And this vendor 64 bits for practicing that is making me crazy? I don´t need the seeds, i want to know how to fish them?
Thanks so much
Same method as POST#9
MLM seeds are {0x990DE24E, 0x38A1C965};
I didn´t success with MLM.exe 64 bits, and i don´t know why. I think my vendor didn´t do anything, becuase it doesn´t start. Could you show me how you find them.
Thanks kjms
Well they ( Mathworks) are using LONG sign, so ECC will still need to be patched regardless of seed recovery.
To recover the MLM seeds you can even use the "easy" method.. ( Still works for some daemons)
Search for constant 3D4DA1D6 and break point each entry .. ( look @ stack or RSP location )
Seeds are out in the open
1st break = seed one, 2nd break = seed 2 ... it is a simple as it gets.
x64dbg command line =
"C:\Flexlm\Matlab\MLM.exe" -t PCNAME 4 -c c:\flexlm\dummy.dat ( Important that it is called *.dat)
Use whatever paths you need .. but MLM I've found that it needs to be .dat ( not .lic) ...
Create a fake license with following :
SERVER Dune ANY
VENDOR MLM
USE_SERVER
FEATURE Test MLM 99 15-jan-2018 1 1234567890ab \
Bookmarks