Because static analysis is severely limited, you must rely on dynamic tracing to map out how the VM behaves.