Wininet now gets in the way and the first VirtualProtect doesn't come from Arma anymore.

Check the return address and either:
1 - execute the first bytes of VP using those we have previously saved, then jump to the API if the CALL did't come from Arma or
2 - behave normally if the CALL came from the inlined module.