Update README.md

README.md

@@ -19,4 +19,11 @@ pclone_ctx clone_ctx(vdm, util::get_pid("notepad.exe"));
 // clone_handle is a PROCESS_ALL_ACCESS handle which you can
 // use to call VirtualAllocEx, ReadProcessMemory, WriteProcessMemory... etc...
 const auto [clone_pid, clone_handle] = clone_ctx.clone();
-```
+```
+
+# Example
+
+As you can see here I clone notepad using a `RuntimeBroker.exe` as a dummy process to use as the clone. The loaded modules list the ones in notepad.exe and all the virtual memory is the same
+as it is in notepad.exe
+
+<img src="https://imgur.com/XDADPMA.png"/>