// Trace info for the Excel 2007 bug 
// 65537 version = 850*77.1+2

// data table for ESI
.text:301101B0  A0 64 38 30 A0 64 38 30  13 68 38 30 BF 66 38 30 
.text:301101C0  BF 66 38 30 2B 67 38 30  28 67 38 30 A0 64 38 30 
.text:301101D0  A0 64 38 30 A0 64 38 30  A0 64 38 30 A0 64 38 30 
.text:301101E0  5B 73 38 30 07 66 38 30  02 77 38 30 A0 64 38 30 
.text:301101F0  A0 64 38 30 A0 64 38 30  A0 64 38 30 E6 69 38 30 
.text:30110200  E3 69 38 30 F2 65 38 30  0F 77 38 30 A0 64 38 30 
.text:30110210  A0 64 38 30 A0 64 38 30  A0 64 38 30 A0 64 38 30 
.text:30110220  A0 64 38 30 A0 64 38 30  A0 64 38 30 A0 64 38 30 
.text:30110230  A0 64 38 30 A0 64 38 30  13 68 38 30 33 67 38 30 
.text:30110240  33 67 38 30 2B 67 38 30  28 67 38 30 A0 64 38 30 
.text:30110250  A0 64 38 30 A0 64 38 30  A0 64 38 30 A0 64 38 30 
.text:30110260  5B 73 38 30 07 66 38 30  02 77 38 30 A0 64 38 30 
.text:30110270  A0 64 38 30 A0 64 38 30  A0 64 38 30 E6 69 38 30 
.text:30110280  E3 69 38 30 F2 65 38 30  0F 77 38 30 A0 64 38 30 
.text:30110290  A0 64 38 30 A0 64 38 30  A0 64 38 30 A0 64 38 30 
.text:301102A0  A0 64 38 30 A0 64 38 30  A0 64 38 30 A0 64 38 30 
.text:301102B0  A0 64 38 30 A0 64 38 30  13 68 38 30 33 67 38 30 
.text:301102C0  33 67 38 30 2B 67 38 30  28 67 38 30 7F 13 7F 1F 



// Divisor table located at text:301102D0
// values are 1,10,100,1000,10000,65535
tbl1[] = {01 00 00 00 0A 00 00 00  64 00 00 00 E8 03 00 00 10 27 00 00 FF FF 00 00 }

.text:301102F0  56 8B F1 74 24 57 68 A0  49 DF 30 8D 7E FC FF 37 
.text:30110300  6A 0C 56 E8 04 45 CE 00  F6 C3 01 74 07 57 E8 1D  
.text:30110310  B2 F0 FF 59 8B C7 5F EB  13 E8 82 46 CE 00 F6 C3 
.text:30110320  01 74 07 56 E8 07 B2 F0  FF 59 8B C6 5E 5B C2 04  
.text:30110330  00 90 90 90 3C 03 11 30  E8 02 11 30 00 00 00 00 
.text:30110340  00 00 00 00 00 00 00 00  28 7B E5 30 0C 3F 10 30 
.text:30110350  33 C0 E9 79 B5 F1 FF 33  F6 E9 31 B4 F1 FF 33 F6 
.text:30110360  E9 BB B7 F1 FF 49 0F 85  52 B2 F1 FF E9 AF B7 F1 


// Divisor table at 301102D0[] = {0xFFFF, 0x2701, 0x3E8, 0x64, 0x10, 0x1}
// in decimal       301102D0[] = { 65535,  10000,  1000,  100,   10,   1}
.text:301102D0  01 00 00 00 0A 00 00 00  64 00 00 00 E8 03 00 00   // 
.text:301102E0  10 27 00 00 FF FF 00 00  53 8A 5C 24 08 F6 C3 02   // these two lines are the relevant table for 850*77.1+1

// table for constants added into value?!
.text:300663B0  00 B9 15 00 00 00 2B CB  8B D8 D3 E8 F6 D9 0F A5
.text:300663C0  D3 D3 E2 8B CA 83 EE 04  3B 86 D0 02 11 30 73 07
.text:300663D0  66 FF 4F 20 83 EE 04 85  C9 0F 84 C4 00 00 00 03
.text:300663E0  8E F7 63 06 30 83 D3 00  0F 82 89 80 0D 00 E9 B0

