From fd95127c1c7f4b7e07fc7860cefa2add339da3a7 Mon Sep 17 00:00:00 2001
From: Still / Azaka <dev@stillu.cc>
Date: Sun, 24 Mar 2024 16:36:41 +0800
Subject: [PATCH] Update nursery/populate-syswhispers2-syscall-list.yml

Co-authored-by: Moritz <mr-tz@users.noreply.github.com>
---
 nursery/populate-syswhispers2-syscall-list.yml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/nursery/populate-syswhispers2-syscall-list.yml b/nursery/populate-syswhispers2-syscall-list.yml
index eb4d9443..7d9a25e9 100644
--- a/nursery/populate-syswhispers2-syscall-list.yml
+++ b/nursery/populate-syswhispers2-syscall-list.yml
@@ -34,7 +34,7 @@ rule:
         - instruction:
           - description: check 'Zw'
           - mnemonic: cmp
-          - operand[1].number: 0x775a
+          - operand[1].number: 0x775a = "wZ"
       - and: # this is optional but this should reduce false positives if any at all
         - description: syscall list sorting
         - instruction: