Came across an old scheme recently...Where the first few instructions of an API are copied to local process then the JMP API is adjusted to "middle" of API...Its obviously based upon a simple opcode scheme..I was wondering if Revirgin is able to handle such schemes? The sample I have appears to be packed with PeX 0.99 btw..If revirgin doesnt handle this, it could be a pain to rebuild IAT.

madmax!