.text:300663F0  00 00 00 07 24 00 00 49  68 01 00 E1 12 0E 00 CC 
.text:30066400  BC 8C 00 F8 5F 7F 05 B3  BF F9 36 55 8B EC 51 51 // code uses 0x36F9BFB3 = 922 337 203
.text:30066410  56 33 F6 39 75 08 57 0F  84 F1 0A 35 00 83 7D 08

.text:30066420  04 0F 85 A1 09 35 00 56  E8 DE F6 FF FF 85 C0 0F
.text:30066430  85 50 6C 18 00 83 3D 80  71 E5 30 02 0F 84 99 0A
.text:30066440  35 00 39 35 80 B6 E7 30  0F 85 28 6C 18 00 39 35
.text:30066450  5C B6 E7 30 0F 85 2B 6C  18 00 8B 0D 8C D6 EF 30
.text:30066460  A0 56 D6 EF 30 33 FF D1  E9 47 23 CF F6 D8 1B C0
.text:30066470  85 C1 0F 85 0D 6C 18 00  FF 35 C8 CB EF 30 6A 06
.text:30066480  58 E8 C5 21 FD FF 85 C0  0F 85 F7 6B 18 00 E8 9F

.text:300663F0  00 00 00 07 24 00 00 49  68 01 00 E1 12 0E 00 CC 
.text:30066400  BC 8C 00 F8 5F 7F 05 B3  BF F9 36 55 8B EC 51 51 // code uses 0x36F9BFB3 = 922 337 203
.text:30066410  56 33 F6 39 75 08 57 0F  84 F1 0A 35 00 83 7D 08


// table located at .text:300663F7
// code uses 0x36F9BFB3 = 922 337 203
tbl2[] = {49 68 01 00 E1 12 0E 00 CC BC 8C 00 F8 5F 7F 05 B3 BF F9 36 55 8B EC 51 51};

// Last byte of floating value causes add from table to ECX, the offending values are exactly those that overflow.
// Question - why add this constant? Can a change fix anything?
0xFF -> 0xF8000000 + 0x36F9BFB3 = 0x12EF9BFB3
0xFE -> 0xF0000000 + 0x36F9BFB3 = 0x126F9BFB3
0xFD -> 0xE8000000 + 0x36F9BFB3 = 0x11EF9BFB3
0xFC ->	0xE0000000 + 0x36F9BFB3 = 0x116F9BFB3
0xFB -> 0xD8000000 + 0x36F9BFB3 = 0x10EF9BFB3
0xFA -> 0xD0000000 + 0x36F9BFB3 = 0x106F9BFB3
0xF9 ->	0xC8000000 + 0x36F9BFB3 = 0x0FEF9BFB3 // NO CARRY!
0xF8 -> 0xC0000000 + 0x36F9BFB3 = 0x0F6F9BFB3 // NO CARRY!


TempFormat definition
.text:30066344 ; FUNCTION CHUNK AT .text:30066637 SIZE 00000032 BYTES
.text:30066344 ; FUNCTION CHUNK AT .text:30136796 SIZE 0000000B BYTES
.text:30066344 ; FUNCTION CHUNK AT .text:3013B3A6 SIZE 00000019 BYTES
.text:30066344 ; FUNCTION CHUNK AT .text:3013C232 SIZE 0000007D BYTES
.text:30066344 ; FUNCTION CHUNK AT .text:3013CCE3 SIZE 0000000B BYTES
.text:30066344 ; FUNCTION CHUNK AT .text:3013E477 SIZE 0000001F BYTES
.text:30066344 ; FUNCTION CHUNK AT .text:30150A6E SIZE 0000009E BYTES
.text:30066344 ; FUNCTION CHUNK AT .text:301ED076 SIZE 00000016 BYTES
.text:30066344 ; FUNCTION CHUNK AT .text:30218285 SIZE 00000008 BYTES
.text:30066344 ; FUNCTION CHUNK AT .text:30389A54 SIZE 0000004C BYTES
.text:30066344 ; FUNCTION CHUNK AT .text:303B6DC8 SIZE 00000156 BYTES
.text:30066344

