Thanks for responding, everything I've found so far says there is nothing I can do unless I found a vulnerability somewhere and that is highly unlikely.
I already had instructed my customer to contact trustcoin.
I know I can't brute force a private key....even with 16 GPU's on an AWS VM.
but since I had the password I was thinking I could possibly brute force 2fa code.
I'll keep looking, but hopefully trustcoin will come through. He's got 13 bitcoin on this wallet.
Scott