Normally you can do ME7.x in bootmode, my first idea would be mpps or old byteshooter...
And after using google i could find a russian site where you can see it´s a common PSOP44 inside which is pretty easy to desolder. Seems PCMflash can write these ecu too but not read.
I've tried mpps, not working
Probbly i'll desolder the EPROM and read with a friends tool that can read that 44pin eprom.
I've read that HPtuners with MPVI2 can do it on OBD2 port, never tested before...