libemu: Detecting selfencrypted shellcode in network streams