Recovering control flow structures from Java bytecode without CFGs