Hi,
As you may know the main protection file is SKCLNET.dll, but both SKCLNET.dll and ME4XL.dll are very sensitive to modification, so you have to create a loader to patch one of them.
There're 2 vital functions:
1- IsExpired
2- IsDemo
Just patch them and make them always return False (OpCode > 162A)
Take a look to this:
Code:
http://kimag.es/share/78452946.png
You can use Reflector and PEBrowsePro for more investigation.