Yeah - that's good Tony. Just one thing, although it's not that important - is a hacked kernel a complete replacement, or a patch?

I can already guess the answer, I think - if it's going to address 10000, it must be a complete replacement?

Does this mean that kernel code uses absolute addressing throughout?