fireball: generate working cwm recovery