// disassembly near the start of the offending function
.text:30066340  5D C2 08 00 C7 47 1E 00  00 00 00 8B 46 04 8B D0
.text:30066350  25 00 00 F0 7F 0F 84 29  E8 0C 00 C1 E8 14 2D FE
.text:30066360  03 00 00 8B D8 69 C0 21  9A 00 00 D1 F8 81 E2 00


// START
CS=1B DS=23 ES=23 FS=3B GS=0 SS=23 EAX=FFFE EBX=FFED061E ECX=F 
EDX=12F4C0 ESI=12F548 EDI=12F9E2 EBP=12F4C4 ESP=12F49C EFL=202  

ESI - points to the floating value V
EDI - points to some data structure


// 65537 version = 850*77.1+2 
ST0= 0.0 ST1= 0.0 ST2= 0.0 ST3= 1.0 ST4= 1.0 ST5= 1.0 ST6= 0.0 ST7= 1.0 CTRL=137F CS=1B DS=23 ES=23 FS=3B GS=0 SS=23 
EAX=FFFE EBX=FFED061E ECX=F EDX=12F4C0 ESI=12F548 EDI=12F9E2 EBP=12F4C4 ESP=12F49C EFL=202  
Format                mov     dword ptr [edi+1Eh], 0                                          
Format+7              mov     eax, [esi+4]                 EAX=40F00010                       
Format+A              mov     edx, eax                     EDX=40F00010                       
Format+C              and     eax, 7FF00000h               EAX=40F00000 PF=1                  
Format+11             jz      nullsub_33                                                      
Format+17             shr     eax, 14h                     EAX=40F AF=1                       
Format+1A             sub     eax, 3FEh                    EAX=11 AF=0                        
Format+1F             mov     ebx, eax                     EBX=11                             
Format+21             imul    eax, 9A21h                   EAX=A3C31                          
Format+27             sar     eax, 1                       EAX=51E18 CF=1 AF=1                
Format+29             and     edx, 80000000h               EDX=0 CF=0 AF=0 ZF=1               
Format+2F             add     eax, 40010000h               EAX=40061E18 ZF=0                  
Format+34             and     eax, 0FFFF0000h              EAX=40060000                       
Format+39             or      edx, eax                     EDX=40060000                       
Format+3B             mov     [edi+1Eh], edx                                                  
Format+3E             shr     eax, 10h                     EAX=4006 AF=1                      
Format+41             sub     eax, 4000h                   EAX=6 AF=0                         
Format+46             or      ebx, ebx                                                        
Format+48             jl      loc_3013C232                                                    
Format+4E             cmp     ebx, 10h                     PF=0                               
Format+51             jle     short loc_3006639C                                              
Format+53             jmp     loc_3013C232                                                    
Format:loc_3013C232   cmp     ecx, 0Fh                     PF=1 ZF=1                          
Format+D5EF1          jnb     short loc_3013C249                                              
Format:loc_3013C249   push    ecx                          ESP=12F498                         
Format+D5F06          push    edi                          ESP=12F494                         
Format+D5F07          mov     ecx, ebx                     ECX=11                             
Format+D5F09          mov     edi, [esi]                   EDI=0                              
Format+D5F0B          mov     esi, [esi+4]                 ESI=40F00010                       
Format+D5F0E          or      esi, 100000h                 PF=0 ZF=0                          
Format+D5F14          shld    esi, edi, 0Bh                ESI=80008000 CF=1 PF=1 AF=1 SF=1   
Format+D5F18          shl     edi, 0Bh                     CF=0 ZF=1 SF=0                     
Format+D5F1B          neg     eax                          EAX=FFFFFFFA CF=1 ZF=0 SF=1        
Format:loc_3013C261   call    sub_300428C1                 ESP=12F490                         
sub_300428C1              or      eax, eax                     CF=0 AF=0                      
sub_300428C1+2            jz      nullsub_18                                                  
sub_300428C1+8            push    ebp                          ESP=12F48C                     
sub_300428C1+9            mov     ebp, (offset loc_300428D5+3) EBP=300428D8                   
sub_300428C1+E            jns     loc_30042D7A                                                
sub_300428C1:loc_300428D5 mov     ebp, offset loc_30042AC8     EBP=30042AC8                   
sub_300428C1+19           neg     eax                          EAX=6 CF=1 AF=1 SF=0           
sub_300428C1+1B           jmp     loc_30042D7A                                                
sub_300428C1:loc_30042D7A mov     ebx, eax                     EBX=6                          
sub_300428C1+4BB          and     ebx, 0Fh                     CF=0 AF=0                      
sub_300428C1+4BE          jz      loc_30042ED7                                                
sub_300428C1+4C4          push    eax                          ESP=12F488                     
sub_300428C1+4C5          shl     ebx, 1                       EBX=C AF=1                     
sub_300428C1+4C7          lea     ebx, [ebp+ebx*8+0]           EBX=30042B28                   
sub_300428C1+4CB          add     ecx, [ebx+8]                 ECX=FFFFFFFE PF=0 AF=0 SF=1    
sub_300428C1+4CE          push    ecx                          ESP=12F484                     
sub_300428C1+4CF          push    esi                          ESP=12F480                     
sub_300428C1+4D0          mov     eax, [ebx]                   EAX=AF6C69B6                   
sub_300428C1+4D2          mul     edi                          EAX=0 EDX=0                    
sub_300428C1+4D4          add     eax, 0FFFFFFFFh              EAX=FFFFFFFF PF=1              
sub_300428C1+4D7          mov     ecx, edx                     ECX=0                          
sub_300428C1+4D9          adc     dl, 0                        ZF=1 SF=0                      
sub_300428C1+4DC          adc     dl, 0                                                       
sub_300428C1+4DF          mov     eax, esi                     EAX=80008000                   
sub_300428C1+4E1          movzx   esi, dl                      ESI=0                          
sub_300428C1+4E4          mul     dword ptr [ebx]              EAX=34DB0000 EDX=57B68C91 CF=1 OF=1
sub_300428C1+4E6          or      eax, esi                     CF=0 ZF=0 OF=0                 
sub_300428C1+4E8          and     ecx, 0FFFFFF00h              ZF=1                           
sub_300428C1+4EE          add     eax, ecx                     ZF=0                           
sub_300428C1+4F0          adc     edx, 0                       PF=0                           
sub_300428C1+4F3          xchg    eax, edi                     EAX=0 EDI=34DB0000             
sub_300428C1+4F4          mov     ecx, [ebx+4]                 ECX=8637BD05                   
sub_300428C1+4F7          mov     ebx, edx                     EBX=57B68C91                   
sub_300428C1+4F9          mul     ecx                          EDX=0                          
sub_300428C1+4FB          add     edi, eax                     PF=1                           
sub_300428C1+4FD          adc     ebx, edx                     PF=0                           
sub_300428C1+4FF          xchg    edi, ebx                     EBX=34DB0000 EDI=57B68C91      
sub_300428C1+501          pop     eax                          EAX=80008000 ESP=12F484        
sub_300428C1+502          mov     esi, 0                                                      
sub_300428C1+507          adc     esi, 0                       PF=1 ZF=1                      
sub_300428C1+50A          mul     ecx                          EAX=5E828000 EDX=431C219E CF=1 OF=1
sub_300428C1+50C          add     edi, eax                     EDI=B6390C91 CF=0 PF=0 ZF=0 SF=1
