[HTC Tornado] tobbbie:
This kitchen is a continuation of the Nitrogenious kitchen released at XDA-devlopers.

Nothing has changed from the tools side, only subtle adaptations and altered content.

Thanks go to :

all the experts at XDA-developers (too many to list)

Nitrogenious for releasing his WM6 kitchen and the superb WM6 package contained therein.

The original kitchen is found here: http://xdaforums.com/showpost.php?p=2150690&postcount=1

Mind that usage description has to be taken from there!

Cotulla for publishing the OMAP850_SDHC.dll that can handle SDHC cards and llnhhy for putting the crucial REG setting in his published package for the Tornado.

More details are discussed here: http://xdaforums.com/showthread.php?t=576164

SGregory for revealing (at least I found it there) that "format BINFS" can actuall take a parameter that sizes the BINFS partition and thus opens the path to gain device storage space if the ROM gets smaller!

More details on saving space are outlined here: http://xdaforums.com/showthread.php?t=491240

- Sir.B and geistteufel for the Squeezer batches for UPX. XDA-Develpoer threads are:

original: http://xdaforums.com/showthread.php?t=481880 and post of geistteufel (the one used in this release): http://xdaforums.com/showpost.php?p=3540501&postcount=92

Disclaimer:

This is for educational purposes only!

There will be no support for the published content!

Enjoy and contribute.

Warning:

Mind that from the "cooking" or "kitchen" point of view this is for sure an old base and possibly more elaborate tools and definitely newer OS versions exist. The produced files should not be able to "brick" your device if you correctly set the Image Name to "OS" in the last step of the cooking process. IPL or SPL should never be written unless you know exaclty what you do - the kitchen only cooks the OS part! Writing incorrect content to the IPL or SPL area will brick your device for sure, so be careful!

Motivation:

This effort was only done to get a running stable ROM with SDHC support included that occupies as little storage space as possible

still having mandatory elements on board

filling the remaining space with useful tools

Space saving strategies (order of benefit):

outsource parts to SD card where possible (.NET CF 3.5)

compress files (.exe and .dll) that are not stored as modules with UPX where function permitts.

remove files that are not needed for any function

remove media data (ringtones, pictures) and leave only the bare minimum

resize media data where possible to further decrease size

not done, but possible:

- remove optional packages (additional color schemes) (25k)

- remove empty packages (15k)

- summarize registry tweak packages to just one additional package (edit the .rgu) (few kB)

About UPX and builtin BINFS compression:

My experience is that the BINFS compression shrinks a set of example files (.NET CF 3.5 files that reside in the \Windows path) to about 49% while UPX'ed they only take 32% of their initial size. So on average you may gain 17% of the initial filesize in your ROM. The larger the file, the better is usually the gain.

Mind that UPX will only compress exe/dll files (even if they may be named differently, see Total Commander's *.tfx) and does not compress exe/dll that depend on .NET. It works luckily on the .NET CF core parts itself.

You should not compress (even if compression works, these DLLs will not load later):

resource DLLs

menu extension DLLs (context menus)

Updated and altered content:

added SDHC support by replacing the OMAP850_SDHC.dll with an SDHC capable version initially created for the StrTrk. So far there are no negative impacts visible.

altered the titles of the options to indicate the space they take - also UPX'ed size

moved the oemstartup.dll and the relevant pictures to the folder where the optional sounds already resided

added German T9 to the English T9 - so both is installed in the system if you select this. Mind that an additional language is not eating much space (~70k)

added the SafeInboxExtension as an own option to add, removed the InboxExtension from the combined "Group SMS + ..." menu

put moBlue to the latest version (2.1) and adapted rgu content.

added an option for registry changes called "tobbie GUI tweaks" that sum up everything that I think is useful (smaller menus, fonts, scrollbars, value for gamma).

updated the TotalCmd to the latest released version

created several additional packages from the previous default content (CeleTask, ClearType Tuner, ClockOnTop, ComManager, Dopod SIM Manager, .NET CF 3.5, OMAPClock, OxiosAlarms, OxiosMemory)

added a new package for .NET CF 3.5 where the GAC_* files have to reside on SD card. The complemtary ZIP containing the files to copy on SD card are located in the "_Changes" directory.

added the GPSID Settings tool to the GPSID directory

included the SP1 fixes supplied by Nitrogenious (FakeCursor not included)

changed several tweaked menus in the settings -> system tweaks

added options for volume setting of the initial beep and voice tag to the Voice Tag menu in system tweaks, changed category of the [HKEY_CURRENT_USER\ControlPanel\Sounds\VRecBeg] from "Notifcation" to "System" so that only the sounds sent form the VoiceTag are audible when the System sound volume is set to 0.

