# RF-U retail witness (R1/R2): objects from rcheck.py (calibrated retail config), per-arm HRESULT check removed
=== B5-retail (candidate structure) obj/rc_150560.obj verdict=MATCH first_diff=None retail_va=0x504890
    0: 53                       push ebx                       |     0: 53                       push ebx
    1: 56                       push esi                       |     1: 56                       push esi
    2: 8bf1                     mov esi, ecx                   |     2: 8bf1                     mov esi, ecx
    4: e800000000               call 9 ; @rasterizer_xbox_bitm |     4: e8075f0100               call 0x15f10 ; @rasterizer_xbox_bitmap_g
    9: 66894614                 mov word ptr [esi + 0x14], ax  |     9: 66894614                 mov word ptr [esi + 0x14], ax
    d: 8b0d00000000             mov ecx, dword ptr [0] ; _glob |     d: 8b0d10b16700             mov ecx, dword ptr [0x67b110] ; ('_globa
   13: 33db                     xor ebx, ebx                   |    13: 33db                     xor ebx, ebx
   15: 3bcb                     cmp ecx, ebx                   |    15: 3bcb                     cmp ecx, ebx
   17: 0f84a3000000             je 0xc0                        |    17: 0f84a3000000             je 0xc0
   1d: 0fbf4e0a                 movsx ecx, word ptr [esi + 0xa |    1d: 0fbf4e0a                 movsx ecx, word ptr [esi + 0xa]
   21: 2bcb                     sub ecx, ebx                   |    21: 2bcb                     sub ecx, ebx
   23: 7458                     je 0x7d                        |    23: 7458                     je 0x7d
   25: 49                       dec ecx                        |    25: 49                       dec ecx
   26: 7427                     je 0x4f                        |    26: 7427                     je 0x4f
   28: 49                       dec ecx                        |    28: 49                       dec ecx
   29: 7579                     jne 0xa4                       |    29: 7579                     jne 0xa4
   2b: 0fbf560c                 movsx edx, word ptr [esi + 0xc |    2b: 0fbf560c                 movsx edx, word ptr [esi + 0xc]
   2f: 8d4e28                   lea ecx, [esi + 0x28]          |    2f: 8d4e28                   lea ecx, [esi + 0x28]
   32: 51                       push ecx                       |    32: 51                       push ecx
   33: 8b0c9500000000           mov ecx, dword ptr [edx*4] ; _ |    33: 8b0c95e0dd5f00           mov ecx, dword ptr [edx*4 + 0x5fdde0] ; 
   3a: 6a01                     push 1                         |    3a: 6a01                     push 1
   3c: 0fbfd0                   movsx edx, ax                  |    3c: 0fbfd0                   movsx edx, ax
   3f: 0fbf4604                 movsx eax, word ptr [esi + 4]  |    3f: 0fbf4604                 movsx eax, word ptr [esi + 4]
   43: 51                       push ecx                       |    43: 51                       push ecx
   44: 53                       push ebx                       |    44: 53                       push ebx
   45: 42                       inc edx                        |    45: 42                       inc edx
   46: 52                       push edx                       |    46: 52                       push edx
   47: 50                       push eax                       |    47: 50                       push eax
   48: e800000000               call 0x4d ; _D3DDevice_CreateC |    48: e823500800               call 0x85070 ; _D3DDevice_CreateCubeText
   4d: eb55                     jmp 0xa4                       |    4d: eb55                     jmp 0xa4
   4f: 0fbf560c                 movsx edx, word ptr [esi + 0xc |    4f: 0fbf560c                 movsx edx, word ptr [esi + 0xc]
   53: 8d4e28                   lea ecx, [esi + 0x28]          |    53: 8d4e28                   lea ecx, [esi + 0x28]
   56: 51                       push ecx                       |    56: 51                       push ecx
   57: 8b0c9500000000           mov ecx, dword ptr [edx*4] ; _ |    57: 8b0c95e0dd5f00           mov ecx, dword ptr [edx*4 + 0x5fdde0] ; 
   5e: 6a01                     push 1                         |    5e: 6a01                     push 1
   60: 51                       push ecx                       |    60: 51                       push ecx
   61: 0fbf4e06                 movsx ecx, word ptr [esi + 6]  |    61: 0fbf4e06                 movsx ecx, word ptr [esi + 6]
   65: 0fbfd0                   movsx edx, ax                  |    65: 0fbfd0                   movsx edx, ax
   68: 0fbf4608                 movsx eax, word ptr [esi + 8]  |    68: 0fbf4608                 movsx eax, word ptr [esi + 8]
   6c: 53                       push ebx                       |    6c: 53                       push ebx
   6d: 42                       inc edx                        |    6d: 42                       inc edx
   6e: 52                       push edx                       |    6e: 52                       push edx
