patched model extraction