6
  31     7         64 mtdblock7
  31     8       6144 mtdblock8

At least:

  • params to keep your device identity,
  • Bootloader, Kernel_RootFS and Rootfs for stock firmware.

Bootloader, Kernel_RootFS and Rootfs can be extracted from original firmware update package. do you have one?

Two days ago we just found out with @EpicLPer how to rollback from wingspinner's build to stock firmware.
That was an HooToo HT-TM01 device, and I had a backup.

1 Like
3

I wonder if a factory reset would help restore those, have to take a look later still :slight_smile:

4

@will67 here are my RP-WD02 backup for you: backup-fw-WiFiSDRJ-RAV-WD02-2.000.032-8850108874

Please hexedit the params partition and change the serial and MAC before flashing!

Your original MAC address (in hex format) is in the Factory partition at 0x4.
E.g.:
My 00:1c:c2:16:44:e2 MAC in Factory is:

$ hexdump -C mtd3.bin
00000000  50 53 00 01 00 1c c2 16  44 e2 ff ff ff ff ff ff  |PS......D.......|

... and in params:

$ hexdump -C mtd5.bin 
00000000  00 00 00 00 31 39 32 2e  31 36 38 2e 31 2e 33 38  |....192.168.1.38|
00000010  00 00 00 00 32 35 35 2e  32 35 35 2e 32 35 35 2e  |....255.255.255.|
00000020  30 00 00 00 31 39 32 2e  31 36 38 2e 31 2e 31 00  |0...192.168.1.1.|
00000030  00 00 00 00 31 39 32 2e  31 36 38 2e 31 2e 32 30  |....192.168.1.20|
00000040  31 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |1...............|
00000050  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
*
00000400  00 00 00 00 52 41 56 00  52 37 00 00 00 00 00 00  |....RAV.R7......|
00000410  00 00 00 00 57 44 30 32  00 69 73 6b 00 00 00 00  |....WD02.isk....|
00000420  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
00000430  00 00 00 00 31 2e 30 2e  30 2e 31 00 38 38 35 30  |....1.0.0.1.8850|
00000440  31 30 38 38 37 34 00 00  00 00 00 00 00 00 00 00  |108874..........|
00000450  00 00 00 00 00 00 00 00  00 00 00 00 30 30 3a 31  |............00:1|
00000460  63 3a 63 32 3a 31 36 3a  34 34 3a 65 32 00 00 00  |c:c2:16:44:e2...|
00000470  00 00 00 00 00 b7 bf a1  00 00 00 00 00 00 00 00  |................|
00000480  00 00 00 00 00 00 00 00  00 00 00 00 2a 00 00 00  |............*...|
00000490  32 30 31 34 31 30 30 38  6f 63 49 30 46 63 43 58  |20141008ocI0FcCX|
000004a0  42 62 46 65 44 61 51 31  46 76 51 33 52 4a 4f 4c  |BbFeDaQ1FvQ3RJOL|
000004b0  77 38 71 31 46 37 64 61  38 51 00 00 00 00 00 00  |w8q1F7da8Q......|
000004c0  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
*
00000510  40 00 00 00 65 61 65 61  65 62 36 37 36 66 63 65  |@...eaeaeb676fce|
00000520  30 64 38 35 36 61 37 61  33 35 62 31 39 33 37 35  |0d856a7a35b19375|
00000530  37 31 35 36 62 33 66 34  35 32 39 32 31 65 30 33  |7156b3f452921e03|
00000540  66 64 64 66 38 38 63 37  63 35 35 62 39 65 31 39  |fddf88c7c55b9e19|
00000550  34 33 39 62 00 00 00 00  00 00 00 00 00 00 00 00  |439b............|
00000560  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
*
00010000

My device's serial is 8850108874:

$ strings mtd5.bin 
192.168.1.38
255.255.255.0
192.168.1.1
192.168.1.201
WD02
1.0.0.1
8850108874
00:1c:c2:16:44:e2
20141008ocI0FcCXBbFeDaQ1FvQ3RJOLw8q1F7da8Q
eaeaeb676fce0d856a7a35b193757156b3f452921e03fddf88c7c55b9e19439b

The last two things are license keys. :upside_down_face:

Read the earlier linked HT-TM01 thread for the detailed steps. It's not trivial, but doable! :+1: