Preferably backward symbolic execution is performed while constructing the flowgraph, in order to find the locations of additional instructions.
As additional instructions are found, new blocks and new paths between blocks are added to the flowgraph.
