Run Hashcat with a dictionary attack. Command: hashcat -m 17800 rockwell.hash rockwell_words.txt (Note: Mode 17800 is for Rockwell’s legacy hash algorithm)
Before searching for dubious software, consider these legitimate recovery steps: rslogix 5000 source protection decryption tool
A standard user can see the logic execute. They can see inputs becoming outputs. They can force bits. They just cannot see how the ladder is drawn or change the rungs. Run Hashcat with a dictionary attack