TODO: - Documentation - thread.set_context in a sample - Better WMI interface - Bug in VARIANT_TYPE == BOOL (see Win32_OperatingSystem->Debug) - DBG - Verif multiple bp at same place.. - Verif multiple pending at same place - Test !! (bp, BP_HX, bp on only on process, bp_hx on only one thread..) - test breakpoint with specific target - Rethink/adapt Debugger._explicit_single_step - Does not handle case where EEFlags.TF was by the debugge before trigering the exception - Should set the flag explicitly in single_step ? and not just use EEFlags.TF ? - _handle_load_dll - error in keys of 'self._module_by_process[self.current_process.pid]' - if I have a ntdll32 and ntdll64: both would have the same name in the list.. - remotectypes - pretty sur I can get rid of PointerToStruct64/PointerToStruct32 - Some test/doc on windows.system.handles - registry - test ! - Clean pe_parse.py - wintrust doc: add : https://blogs.msdn.microsoft.com/winsdk/2016/01/05/why-cryptcatadmincalchashfromfilehandle-fails-with-a-seemingly-unexpected-error-code/ Documentation * verif samples FIXME: - Push("[ECX]") in simple_x64 as a "H" rex and i think it should not.. RESSOURCE * read http://www.codeproject.com/Articles/18975/Listing-Used-Files