> Elevator considers all possible interpretations of every byte and produces a separate translation for each feasible one ahead of time [...] pruning only those leading to abnormal termination.

So any real program with the possibility to crash is pruned?

Presumably just set to a canonical crash in the lookup table of address-to-code; which still get you a crash, just not that of the directly-run invalid code.