// Trace info for the Excel 2007 bug 
// 65535.5 version = 850*77.1+0.5

// data table for ESI
.text:301101B0  A0 64 38 30 A0 64 38 30  13 68 38 30 BF 66 38 30 
.text:301101C0  BF 66 38 30 2B 67 38 30  28 67 38 30 A0 64 38 30 
.text:301101D0  A0 64 38 30 A0 64 38 30  A0 64 38 30 A0 64 38 30 
.text:301101E0  5B 73 38 30 07 66 38 30  02 77 38 30 A0 64 38 30 
.text:301101F0  A0 64 38 30 A0 64 38 30  A0 64 38 30 E6 69 38 30 
.text:30110200  E3 69 38 30 F2 65 38 30  0F 77 38 30 A0 64 38 30 
.text:30110210  A0 64 38 30 A0 64 38 30  A0 64 38 30 A0 64 38 30 
.text:30110220  A0 64 38 30 A0 64 38 30  A0 64 38 30 A0 64 38 30 
.text:30110230  A0 64 38 30 A0 64 38 30  13 68 38 30 33 67 38 30 
.text:30110240  33 67 38 30 2B 67 38 30  28 67 38 30 A0 64 38 30 
.text:30110250  A0 64 38 30 A0 64 38 30  A0 64 38 30 A0 64 38 30 
.text:30110260  5B 73 38 30 07 66 38 30  02 77 38 30 A0 64 38 30 
.text:30110270  A0 64 38 30 A0 64 38 30  A0 64 38 30 E6 69 38 30 
.text:30110280  E3 69 38 30 F2 65 38 30  0F 77 38 30 A0 64 38 30 
.text:30110290  A0 64 38 30 A0 64 38 30  A0 64 38 30 A0 64 38 30 
.text:301102A0  A0 64 38 30 A0 64 38 30  A0 64 38 30 A0 64 38 30 
.text:301102B0  A0 64 38 30 A0 64 38 30  13 68 38 30 33 67 38 30 
.text:301102C0  33 67 38 30 2B 67 38 30  28 67 38 30 7F 13 7F 1F 



// Divisor table located at text:301102D0
// values are 1,10,100,1000,10000,65535
tbl1[] = {01 00 00 00 0A 00 00 00  64 00 00 00 E8 03 00 00 10 27 00 00 FF FF 00 00 }

.text:301102F0  56 8B F1 74 24 57 68 A0  49 DF 30 8D 7E FC FF 37 
.text:30110300  6A 0C 56 E8 04 45 CE 00  F6 C3 01 74 07 57 E8 1D  
.text:30110310  B2 F0 FF 59 8B C7 5F EB  13 E8 82 46 CE 00 F6 C3 
.text:30110320  01 74 07 56 E8 07 B2 F0  FF 59 8B C6 5E 5B C2 04  
.text:30110330  00 90 90 90 3C 03 11 30  E8 02 11 30 00 00 00 00 
.text:30110340  00 00 00 00 00 00 00 00  28 7B E5 30 0C 3F 10 30 
.text:30110350  33 C0 E9 79 B5 F1 FF 33  F6 E9 31 B4 F1 FF 33 F6 
.text:30110360  E9 BB B7 F1 FF 49 0F 85  52 B2 F1 FF E9 AF B7 F1 


// Divisor table at 301102D0[] = {0xFFFF, 0x2701, 0x3E8, 0x64, 0x10, 0x1}
// in decimal       301102D0[] = { 65535,  10000,  1000,  100,   10,   1}
.text:301102D0  01 00 00 00 0A 00 00 00  64 00 00 00 E8 03 00 00   // 
.text:301102E0  10 27 00 00 FF FF 00 00  53 8A 5C 24 08 F6 C3 02   // these two lines are the relevant table for 850*77.1+1

