diff --git a/nursery/populate-syswhispers2-syscall-list.yml b/nursery/populate-syswhispers2-syscall-list.yml
index eb4d9443..7d9a25e9 100644
--- a/nursery/populate-syswhispers2-syscall-list.yml
+++ b/nursery/populate-syswhispers2-syscall-list.yml
@@ -34,7 +34,7 @@ rule:
         - instruction:
           - description: check 'Zw'
           - mnemonic: cmp
-          - operand[1].number: 0x775a
+          - operand[1].number: 0x775a = "wZ"
       - and: # this is optional but this should reduce false positives if any at all
         - description: syscall list sorting
         - instruction: