I think it's just one of those things that no one has simply done before.

Perhaps there are other ways to get the rom data out of a tms7041; for instance some microcontrollers allow you to read back the rom data if you apply a certain combination of signals to certain pins. Such a thing may be described in a tms704x manual though or in a patent somewhere.

As a workaround it might be possible to reverse engineer the operation, part of that work is already done in the mess source code. Of course, we prefer to work with the real roms.

If someone on the silicium forum with an EXL100 feals adventureous perhaps they can try how far they can get with the I/O CPU commands listed above.