completely UPX'ed the SYS\MMSCAMCLKSTK *.exe and *.dll (except 2)

replaced the htcmidi.avd with the WM5 version to get back good midi playback,

added the HTCSourceflt.dll (from Nitrogenious SP1) to get midi playback in wmplayer

removed two large files from this directory which are nowhere referenced (CameraRC_*.dll).

updated WM5torage to the latest version (1.90), already setting suitable defaults.

fixed default settings for A2DP

Directory and contents

added a batchfile (you may want to edit) where the %SystemDrive% can be set to any value. This allows to install the kitchen on any drive you like and not on C:\ (the normal systemdrive) as it was mandatory. Mind that the scope of this %systemdrive setting is limited to the batch execution only. You can put the whole environment on a large RAMdisk (~380MB required) - this speeds up the cooking dramatically! A large RAM disk is available from "[ QSoft ] Qualitative Software" (1 year trial for the lite version) - see here: http://members.fortunecity.com/ramdisk/RAMDisk/ramdriv002.htm .

added a subdirectory "_Squeezer" where you find the UPX compression set "Squeezer" also published at XDA-developers (readme contained there). I have used this set to batch compress many files before putting them to ROM.

added a directory "_Changes" where you find the compressed and original versions of the files in equally named subdirectories OEM and SYS like in the WORK path. So in case you want to go back to the non-UPX-ed version they are there. Continuing the UPX-batch directory logic (2_Backup, 3_Compressed) there are further ones (4_removed and 5_changed) to document the changes done to the original content.

The rest of the kitchen is identical to the one Nitrogenious had released.

Download here: http://www.mediafire.com/file/xdiz2xzmote/Tornado_Kitchen_v09_by_tobbbie.exe

Quick Start:

- Unpack to C:\

- read cooking guide at Nitrogen's thread (see above)

- using defaults you get a ROM with: http://www.mediafire.com/file/z3ynij5ynzd/default-settings.gif

- available storage 27,97MB, free after 1.st boot 24,8MB

Correction: If you want to use the moBlue package, please edit the RGU file and add a blank line at the end. Using notepad will ensure that the file stays in unicode format.

Correction-2 (14.10.2010): You will experience that while WMP is playing the backlight will not go off as normal. This can be fixed by replacing the HTCWMPPlug.dll in the \windows directory on the device or in C:\Torn\_Changes\SYS\MMSCAMCLOCKSTK in the kitchen with the attached file.

Please make sure that your device is "SuperCID" before entering the "Format BINFS command. See post 3.

added 20100314: (edited 20100504)

Despite it is really extremely easy to cook your own ROM with the kitchen, let me give you a head start with your old Tornado. I have cooked the default settings to a ROM and added all tools that you need to step from a stock Tornado to the cooked one in a single archive.

Download it from here: http://www.mediafire.com/file/njm040ttoxm/_tobbbie-tornado-WM6(SDHC-NetCF_on_SD).exe

Unpacking it you will find a directory structure:

_tobbbie-tornado-WM6(SDHC-NetCF_on_SD)
├───1 prepare security
│ ├───1 HTCUnlock
│ └───2 SDA_ApplicationUnlock
├───2 prepare for custom flash
│ └───Utils
├───3 flash latest Radio and SPL
├───4 format BINFS 1b00000
├───5 flash ROM
└───6 copy NetCF to SD
└───Windows

Follow the actions in the directories one-by-one:

You only need to do steps 1 and 3 if you come from an official ROM but Step 2 (lokiwiz) needs only be done once per device.

If you flash another cooked ROM you can start from step 4.

Attention: In case you did not notice yet - the following procedures will completely erase all content that you stored on the device (email, SMS, MMS, ToDo, Contacts - simply everything) - the device will be as if it comes out of the box. So back up your data before you do this!

Here is what to do in detail, how and why:

Prepare security: This means that the restrictive program execution privileges have to be set less firm to allow step 2 to run later.

Connect your Tornado to the PC and let Active Sync connect. First run HTCUnlock-CVS.exe in the directory 1 HTCUnlock. This will install a program on your device. Run the installed program there and restart the device.

After the device has reconnected to Active Sync, on the PC run the program SDA_ApplicationUnlock.exe in the folder 2 SDA_ApplicationUnlock. It should confirm "succesfully unlocked".

Now the device is ready to receive the "SuperCID" that allows to flash any ROM to it, regardless of Operator or Vendor limitations. To be on the safe side later, please enter on the device *#06# and note down the IMEI that the device reports - you will need it later.

This needs only be done once per device - it is a permanent setting that survives all ROM updates.

