Ah ha, I was thinking it might have been something like that.

If that's the case then it probably has something to do with the key level, or the key options available within CryptKey cracking.

Since we've got to make a trip to hook this up to a client's elevator every time to test things out, you wouldn't be willing to share with me the key level/license options required to crack this properly would you?

Or, would the service menu be available upon cracking the IMS with the correct key options? Meaning, once the IMS is cracked properly, would it be required to be connected to a controller in order to see the service menu, or can it be seen from a disconnected state?

Sorry, there are tons of questions in there.