TI-Planet

Actually, CASIO calculators (at least for the ES PLUS and EX models) uses binary coded decimal internally, with 15 decimal digits of precision. (this is written in the instruction manual) However, when a calculation produces result significantly smaller than the operands, the result is assumed to be...

Can it be done with any classwiz calculator?

It's determined that there are about 194 -> 256 KiB ROM, 8KiB RAM and the clock speed is about 1MhZ. So the model can't be ML610901. The CPU is still nX-U8/100 however.

There are 3584 = 0xE00 bytes of RAM, so if there are 14 blocks, it's likely that each block has 256 bytes.

Would it be possible to read the ROM from the hardware? I can't read any data from the image of the ROM blocks.

When a hackstring is executed, the stack is overwritten with the hackstring, which allows for return-oriented programming. However, to write return-oriented programming chains, it's necessary to know the addresses of functions, which involves reading the calculator ROM. I have the ROM of the emulato...

After testing it more carefully, I realize that there is an error in the method. This should fix it. Sorry for the inconvenience. E. ⋅ Get a box. ⋅ Press ← 1 EXE ← ← SUPPR ← . Expected screen content after this step: |⎕ ⋅ Press → , then type 2 0 100 times. (total 200...

Define a "hackstring" as a formula with exactly 200 bytes. Define the method to "execute" a hackstring as method D, but in step 2 replace ⊢-⊢-⊢-...⊢- with that hackstring. Assuming that, executing 121212...12 indeed crashes the calculator, this causes a buffer overflow and corrup...

Actually I expected it to cause some kind of error screen. If it's just a syntax error... I can't check if it's a "normal" syntax error or it's caused by the hackstring. Expected result: ⋅ Get a box: |⎕ ⋅ After step 2: |◀ (or it may be |⎕ on the real calculator, I am no...

Nice! Now can somebody please do this? (this is going to take a bit longer to execute, and I'm not sure what will happen. The expected behavior is that an error screen (possibly without any error message) appears, then the calculator freeze or something, but because the SFRs may be written to, I'm n...

Can you try this: (I've already tested this on the emulator but it may give different result on real calculator. Just to be sure) A. 1. Get a box. Screen should show |⎕ (where | is the cursor) 2. Press → 1 2 3 ← ← ← SUPPR Result on emulator: Screen should show ⎕| B. 1. Get a box. 2. Press → 1 2 1 2 ...