volatility

https://github.com/volatilityfoundation/volatility
下载源码

python setup.py install
python vol.py 报错

pip install pycrypto
报错
error: Microsoft Visual C++ 9.0 is required. Get it from http://aka.ms/vcpython27

https://github.com/gdabah/distorm/releases
下载3-3.3.4.win-amd64.exe
python vol.py