Thanks Brian! That's what I thought. I guess starting fresh is the only option.
The client had someone build it for them few years ago and has not had any maintenance done on it due to various reasons. They don't have access to the person who built it initially either and don't know if the theme was published through WordPress.org. All my searching online did not yield a fresh copy of the theme files or a pointer if they were ever on WordPress.org. The publisher obtheme's site has a message "I am being back!".
Does Wordfence only support open source Wordpress.org themes? If there was a way for Wordfence to partner with popular theme market places like themeforest so you could maintain clean copies of the commercially available themes on these marketplaces also, it would make Wordfence killer!!