   6f: 0fbf5604                 movsx edx, word ptr [esi + 4]  |    6f: 0fbf5604                 movsx edx, word ptr [esi + 4]
   73: 50                       push eax                       |    73: 50                       push eax
   74: 51                       push ecx                       |    74: 51                       push ecx
   75: 52                       push edx                       |    75: 52                       push edx
   76: e800000000               call 0x7b ; _D3DDevice_CreateV |    76: e8c54f0800               call 0x85040 ; _D3DDevice_CreateVolumeTe
   7b: eb27                     jmp 0xa4                       |    7b: eb27                     jmp 0xa4
   7d: 0fbf560c                 movsx edx, word ptr [esi + 0xc |    7d: 0fbf560c                 movsx edx, word ptr [esi + 0xc]
   81: 8d4e28                   lea ecx, [esi + 0x28]          |    81: 8d4e28                   lea ecx, [esi + 0x28]
   84: 51                       push ecx                       |    84: 51                       push ecx
   85: 8b0c9500000000           mov ecx, dword ptr [edx*4] ; _ |    85: 8b0c95e0dd5f00           mov ecx, dword ptr [edx*4 + 0x5fdde0] ; 
   8c: 6a01                     push 1                         |    8c: 6a01                     push 1
   8e: 51                       push ecx                       |    8e: 51                       push ecx
   8f: 0fbf4e04                 movsx ecx, word ptr [esi + 4]  |    8f: 0fbf4e04                 movsx ecx, word ptr [esi + 4]
   93: 0fbfd0                   movsx edx, ax                  |    93: 0fbfd0                   movsx edx, ax
   96: 0fbf4606                 movsx eax, word ptr [esi + 6]  |    96: 0fbf4606                 movsx eax, word ptr [esi + 6]
   9a: 53                       push ebx                       |    9a: 53                       push ebx
   9b: 42                       inc edx                        |    9b: 42                       inc edx
   9c: 52                       push edx                       |    9c: 52                       push edx
   9d: 50                       push eax                       |    9d: 50                       push eax
   9e: 51                       push ecx                       |    9e: 51                       push ecx
   9f: e800000000               call 0xa4 ; _D3DDevice_CreateT |    9f: e86c4f0800               call 0x85010 ; _D3DDevice_CreateTexture@
   a4: 395e28                   cmp dword ptr [esi + 0x28], eb |    a4: 395e28                   cmp dword ptr [esi + 0x28], ebx
   a7: 751a                     jne 0xc3                       |    a7: 751a                     jne 0xc3
   a9: 6800000000               push 0 ; ??_C@_0DC@CBFADDNN@?$ |    a9: 6834de5f00               push 0x5fde34 ; ('??_C@_0DC@CBFADDNN@?$C
   ae: 6a02                     push 2                         |    ae: 6a02                     push 2
   b0: 895e28                   mov dword ptr [esi + 0x28], eb |    b0: 895e28                   mov dword ptr [esi + 0x28], ebx
   b3: e800000000               call 0xb8 ; _error             |    b3: e8385cf5ff               call 0xfff55cf0 ; _error
   b8: 83c408                   add esp, 8                     |    b8: 83c408                   add esp, 8
   bb: 5e                       pop esi                        |    bb: 5e                       pop esi
   bc: 8ac3                     mov al, bl                     |    bc: 8ac3                     mov al, bl
   be: 5b                       pop ebx                        |    be: 5b                       pop ebx
   bf: c3                       ret                            |    bf: c3                       ret 
   c0: 895e28                   mov dword ptr [esi + 0x28], eb |    c0: 895e28                   mov dword ptr [esi + 0x28], ebx
   c3: 5e                       pop esi                        |    c3: 5e                       pop esi
   c4: b001                     mov al, 1                      |    c4: b001                     mov al, 1
   c6: 5b                       pop ebx                        |    c6: 5b                       pop ebx
   c7: c3                       ret                            |    c7: c3                       ret 
   c8: 90                       nop                            |    c8: 90                       nop 
   c9: 90                       nop                            |    c9: 90                       nop 
   ca: 90                       nop                            |    ca: 90                       nop 
   cb: 90                       nop                            |    cb: 90                       nop 
   cc: 90                       nop                            |    cc: 90                       nop 
   cd: 90                       nop                            |    cd: 90                       nop 
   ce: 90                       nop                            |    ce: 90                       nop 
   cf: 90                       nop                            |    cf: 90                       nop 
