a fully static devirtualizer for vmp, works for versions 3.4, and early 3.5
- if target has anti-tamper, dump it via ks-dumper (https://github.com/EquiFox/KsDumper)
- demutate with demutation (https://github.com/xlfj5211/DeMutation)
- drag n drop into devirtualizer
- clean junk code with de4dot
- if demutatiton fails, anti-tamper is propably still present
- if devirtualizer fails, its either new version or the file is corrupted
- I made it a long time ago, left no comments so don't ask me how it works, neither do I know
- thanks to washi and rtn community