From 7f3e83537ea48715f92daa91a2673a498f260973 Mon Sep 17 00:00:00 2001
From: _xeroxz <xerox@back.engineering>
Date: Fri, 13 Nov 2020 06:55:41 +0000
Subject: [PATCH] Update README.md

---
 README.md | 9 ++++++++-
 1 file changed, 8 insertions(+), 1 deletion(-)

diff --git a/README.md b/README.md
index 514717d..612cbcc 100644
--- a/README.md
+++ b/README.md
@@ -19,4 +19,11 @@ pclone_ctx clone_ctx(vdm, util::get_pid("notepad.exe"));
 // clone_handle is a PROCESS_ALL_ACCESS handle which you can
 // use to call VirtualAllocEx, ReadProcessMemory, WriteProcessMemory... etc...
 const auto [clone_pid, clone_handle] = clone_ctx.clone();
-```
\ No newline at end of file
+```
+
+# Example
+
+As you can see here I clone notepad using a `RuntimeBroker.exe` as a dummy process to use as the clone. The loaded modules list the ones in notepad.exe and all the virtual memory is the same
+as it is in notepad.exe
+
+<img src="https://imgur.com/XDADPMA.png"/>
\ No newline at end of file