[Dr!fter]

You have two options to get the function you want. Get a sig to a function that calls the one you want then get the address of the function from there. Or just get more bytes that are not within the function. Option one is better but hardest to do, option 2 risks sig breaking often.