Finding Offsets

[TheOzman]

Hi,

I want to learn how to find offsets. I have a lot of programming experience, but basically 0 reverse engineering. I don't want to be dependent on others, just want to learn how to do this. Tried the search function, but most threads seem outdated. Anyone care to point me in the right direction?

I'm also willing to compensate for the proper help / direction.

[-Ryuk-]

Reverse Engineering doesn't just become old because its a few patches out of date... there are some VERY good books you can purchase or "pick up for free".

Best option is to RE something else to learn like some CRACK ME's

[lolp1]

A little late but I will copy and paste my reply to the same sort of question at another forum

I think you should avoid trying to analyze large commercial applications in things like olydbg when you are first starting to learn about reversing programs. You will have a very hard time learning something by doing that, and will likely just be confused by its complexity and discouraged.

Ideally, you should first learn basic assembly. I personally suggest completing some basic assembly tutorial, and even better, read a book after that about assembly. At the very least, you should know all the basic assembly instructions for x32 and what they do, how the stack works, etc.

At this point I would start to write your own little programs, and then open them up in IDA or olydbg or x64dbg and analyze them. I prefer x64dbg, note it also works for x32 apps. This is a good way to start seeing the flow of what a program is doing looks, since you know what the program is doing before hand.

An example would be (pseudo code):

    int number = 0;
    // other stuff.
    int number = 5;

Doing something like that for example will let you see very clearly the instructions assigning values and modifying them.

[Confucius]

Here is a list of some books other members recommended: Bookthread

[Dante]

Here is a list of some books other members recommended: Bookthread

Thank you Confucius, this helped me GREATLY