Pinpointing mobile malware using code analysis