diff --git a/src/process/ntapi_tt_spawn_native_process.c b/src/process/ntapi_tt_spawn_native_process.c
index 580e645..be1dde0 100644
--- a/src/process/ntapi_tt_spawn_native_process.c
+++ b/src/process/ntapi_tt_spawn_native_process.c
@@ -90,8 +90,8 @@ int32_t __stdcall __ntapi_tt_spawn_native_process(nt_spawn_process_params * spar
 		return NT_STATUS_INTERNAL_ERROR;
 
 	/* hat */
-	hat = (rtctx->hroot && (sparams->argv[0][0] == '/'))
-		? rtctx->hroot
+	hat = (sparams->hroot && (sparams->argv[0][0] == '/'))
+		? sparams->hroot
 		: rtctx->hcwd
 			? rtctx->hcwd
 			: peb->process_params->cwd_handle;