// table for constants added into value?!
.text:300663B0  00 B9 15 00 00 00 2B CB  8B D8 D3 E8 F6 D9 0F A5
.text:300663C0  D3 D3 E2 8B CA 83 EE 04  3B 86 D0 02 11 30 73 07
.text:300663D0  66 FF 4F 20 83 EE 04 85  C9 0F 84 C4 00 00 00 03
.text:300663E0  8E F7 63 06 30 83 D3 00  0F 82 89 80 0D 00 E9 B0

.text:300663F0  00 00 00 07 24 00 00 49  68 01 00 E1 12 0E 00 CC 
.text:30066400  BC 8C 00 F8 5F 7F 05 B3  BF F9 36 55 8B EC 51 51 // code uses 0x36F9BFB3 = 922 337 203
.text:30066410  56 33 F6 39 75 08 57 0F  84 F1 0A 35 00 83 7D 08

.text:30066420  04 0F 85 A1 09 35 00 56  E8 DE F6 FF FF 85 C0 0F
.text:30066430  85 50 6C 18 00 83 3D 80  71 E5 30 02 0F 84 99 0A
.text:30066440  35 00 39 35 80 B6 E7 30  0F 85 28 6C 18 00 39 35
.text:30066450  5C B6 E7 30 0F 85 2B 6C  18 00 8B 0D 8C D6 EF 30
.text:30066460  A0 56 D6 EF 30 33 FF D1  E9 47 23 CF F6 D8 1B C0
.text:30066470  85 C1 0F 85 0D 6C 18 00  FF 35 C8 CB EF 30 6A 06
.text:30066480  58 E8 C5 21 FD FF 85 C0  0F 85 F7 6B 18 00 E8 9F

.text:300663F0  00 00 00 07 24 00 00 49  68 01 00 E1 12 0E 00 CC 
.text:30066400  BC 8C 00 F8 5F 7F 05 B3  BF F9 36 55 8B EC 51 51 // code uses 0x36F9BFB3 = 922 337 203
.text:30066410  56 33 F6 39 75 08 57 0F  84 F1 0A 35 00 83 7D 08


// table located at .text:300663F7
// code uses 0x36F9BFB3 = 922 337 203
tbl2[] = {49 68 01 00 E1 12 0E 00 CC BC 8C 00 F8 5F 7F 05 B3 BF F9 36 55 8B EC 51 51};

// Last byte of floating value causes add from table to ECX, the offending values are exactly those that overflow.
// Question - why add this constant? Can a change fix anything?
0xFF -> 0xF8000000 + 0x36F9BFB3 = 0x12EF9BFB3
0xFE -> 0xF0000000 + 0x36F9BFB3 = 0x126F9BFB3
0xFD -> 0xE8000000 + 0x36F9BFB3 = 0x11EF9BFB3
0xFC ->	0xE0000000 + 0x36F9BFB3 = 0x116F9BFB3
0xFB -> 0xD8000000 + 0x36F9BFB3 = 0x10EF9BFB3
0xFA -> 0xD0000000 + 0x36F9BFB3 = 0x106F9BFB3
0xF9 ->	0xC8000000 + 0x36F9BFB3 = 0x0FEF9BFB3 // NO CARRY!
0xF8 -> 0xC0000000 + 0x36F9BFB3 = 0x0F6F9BFB3 // NO CARRY!


TempFormat definition
.text:30066344 ; FUNCTION CHUNK AT .text:30066637 SIZE 00000032 BYTES
.text:30066344 ; FUNCTION CHUNK AT .text:30136796 SIZE 0000000B BYTES
.text:30066344 ; FUNCTION CHUNK AT .text:3013B3A6 SIZE 00000019 BYTES
.text:30066344 ; FUNCTION CHUNK AT .text:3013C232 SIZE 0000007D BYTES
.text:30066344 ; FUNCTION CHUNK AT .text:3013CCE3 SIZE 0000000B BYTES
.text:30066344 ; FUNCTION CHUNK AT .text:3013E477 SIZE 0000001F BYTES
.text:30066344 ; FUNCTION CHUNK AT .text:30150A6E SIZE 0000009E BYTES
.text:30066344 ; FUNCTION CHUNK AT .text:301ED076 SIZE 00000016 BYTES
.text:30066344 ; FUNCTION CHUNK AT .text:30218285 SIZE 00000008 BYTES
.text:30066344 ; FUNCTION CHUNK AT .text:30389A54 SIZE 0000004C BYTES
.text:30066344 ; FUNCTION CHUNK AT .text:303B6DC8 SIZE 00000156 BYTES
.text:30066344