sub_300428C1+50E          adc     esi, edx                     ESI=431C219E SF=0 OF=0                                                                                                                                                                                           
sub_300428C1+510          pop     ecx                          ECX=FFFFFFFE ESP=12F488                                                                                                                                                                                          
sub_300428C1+511          js      loc_30042EBF                                                                                                                                                                                                                                  
sub_300428C1+517          shld    esi, edi, 1                  ESI=8638433D AF=1 SF=1 OF=1                                                                                                                                                                                      
sub_300428C1+51B          shld    edi, ebx, 1                  EDI=6C721922 CF=1 PF=1 SF=0                                                                                                                                                                                      
sub_300428C1+51F          shl     ebx, 1                       EBX=69B60000 CF=0 OF=0                                                                                                                                                                                           
sub_300428C1+521          dec     ecx                          ECX=FFFFFFFD PF=0 AF=0 SF=1                                                                                                                                                                                      
sub_300428C1+522          jmp     loc_30042EBF                                                                                                                                                                                                                                  
sub_300428C1:loc_30042EBF bt      edi, 0                                                                                                                                                                                                                                        
sub_300428C1+602          adc     ebx, ebx                     EBX=D36C0000 PF=1 OF=1                                                                                                                                                                                           
sub_300428C1+604          jz      short loc_30042ED6                                                                                                                                                                                                                            
sub_300428C1+606          adc     edi, 0                       SF=0 OF=0                                                                                                                                                                                                        
sub_300428C1+609          adc     esi, 0                       PF=0 SF=1                                                                                                                                                                                                        
sub_300428C1+60C          adc     ecx, 0                                                                                                                                                                                                                                        
sub_300428C1+60F          or      esi, 80000000h                                                                                                                                                                                                                                
sub_300428C1:loc_30042ED6 pop     eax                          EAX=6 ESP=12F48C                                                                                                                                                                                                 
sub_300428C1:loc_30042ED7 add     ebp, 0F0h ; '='              EBP=30042BB8 PF=1 SF=0                                                                                                                                                                                           
sub_300428C1+61C          shr     eax, 4                       EAX=0 AF=1 ZF=1                                                                                                                                                                                                  
sub_300428C1+61F          or      eax, eax                     AF=0                                                                                                                                                                                                             
sub_300428C1+621          jnz     loc_30042D7A                                                                                                                                                                                                                                  
sub_300428C1+627          pop     ebp                          EBP=12F4C4 ESP=12F490                                                                                                                                                                                            
sub_300428C1+628          jmp     short nullsub_18                                                                                                                                                                                                                              
nullsub_18                retn                                 ESP=12F494                                                                                                                                                                                                       
Format+D5F22          test    ecx, ecx                     PF=0 ZF=0 SF=1                                                                                                                                                                                                   
Format+D5F24          jz      short loc_3013C277                                                                                                                                                                                                                            
Format+D5F26          jge     loc_30389A68                                                                                                                                                                                                                                  
Format+D5F2C          neg     ecx                          ECX=3 CF=1 PF=1 AF=1 SF=0                                                                                                                                                                                        
Format+D5F2E          shrd    edi, esi, cl                 EDI=AD8E4324 CF=0 SF=1 OF=1                                                                                                                                                                                      
Format+D5F31          shr     esi, cl                      ESI=10C70867 CF=1 PF=0 SF=0 OF=0                                                                                                                                                                                 
Format:loc_3013C277   cmp     edi, 99999999h               CF=0 PF=1                                                                                                                                                                                                        
Format+D5F39          mov     eax, esi                     EAX=10C70867                                                                                                                                                                                                     
Format+D5F3B          sbb     eax, 19999999h               EAX=F72D6ECE CF=1 PF=0 SF=1                                                                                                                                                                                      
Format+D5F40          mov     eax, 39Ah                    EAX=39A                                                                                                                                                                                                          
Format+D5F45          jb      short loc_3013C290                                                                                                                                                                                                                            
Format:loc_3013C290   add     edi, eax                     EDI=AD8E46BE CF=0 PF=1 AF=0                                                                                                                                                                                      
Format+D5F4E          adc     esi, 0                       PF=0 SF=0                                                                                                                                                                                                        
Format+D5F51          mov     ebx, edi                     EBX=AD8E46BE                                                                                                                                                                                                     
Format+D5F53          pop     edi                          EDI=12F9E2 ESP=12F498                                                                                                                                                                                            
Format+D5F54          jb      loc_30389A78                                                                                                                                                                                                                                  
Format:loc_3013C29E   pop     ecx                          ECX=F ESP=12F49C                                                                                                                                                                                                 
Format+D5F5B          push    edi                          ESP=12F498                                                                                                                                                                                                       
Format+D5F5C          test    ecx, ecx                     PF=1                                                                                                                                                                                                             
Format+D5F5E          jz      loc_30150AA6                                                                                                                                                                                                                                  
Format+D5F64          xor     ebp, ebp                     EBP=0 ZF=1                                                                                                                                                                                                       
Format+D5F66          jmp     loc_30150A6E                                                                                                                                                                                                                                  
Format:loc_30150A6E   push    edi                          ESP=12F494                                                                                                                                                                                                       
Format+EA72B          xor     eax, eax                     EAX=0                                                                                                                                                                                                            
Format+EA72D          mov     edi, esi                     EDI=10C70867                                                                                                                                                                                                     
Format+EA72F          mov     edx, ebx                     EDX=AD8E46BE                                                                                                                                                                                                     
Format+EA731          shld    eax, esi, 3                  AF=1                                                                                                                                                                                                             
Format+EA735          shld    esi, ebx, 3                  ESI=8638433D PF=0 ZF=0 SF=1 OF=1                                                                                                                                                                                 
Format+EA739          shl     ebx, 3                       EBX=6C7235F0 CF=1 PF=1 SF=0                                                                                                                                                                                      
Format+EA73C          add     ebx, edx                     EBX=1A007CAE PF=0 AF=0 OF=0                                                                                                                                                                                      
Format+EA73E          adc     esi, edi                     ESI=96FF4BA5 CF=0 PF=1 AF=1 SF=1                                                                                                                                                                                 
Format+EA740          adc     eax, 0                       AF=0 ZF=1 SF=0                                                                                                                                                                                                   
Format+EA743          add     ebx, edx                     EBX=C78EC36C AF=1 ZF=0 SF=1                                                                                                                                                                                      
Format+EA745          adc     esi, edi                     ESI=A7C6540C AF=0                                                                                                                                                                                                
Format+EA747          adc     eax, 0                       ZF=1 SF=0                                                                                                                                                                                                        
Format+EA74A          pop     edi                          EDI=12F9E2 ESP=12F498                                                                                                                                                                                            
Format+EA74B          or      ebp, eax                                                                                                                                                                                                                                      
Format+EA74D          jz      loc_3013B3A6                                                                                                                                                                                                                                  
Format:loc_3013B3A6   dec     word ptr [edi+20h]           ZF=0                                                                                                                                                                                                             
Format+D5066          cmp     ecx, 0Fh                     ZF=1                                                                                                                                                                                                             
Format+D5069          jz      loc_30150A6E                                                                                                                                                                                                                                  
Format:loc_30150A6E   push    edi                          ESP=12F494                                                                                                                                                                                                       
Format+EA72B          xor     eax, eax                                                                                                                                                                                                                                      
Format+EA72D          mov     edi, esi                     EDI=A7C6540C                                                                                                                                                                                                     
Format+EA72F          mov     edx, ebx                     EDX=C78EC36C                                                                                                                                                                                                     
Format+EA731          shld    eax, esi, 3                  EAX=5 AF=1 ZF=0                                                                                                                                                                                                  
Format+EA735          shld    esi, ebx, 3                  ESI=3E32A066 CF=1 OF=1                                                                                                                                                                                           
Format+EA739          shl     ebx, 3                       EBX=3C761B60 CF=0 OF=0                                                                                                                                                                                           
Format+EA73C          add     ebx, edx                     EBX=404DECC CF=1 AF=0                                                                                                                                                                                            
Format+EA73E          adc     esi, edi                     ESI=E5F8F473 CF=0 PF=0 AF=1 SF=1                                                                                                                                                                                 
Format+EA740          adc     eax, 0                       PF=1 AF=0 SF=0                                                                                                                                                                                                   
Format+EA743          add     ebx, edx                     EBX=CB93A238 PF=0 AF=1 SF=1                                                                                                                                                                                      
Format+EA745          adc     esi, edi                     ESI=8DBF487F CF=1 AF=0                                                                                                                                                                                           
Format+EA747          adc     eax, 0                       EAX=6 CF=0 PF=1 SF=0                                                                                                                                                                                             
Format+EA74A          pop     edi                          EDI=12F9E2 ESP=12F498                                                                                                                                                                                            
Format+EA74B          or      ebp, eax                     EBP=6                                                                                                                                                                                                            
Format+EA74D          jz      loc_3013B3A6                                                                                                                                                                                                                                  
Format+EA753          add     eax, 30h ; '0'               EAX=36                                                                                                                                                                                                           
Format+EA756          mov     [edi], al                                                                                                                                                                                                                                     
Format+EA758          mov     byte ptr [edi+1], 0                                                                                                                                                                                                                           
Format+EA75C          add     edi, 2                       EDI=12F9E4                                                                                                                                                                                                       
Format+EA75F          dec     ecx                          ECX=E PF=0                                                                                                                                                                                                       
Format+EA760          jnz     short loc_30150A6E                                                                                                                                                                                                                            
Format:loc_30150A6E   push    edi                          ESP=12F494                                                                                                                                                                                                       
Format+EA72B          xor     eax, eax                     EAX=0 PF=1 ZF=1                                                                                                                                                                                                  
Format+EA72D          mov     edi, esi                     EDI=8DBF487F                                                                                                                                                                                                     
Format+EA72F          mov     edx, ebx                     EDX=CB93A238                                                                                                                                                                                                     
