• 0

[VB.Net][C#] Replacing some bytes with another bytes in binary file


Question

  • 0

Simple one byte example:

//
// open file.bin (in local directory) for read/write access
//

BinaryWriter bw = new BinaryWriter(
	File.Open(@"file.binFiFileMode.Open, FileAccess.ReadWrite));

//
// write byte (character 'b') at offset 1234
// and close the file
//

bw.BaseStream.Seek(0x1234, SeekOrigin.Begin);
bw.Write(0x62);
bw.Close();

Simple multi-byte example:

//
// not a real patch, this is JMP EIP;p
//

byte[] patch = { 0xEB, 0xFE };

//
// open file.bin (in local directory) for read/write access
//

BinaryWriter bw = new BinaryWriter(
	File.Open(@"file.binFiFileMode.Open, FileAccess.ReadWrite));

//
// write byte (character 'b') at offset 1234
// and close the file
//

bw.BaseStream.Seek(0x1234, SeekOrigin.Begin);
bw.Write(patch);
bw.Close();

7 answers to this question

Recommended Posts

  • 0

ok never mind, i managed to replace the byte with your code, thanks again :)

However it seems that i MUST replace bytes with same length. I can't replace 2 bytes with 7 bytes for example.

Edited by Elagizy
  • 0
  Elagizy said:
ok never mind, i managed to replace the byte with your code, thanks again :)

However it seems that i MUST replace bytes with same length. I can't replace 2 bytes with 7 bytes for example.

No, BinaryWriter cannot "insert" bytes. Most binary files, like executables, cannot change in size without having to alter a bunch of other information (i.e. PE header). Your best bet is to explain what you're trying to do; we'll try to determine what the best solution is.

  • 0

I managed to record LIVE MMS streams, unfortunately after saving streams, it only works on VLC player. One of the issues i'm working on, is to fix ASF header "play_duration" to get the exact duration of the file. But the file will still be playable on VLC player only, but I can now see the file play length and can drag the seek bar.

Some LIVE MMS streams plays well on all media players, so i'm trying to compare asf headers with each other and fill up the gap.

It seems to be working, i use UltraEdit to mess with ASF header and i got some files partially fixed. All i need at the moment is to edit bytes freely programmatically.

But your code also helps me alot, ASF header has some values with fixed length like "packet length" "play duration" ...etc

  • 0
  Elagizy said:
I managed to record LIVE MMS streams, unfortunately after saving streams, it only works on VLC player. One of the issues i'm working on, is to fix ASF header "play_duration" to get the exact duration of the file. But the file will still be playable on VLC player only, but I can now see the file play length and can drag the seek bar.

Some LIVE MMS streams plays well on all media players, so i'm trying to compare asf headers with each other and fill up the gap.

It seems to be working, i use UltraEdit to mess with ASF header and i got some files partially fixed. All i need at the moment is to edit bytes freely programmatically.

But your code also helps me alot, ASF header has some values with fixed length like "packet length" "play duration" ...etc

You should use a bit stream library which will allow you to write and read stuff at a bit level.

http://www.codeproject.com/csharp/bitstream.asp

This should be pretty straight forward.

This topic is now closed to further replies.
  • Recently Browsing   0 members

    • No registered users viewing this page.
  • Posts

    • I disabled the optical camera in device manager.. leaving only the IR. This has fixed the issue for me...but only because I never use the optical camera. After each monthly update re-enable the optical just to see if it's fixed...but nope! It's annoying though how this issue hasn't been acknowledged by Microsoft.
    • Linux is a different kettle of fish to macOS and Windows, if it ran the software I required, I may have looked at it, instead of the Mac, also the Mac is a pretty powerful machine that uses less energy than x86 machines. I never in my widest dreams thought I would ever buy a Mac, the price and restrictions of the hardware, I always liked machines that I could update internally, one reason why I never liked laptops. But here I am, a nice little Mac mini M2 pro. I doubt i will replace it for a long time, if I ever do, it does what I need.
    • 106 years ago! A comic strip from 1919 predicted — eerily and accurately — what would happen if our phones fit into our pockets.  W. K. Haselden’s ‘The Pocket Telephone: When Will it Ring?’ was published in “The Mirror” when barely 1/3rd of American homes even had telephones. (A double irony: most of us are viewing this on our “pocket phones”.)
    • It's a feature, not a bug: Windows Hello face unlock no longer works in the dark by Usama Jawad Windows Hello is a security mechanism offered by Microsoft in compatible Windows PCs that allows customers to use biometric authentication mechanisms such as facial or iris recognition, fingerprint, or a PIN to access their accounts. Although it's a great feature when it works correctly, that is not always the case. Now, Microsoft has changed the way this feature works, and people aren't exactly pleased. As spotted by Windows Central, Windows Hello hasn't been working as people would expect since at least April's Patch Tuesday update. Since then, the mechanism requires both an infrared (IR) sensor and a color webcam to function correctly. Previously, Windows Hello relied on IR sensors to create a 3D facial map, just like the iPhone. IR sensors work quite well in low-light environments, but Microsoft does not allow customers to rely on them anymore due to a patch for a security vulnerability. It is important to note that most webcams don't illuminate the environment on their own and rely on external light. This essentially means that Windows Hello simply doesn't work in low-light environments for many users. In our own testing, Windows Hello seems to be working in low warm light, shown below: However, it now fails to work in an even dimmer environment, such as that with red light: That said, it seems that Microsoft has not implemented the change perfectly. Users have reported that if they disable their webcam through Device Manager, Windows Hello falls back to using IR sensors only and continues to function the way it used to. While that may act as a workaround for users right now, it'll be interesting to see if Microsoft patches this loophole down the line, too; it certainly wouldn't be surprising now that it's more widely known. Source: Windows Central
  • Recent Achievements

    • Week One Done
      patrickft456 earned a badge
      Week One Done
    • One Month Later
      patrickft456 earned a badge
      One Month Later
    • One Month Later
      Jdoe25 earned a badge
      One Month Later
    • Explorer
      Legend20 went up a rank
      Explorer
    • One Month Later
      jezzzy earned a badge
      One Month Later
  • Popular Contributors

    1. 1
      +primortal
      642
    2. 2
      ATLien_0
      278
    3. 3
      +FloatingFatMan
      172
    4. 4
      Michael Scrip
      156
    5. 5
      Steven P.
      132
  • Tell a friend

    Love Neowin? Tell a friend!