turns out that when your shitty antivirus spends 10 hours analyzing yet another chromium embedded framework statically linked into an electron app, it's (sometimes) lifting it back to llvm ir using symbolic execution
machine code lowered and lifted here ˙ ͜ʟ˙