Update README.md

4 years ago · 30a7892f89
parent 3bb1b54c01
commit 30a7892f89
1 changed files with 2 additions and 0 deletions
--- a/README.md
+++ b/README.md
@ -56,5 +56,7 @@ struct beioctl
 };
 ```

+In order to use this ioctl/functionality of bedaisy you need to put a valid return address into this structure. You can do that by sig scanning `lsasrv.dll` with this signature:
+`0f 1f 44 00 ? 8b f0 48 8b 0d ? ? ? ? 49 3b cd` the address of this instruction is what you want to be your return address.