// disassembly near the start of the offending function
.text:30066340  5D C2 08 00 C7 47 1E 00  00 00 00 8B 46 04 8B D0
.text:30066350  25 00 00 F0 7F 0F 84 29  E8 0C 00 C1 E8 14 2D FE
.text:30066360  03 00 00 8B D8 69 C0 21  9A 00 00 D1 F8 81 E2 00


// START
CS=1B DS=23 ES=23 FS=3B GS=0 SS=23 EAX=FFFE EBX=FFED061E ECX=F 
EDX=12F4C0 ESI=12F548 EDI=12F9E2 EBP=12F4C4 ESP=12F49C EFL=202  

ESI - points to the floating value V
EDI - points to some data structure


// run for 65535.5 = 850*77.1 + 0.5 - remaining byte value 0x40E FF FE FF FF FF FF FF
ST0=-1.9041136907240089773e-615 ST1= 0.0 ST2= 0.0 ST3= 1.0 ST4=-4.194304e6 ST5= 1.0 ST6= 0.0 ST7= 0.0 CTRL=137F CS=1B DS=23 ES=23 FS=3B GS=0 SS=23 
EAX=FFFE EBX=FFED061E ECX=F EDX=12F4C0 ESI=12F548 EDI=12F9E2 EBP=12F4C4 ESP=12F49C EFL=202  
Format              mov     dword ptr [edi+1Eh], 0                                                                                                                                                                                                                                                              
Format+7            mov     eax, [esi+4]                         EAX=40EFFFEF                                                                                                                                                                                                                                   
Format+A            mov     edx, eax                             EDX=40EFFFEF                                                                                                                                                                                                                                   
Format+C            and     eax, 7FF00000h                       EAX=40E00000 PF=1                                                                                                                                                                                                                              
Format+11           jz      nullsub_33                                                                                                                                                                                                                                                                          
Format+17           shr     eax, 14h                             EAX=40E PF=0 AF=1                                                                                                                                                                                                                              
Format+1A           sub     eax, 3FEh                            EAX=10 AF=0                                                                                                                                                                                                                                    
Format+1F           mov     ebx, eax                             EBX=10                                                                                                                                                                                                                                         
Format+21           imul    eax, 9A21h                           EAX=9A210                                                                                                                                                                                                                                      
Format+27           sar     eax, 1                               EAX=4D108 AF=1                                                                                                                                                                                                                                 
Format+29           and     edx, 80000000h                       EDX=0 PF=1 AF=0 ZF=1                                                                                                                                                                                                                           
Format+2F           add     eax, 40010000h                       EAX=4005D108 PF=0 ZF=0                                                                                                                                                                                                                         
Format+34           and     eax, 0FFFF0000h                      EAX=40050000 PF=1                                                                                                                                                                                                                              
Format+39           or      edx, eax                             EDX=40050000                                                                                                                                                                                                                                   
Format+3B           mov     [edi+1Eh], edx                                                                                                                                                                                                                                                                      
Format+3E           shr     eax, 10h                             EAX=4005 AF=1                                                                                                                                                                                                                                  
Format+41           sub     eax, 4000h                           EAX=5 AF=0                                                                                                                                                                                                                                     
Format+46           or      ebx, ebx                             PF=0                                                                                                                                                                                                                                           
Format+48           jl      loc_3013C232                                                                                                                                                                                                                                                                        
Format+4E           cmp     ebx, 10h                             PF=1 ZF=1                                                                                                                                                                                                                                      
Format+51           jle     short loc_3006639C                                                                                                                                                                                                                                                                  
Format:loc_3006639C push    edi                                  ESP=12F498                                                                                                                                                                                                                                     
Format+59           push    ecx                                  ESP=12F494                                                                                                                                                                                                                                     
Format+5A           mov     edx, [esi]                           EDX=FFFFFFFF                                                                                                                                                                                                                                   
Format+5C           mov     esi, [esi+4]                         ESI=40EFFFEF                                                                                                                                                                                                                                   
Format+5F           xchg    eax, esi                             EAX=40EFFFEF ESI=5                                                                                                                                                                                                                             
Format+60           shl     esi, 2                               ESI=14 AF=1 ZF=0                                                                                                                                                                                                                               
Format+63           and     eax, 0FFFFFh                         EAX=FFFEF PF=0 AF=0                                                                                                                                                                                                                            
Format+68           or      eax, 100000h                         EAX=1FFFEF                                                                                                                                                                                                                                     
Format+6D           mov     ecx, 15h                             ECX=15                                                                                                                                                                                                                                         
Format+72           sub     ecx, ebx                             ECX=5 PF=1                                                                                                                                                                                                                                     
