Reflection Help (I am smart)

I am Colt on RSBot and I do know java and have written a few scripts. I wrote a runescape loader that loads both signed and unsigned versions of runescape. Now I want to know how to find the correct hooks in the obfuscated client. My theory is that I can load up all the fields in the runescape applet and print their name and value repeatedly and search for the value of the hook I want. Is there a way to do this and is it practical? Or is there a better way. If someone would suggest de-obfuscating the client, I am totally clueless on how one would do that. 400 a's, b's, and pb.ac's are quite confusing.

I also tried using jdb, but it is really annoying because it works almost nothing like the gnu gdb and is very non-standard and the help is disorganized. Is gdb the key to cracking runescape? I also have another theory that I can search for 100 in iHaxGames (It's like cheat engine) so that I can find the address of the run energy field and then trace back through java to find where that memory was declared in the class files.

As you can see, I am either close or totally clueless. Help appreciated.

 

The conventional way to do this would be to deob the current client, as well as a few past clients (deobbers here and here, seeing as you are unable to make yourself one [please note: do not ask any stupid questions at MITB, because you will get flamed]) and find whatever fields you need. Once you've done that, you look at the bytecode and find a pattern that remains constant throught the client and put it in your updater (program that downloads the client, and goes searching for patterns (people normally use the BCEL/ASM for this, but more commonly the BCEL).

Once you've got it, you can either inject your own getters (accessor methods) into the client and have the classes implement your interfaces, or dump the data to an xml file, or something of the like and have your bot load that up.

Also, there are a few resources if you want to get into this type of thing at rs-hacking.com.