windows registry hive extraction library