Memory Analysis - Step 7 - Registry Analysis