there's definitely some way to make ghidra tell you the fill offset of the current instruction, but I can't remember it, so I go to Bytes view, select the next 32 bytes or so, and search the EXE in a hex editor:
Bingo, at 0x882B. Change to EB & save it out to BBCRACKD.EXE