Scylla - x64/x86 Imports Reconstruction - Tools & Utilities

This repository contains a fork of NtQuery/Scylla with tweaks from x64dbg/Scylla as well as additional fixes, refactoring and bindings.

Scylla's key features:

Known Bugs

Windows 7 x64 - Sometimes the API kernel32.dll GetProcAddress cannot be resolved, because the IAT has an entry from apphelp.dll.

ImpREC Plugin Support

Some ImpREC Plugins don't work with Windows Vista/7 because they don't "return 1" in the DllMain function.

Edited 23 hours ago23 hr by Teddy Rogers
General update...

What's New in Version 0.12.0

Released 23 hours ago23 hr

v0.12.0

Upgrade download-artifact action to version 4

v0.11.2

Generate Python bindings for Python 3.12

v0.11.1

Fix readMemoryFromProcess to only reprotect to PAGE_READONLY

Generate Python bindings for Python 3.11

v0.11.0

Update ScyllaIatFixAutoW and ScyllaIatSearch to allow dumping DLLs

pyscylla.dump_pe and pyscylla.rebuild_pe now return None and throw exceptions on failure

Generate Python bindings for Python 3.8+ (i.e., drop Python 3.7 support)

v0.10.0

Scylla v0.10.0 release

User Feedback