Code written as part of our various malware investigations http://www.welivesecurity.com/