1. A method for analyzing at least instructions of an original software program as a potentially evasive malware, comprising: running the original software program without modifying the original software program and with monitoring execution of the original software program; identifying each possible target of a conditional branch instruction of the original software program that executed during running of the original software program, wherein each possible target includes both a taken target and a not-taken target; identifying a revealed instruction of the original software program that did not execute when the original software program was running, the revealed instruction being located in a code path starting at a possible target; modifying one or more instructions of the original software program to create a modified program, without modifying the at least one revealed instruction, the one or more modified instructions causing the at least one revealed instruction to execute when the modified program is run; running the modified program and monitoring execution of the modified program; and exploring possible new behavior monitored during running the modified program.