Cracking Thinstall 2.7X online check

[cjack]

Hi All!
I have succesfully unpacked the latest release of Thinstall (2.736) using a modified version of Fly unpacking script (thank's guy for your nice script!).
Now I want to skip the online license check to use the BUILD button. I'm trying to find how to bypass the dongle check without success.
Any suggestion appreciated! Greetings to all.

well i use this method and sometimes it works,try to backtrace the code,i mean what will happen if you cancel the check it jumps out of the proggy for example,if it does try to set a breakpoint on ExitProcessA or... and backtrace the code to find a check routine.
you can also search for LPT srting,it maybe usefull.

[cjack]

After some days of tracing I have seen that there is a main check routine that try to connect to license servers to get some kind of decryption codes/keys/missing memory location bytes or something like that. If the program cannot get that codes the decryption routine fail to decrypt some part of the program, so it CRASH.
Bypass the online check is not enough because we must get missing codes/keys/bytes.
The main decryption/deobfuscation routine seems to be sub_40E930. This routine is executed also if you are using the dongle to work offline ;-) Main job inside here I think...........