-
@@ -15,7 +14,8 @@ whereas this project is. This project can be used more broadly then physmeme.
# Example
-In this example VDM syscalls into an inline hook placed on `ntoskrnl.NtShutdownSystem` to call memcpy exported from ntoskrnl.exe.
+In this example VDM syscalls into an inline hook placed on `ntoskrnl.NtShutdownSystem` to call memcpy exported from ntoskrnl.exe. The original bytes are restored
+directly after the syscall returns.
#### Demo Code
```cpp