Format+EA731          shld    eax, esi, 3                  EAX=4 PF=0 AF=1 ZF=0                                                                                                                                                                                             
Format+EA735          shld    esi, ebx, 3                  ESI=6DFA43FE                                                                                                                                                                                                     
Format+EA739          shl     ebx, 3                       EBX=5C9D11C0 PF=1                                                                                                                                                                                                
Format+EA73C          add     ebx, edx                     EBX=2830B3F8 CF=1 PF=0 AF=0                                                                                                                                                                                      
Format+EA73E          adc     esi, edi                     ESI=FBB98C7E CF=0 PF=1 AF=1 SF=1                                                                                                                                                                                 
Format+EA740          adc     eax, 0                       PF=0 AF=0 SF=0                                                                                                                                                                                                   
Format+EA743          add     ebx, edx                     EBX=F3C45630 PF=1 AF=1 SF=1                                                                                                                                                                                      
Format+EA745          adc     esi, edi                     ESI=8978D4FD CF=1 PF=0                                                                                                                                                                                           
Format+EA747          adc     eax, 0                       EAX=5 CF=0 PF=1 AF=0 SF=0                                                                                                                                                                                        
Format+EA74A          pop     edi                          EDI=12F9E4 ESP=12F498                                                                                                                                                                                            
Format+EA74B          or      ebp, eax                     EBP=7 PF=0                                                                                                                                                                                                       
Format+EA74D          jz      loc_3013B3A6                                                                                                                                                                                                                                  
Format+EA753          add     eax, 30h ; '0'               EAX=35 PF=1                                                                                                                                                                                                      
Format+EA756          mov     [edi], al                                                                                                                                                                                                                                     
Format+EA758          mov     byte ptr [edi+1], 0                                                                                                                                                                                                                           
Format+EA75C          add     edi, 2                       EDI=12F9E6 PF=0                                                                                                                                                                                                  
Format+EA75F          dec     ecx                          ECX=D                                                                                                                                                                                                            
Format+EA760          jnz     short loc_30150A6E                                                                                                                                                                                                                            
Format:loc_30150A6E   push    edi                          ESP=12F494                                                                                                                                                                                                       
Format+EA72B          xor     eax, eax                     EAX=0 PF=1 ZF=1                                                                                                                                                                                                  
Format+EA72D          mov     edi, esi                     EDI=8978D4FD                                                                                                                                                                                                     
Format+EA72F          mov     edx, ebx                     EDX=F3C45630                                                                                                                                                                                                     
Format+EA731          shld    eax, esi, 3                  EAX=4 PF=0 AF=1 ZF=0                                                                                                                                                                                             
Format+EA735          shld    esi, ebx, 3                  ESI=4BC6A7EF                                                                                                                                                                                                     
Format+EA739          shl     ebx, 3                       EBX=9E22B180 CF=1 SF=1                                                                                                                                                                                           
Format+EA73C          add     ebx, edx                     EBX=91E707B0 AF=0                                                                                                                                                                                                
Format+EA73E          adc     esi, edi                     ESI=D53F7CED CF=0 PF=1 AF=1                                                                                                                                                                                      
Format+EA740          adc     eax, 0                       PF=0 AF=0 SF=0                                                                                                                                                                                                   
Format+EA743          add     ebx, edx                     EBX=85AB5DE0 CF=1 SF=1                                                                                                                                                                                           
Format+EA745          adc     esi, edi                     ESI=5EB851EB PF=1 AF=1 SF=0 OF=1                                                                                                                                                                                 
