From 120d9c8168754a4b144500dba6ed7207a55f6351 Mon Sep 17 00:00:00 2001 From: _xeroxz Date: Fri, 26 Feb 2021 00:23:27 +0000 Subject: [PATCH] Update README.md --- README.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/README.md b/README.md index a994363..717d1b0 100644 --- a/README.md +++ b/README.md @@ -1,6 +1,6 @@ # hyperspace -run code in a memory context not associated with a process. The thread schedular loads CR3 with `KTHREAD->ApcState->Process->DirectoryTableBase`. You can make +run code in a address space not associated with a process. The thread schedular loads CR3 with `KTHREAD->ApcState->Process->DirectoryTableBase`. You can make a clone of a KPROCESS structure and change DirectoryTableBase to your new address space. DirectoryTableBase contains a CR3 value just FYI... its not just a physical address... # KTHREAD, KAPC_STATE, KPROCESS