There's a lot to be said for when dynamic analysis is possible; it doesn't have to be perfect in order to eliminate code that isn't involved in an interaction (worst case you cause that code to die horribly & observe the fail, or lack thereof)