Format+74           mov     ebx, eax                             EBX=1FFFEF                                                                                                                                                                                                                                     
Format+76           shr     eax, cl                              EAX=FFFF AF=1                                                                                                                                                                                                                                  
Format+78           neg     cl                                   ECX=FB CF=1 PF=0 SF=1                                                                                                                                                                                                                          
Format+7A           shld    ebx, edx, cl                         EBX=7FFFFFFF PF=1 SF=0 OF=1                                                                                                                                                                                                                    
Format+7D           shl     edx, cl                              EDX=F8000000 SF=1 OF=0                                                                                                                                                                                                                         
Format+7F           mov     ecx, edx                             ECX=F8000000                                                                                                                                                                                                                                   
Format+81           sub     esi, 4                               ESI=10 CF=0 PF=0 AF=0 SF=0                                                                                                                                                                                                                     
Format+84           cmp     eax, ds:dword_301102D0[esi]                                                                                                                                                                                                                                                         
Format+8A           jnb     short loc_300663D7                                                                                                                                                                                                                                                                  
Format:loc_300663D7 test    ecx, ecx                             PF=1 SF=1                                                                                                                                                                                                                                      
Format+95           jz      loc_300664A3                                                                                                                                                                                                                                                                        
Format+9B           add     ecx, dword ptr ds:byte_300663F7[esi] ECX=2EF9BFB3 CF=1 PF=0 SF=0                                                                                                                                                                                                                    
Format+A1           adc     ebx, 0                               EBX=80000000 CF=0 PF=1 AF=1 SF=1 OF=1                                                                                                                                                                                                          
Format+A4           jb      loc_3013E477                                                                                                                                                                                                                                                                        
Format+AA           jmp     loc_300664A3                                                                                                                                                                                                                                                                        
Format:loc_300664A3 or      esi, esi                             PF=0 AF=0 SF=0 OF=0                                                                                                                                                                                                                            
Format+161          jl      loc_30218285                                                                                                                                                                                                                                                                        
Format+167          jz      short loc_300664B2                                                                                                                                                                                                                                                                  
Format+169          jmp     Digits                                                                                                                                                                                                                                                                        
Format:Digits xor     edx, edx                             EDX=0 PF=1 ZF=1                                                                                                                                                                                                                                
Format:loc_30066639 div     ds:dword_301102D0[esi]               EAX=6 EDX=159F PF=0 AF=1 ZF=0                                                                                                                                                                                                                  
Format+2FB          or      al, 30h                              EAX=36 PF=1 AF=0                                                                                                                                                                                                                               
Format+2FD          mov     [edi], al                                                                                                                                                                                                                                                                           
Format+2FF          mov     byte ptr [edi+1], 0                                                                                                                                                                                                                                                                 
Format+303          add     edi, 2                               EDI=12F9E4                                                                                                                                                                                                                                     
Format+306          or      edx, edx                                                                                                                                                                                                                                                                            
Format+308          jz      loc_300664BD                                                                                                                                                                                                                                                                        
Format+30E          mov     eax, edx                             EAX=159F                                                                                                                                                                                                                                       
Format+310          sub     esi, 4                               ESI=C AF=1                                                                                                                                                                                                                                     
Format+313          ja      short Digits                                                                                                                                                                                                                                                                  
Format:Digits xor     edx, edx                             EDX=0 AF=0 ZF=1                                                                                                                                                                                                                                
Format:loc_30066639 div     ds:dword_301102D0[esi]               EAX=5 EDX=217 PF=0 AF=1 ZF=0                                                                                                                                                                                                                   
Format+2FB          or      al, 30h                              EAX=35 PF=1 AF=0                                                                                                                                                                                                                               
Format+2FD          mov     [edi], al                                                                                                                                                                                                                                                                           
