GEMINI: Guided Execution Based Mobile Advanced Persistent Threat Investigation