clone of https://code.google.com/p/volatility/source/