I have a need to read out the flash memory of a read-protected PIC16F57 (this is for legal purposes). From my basic research, there appears to be no way of doing this short of decapping it and reading it out with a microscope, or selectively resetting the security bits with UV light by somehow masking out the rest of the die.
However, I've just contacted a company who advertises themselves as capable of dumping the flash off read-protected PICs. They quoted me $100 for a hex file. They claim a 100% success rate, so assuming they're not straight up lying, they can't possibly be decapping the chip, and instead must somehow be resetting the security fuses.
Is this possible? How? Or, like I suspect, are they scammers? Any way I can do what they're doing myself? I have 2 chips with identical firmware, so that gives me a little protection against frying it by dumb mistakes.