On the Reverse Engineering of the Citadel Botnet