diff --git a/README.md b/README.md
index f02fb98..ac89561 100644
--- a/README.md
+++ b/README.md
@@ -75,8 +75,7 @@ that point to the `.bss` segment are checked to determine the return value of
`is_licensed`. There are no other obvious references to these locations in
`start.elf`, so memory-breakpoint debugging (**TBD**) is probably needed.
--
-How to patch the latest version of start.elf?
+## How to patch the latest version of start.elf?
in /boot/start.elf and /boot/start_x.elf
search for 47E933363248
after this hex string: