I have the wallet files backed up and restored but my password isn't working thus I'm unable to send any funds out. The hacker likely didn't move the funds because he already knows he has full control over them and can move them anytime they want.
Do you have an old backup with a known password? You mentioned you moved to a new hard drive recently, how about the old hard drive?
And by the way hacker taking control and not moving the coins doesn't make any sense at all. The hacker can't possibly be 100% sure that you don't have a copy of the private key.