# tornado — Tornado Outbreak (PS3), static recompilation

`BLUS30371`, disc release (Loose Cannon Studios / Konami, 2009). Recompiled with
[ps3recomp](https://github.com/sp00nznet/ps3recomp).

![Tornado Outbreak running natively on Windows: the tornado tears through the farmers' market](docs/media/hero.gif)

| | |
|---|---|
| ![Title screen](docs/media/title.png) | ![Main menu](docs/media/menu.png) |
| ![Story intro](docs/media/intro.png) | ![Dialogue](docs/media/dialogue.png) |
| ![The market](docs/media/market.png) | ![Gameplay](docs/media/gameplay.png) |

The window title shows the presented FPS, the draws in the last frame and the
backbuffer size, e.g. `Tornado Outbreak | FPS: 30.57 | draws: 58 | 1280x720`.

## Status

**In game.** Logos and Bink intro, title, main menu, New Game (the save is
created), the story intro and dialogue, then the first level (`jb_intro`) with
the tornado under player control, pulling apart the farmers' market. Rendering
is correct without any debug overrides. Gameplay runs at about 10–16 fps.

Known: a few seconds into the level, a comic-style white transition fills the
screen and does not clear. See [docs/progress.md](docs/progress.md).

## Why this title

Picked from a sweep of all 1,019 decryptable disc EBOOTs for low SPU load
(`ps3games/_triage/disc_sweep/`):

| | code | functions | SPU images in EBOOT | imports |
|---|---|---|---|---|
| Guitar Hero III | 9.7 MB | 28,987 | 5 (615 KB) | 229 |
| **Tornado Outbreak** | 5.3 MB | **17,138** | **1 (5 KB)** | **103** |

The one SPU image is a raw-SPU memcpy engine the PPU drives by mailbox. Wwise
runs two small audio jobs on a SPURS job chain.

## Building

```bash
./tools/relift.sh          # imports.json, functions.json, lifted tree, NID table, SPU image
python build.py            # cmake + ninja under the MSVC environment clang-cl needs
PS3_VFS_ROOT=vfs RSX_LIVE_DRAW=1 PS3_MAIN_STACK_LV2=1 \
    ./build/tornado vfs/PS3_GAME/USRDIR/EBOOT.elf
```

`vfs/` is the disc tree (`PS3_GAME/...`). `game/EBOOT.elf` and
`vfs/PS3_GAME/USRDIR/EBOOT.elf` are the decrypted EBOOT:

```bash
python ../twistedmetal/tools/decrypt_self.py vfs/PS3_GAME/USRDIR/EBOOT.BIN \
    --keys ../GT5P/data/keys -o game/EBOOT.elf
```

`PS3_MAIN_STACK_LV2=1` is required: the game's SPU memcpy picks its path by
comparing the destination with the stack's top nibble (see progress.md).

Headless, into gameplay (START, CROSS through the menu, New Game and the intro,
then the left stick forward from 252 s to 300 s; frames with `LD_FRAME_DUMP=<dir>`,
`LD_FRAME_DUMP_FROM=<frame>` to start late):

```bash
S="18:0x0008,50:0x4000,70:0x4000"; for t in $(seq 95 8 240); do S="$S,$t:0x4000"; done
PAD_SCRIPT="$S" PAD_STICK="128,0,128,128,252,300" LD_FRAME_DUMP=frames \
PS3_VFS_ROOT=vfs RSX_LIVE_DRAW=1 PS3_MAIN_STACK_LV2=1 ./build/tornado vfs/PS3_GAME/USRDIR/EBOOT.elf
```

`PAD_SCRIPT` presses are wall-clock timed, so a slow boot can shift which
screen a press lands on.

The Wwise SPURS jobs must be captured and lifted once (`spu_miss/`, see
`tools/relift.sh`) or the game wedges after the New Game save.

## Legal

No game code, assets or keys here, only analysis and build configuration.