Raising native software code

A method of raising a plurality of low level program instructions during static analysis of the plurality of low level program instructions, the method comprising:

• receiving a representation of the plurality of low level program instructions, wherein the low level program instructions comprise an ambiguous reference to a stack, wherein the ambiguous reference to the stack comprises an indirect call to a function, wherein the indirect call passes one or more parameters;
• using a set of a plurality of heuristics comprising a control flow heuristic to determine how many parameters are passed by the indirect call;
• determining a relative location on the stack of at least one of the parameters if the instructions were to be executed in light of the how many parameters are passed by the indirect call;
• mapping the ambiguous reference to the stack of the indirect call to the relative location on the stack;
• and
• annotating a higher level representation of the low level program instructions with an indication of the relative location on the stack.