Update README.md

master
_xeroxz 4 years ago
parent e4dd94df33
commit 120d9c8168

@ -1,6 +1,6 @@
# hyperspace
run code in a memory context not associated with a process. The thread schedular loads CR3 with `KTHREAD->ApcState->Process->DirectoryTableBase`. You can make
run code in a address space not associated with a process. The thread schedular loads CR3 with `KTHREAD->ApcState->Process->DirectoryTableBase`. You can make a clone of a
KPROCESS structure and change DirectoryTableBase to your new address space. DirectoryTableBase contains a CR3 value just FYI... its not just a physical address...
# KTHREAD, KAPC_STATE, KPROCESS

Loading…
Cancel
Save