How to change a call with Reverse engineering

Question

I have an example program test1.exe that uses an example library test2.dll.

• test.dll contains the functions A() and B() of the same type.
• test1.exe calls A and then exits.

Here I've found the call to A(): (https://i.sstatic.net/5W9Jd.jpg)

Now, if i'm not mistaken, I need to replace 88FDFFFF with the correct offset of B(), but how can I calculate it so that B() will be invoked instead of A()?

Answer 1

If this in an x86 call-relative instruction, the offset value is computed by subtracting the address of the instruction following the call (= call instruction location + 5 bytes), from the address of the target. So, you need to patch the offset to be address(B)-address(callinstruction+5).