Volatility Script to Extract the Registry Keys where Powelik is Stored