Format+2FF          mov     byte ptr [edi+1], 0                                                                                                                                                                                                                                                                 
Format+303          add     edi, 2                               EDI=12F9E6 PF=0                                                                                                                                                                                                                                
Format+306          or      edx, edx                             PF=1                                                                                                                                                                                                                                           
Format+308          jz      loc_300664BD                                                                                                                                                                                                                                                                        
Format+30E          mov     eax, edx                             EAX=217                                                                                                                                                                                                                                        
Format+310          sub     esi, 4                               ESI=8 PF=0                                                                                                                                                                                                                                     
Format+313          ja      short Digits                                                                                                                                                                                                                                                                  
Format:Digits xor     edx, edx                             EDX=0 PF=1 ZF=1                                                                                                                                                                                                                                
Format:loc_30066639 div     ds:dword_301102D0[esi]               EAX=5 EDX=23 PF=0 AF=1 ZF=0                                                                                                                                                                                                                    
Format+2FB          or      al, 30h                              EAX=35 PF=1 AF=0                                                                                                                                                                                                                               
Format+2FD          mov     [edi], al                                                                                                                                                                                                                                                                           
Format+2FF          mov     byte ptr [edi+1], 0                                                                                                                                                                                                                                                                 
Format+303          add     edi, 2                               EDI=12F9E8                                                                                                                                                                                                                                     
Format+306          or      edx, edx                             PF=0                                                                                                                                                                                                                                           
Format+308          jz      loc_300664BD                                                                                                                                                                                                                                                                        
Format+30E          mov     eax, edx                             EAX=23                                                                                                                                                                                                                                         
Format+310          sub     esi, 4                               ESI=4                                                                                                                                                                                                                                          
Format+313          ja      short Digits                                                                                                                                                                                                                                                                  
Format:Digits xor     edx, edx                             EDX=0 PF=1 ZF=1                                                                                                                                                                                                                                
Format:loc_30066639 div     ds:dword_301102D0[esi]               EAX=3 EDX=5 PF=0 AF=1 ZF=0                                                                                                                                                                                                                     
Format+2FB          or      al, 30h                              EAX=33 PF=1 AF=0                                                                                                                                                                                                                               
Format+2FD          mov     [edi], al                                                                                                                                                                                                                                                                           
Format+2FF          mov     byte ptr [edi+1], 0                                                                                                                                                                                                                                                                 
Format+303          add     edi, 2                               EDI=12F9EA PF=0                                                                                                                                                                                                                                
Format+306          or      edx, edx                             PF=1                                                                                                                                                                                                                                           
Format+308          jz      loc_300664BD                                                                                                                                                                                                                                                                        
Format+30E          mov     eax, edx                             EAX=5                                                                                                                                                                                                                                          
Format+310          sub     esi, 4                               ESI=0 ZF=1                                                                                                                                                                                                                                     
Format+313          ja      short Digits                                                                                                                                                                                                                                                                  
Format+315          test    eax, 0FFh                            ZF=0                                                                                                                                                                                                                                           
Format+31A          jz      loc_300664BD                                                                                                                                                                                                                                                                        
Format+320          jmp     loc_300664B2                                                                                                                                                                                                                                                                        
Format:loc_300664B2 or      al, 30h                              EAX=35                                                                                                                                                                                                                                         
Format+170          mov     [edi], al                                                                                                                                                                                                                                                                           
