diff --git a/README.md b/README.md index a994363..717d1b0 100644 --- a/README.md +++ b/README.md @@ -1,6 +1,6 @@ # hyperspace -run code in a memory context not associated with a process. The thread schedular loads CR3 with `KTHREAD->ApcState->Process->DirectoryTableBase`. You can make +run code in a address space not associated with a process. The thread schedular loads CR3 with `KTHREAD->ApcState->Process->DirectoryTableBase`. You can make a clone of a KPROCESS structure and change DirectoryTableBase to your new address space. DirectoryTableBase contains a CR3 value just FYI... its not just a physical address... # KTHREAD, KAPC_STATE, KPROCESS