{
  "ml": {
    "v": "4",
    "fs": [
      {
        "id": 0,
        "prob": 0.908464252948761,
        "class": 0
      }
    ],
    "prob": 0.90846425,
    "class": 0,
    "version": "v16.16",
    "thresholds": [
      0.9815004,
      0.99404883
    ],
    "analyzed_at": "2026-04-30T05:54:40Z"
  },
  "path": "hypercall.h",
  "raw": {
    "v": "4",
    "fs": [
      {
        "f": "O(Er₂)",
        "id": 0,
        "is": [
          "hypercall1",
          "hypercall4",
          "hypercall4",
          "hypercall2",
          "hypercall2",
          "hypercall4",
          "hypercall1",
          "hypercall2",
          "hypercall2",
          "hypercall1",
          "hypercall2",
          "hypercall1",
          "hypercall4",
          "hypercall2",
          "hypercall2",
          "hypercall4",
          "hypercall2",
          "hypercall2",
          "hypercall3",
          "hypercall2",
          "hypercall3",
          "hypercall5",
          "hypercall2",
          "hypercall3",
          "hypercall3",
          "hypercall2",
          "hypercall2",
          "hypercall2",
          "hypercall2",
          "hypercall3"
        ],
        "ms": {
          "text": {
            "tab_count": 457.0,
            "digit_ratio": 0.03,
            "space_count": 838.0,
            "total_lines": 383.0,
            "char_entropy": 5.33,
            "mixed_indent": true,
            "unique_chars": 83.0,
            "import_density": 7.83,
            "string_density": 0.08,
            "ascii_art_lines": 1.0,
            "avg_line_length": 22.68,
            "max_line_length": 79.0,
            "empty_line_ratio": 0.13,
            "last_line_length": 3.0,
            "most_common_char": "n",
            "whitespace_ratio": 0.19,
            "most_common_ratio": 0.05,
            "identifier_density": 0.94,
            "line_length_stddev": 21.55,
            "normalized_import_count": 1.53,
            "normalized_string_count": 1.58,
            "repeated_char_sequences": 1.0,
            "suspicious_comment_ratio": 0.33,
            "max_inline_whitespace_run": 8.0,
            "normalized_function_count": 1.58,
            "imports_to_functions_ratio": 0.97,
            "strings_to_functions_ratio": 1.0,
            "suspicious_identifier_ratio": 0.04,
            "normalized_unique_identifiers": 15.73,
            "identifiers_to_functions_ratio": 4.35
          },
          "imports": {
            "total": 30.0,
            "unique_modules": 5.0,
            "third_party_count": 30.0,
            "third_party_ratio": 1.0
          },
          "strings": {
            "total": 31.0,
            "avg_length": 4.1,
            "max_length": 21.0,
            "avg_entropy": 1.05,
            "total_bytes": 127.0,
            "entropy_stddev": 1.15
          },
          "comments": {
            "chars": 1582.0,
            "lines": 40.0,
            "total": 3.0,
            "to_code_ratio": 0.12,
            "high_entropy_comments": 1.0
          },
          "functions": {
            "total": 31.0,
            "length_stddev": 2.91,
            "avg_name_length": 60.52,
            "no_params_count": 31.0,
            "avg_length_lines": 7.19,
            "max_length_lines": 20.0,
            "min_length_lines": 6.0,
            "high_entropy_names": 31.0,
            "density_per_100_lines": 8.09,
            "code_in_functions_ratio": 0.58
          },
          "identifiers": {
            "total": 359.0,
            "avg_length": 11.41,
            "max_length": 40.0,
            "min_length": 1.0,
            "avg_entropy": 2.81,
            "reuse_ratio": 0.38,
            "unique_count": 135.0,
            "length_stddev": 7.66,
            "has_digit_ratio": 0.12,
            "sequential_names": 6.0,
            "single_char_count": 1.0,
            "single_char_ratio": 0.01,
            "high_entropy_count": 36.0,
            "high_entropy_ratio": 0.27,
            "all_lowercase_ratio": 0.59,
            "all_uppercase_ratio": 0.05,
            "numeric_suffix_count": 16.0,
            "double_underscore_count": 1.0,
            "underscore_prefix_count": 15.0
          }
        },
        "ss": [
          [
            1488,
            "\u003csys/systm.h\u003e"
          ],
          [
            1511,
            "\u003ccontrib/xen/xen.h\u003e"
          ],
          [
            1540,
            "\u003ccontrib/xen/sched.h\u003e"
          ],
          [
            3876,
            "call *%[call]"
          ],
          [
            3877,
            "call *%[call]"
          ],
          [
            3896,
            "=a"
          ],
          [
            3897,
            "=a"
          ],
          [
            3910,
            "=b"
          ],
          [
            3911,
            "=b"
          ],
          [
            3925,
            "=c"
          ],
          [
            3926,
            "=c"
          ],
          [
            3942,
            "=d"
          ],
          [
            3943,
            "=d"
          ],
          [
            3957,
            "=S"
          ],
          [
            3958,
            "=S"
          ],
          [
            3972,
            "=D"
          ],
          [
            3973,
            "=D"
          ],
          [
            3990,
            "1"
          ],
          [
            3991,
            "1"
          ],
          [
            4008,
            "2"
          ],
          [
            4009,
            "2"
          ],
          [
            4028,
            "3"
          ],
          [
            4029,
            "3"
          ],
          [
            4046,
            "4"
          ],
          [
            4047,
            "4"
          ],
          [
            4066,
            "5"
          ],
          [
            4067,
            "5"
          ],
          [
            4091,
            "a"
          ],
          [
            4092,
            "a"
          ],
          [
            4108,
            "memory"
          ],
          [
            4109,
            "memory"
          ]
        ],
        "sz": 9069,
        "ts": [
          {
            "c": 0.699999988079071,
            "d": "macOS who tool reference",
            "e": [
              "who"
            ],
            "i": "objectives/evasion/kernel-hide/rootkit::macos-who-ref",
            "l": 1
          },
          {
            "c": 0.6000000238418579,
            "d": "Kernel error code return",
            "e": [
              "return -EINVAL;"
            ],
            "i": "objectives/evasion/kernel-hide/lkm/internals::error-code-return",
            "l": 1
          }
        ],
        "sha": "13e90b56ffaeb5bcb82e1dd5a3f7bf43ef6c34b359e09f21632e2efb0e69969b",
        "path": "hypercall.h",
        "type": "c"
      }
    ],
    "tv": "f6eaa"
  }
}