Format+172          mov     byte ptr [edi+1], 0                                                                                                                                                                                                                                                                 
Format+176          add     edi, 2                               EDI=12F9EC PF=0                                                                                                                                                                                                                                
Format:loc_300664BD mov     eax, ebx                             EAX=80000000                                                                                                                                                                                                                                   
Format+17B          or      eax, ecx                             EAX=AEF9BFB3 SF=1                                                                                                                                                                                                                              
Format+17D          jnz     loc_30150AD8                                                                                                                                                                                                                                                                        
Format:loc_30150AD8 shr     esi, 2                               PF=1 AF=1 ZF=1 SF=0                                                                                                                                                                                                                            
Format+EA797        xchg    ecx, esi                             ECX=0 ESI=2EF9BFB3                                                                                                                                                                                                                             
Format+EA799        xchg    esi, ebx                             EBX=2EF9BFB3 ESI=80000000                                                                                                                                                                                                                      
Format+EA79B        mov     eax, offset unk_300030               EAX=300030                                                                                                                                                                                                                                     
Format+EA7A0        shr     ecx, 1                                                                                                                                                                                                                                                                              
Format+EA7A2        rep stosd                                                                                                                                                                                                                                                                                   
Format+EA7A4        jb      loc_3013CCE3                                                                                                                                                                                                                                                                        
Format:loc_30150AEE pop     ecx                                  ECX=F ESP=12F498                                                                                                                                                                                                                               
Format+EA7AB        pop     edx                                  EDX=12F9E2 ESP=12F49C                                                                                                                                                                                                                          
Format+EA7AC        push    edx                                  ESP=12F498                                                                                                                                                                                                                                     
Format+EA7AD        add     edx, 1Eh                             EDX=12FA00 ZF=0                                                                                                                                                                                                                                
Format+EA7B0        sub     edx, edi                             EDX=14                                                                                                                                                                                                                                         
Format+EA7B2        shr     edx, 1                               EDX=A                                                                                                                                                                                                                                          
Format+EA7B4        cmp     edx, ecx                             CF=1 PF=0 SF=1                                                                                                                                                                                                                                 
Format+EA7B6        jnb     short loc_30150AFE                                                                                                                                                                                                                                                                  
Format+EA7B8        mov     ecx, edx                             ECX=A                                                                                                                                                                                                                                          
Format:loc_30150AFE test    ecx, ecx                             CF=0 PF=1 AF=0 SF=0                                                                                                                                                                                                                            
Format+EA7BC        jz      short loc_30150AA6                                                                                                                                                                                                                                                                  
Format+EA7BE        mov     ebp, 1                               EBP=1                                                                                                                                                                                                                                          
Format+EA7C3        jmp     loc_30150A6E                                                                                                                                                                                                                                                                        
Format:loc_30150A6E push    edi                                  ESP=12F494                                                                                                                                                                                                                                     
Format+EA72B        xor     eax, eax                             EAX=0 ZF=1                                                                                                                                                                                                                                     
Format+EA72D        mov     edi, esi                             EDI=80000000                                                                                                                                                                                                                                   
Format+EA72F        mov     edx, ebx                             EDX=2EF9BFB3                                                                                                                                                                                                                                   
Format+EA731        shld    eax, esi, 3                          EAX=4 PF=0 AF=1 ZF=0                                                                                                                                                                                                                           
Format+EA735        shld    esi, ebx, 3                          ESI=1                                                                                                                                                                                                                                          
Format+EA739        shl     ebx, 3                               EBX=77CDFD98 CF=1 OF=1                                                                                                                                                                                                                         
Format+EA73C        add     ebx, edx                             EBX=A6C7BD4B CF=0 PF=1 AF=0 SF=1                                                                                                                                                                                                               
Format+EA73E        adc     esi, edi                             ESI=80000001 PF=0 OF=0                                                                                                                                                                                                                         
Format+EA740        adc     eax, 0                               SF=0                                                                                                                                                                                                                                           
Format+EA743        add     ebx, edx                             EBX=D5C17CFE SF=1                                                                                                                                                                                                                              
Format+EA745        adc     esi, edi                             ESI=1 CF=1 SF=0 OF=1                                                                                                                                                                                                                           
Format+EA747        adc     eax, 0                               EAX=5 CF=0 PF=1 OF=0                                                                                                                                                                                                                           
Format+EA74A        pop     edi                                  EDI=12F9EC ESP=12F498                                                                                                                                                                                                                          
Format+EA74B        or      ebp, eax                             EBP=5                                                                                                                                                                                                                                          
Format+EA74D        jz      loc_3013B3A6                                                                                                                                                                                                                                                                        
Format+EA753        add     eax, 30h ; '0'                       EAX=35                                                                                                                                                                                                                                         
Format+EA756        mov     [edi], al                                                                                                                                                                                                                                                                           
Format+EA758        mov     byte ptr [edi+1], 0                                                                                                                                                                                                                                                                 
Format+EA75C        add     edi, 2                               EDI=12F9EE                                                                                                                                                                                                                                     
Format+EA75F        dec     ecx                                  ECX=9                                                                                                                                                                                                                                          
Format+EA760        jnz     short loc_30150A6E                                                                                                                                                                                                                                                                  
Format:loc_30150A6E push    edi                                  ESP=12F494                                                                                                                                                                                                                                     
Format+EA72B        xor     eax, eax                             EAX=0 ZF=1                                                                                                                                                                                                                                     
Format+EA72D        mov     edi, esi                             EDI=1                                                                                                                                                                                                                                          
Format+EA72F        mov     edx, ebx                             EDX=D5C17CFE                                                                                                                                                                                                                                   
Format+EA731        shld    eax, esi, 3                          AF=1                                                                                                                                                                                                                                           
Format+EA735        shld    esi, ebx, 3                          ESI=E PF=0 ZF=0                                                                                                                                                                                                                                
Format+EA739        shl     ebx, 3                               EBX=AE0BE7F0 PF=1 SF=1 OF=1                                                                                                                                                                                                                    
Format+EA73C        add     ebx, edx                             EBX=83CD64EE CF=1 AF=0 OF=0                                                                                                                                                                                                                    
Format+EA73E        adc     esi, edi                             ESI=10 CF=0 PF=0 AF=1 SF=0                                                                                                                                                                                                                     
Format+EA740        adc     eax, 0                               PF=1 AF=0 ZF=1                                                                                                                                                                                                                                 
Format+EA743        add     ebx, edx                             EBX=598EE1EC CF=1 PF=0 AF=1 ZF=0 OF=1                                                                                                                                                                                                          
Format+EA745        adc     esi, edi                             ESI=12 CF=0 PF=1 AF=0 OF=0                                                                                                                                                                                                                     
Format+EA747        adc     eax, 0                               ZF=1                                                                                                                                                                                                                                           
Format+EA74A        pop     edi                                  EDI=12F9EE ESP=12F498                                                                                                                                                                                                                          
Format+EA74B        or      ebp, eax                             ZF=0                                                                                                                                                                                                                                           
Format+EA74D        jz      loc_3013B3A6                                                                                                                                                                                                                                                                        
Format+EA753        add     eax, 30h ; '0'                       EAX=30                                                                                                                                                                                                                                         
Format+EA756        mov     [edi], al                                                                                                                                                                                                                                                                           
Format+EA758        mov     byte ptr [edi+1], 0                                                                                                                                                                                                                                                                 
Format+EA75C        add     edi, 2                               EDI=12F9F0 AF=1                                                                                                                                                                                                                                
Format+EA75F        dec     ecx                                  ECX=8 PF=0 AF=0                                                                                                                                                                                                                                
