hmm but theres multiple iat's in the dump...
one from the initial wrapper, and one from the 'virgin' executable,
so changing the ff 15 / ff 25 stuff can be very error prone, unless a 'merged' iat is used, and then you have the dilema of it actually accurately patching a real call/jmp and not fpu code or something similar (easiest way i do for that is check alignment, opcode length, bytes preceeding the ff 15 / ff 25 etc..)
gets very tricky, for some prots
