i Forgot my keys?

[Bonehead_1]

Thanks for the help, I hit a couple of curveballs but i have one more hurdle to overcome. The malware uses scheduler to replace anything that is deleted or moved and is then an asset of Trusted installer, and a few other modules.

It was the last step of the process and did not need the OS to fully operate. I went into sage mode and pulled the keys from the old OS and set them aside

I am through all of that, but I had to build the OS manually. Everything went well. It went well, made it to the end. I was very happy. Built the database and exited the tool.

Booted, made it to login, 

Cant pass login. I forgot a file.

One of the most important files in the entire system the registry keys.

It was under the assembler window.

I literally forgot the keys!

This is where it stands now. Everything goes great, after login it's black screen. The registry file is still there, how do I get it in.

the current state is:

The cloud tool was canabalized to build the OS. 

BIOS is fine.

It just sits there waiting for the keys. 

I am open to any suggestions I have the time. My achilles heal is that, I do not have easy access to a second machine.

[WAWood]

@Bonehead_1 

You should know that the registry is NOT a file -- not in the traditional sense.  It is a SET of files known as HIVES, and together, they operate like a database so when you see the different sections of the registry, you are actually seeing the different hives.

If you are asking to retrieve individual keys from an old registry, we have no tools for doing that here.  You would have to go online and see if there is any way you retrieve the individual hives and extract information from them.

[Bonehead_1]

Sorry I misstated it's not the entire registry it's just the Key Registry, sorry.   I think I figured it out. Now let's see if I can get it into words.

I need to open the recovery  tool, and not let it run, but  it's a bootable drive, I just need to prevent it from starting, then I can just drag and drop. Could save hours.

I think I need to open up the tool and remove the exe that starts the decompiling process.? 

[WAWood]

@Bonehead_1 

OK, understand -- but I have no idea how to launch the recovery tool but NOT have it run.  I don't think that is possible.

However, let me suggest an alternative ...

If your PC can not boot into Windows, a way around that is to follow the instructions below to create boot media from Macrium Reflect (MR) that can be used to boot your PC even if the hard drive is not working:
1) Download and install Macrium Reflect (MR) from this link: http://www.macrium.com/reflectfree.aspx
2) Use the option to create a boot USB stick or CD

That will create MR bootable media. Then, you can boot your PC into WinPE using that media.

Have patience, as that can take a while to start and bring up the screen.

Once the screen is there, read this thread about using PE Explorer -- a simple file explorer: https://forum.macrium.com/PrintTopic15803.aspx

If your disk still works, you might be then able to retrieve some files and folders from it.

Good Luck