Update README.md

4 years ago · c13d53aad4
parent cd6342b82a
commit c13d53aad4
1 changed files with 7 additions and 1 deletions
--- a/README.md
+++ b/README.md
@ -92,3 +92,9 @@ BEDaisy checks the IRP's of every single loaded driver. Below is the checks done
 00042981	92.56213379	[GoodEye]MmIsAddressValid Called From: 0xFFFFF804DEFE1116	
 00042982	92.56213379	[GoodEye]     - NonPaged VirtualAddress: 0xFFFFF80499059670	// address of DxgkInternalDeviceIoctl
 ```
+
+# Imports
+
+All of import addresses are stored in the `.data` section of the driver and can easily be changed to hook imported functions.
+
+<img src="https://imgur.com/hafZdDd.png"/>