Bypassing doodad limit with HEX editor

Here's a short video tutorial on how to bypass the doodad limit. I'm pretty sure @sotzaii_shuen was the first person to discover it, then we both did some testing to narrow down what specific offsets corresponds with the active bytes that changes the limits.


This will increase the limits of:
  • Units
  • Destructibles
  • Doodads
  • Items

Unsure whether or not it works with third party compilers.
May be deprecated in the future, if the bytes that corresponds with the values changes.

HEX code to search for:
Code:
40 00 00 00 D0 FB 01 00 D0 FB 01 00 00 08 00 00 
00 06 00 00 E0 10 00 00 60 09 00 00 00 04 00 00 
60 00 00 00 D0 FB 01 00 D0 FB 01 00 00 08 00 00 
00 06 00 00 E0 10 00 00 60 09 00 00 00 04 00 00 
80 00 00 00 D0 FB 01 00 D0 FB 01 00 00 08 00 00 
00 06 00 00 E0 10 00 00 60 09 00 00 00 04 00 00 
A0 00 00 00 D0 FB 01 00 D0 FB 01 00 00 08 00 00 
00 06 00 00 E0 10 00 00 60 09 00 00 00 04 00 00 
C0 00 00 00 D0 FB 01 00 D0 FB 01 00 00 08 00 00 
00 06 00 00 E0 10 00 00 60 09 00 00 00 04 00 00 
E0 00 00 00 D0 FB 01 00 D0 FB 01 00 00 08 00 00 
00 06 00 00 E0 10 00 00 60 09 00 00 00 04 00 00 
00 01 00 00 D0 FB 01 00 D0 FB 01 00 00 08 00 00 
00 06 00 00 E0 10 00 00 60 09 00 00 00 04 00 00

HEX code to replace it with:
Code:
40 00 00 00 FF FF FF 7F FF FF FF 7F FF FF FF 7F 
FF FF FF 7F FF FF FF 7F FF FF FF 7F FF FF FF 7F 
60 00 00 00 FF FF FF 7F FF FF FF 7F FF FF FF 7F 
FF FF FF 7F FF FF FF 7F FF FF FF 7F FF FF FF 7F 
80 00 00 00 FF FF FF 7F FF FF FF 7F FF FF FF 7F 
FF FF FF 7F FF FF FF 7F FF FF FF 7F FF FF FF 7F 
A0 00 00 00 FF FF FF 7F FF FF FF 7F FF FF FF 7F 
FF FF FF 7F FF FF FF 7F FF FF FF 7F FF FF FF 7F 
C0 00 00 00 FF FF FF 7F FF FF FF 7F FF FF FF 7F 
FF FF FF 7F FF FF FF 7F FF FF FF 7F FF FF FF 7F 
E0 00 00 00 FF FF FF 7F FF FF FF 7F FF FF FF 7F 
FF FF FF 7F FF FF FF 7F FF FF FF 7F FF FF FF 7F 
00 01 00 00 FF FF FF 7F FF FF FF 7F FF FF FF 7F 
FF FF FF 7F FF FF FF 7F FF FF FF 7F FF FF FF 7F

Requires a HEX editor, for example HxD.
 
Last edited:
This is much more promising. I'd be careful tho since if they ever change this it might backfire and lock you out of the map untill a new doodad bypass is found.
You won't technically be "locked" out of the map, you just can't save the map unless you reduce the doodad count to 30k.
 
If this was a written tutorial I wish it was slimmed down, I think you could reduce the time by 33% by removing mistakes and information that is ultimately throwaway lines.

That said I don't think you care and we've had a very generous attitude towards video tutorials and I don't feel inclined to start a quality revolution.
 
Did this on 1.29.2 - it's somewhere else (not the 7th. result) and shifted by 8 bytes but WorldEditArt, WorldEditMisc, SkyModels and war3mapImported\ in the decoded text were good orientation point.
 

Attachments

  • Screenshot 2025-07-14 010143.png
    Screenshot 2025-07-14 010143.png
    20.3 KB · Views: 74
Back
Top