Code written as part of our various malware investigations http://www.welivesecurity.com/ - View it on GitHub