Recover data from disabled iPhone with known passcode

Hello,

my friend broke his iPhone 4S digitizer in very unhappy way. He didn't have backup or synced computers and he had cellular data turn off.

I successfully replaced digitizer and turn on the iPhone. Whow! Your iPhone is disabled for 47 years. Okay, so normally after battery replacement iPhone time is flushed and after reboot new time is fetched over NTP via cellular data, synced PC or already signed Wi-Fi. Not working in this case..

So theoretically there are two possible solutions:

1. Somehow fetch or rewrite correct clock's value
2. Mount NAND flash drive, export keys from CPU, merge it with passcode, decrypt data

Any advice or experiences?

Thanks!