diff --git a/README.md b/README.md index 4775ed0..6cf00de 100644 --- a/README.md +++ b/README.md @@ -2,7 +2,6 @@
- @@ -15,7 +14,8 @@ whereas this project is. This project can be used more broadly then physmeme. # Example -In this example VDM syscalls into an inline hook placed on `ntoskrnl.NtShutdownSystem` to call memcpy exported from ntoskrnl.exe. +In this example VDM syscalls into an inline hook placed on `ntoskrnl.NtShutdownSystem` to call memcpy exported from ntoskrnl.exe. The original bytes are restored +directly after the syscall returns. #### Demo Code ```cpp