First you need to ask them to remove the 2FA (from support)
Second click on forget ID and ask them to send you wallet ID. (click on send my wallet ID on login page) or here: https://login.blockchain.com/#/reminder
Third you use the script in btcrecover called download-blockchain-wallet using the ID they mail you, you might need to confirm with email.
Then once you have the wallet.aes.json you can use John the ripper to extract the hash and then use software like hashcat to bruteforce it
if you remember part of the password. if you dont remember it, hire someone to do it for you.
Good luck!
/KX
I tried this and it works, thank you