Support for OS X 10.10 Yosemite and associated bugfixes.

BUG=
R=scudette@gmail.com

Review URL: https://codereview.appspot.com/170760043
Initial implementation for pagefile support on windows.

* Winpmem can now also acquire the pagefile.

* Rekall can perform windows specific PTE resolution. Including Prototype PTE, VAD PTE, Subsection PTE and Pagefile PTE.

* Added new plugins to inspect page mappings:
   vadmap: Display all mappings in every page of the VAD
   pte: Analyse PTE and follow Prototype PTEs
   vtop: Updated to support full PTE resolution.

BUG=
R=amoser@google.com

Review URL: https://codereview.appspot.com/159400043
Two optimizations to singificantly speed up some collectors.

- Added option to prefilter the ingestion set to prevent repeated
  parsers.
- Added option to enforce_hint for collectors that are extremely broad
  but frequently called for very specific things.

The first optimization speeds up netstat as follows:
Before:
21752060 function calls (20738464 primitive calls) in 21.943 seconds

After:
13528458 function calls (12859134 primitive calls) in 13.917 seconds

The latter optimization makes dump_zone 50-1000 times faster,
depending on the specific question.

BUG=
R=scudette@gmail.com

Review URL: https://codereview.appspot.com/166750044
Revert pointer/array semantics - this was breaking OSX code.

While not strictly incorrect it is a bit confusing. The proposed changes make a
distinction between:

struct foo *p;
struct foo *p[];

but the code seems to use these interchangibly, so I think we just do not
support pointer indexing.

BUG=
R=adam.sindelar@gmail.com

Review URL: https://codereview.appspot.com/167940044
First draft of how multiple ingest queries can be supported. RFC.

For inference-making collectors, it's often useful to be able to make
several ingestion queries instead of just one. Similarly, in those
cases it's important to have all available results in at least the
final call to the inference-making collector.

This is the first attempt at implementing this - I think this is a good
idea, but the code needs to be cleaned up a bit.

Comments welcome.

BUG=
R=scudette@gmail.com

Review URL: https://codereview.appspot.com/164290043
Enable Linux MIPS Support.

MIPS is a popular platform for embedded devices. This patch adds
an adds an address space to handle Linux MIPS dumps.

For host based testing. QEMU MIPS system emulation can be used to
run OpenWRT images compiled for the MIPS Malta target.
Enable MIPS disassembler support via Capstone.
Identify MIPS arch in profile conversion tool.