: Once at the OEP and with a clear view of the memory, dump the process using tools like Scylla or LordPE . Use Import Reconstructor (ImpRec) to fix the damaged IAT so the dumped file can run independently. Recommended Resources & Blog Guides
Happy unpacking!