You'd probably have to extract the encryption key (which has to be the same between all controllers and batteries, otherwise it wouldn't work). Depending on th

You'd probably have to extract the encryption key (which has to be the same between all controllers and batteries, otherwise it wouldn't work). Depending on the hardware this can range from needing to attach a debugger to JTAG, to dumping a flash chip, to decapping a microcontroller at the hardest.