Skip to content

ClassWiz series models

Steveyboi edited this page Aug 21, 2023 · 4 revisions

Basic overflow

Basic overflow is possible in ClassWiz models, even in math input mode. It simply requires a model with conversion characters and the SOLVE (EX) or Solver (CW) function available.

  1. Type 𝒙=AAin▸cm.
  2. Do the appropriate actions for your ClassWiz model type:
    • EX: [SHIFT] [CALC], then press [↓] to select A and type ×1099. This sets A to 1×1099. Then press [↑] to select 𝒙 again and [=] [AC] [←].
    • CW: Open the variable menu and set A to 1×1099, then go back, press [EXE] -> 𝒙 -> Execute -> [AC] [EXE].

On linear input mode on EX models, you can also do the basic overflow method with the sum function (if your model has it).

Character converter

Character converters are characters with the hex code 0xFaFb (a and b can be any hex digit). On EX models, they usually appear as jumbled characters that look different on every model. On CW models they're invisible.

When a character is placed next to the character converter and then a 1-byte character is placed in between and deleted (using a 2-byte character doesn't work), the Fb byte is treated as part of the deleted character and gets deleted as well. This allows you to obtain characters that are normally impossible to obtain.

Here's a simple guide to create a a character converter and get an untypable 2-byte character with it:

  1. Do basic overflow in math input mode (for linear input mode you must use the method with the sum function).
  2. Type a 2-byte character (the Ran# character, a constant or a conversion character). Its high byte will be the high byte of the character you want to get. Constants and the Ran# character have high byte FD, while most conversion characters have high byte FE. Some other region-exclusive conversion characters have high byte FA.
  3. Type another 2-byte character. It can be anything you want.
  4. Now press [←] twice then [DEL]. The second 2-byte character you typed will show up.
  5. Repeatedly press [←] to move the cursor to the beginning of the expression, before the first character. Then press [←] one more time to overflow again.
  6. Now type a 2-byte character. Its low byte will be the low byte of the character you want to get.
  7. Now do [←]×2 [→], type a 1-byte character, delete it and [←].

an character

The an character is an untypable character with hex code 0xFD20. It's similar to r on ES and ES PLUS models, as both characters corrupt the stack and cause the CPU to run unintended code.

Clone this wiki locally