That's a start, you can use the passwords that you've tested as "tokens" and add a small number of random characters, typo check, etc.

If you find it hard to set-up a bruteforce hardware/software, try to contact www.walletrecoveryservices.com
Here's its bitcointalk thread: https://bitcointalk.org/index.php?topic=240779.0
The service is popular but it cost a fraction of the recovered amount. (not upfront)