Format+EA747          adc     eax, 0                       EAX=5 CF=0 AF=0 OF=0                                                                                                                                                                                             
Format+EA74A          pop     edi                          EDI=12F9E6 ESP=12F498                                                                                                                                                                                            
Format+EA74B          or      ebp, eax                     PF=0                                                                                                                                                                                                             
Format+EA74D          jz      loc_3013B3A6                                                                                                                                                                                                                                  
Format+EA753          add     eax, 30h ; '0'               EAX=35 PF=1                                                                                                                                                                                                      
Format+EA756          mov     [edi], al                                                                                                                                                                                                                                     
Format+EA758          mov     byte ptr [edi+1], 0                                                                                                                                                                                                                           
Format+EA75C          add     edi, 2                       EDI=12F9E8                                                                                                                                                                                                       
Format+EA75F          dec     ecx                          ECX=C                                                                                                                                                                                                            
Format+EA760          jnz     short loc_30150A6E                                                                                                                                                                                                                            
Format:loc_30150A6E   push    edi                          ESP=12F494                                                                                                                                                                                                       
Format+EA72B          xor     eax, eax                     EAX=0 ZF=1                                                                                                                                                                                                       
Format+EA72D          mov     edi, esi                     EDI=5EB851EB                                                                                                                                                                                                     
Format+EA72F          mov     edx, ebx                     EDX=85AB5DE0                                                                                                                                                                                                     
Format+EA731          shld    eax, esi, 3                  EAX=2 PF=0 AF=1 ZF=0                                                                                                                                                                                             
Format+EA735          shld    esi, ebx, 3                  ESI=F5C28F5C PF=1 SF=1 OF=1                                                                                                                                                                                      
Format+EA739          shl     ebx, 3                       EBX=2D5AEF00 SF=0 OF=0                                                                                                                                                                                           
Format+EA73C          add     ebx, edx                     EBX=B3064CE0 PF=0 AF=0 SF=1                                                                                                                                                                                      
Format+EA73E          adc     esi, edi                     ESI=547AE147 CF=1 PF=1 AF=1 SF=0                                                                                                                                                                                 
Format+EA740          adc     eax, 0                       EAX=3 CF=0 AF=0                                                                                                                                                                                                  
Format+EA743          add     ebx, edx                     EBX=38B1AAC0 CF=1 OF=1                                                                                                                                                                                           
Format+EA745          adc     esi, edi                     ESI=B3333333 CF=0 AF=1 SF=1                                                                                                                                                                                      
Format+EA747          adc     eax, 0                       AF=0 SF=0 OF=0                                                                                                                                                                                                   
Format+EA74A          pop     edi                          EDI=12F9E8 ESP=12F498                                                                                                                                                                                            
Format+EA74B          or      ebp, eax                     PF=0                                                                                                                                                                                                             
Format+EA74D          jz      loc_3013B3A6                                                                                                                                                                                                                                  
Format+EA753          add     eax, 30h ; '0'               EAX=33 PF=1                                                                                                                                                                                                      
Format+EA756          mov     [edi], al                                                                                                                                                                                                                                     
Format+EA758          mov     byte ptr [edi+1], 0                                                                                                                                                                                                                           
Format+EA75C          add     edi, 2                       EDI=12F9EA PF=0  
// ??? rest?
   
// end
