外挂辅助技术研究-打开指定NPC对话

1、打开指定NPC对话功能
    

DWORD GetNpcObjForName(char* szpNpcName);
DWORD OpenNpcTalkForName(char* szpNpcName);

//获取指定NPC对象

push 0
push 0
push 0x401
mov ecx,2DF25598 //NPC对象地址
mov eax,[ecx]
mov eax,[eax+4]  //打开NPC，测试通过
call eax

push 3
mov ecx,0XF598C0 
mov ecx,[ecx]
mov ecx,[ecx+2c4]
mov ecx,[ecx+310]
mov ecx,[ecx+4]
mov eax,0x0735400
call eax //打开仓库界面

push 3
mov ecx,BaseF1_F10ArgEcx
mov ecx,[ecx]
mov ecx,[ecx+0x2c4]
mov ecx,[ecx+0x310]
mov ecx,[ecx+0x4]
mov eax,baseCall_OpenDepot 
call eax //打开仓库界面

BOOL  TRoleObj::SelNpcForName(char*szpNpcName)
{
    for (int i=0;i<100;i++)
    {
        if (g_tMosterList.GetData()->tMonlist.szpName=NULL)

        {

            continue;

        }

        if (strcmp(g_tMosterList.GetData()->tMonlist.szpName,szpNpcName)==0)

        {

            SelObj(g_tMosterList.tMonlist.ndIndexForAllObjList);

            return TRUE;

        }

    }

    return FALSE;

}

BOOL TMonsterList::OpenNpcTalkForName(char* szpNpcName)

{

    DWORD ndObj=GetNpcObjForName(szpNpcName);

    if (ndObj==NULL)

    {

        return FALSE;

    }

    

    __try

    {

        g_tRoleobj.GetData()->SelNpcForName(szpNpcName);

        __asm

        {

            push 0

            push 0

            push 0x401

            mov ecx,ndObj //NPC对象地址

            mov eax,[ecx]

            mov eax,[eax+4]  //打开NPC，测试通过

            call eax

        }

    }__except(1)

    {

        DbgPrintf_Mine("BOOL TMonsterList::OpenNpcTalkForName(char* szpNpcName) \r\n");

        return FALSE;

    }

    return TRUE;

}