Need some pointers with a .Net target

[NoneForce]

Hi,
As you may know the main protection file is SKCLNET.dll, but both SKCLNET.dll and ME4XL.dll are very sensitive to modification, so you have to create a loader to patch one of them.
There're 2 vital functions:
1- IsExpired
2- IsDemo
Just patch them and make them always return False (OpCode > 162A)

Take a look to this:

http://kimag.es/share/78452946.png

You can use Reflector and PEBrowsePro for more investigation.

[Sailor_EDA]

Thanks NoneForce. I was playing around with patching those very same routines and I think I found out the hard way that they are very sensitive to modifications. Just inserting nop's and pushing 0 (16) onto the stack and ret (2A)will cause the Add-In to not even load into excel.

But how did you know that this file was sensitive to modification? What attributes of the file indicate this?

Btw, how do I create a loader to patch these files? Any tutorials that can explain this?