Screw TI. We are allowed to run the code we want on the devices we own. Period.

(to be honest, the CPU type isn't even certain, so we're a long way gone)

There do seem to be some buffer overflow vulns in the document handler, (or at least CRASHHHH bugs) according to hackspire.

Use a linux live cd like this one: http://home.eunet.no/~pnordahl/ntpasswd/

You can copy the reg hives & crack them if you like.

Omnimaga blacklisted? 0.0

Well, you CAN always use an anonymizer/proxy server, like Tor.

If you have the boot code dump, you can create a ROM from an 8xu+the dump.

Yeah, true. I've seen mistakes too... Which is why I'm designing my own disassembler 

You can use wabbitemu/whatever+GraphLink.


<at_own_risk>
In case you need to install stuff at school, breaking into the systems with a linux boot CD+password cracking program is usually pretty easy. I did that once, then "taught" the IT guy how to improve his security, then did it again using an admin account he had left open, which allowed me to copy the new Administrator V-struct, crack the general local admin pass (which "surprisingly" was valid on all computers), etc etc...  Next week I'll dump my new "information" on his desk, by the way, I don't wanna get caught with the password file from the domain controller (this time the guy had set the local password on some PC we had access to to the Domain Admin's password, not very clever).    You're out of luck,though, if the BIOS is passworded and there are no accessible admin accounts.
</at_own_risk>

As a somewhat experienced z80 reverse-engineer, I can assure you that decompiling a project of this size is supermegaf*cking hard. Even if it's assembly. You'll spend more time trying to understand the code than actually coding yourself.

I sometimes have trouble understanding even my own source files, when I haven't touched them for months.