AntiVM: dynamic hooking based on debug and export symbols

[hasherezade]

as we discussed on Twitter, no need to do additional checks as it works well in the previous form, so I am closing it...