var counter

var ImageBase



var OEP

var iat_start





mov counter,0

gmi eip,MODULEBASE

mov ImageBase,$RESULT

mov OEP,esp-4

gpa "LoadLibraryExA","kernel32.dll" <---- Sorry Has corrected here

bp $RESULT

run

bc eip

rtu

mov iat_start,esi

find eip,#ABE9#

cmp $RESULT,0

je quit

mov [$RESULT],#90#

bphws OEP,"r"

run

sti

sti

bphwc OEP

mov oep,eip

cmt eip, "This is the entry point"







sub OEP,ImageBase

sub iat_start,ImageBase

mov counter,ImageBase

add counter,3C

mov counter,[counter]

add counter,ImageBase

add counter,28

mov [counter],OEP

add counter,58

mov [counter],iat_start



DPE "dump.exe",eip

msg "The file is unpacked! Name ->Dump.exe Remove unnecessary section in Dump"

ret