Hashcat with appropriate rules would probably run faster than btcrecover.
In any case, I would highly recommend you contact
https://walletrecoveryservices.com/ and negotiate a deal with them. They are specialists in this field and have had quite a bit of success. It's fairly safe as they only require the "password hash" extracted using bitcoin2john.py... they do not need your wallet.dat, so will not be able to access your coins.
The downside is that they can be quite expensive. However, it's likely to yield better results than someone who doesn't know what they're doing messing about with hashcat, btcrecover and various rulesets/token files