Format+EA760        jnz     short loc_30150A6E                                                                                                                                                                                                                                                                  
Format:loc_30150A6E push    edi                                  ESP=12F494                                                                                                                                                                                                                                     
Format+EA72B        xor     eax, eax                             EAX=0 PF=1 ZF=1                                                                                                                                                                                                                                
Format+EA72D        mov     edi, esi                             EDI=12                                                                                                                                                                                                                                         
Format+EA72F        mov     edx, ebx                             EDX=598EE1EC                                                                                                                                                                                                                                   
Format+EA731        shld    eax, esi, 3                          AF=1                                                                                                                                                                                                                                           
Format+EA735        shld    esi, ebx, 3                          ESI=92 PF=0 ZF=0                                                                                                                                                                                                                               
Format+EA739        shl     ebx, 3                               EBX=CC770F60 PF=1 SF=1 OF=1                                                                                                                                                                                                                    
Format+EA73C        add     ebx, edx                             EBX=2605F14C CF=1 PF=0 AF=0 SF=0 OF=0                                                                                                                                                                                                          
Format+EA73E        adc     esi, edi                             ESI=A5 CF=0 PF=1                                                                                                                                                                                                                               
Format+EA740        adc     eax, 0                               ZF=1                                                                                                                                                                                                                                           
Format+EA743        add     ebx, edx                             EBX=7F94D338 PF=0 AF=1 ZF=0                                                                                                                                                                                                                    
Format+EA745        adc     esi, edi                             ESI=B7 PF=1 AF=0                                                                                                                                                                                                                               
Format+EA747        adc     eax, 0                               ZF=1                                                                                                                                                                                                                                           
Format+EA74A        pop     edi                                  EDI=12F9F0 ESP=12F498                                                                                                                                                                                                                          
Format+EA74B        or      ebp, eax                             ZF=0                                                                                                                                                                                                                                           
Format+EA74D        jz      loc_3013B3A6                                                                                                                                                                                                                                                                        
Format+EA753        add     eax, 30h ; '0'                       EAX=30                                                                                                                                                                                                                                         
Format+EA756        mov     [edi], al                                                                                                                                                                                                                                                                           
Format+EA758        mov     byte ptr [edi+1], 0                                                                                                                                                                                                                                                                 
Format+EA75C        add     edi, 2                               EDI=12F9F2 PF=0                                                                                                                                                                                                                                
Format+EA75F        dec     ecx                                  ECX=7                                                                                                                                                                                                                                          
Format+EA760        jnz     short loc_30150A6E                                                                                                                                                                                                                                                                  
Format:loc_30150A6E push    edi                                  ESP=12F494                                                                                                                                                                                                                                     
Format+EA72B        xor     eax, eax                             EAX=0 PF=1 ZF=1                                                                                                                                                                                                                                
Format+EA72D        mov     edi, esi                             EDI=B7                                                                                                                                                                                                                                         
Format+EA72F        mov     edx, ebx                             EDX=7F94D338                                                                                                                                                                                                                                   
Format+EA731        shld    eax, esi, 3                          AF=1                                                                                                                                                                                                                                           
Format+EA735        shld    esi, ebx, 3                          ESI=5BB ZF=0                                                                                                                                                                                                                                   
Format+EA739        shl     ebx, 3                               EBX=FCA699C0 CF=1 SF=1                                                                                                                                                                                                                         
Format+EA73C        add     ebx, edx                             EBX=7C3B6CF8 PF=0 AF=0 SF=0                                                                                                                                                                                                                    
Format+EA73E        adc     esi, edi                             ESI=673 CF=0 AF=1                                                                                                                                                                                                                              
Format+EA740        adc     eax, 0                               PF=1 AF=0 ZF=1                                                                                                                                                                                                                                 
Format+EA743        add     ebx, edx                             EBX=FBD04030 AF=1 ZF=0 SF=
// end