Go to the folder 2 prepare for custom flash and

make sure there are no files *.bin left from previous device's activities

then execute Lokiwiz.bat. It will prompt you with 4 options:

U. Unlock
L. Lock
C. CID Unlock (SuperCID)
Q. Quit
--------------------
Type the letter and press Enter:

Input "C" <enter>.

It will copy a program (itsutils) to the device and it should ask you for permission to execute - grant execution and let the batch file continue. You should find 2 new files beside the Lokiwiz.bat (lock-backup.bin and cid-unlocked.bin). Move them to a safe place immediately and do not repeat the procedure or call another option!

Be careful to label these files unambigously (best is to append the device's IMEI to the name - get it with *#06# before and do not use the IMEI printed on the label of the device - as restoring a wrong *.bin file to a device will kill the GSM radio access (Message: Data Crashes, please contact your... when trying to connect to the network with a SIM card inserted).

Now the device is prepared to receive custom ROMs.

Let's first put the last available Radio ROM and SPL (Secondary Program Loader) to the device. Go to the directory 3 flash latest Radio and SPL and execute ROMUpdateUtility.exe. After successfull update the device will restart in the old OS, nothing has visibly changed - you could still use the device as it is, all your data are still there.

Now the preparations start to erase the old OS and flash the new one.

Deactivate USB connections for the Active Sync

Switch off the device and disconnect from USB

Press Camera Key and keep it pushed down while connecting the USB cable to the PC - wait until the 3-color screen appears and release the camera key.

Start ttermpro.exe in directory 4 format BINFS 1b00000

Select Serial and Port USB

Press <enter> in the terminal window, you should get prompt CMD>

enter info 2 <enter> you should see something like:

Cmd>info 2
GetDeviceInfo=0x00000002
+ SD Controller init
- SD Controller init
+StorageInit
CMD55 failed
+ SD Controller init
- SD Controller init
+StorageInit
CMD55 failed
HTCSSuperCID ' HTCE
Cmd>

The last line must show HTCSSuperCID ' HTCE.

If you see anything else there (e.g. HTCSVODA0504 „±çdHTCE - which is for an Austrian V1240) the lokiwiz in step 2 above did not work correctly. Still you have not destroyed anything (hopefully) - so to get the old OS start up again, enter ResetDevice <enter> - the device will restart and boot again. Think about what went wrong in the previous steps.

The lokiwiz batch file and the tools behind it are very powerful and can kill the GSM radio access of the device. Be careful with the *.bin files and keep those of different devices clearly apart.

In case you see HTCSSuperCID ' HTCE then you can pass the point of no return (after this the OS and all your data are deleted from the device) and enter at the prompt format BINFS 1b00000 <enter>. (The value 1b00000 depends on the ROM size, so if you use a different ROM, the value may also be different.) After a few seconds the prompt returns and the partition where the OS was stored is cleaned up now. The device will not boot beyond the 3-color screen in this state. You need to flash the new OS in the next step - but before this enter ResetDevice <enter> - the device will restart and return to the 3-color screen.

Terminate the tterm.exe, you will not need it any further.

Re-activate USB connections in Active Sync - you may forget it later.

Enter the directory 5 flash ROM and execute ROMUpdateUtility.exe. The procedure looks the same as in step 3 but takes a little longer. Do not get nervous as the time at 100% extends a few minutes. The device will reboot and bring you to the new OS.

The SD card that shall be used in the device needs to have the NetCF 3.5 files copied to the directory \Windows finally. This is NOT on the device but on the card - you can copy it on the PC while the sd card is in a card-reader or when the device has is mounted, there the path is \Storage Card\Windows

If the device had a SIM-Lock and it rejects your SIM, go to the lokiwiz.bat (again move out all *.bin files) and select "U" for SIM Unlock - again move the bin files in the directory to a safe place (but you should never need them). Mind that the "lock_backup.bin" is just a copy of the current encrypted area in the device. So this file is different after each step you completed before. Worse: if you do not save the FIRST lock-backup.bin you can never go back to this state.

Mind that lokiwiz.bat has worked for me on a Telenor Sim-Locked nordic ROM CID-locked QTEK 8310, so it should work for any other device as well. If you get the dreaded "Data Crashes..." message and your restore of the correct lock-backup.bin did not help either - your last resort is the SIM Unlock service here: http://imei-check.co.uk/c600_unlock.php. It costs you some bucks, but they seem to re-create the encrypted area with the matching IMEI of your device putting it in a SIM-unlocked and CID Unlocked state. Cheaper than buying a new device.

After you have sucessfully flashed your ROM - maybe you try cooking one yourself?