1. 004A6089   3D 0F270000    CMP EAX,270F
   
2.    004A608E   7E 0C                     JLE SHORT Ebenezer.004A609C
   
3.    004A6090   C645 0B 04           MOV BYTE PTR SS:[EBP+B],4
   
4.    004A6094   E9 5A0F0000         JMP Ebenezer.004A6FF3

复制代码

Thats the important part. As you can see, there it compares the eax register with 270F (where 270F is 9999 in dec) then if its lower or equal it jumps to 0x004A609C where it does all the npc - user / trade stuff. However, if its greater it jmps to 0x004A7FF3 where it sends the trade packet "21" with a sub-opcode of "04" which is translated to "hey, either u r full or u exceded the limit of countablei items u can carry so bb"

Simply change 270F. Ie, if u wanna change the limit to "3000" then simply change it to "0BB8".

You can either change it with ollydbg or simply open ebe with ur favorite hex editor & go to 0x000A608A

1. 004A6089   3D 0F270000    CMP EAX,270F
   
2.    004A608E   7E 0C                     JLE SHORT Ebenezer.004A609C
   
3.    004A6090   C645 0B 04           MOV BYTE PTR SS:[EBP+B],4
   
4.    004A6094   E9 5A0F0000         JMP Ebenezer.004A6FF3

复制代码

Thats the important part. As you can see, there it compares the eax register with 270F (where 270F is 9999 in dec) then if its lower or equal it jumps to 0x004A609C where it does all the npc - user / trade stuff. However, if its greater it jmps to 0x004A7FF3 where it sends the trade packet "21" with a sub-opcode of "04" which is translated to "hey, either u r full or u exceded the limit of countablei items u can carry so bb"

Simply change 270F. Ie, if u wanna change the limit to "3000" then simply change it to "0BB8".

You can either change it with ollydbg or simply open ebe with ur favorite hex editor & go to 0x000A608A