=== HEAD-retail obj/rc_70804.obj verdict=short-image first_diff=None retail_va=0x504890
    0: 51                       push ecx                       |     0: 53                       push ebx
    1: 56                       push esi                       |     1: 56                       push esi
    2: 8bf1                     mov esi, ecx                   |     2: 8bf1                     mov esi, ecx
    4: c644240701               mov byte ptr [esp + 7], 1      |     4: e8075f0100               call 0x15f10 ; @rasterizer_xbox_bitmap_g
    9: e800000000               call 0xe ; @rasterizer_xbox_bi |     9: 66894614                 mov word ptr [esi + 0x14], ax
    e: 66894614                 mov word ptr [esi + 0x14], ax  |     d: 8b0d10b16700             mov ecx, dword ptr [0x67b110] ; ('_globa
   12: 8b0d00000000             mov ecx, dword ptr [0] ; _glob |    13: 33db                     xor ebx, ebx
   18: 85c9                     test ecx, ecx                  |    15: 3bcb                     cmp ecx, ebx
   1a: 0f84b4000000             je 0xd4                        |    17: 0f84a3000000             je 0xc0
   20: 0fbf4e0a                 movsx ecx, word ptr [esi + 0xa |    1d: 0fbf4e0a                 movsx ecx, word ptr [esi + 0xa]
   24: 83e900                   sub ecx, 0                     |    21: 2bcb                     sub ecx, ebx
   27: 745a                     je 0x83                        |    23: 7458                     je 0x7d
   29: 49                       dec ecx                        |    25: 49                       dec ecx
   2a: 7428                     je 0x54                        |    26: 7427                     je 0x4f
   2c: 49                       dec ecx                        |    28: 49                       dec ecx
   2d: 757c                     jne 0xab                       |    29: 7579                     jne 0xa4
   2f: 0fbf560c                 movsx edx, word ptr [esi + 0xc |    2b: 0fbf560c                 movsx edx, word ptr [esi + 0xc]
   33: 8d4e28                   lea ecx, [esi + 0x28]          |    2f: 8d4e28                   lea ecx, [esi + 0x28]
   36: 51                       push ecx                       |    32: 51                       push ecx
   37: 8b0c9500000000           mov ecx, dword ptr [edx*4] ; _ |    33: 8b0c95e0dd5f00           mov ecx, dword ptr [edx*4 + 0x5fdde0] ; 
   3e: 6a01                     push 1                         |    3a: 6a01                     push 1
   40: 0fbfd0                   movsx edx, ax                  |    3c: 0fbfd0                   movsx edx, ax
   43: 0fbf4604                 movsx eax, word ptr [esi + 4]  |    3f: 0fbf4604                 movsx eax, word ptr [esi + 4]
   47: 51                       push ecx                       |    43: 51                       push ecx
   48: 6a00                     push 0                         |    44: 53                       push ebx
   4a: 42                       inc edx                        |    45: 42                       inc edx
   4b: 52                       push edx                       |    46: 52                       push edx
   4c: 50                       push eax                       |    47: 50                       push eax
   4d: e800000000               call 0x52 ; _D3DDevice_CreateC |    48: e823500800               call 0x85070 ; _D3DDevice_CreateCubeText
   52: eb57                     jmp 0xab                       |    4d: eb55                     jmp 0xa4
   54: 0fbf560c                 movsx edx, word ptr [esi + 0xc |    4f: 0fbf560c                 movsx edx, word ptr [esi + 0xc]
   58: 8d4e28                   lea ecx, [esi + 0x28]          |    53: 8d4e28                   lea ecx, [esi + 0x28]
   5b: 51                       push ecx                       |    56: 51                       push ecx
   5c: 8b0c9500000000           mov ecx, dword ptr [edx*4] ; _ |    57: 8b0c95e0dd5f00           mov ecx, dword ptr [edx*4 + 0x5fdde0] ; 
   63: 6a01                     push 1                         |    5e: 6a01                     push 1
   65: 51                       push ecx                       |    60: 51                       push ecx
   66: 0fbf4e06                 movsx ecx, word ptr [esi + 6]  |    61: 0fbf4e06                 movsx ecx, word ptr [esi + 6]
   6a: 0fbfd0                   movsx edx, ax                  |    65: 0fbfd0                   movsx edx, ax
   6d: 0fbf4608                 movsx eax, word ptr [esi + 8]  |    68: 0fbf4608                 movsx eax, word ptr [esi + 8]
   71: 6a00                     push 0                         |    6c: 53                       push ebx
   73: 42                       inc edx                        |    6d: 42                       inc edx
   74: 52                       push edx                       |    6e: 52                       push edx
   75: 0fbf5604                 movsx edx, word ptr [esi + 4]  |    6f: 0fbf5604                 movsx edx, word ptr [esi + 4]
