Reverse engineering AMSI internals