{
  "added_at": "2026-11-09",
  "additional_evidence_urls": [
    "https://github.com/Colton1skees/WinTTD/blob/43e871e0dbad07b30c1752b39fbfd0e3c7222fb1/WinDNA/src/triton_tainter.cpp"
  ],
  "category": "dynamic-analysis",
  "description_en": "WinTTD exposes recovered WinDBG virtual CPU structures and callback layouts for instruction instrumentation. Its C++ taint code reads x86-64 instructions from virtual CPU memory, decodes them with Capstone and passes them to Triton while maintaining per-thread register state.",
  "description_zh": "WinTTD 整理了 WinDBG 虚拟 CPU 结构和插桩回调布局。其 C++ 污点分析代码从虚拟 CPU 内存读取 x86-64 指令，用 Capstone 解码后交给 Triton，并保存各线程的寄存器状态。",
  "entry_url": "https://awesomerea.org/resources/winttd/",
  "entry_url_zh": "https://awesomerea.org/zh/resources/winttd/",
  "evidence_url": "https://github.com/Colton1skees/WinTTD/blob/43e871e0dbad07b30c1752b39fbfd0e3c7222fb1/WinDNA/include/internal_structures.h",
  "group": "tools",
  "id": "winttd",
  "json_url": "https://awesomerea.org/resources/winttd/record.json",
  "kind": "tool",
  "markdown_url": "https://awesomerea.org/resources/winttd/index.md",
  "markdown_url_zh": "https://awesomerea.org/zh/resources/winttd/index.md",
  "name": "WinTTD",
  "name_zh": "WinTTD WinDBG 跟踪污点分析代码",
  "record_type": "resource",
  "relationship": "foundation",
  "requirement_facets": [
    "prerequisites",
    "limits",
    "license"
  ],
  "requirements": [
    "Windows C++ environment with Triton and Capstone headers.",
    "Several internal callbacks and cache functions remain undocumented.",
    "No licence file in the repository."
  ],
  "requirements_zh": [
    "需要带有 Triton 和 Capstone 头文件的 Windows C++ 环境。",
    "部分内部回调和缓存函数仍未形成文档。",
    "仓库中没有许可证文件。"
  ],
  "targets": [
    "binary"
  ],
  "url": "https://github.com/Colton1skees/WinTTD",
  "verification": "source-reviewed",
  "verified_at": "2026-11-06"
}