   79: 50                       push eax                       |    73: 50                       push eax
   7a: 51                       push ecx                       |    74: 51                       push ecx
   7b: 52                       push edx                       |    75: 52                       push edx
   7c: e800000000               call 0x81 ; _D3DDevice_CreateV |    76: e8c54f0800               call 0x85040 ; _D3DDevice_CreateVolumeTe
   81: eb28                     jmp 0xab                       |    7b: eb27                     jmp 0xa4
   83: 0fbf560c                 movsx edx, word ptr [esi + 0xc |    7d: 0fbf560c                 movsx edx, word ptr [esi + 0xc]
   87: 8d4e28                   lea ecx, [esi + 0x28]          |    81: 8d4e28                   lea ecx, [esi + 0x28]
   8a: 51                       push ecx                       |    84: 51                       push ecx
   8b: 8b0c9500000000           mov ecx, dword ptr [edx*4] ; _ |    85: 8b0c95e0dd5f00           mov ecx, dword ptr [edx*4 + 0x5fdde0] ; 
   92: 6a01                     push 1                         |    8c: 6a01                     push 1
   94: 51                       push ecx                       |    8e: 51                       push ecx
   95: 0fbf4e04                 movsx ecx, word ptr [esi + 4]  |    8f: 0fbf4e04                 movsx ecx, word ptr [esi + 4]
   99: 0fbfd0                   movsx edx, ax                  |    93: 0fbfd0                   movsx edx, ax
   9c: 0fbf4606                 movsx eax, word ptr [esi + 6]  |    96: 0fbf4606                 movsx eax, word ptr [esi + 6]
   a0: 6a00                     push 0                         |    9a: 53                       push ebx
   a2: 42                       inc edx                        |    9b: 42                       inc edx
   a3: 52                       push edx                       |    9c: 52                       push edx
   a4: 50                       push eax                       |    9d: 50                       push eax
   a5: 51                       push ecx                       |    9e: 51                       push ecx
   a6: e800000000               call 0xab ; _D3DDevice_CreateT |    9f: e86c4f0800               call 0x85010 ; _D3DDevice_CreateTexture@
   ab: 8b4628                   mov eax, dword ptr [esi + 0x28 |    a4: 395e28                   cmp dword ptr [esi + 0x28], ebx
   ae: 85c0                     test eax, eax                  |    a7: 751a                     jne 0xc3
   b0: 751b                     jne 0xcd                       |    a9: 6834de5f00               push 0x5fde34 ; ('??_C@_0DC@CBFADDNN@?$C
   b2: 6800000000               push 0 ; ??_C@_0DC@CBFADDNN@?$ |    ae: 6a02                     push 2
   b7: 6a02                     push 2                         |    b0: 895e28                   mov dword ptr [esi + 0x28], ebx
   b9: c644240f00               mov byte ptr [esp + 0xf], 0    |    b3: e8385cf5ff               call 0xfff55cf0 ; _error
   be: c7462800000000           mov dword ptr [esi + 0x28], 0  |    b8: 83c408                   add esp, 8
   c5: e800000000               call 0xca ; _error             |    bb: 5e                       pop esi
   ca: 83c408                   add esp, 8                     |    bc: 8ac3                     mov al, bl
   cd: 8a442407                 mov al, byte ptr [esp + 7]     |    be: 5b                       pop ebx
   d1: 5e                       pop esi                        |    bf: c3                       ret 
   d2: 59                       pop ecx                        |    c0: 895e28                   mov dword ptr [esi + 0x28], ebx
   d3: c3                       ret                            |    c3: 5e                       pop esi
   d4: c7462800000000           mov dword ptr [esi + 0x28], 0  |    c4: b001                     mov al, 1
   db: b001                     mov al, 1                      |    c6: 5b                       pop ebx
   dd: 5e                       pop esi                        |    c7: c3                       ret 
   de: 59                       pop ecx                        |    c8: 90                       nop 
   df: c3                       ret                            |    c9: 90                       nop 
                                                               |    ca: 90                       nop 
                                                               |    cb: 90                       nop 
                                                               |    cc: 90                       nop 
                                                               |    cd: 90                       nop 
                                                               |    ce: 90                       nop 
                                                               |    cf: 90                       nop 
=== B6-retail obj/rc_62576.obj verdict=MATCH first_diff=None retail_va=0x504890
=== B7-retail obj/rc_152820.obj verdict=short-image first_diff=None retail_va=0x504890
