Hi everybody. I recently decided to try my first .NET target, fun stuff. Though it seemed far too easy at first (function named get_isactivated ), it soon got harder. The program does some checksumming on the dll that the function I want to patch is in. Is there a way to do a loader on a .NET application? The app appears to have dotfuscator used on the strings (plus, the program (smartly) dies as soon as it detects it's been modified, no error) and such so, it'll be tricky to find the checksumming function, unless there's something I can search for? Any ideas? Thanks in advance.

One possibility is to explore the strong signature feature of .NET files.

You may google for it, but I seem to remember that the ARTeam site had some references to it.

Using modern debugger of your choice, set a READ breakpoint on the memory location that's being changed, then, wait for it to break. It SHOULD be pointing at the checksum function.