Update image uris

Author: wizardy0ga

Readme.md

@@ -14,7 +14,7 @@ FormCrypt is a tool for encrypting strings in your C code. The string will be hi
 ### Technical Info
 FormBook used encrypted buffers known as 'enc_bufs' to hide its strings. These buffers attempted to masquerade as functions by pre-pending a function prologue at the beginning of the buffer. When this data is viewed in a disassembler, a function prologue will appear. At first glance, it will appear to be a function. If looked at closer, the 'function' can quickly turn to garble.
 
-![FormBook Function Prolog](/images/formbook_fake_function_prologue.png)
+![FormBook Function Prolog](https://github.com/wizardy0ga/FormCrypt/blob/master/images/formbook_fake_function_prologue.png)
 ###### Image sourced from Arbor Networks
 
 Further reading about FormBook can be found in this [stormshield](https://www.stormshield.com/news/in-depth-formbook-malware-analysis-obfuscation-and-process-injection/) article or in this article from [arbor networks](https://www.netscout.com/blog/asert/formidable-formbook-form-grabber).
@@ -44,7 +44,7 @@ This is the **NEW_BUFFER** macro. When called, the macro will inject the functio
 In the examples below, the string **HKLM:\SOFTWARE\Microsoft\Windows\CurrentVersion\Run** has been hidden in an encrypted buffer generated with the FormCrypt utility.
 
 ###### x64 Encrypted Buffer Disassembly
-![x64 Demo Buffer](/images/x64_buffer_disasm.png)
+![x64 Demo Buffer](https://github.com/wizardy0ga/FormCrypt/blob/master/images/x64_buffer_disasm.png)
 
 ###### x64 Encrypted Buffer Memory Dump
 ![x64 Buffer Dump (Encrypted)](/images/x64_buffer_encrypted_dump.png)